Cybersecurity companies in the United States

Microsoft sells software, cloud services, hardware, and gaming products.

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments.

Test equipment maker whose device security lab, built on Riscure, tests chips, cards and vehicle electronics against side-channel and fault-injection attacks.

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Zscaler provides a cloud-native zero trust cybersecurity platform that securely connects users, devices, and applications.

F5 provides application delivery and security solutions for hybrid multicloud environments.

Global testing and certification firm, recognised by the PCI SSC for PTS POI and HSM evaluation, with labs in the UK and China.

Okta provides cloud-based identity and access management solutions for workforce and customer identities.

Cloudflare provides a global network for security, performance, and full-stack development.

Elastic provides the Elasticsearch Platform, which includes search, observability, and security solutions.

Commvault provides a cloud-native platform for data security, identity resilience, and cyber recovery.

SailPoint provides identity governance and security software for human, machine, and AI identities.

SentinelOne provides an AI-native cybersecurity platform for endpoint, identity, and cloud protection.

Tenable provides an exposure management platform that unifies security visibility, insight, and action across the attack surface.

Rapid7 provides AI-powered managed cybersecurity operations, including MDR, SIEM, and vulnerability management.

NETSCOUT provides real-time network visibility, observability, cybersecurity, and DDoS protection solutions.

Netskope provides cloud security and networking services for organisations.

Chip IP company licensing automotive-grade hardware security modules, MACsec engines and key provisioning for vehicle chips.

Qualys provides an enterprise cyber risk and security platform.

Fastly provides an edge cloud platform that helps businesses deliver, secure, and deploy applications and AI workloads.

Varonis provides data security software that protects data across cloud, SaaS and on-premises environments.

N-able provides cybersecurity and IT management software for managed service providers and businesses.

A10 Networks provides secure, high-performance networking solutions for applications and AI workloads.

OneSpan provides authentication, fraud prevention, and eSignature solutions for digital agreements and transactions.

BIO-key provides identity and access management solutions with biometric authentication for enterprises and organisations.

IBM is a technology company that sells software, infrastructure, and consulting services.

Provides Zero Trust cybersecurity software controlling application execution, network access and privileged access for organisations.

Kiteworks provides a platform for secure data exchange and governance across email, file sharing, and APIs.

A-LIGN provides cybersecurity compliance audits and certifications across frameworks like SOC 2 and ISO 27001.

Compliance-focused cybersecurity advisory firm and FedRAMP 3PAO specializing in penetration testing that meets stringent regulatory requirements.

World-renowned cybersecurity firm now part of Google Cloud, delivering threat intelligence-led penetration testing and red teaming informed by front-line incident response experience.

US-headquartered cybersecurity consultancy with 800+ employees, serving ~40% of the Fortune 500. FedRAMP 3PAO, PCI QSA, and HITRUST accreditations.

Global risk advisory firm with a 400+ person cyber practice. IR-led penetration testing that feeds active breach intelligence straight into test scoping.

Managed security provider that now runs Trustwave's SpiderLabs penetration testing team, with CREST-accredited testing, red and purple teaming, and deep PCI DSS expertise.

The largest CPA-firm-based cybersecurity assessor in the US. Unique in holding FedRAMP 3PAO, PCI QSA, HITRUST, ISO 27001, and SOC attestation authority simultaneously.

Sophos provides cybersecurity products and managed detection and response services to organisations worldwide.

iboss provides security for AI, data, and applications through a unified SASE platform.

Tempe, Arizona-headquartered offensive security firm and Black Hat / DEF CON regulars, makers of the Cosmos continuous attack surface management platform.

Crowdsourced bug bounty pioneer founded in 2012 by Casey Ellis, offering managed programs and crowd-powered penetration testing from hundreds of thousands of ethical hackers.

Penetration testing firm trusted by nine of the top ten US banks, with the Resolve platform for continuous attack surface management.

Creators of OSCP, Kali Linux, and Exploit-DB, offering penetration testing services from the team that trains the world's ethical hackers.

Miami-based cybersecurity firm with 300+ employees and deep healthcare/HIPAA expertise. Delivering pen testing since 2000.

FedRAMP-authorized crowdsourced penetration testing platform combining the vetted SRT researcher community with AI-powered Hydra technology for continuous security testing.

World's largest ethical hacker platform with over one million researchers, offering bug bounties and structured penetration testing to the US DoD and Fortune 500.

Jones IT provides managed IT services, cybersecurity, and compliance support to businesses in the San Francisco Bay Area.

Cloud-based Penetration Testing as a Service platform combining AI-driven automation with expert manual testing at accessible price points.

Pioneer of Pentest as a Service, delivering fast, platform-based penetration testing with a vetted global community of security researchers.

Boutique security consultancy specialising in IoT, SCADA/ICS, embedded systems, and hardware security research with world-renowned researchers.

Denver-based offensive security boutique with a community-first red team culture. Home of PTES co-authors and the Continuous Red Team retainer.

Offensive security firm founded by former DoD professionals. Combines deep offensive testing with the Chariot attack surface management platform and its Exploit validation engine.

US cybersecurity consulting, audit and testing firm founded in 2004, focused on community banks and credit unions, with external, internal, web application, wireless and PCI DSS penetration testing plus CMMC Level 1 and 2 readiness work.

CREST-accredited California consultancy blending compliance expertise with penetration testing. First to earn ISO 17020 for MITRE ATT&CK and PTES frameworks.

Elite security research firm specializing in source code review, blockchain auditing, and building industry-standard open-source security tools.

Offensive security firm founded by former NSA operator David Kennedy, delivering CREST-accredited penetration testing, red teaming, and adversary simulation to Fortune 500 and government clients.

Vulnerability intelligence-driven penetration testing firm providing contextual security assessments informed by threat actor exploitation data and ransomware tracking.

Adversary-focused security firm created by former DoD red team operators. Creators of BloodHound. CREST-accredited for penetration testing, red teaming, and purple team assessments.

PreVeil provides end-to-end encrypted email and file sharing for defence and regulated industries.

Community-driven penetration testing firm known for free security education, open-source tools, Wild West Hackin' Fest, and practical offensive security services.

RedTeam Security is now part of DeepSeas, which offers penetration testing, red teaming and physical testing as its offensive security practice.

Top 10-ranked US pen testing firm with proprietary Real Time Dynamic Testing methodology. Three-tier service model from standard to maximum-depth custom testing.

US penetration testing firm founded in 2011, running 600+ engagements a year with a fully remote, US-based team. Manual, expert-led testing across web, network, cloud, mobile, wireless, OT/ICS, and AI/LLM. Gartner Sample Vendor for PTaaS.

Denver-based boutique pen testing firm with senior-only testers. Personalised engagements across penetration testing, red teaming, and vulnerability management.

US-wide pen testing firm serving major cities including Atlanta, Dallas, Denver, Houston, and Miami with security assessments.

Cloud security penetration testing specialists known for the Pacu AWS exploitation framework and deep expertise across AWS, Azure, and GCP environments.

CREST-accredited information security and GRC consulting firm near Dallas. Pairs full-scope penetration testing with governance, risk, and compliance advisory and security training.

Potenza Services is a veteran-owned firm based in Tampa, Florida, founded in 2012.

Removes personal data from data brokers and monitors the deep and dark web for clients.

7AI provides AI agents that automate security operations centre tasks for enterprises.

Abnormal AI uses behavioural analysis to detect and stop email, identity, and AI-driven cyber attacks.

Abstract provides a composable SIEM platform for security operations.

Acium provides an AI security and governance platform that makes AI usage visible, secure, and governed across users, browsers, agents, and devices.

Agentic Fabriq sells a control layer for AI agents.

AISLE provides AI-native vulnerability management that finds, fixes, and verifies software vulnerabilities.

Sets standards, audits and insures frontier AI systems and agents for security, safety and reliability.

Provides IT consulting and technology services across cybersecurity, cloud, data and application development.

Alcott Enterprises is a managed IT service provider and cybersecurity company based in Los Angeles.

AlgoSec provides a platform to manage security policies and application connectivity across hybrid networks.

Amazon Web Services is a cloud computing platform that provides a wide range of services.

Andesite builds AI-powered security operations tools that help analysts investigate threats and automate workflows.

Anomali provides a threat intelligence platform and security analytics, built around its ThreatStream intelligence management product.

Appdome provides a no-code platform for building security and anti-fraud defenses into mobile apps.

AppGate provides zero trust network access and fraud protection software for enterprises and government agencies.

AppOmni provides a platform to secure SaaS applications and AI environments for enterprises.

Integrated risk management software covering enterprise and operational risk, IT and security risk, compliance, audit, third-party governance and operational resilience.

Arcjet provides runtime security for AI agents, enforcing policies at the action boundary.

Arctic Wolf provides managed security operations, threat detection and incident response services to organisations.

ARIA Cybersecurity provides AI-driven threat detection and response solutions for IT and OT infrastructure.

Armis provides cyber exposure management and security for connected devices and operational technology.

Provides cloud security, compliance and managed detection and response services to regulated industries.

Artemis Security provides an AI-native security operations platform that detects, investigates and responds to cyber attacks.

Asimily provides a platform to discover, assess, and mitigate risks for IoT, OT, and IoMT devices.

AT&T Cybersecurity provides network security services to businesses of all sizes.

Provides agentic threat intelligence and validation for critical infrastructure security teams.

Employee-owned research firm testing embedded systems, including vehicle infotainment, telematics units and CAN networks.

AttackIQ provides a platform for continuous threat exposure management and adversarial exposure validation.

Auth0 provides authentication and authorization services for applications and AI agents.

Authentik Security provides a self-hosted open source identity provider for authentication and access management.

Risk intelligence platform that gathers multilingual online data and uses AI agents for threat, identity and vendor risk investigations by government and enterprise.

BackBox provides a cyber resilience platform for automating network security, compliance, and lifecycle management.

BARR Advisory helps organisations establish, manage, and audit cybersecurity and compliance programmes.

Barracuda Networks provides cybersecurity solutions for email, networks, applications, and data.

Binary Defense provides managed detection and response services and an AI-powered security platform.

Bitsight provides a cyber risk intelligence platform.

Bitwarden provides open source password management and secrets management for individuals and organisations.

Black Duck provides application security testing tools for software development.

Black Kite provides an AI-native third-party cyber risk management platform for monitoring and assessing vendor risks.

Detroit firm offering a vehicle security engineering platform alongside automotive penetration testing and defensive security services.

Blumira provides a security operations platform for IT teams to detect and respond to threats.

Boston Managed IT is a managed service provider based in Waltham, Massachusetts, founded in 2017.

Provides cybersecurity awareness, AI readiness, and compliance training to employees through managed service providers.

Brinqa provides a platform that unifies and prioritises exposure data for cybersecurity teams.

Canima provides an AI-powered penetration testing platform.

Censys maps internet infrastructure and provides intelligence for security operations and exposure management.

Centeye provides a security platform for managed service providers and managed security service providers.

Cequence Security protects applications, APIs, and AI agents from attacks and abuse.

Checkmarx provides application security testing software that scans code for vulnerabilities.

Claroty provides cybersecurity for cyber-physical systems in industrial, healthcare, and commercial settings.

Codename Sonar provides defensive reconnaissance for blue-team testing, including host discovery and network exposure assessment.

Cofense provides phishing detection and response services using AI and human validation.

Command Zero provides an autonomous AI platform that investigates security alerts from triage through to verdict.

Comodo Group sells cybersecurity products and services to businesses and organisations.

Conifers provides an agentic AI platform for security operations centres to investigate and respond to threats.

Corelight provides network detection and response solutions for cybersecurity teams.

Corsha provides identity-based security for machine-to-machine connections in industrial and operational networks.

Provides cybersecurity advisory and virtual chief information security officer services to organisations.

Cribl provides a vendor-agnostic platform for managing, investigating, and analyzing telemetry data.

Critical Start provides managed detection and response services to monitor, investigate, and resolve security threats for organisations.

Cyberhaven provides a data security platform that traces data lineage to protect information across human and AI workflows.

CyberSheath provides cybersecurity compliance services for DOD contractors, focusing on CMMC, DFARS, and NIST standards.

Cyble provides AI-native threat intelligence and cybersecurity platforms for enterprises and governments.

CyCognito provides a platform that discovers and tests external attack surfaces to identify security exposures.

Cyderes provides managed cybersecurity services including identity, threat detection, and exposure management.

Cyera provides a data security platform that discovers and protects sensitive data across cloud environments.

Cylake provides an AI-native cybersecurity platform for air-gapped sovereign environments.

Cyware provides a platform for threat intelligence management, security orchestration, and collective defense.

Darwinium provides edge-based intent intelligence to prevent digital fraud and abuse across customer journeys.

Data Theorem provides application security for mobile, API, cloud, and AI-driven applications.

DataBahn provides an agentic data control plane for managing and optimizing enterprise telemetry.

Datto provides backup and disaster recovery, endpoint management, professional services automation, networking and cybersecurity solutions.

Delinea provides privileged access management and identity security for AI agents, humans, and machines.

Computer and IT infrastructure maker whose PowerProtect Data Manager software and Data Domain appliances back up data, detect ransomware and speed recovery.

Descope provides a customer and agentic identity platform for authentication and authorization.

Diopter AI sells software that watches live video and voice calls for signs of AI-driven social engineering.

dmarcian provides DMARC email authentication services and tools to protect domains from phishing and abuse.

DomainTools provides DNS-focused threat intelligence and domain security data to detect and mitigate malicious domains.

dope.security sells a secure web gateway called dope.swg.

Doppler provides a secrets management platform for developers, AI agents, and automated workflows.

Dragos provides cybersecurity for industrial control systems and operational technology environments.

Drata provides a platform that automates security compliance, risk management and trust assurance for companies.

Dropzone AI builds AI agents that investigate security alerts and hunt threats for security teams.

Druva provides a fully managed SaaS platform for data backup, recovery, and cyber resilience.

Duo Security provides multi-factor authentication and identity security tools for businesses.

EC-Council is a cybersecurity certification and training body.

Eclypsium provides continuous assurance of critical hardware, firmware, and software across enterprise infrastructure.

Telemetry pipelines that route, enrich and transform security and observability data to SIEMs and other destinations, plus AI agents for site reliability work.

Endor Labs provides an agentic application security platform for AI-generated and open source code.

Enpass is a password manager that stores encrypted data on the user's own cloud storage.

ERMProtect provides cybersecurity assessments, penetration testing, compliance audits, and digital forensics services.

Everfox provides cybersecurity solutions for cross domain, threat protection, and insider risk management.

Exabeam provides security operations platforms that use behavioural analytics to detect and respond to threats.

Exaforce provides an agentic AI platform for security operations, detection, triage, investigation and response.

Expel provides managed detection and response security services using AI and human analysts.

ExtraHop provides network detection and response for security and performance.

FaceTec provides 3D liveness detection and face matching software for secure identity verification.

Ferentin provides runtime governance for AI agents.

Fidelis Security provides cybersecurity solutions for enterprises and government agencies.

Fingerprint provides device intelligence to identify web and mobile visitors and prevent online fraud.

Finite State provides a product security platform for connected devices, automating SBOM generation, vulnerability analysis, and compliance evidence.

Hardware and software that detect cyber attacks and cargo theft on fleet vehicles, backed by a vehicle SOC.

Forcepoint provides data security software that controls how AI applications and agents access sensitive information.

Forescout provides a platform for managing cyber risk and mitigating threats across IT, OT, IoT, and IoMT devices.

Foresite provides managed detection and response services using agentic AI for security operations.

Forter provides a platform that combines fraud prevention, payment optimisation, and abuse prevention for online businesses.

Galvanick provides behavioral threat detection for operational technology environments.

Gigamon sells a deep observability pipeline that collects network traffic and turns it into telemetry for security and monitoring tools.

GitHub is a software development platform where developers, agents, and code come together.

Globalgig provides managed security and network services to enterprises across multiple countries.

GreyNoise Intelligence provides real-time network threat intelligence.

Michigan security research firm offering penetration testing and training for vehicles and other transport systems.

Harmonic Security provides software that discovers, classifies and controls how employees use AI tools at work.

Harness provides an AI-native software delivery platform for DevOps, testing, security, and cost optimization.

HashiCorp provides multi-cloud infrastructure automation tools.

HiddenLayer provides a security platform for AI applications, protecting against adversarial threats.

Hillstone Networks provides cyber security products including firewalls, threat detection and cloud workload protection.

Horizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments.

Huntress provides managed cybersecurity services including endpoint detection, identity threat detection, and security awareness training.

Backup and disaster recovery service for SaaS applications, public cloud and data centre workloads, including a low code platform for adding new SaaS integrations.

HYPR provides passwordless authentication and identity verification for enterprises.

Imperva is a cybersecurity company that provides application security and data security.

Imprivata provides access management and digital identity solutions for organisations in mission-critical and life-critical sectors.

Provides a platform for managing application secrets, certificates and privileged access.

Infoblox provides networking and security software for DNS, DHCP and IP address management.

Integris provides managed IT, cybersecurity, AI and cloud services to small and midsize businesses.

Intel 471 provides cyber threat intelligence focused on adversary tracking, malware intelligence and underground marketplace coverage.

Intezer provides an AI-powered security operations center that investigates all alerts at forensic depth.

Provides AI-driven email security to stop phishing, business email compromise, and deepfake attacks.

IronVest provides intent verification for banks and fintechs to prevent fraud.

IronWiFi sells a cloud-based network identity platform for WiFi authentication and access control.

Iru is a software company that sells a unified platform for managing devices, identity and compliance.

ISC2 is a membership association that provides cybersecurity certifications, training and continuing education for professionals.

Island provides an enterprise browser that integrates security, IT, and AI-powered productivity for organisations.

Ivanti provides software for managing and securing endpoints, IT services, networks and supply chains.

Jamf provides management and security software for Apple devices in organisations.

Software supply chain security and artifact management platform that blocks risky open source packages, scans for exploitable vulnerabilities and governs releases and AI models.

Johanson Group is a CPA firm providing security and compliance audits.

JumpCloud provides a cloud-based directory platform for managing identities, devices, and access.

Juniper Networks is now part of HPE.

Kaseya provides software for IT management, security and automation to IT teams and managed service providers.

Keeper Security provides a zero-trust platform for privileged access, secrets management, and password management.

KirkpatrickPrice is a licensed CPA firm that performs cybersecurity audits and compliance assessments.

KnowBe4 provides a platform for security awareness training and AI agent security to reduce human risk.

LastPass provides password management and access control software for individuals and businesses.

Legion Security provides an agentic security operations platform that learns from SOC teams to automate investigations.

Legit Security provides application security for AI-generated code and software development.

Lepide provides software to audit and secure Active Directory, files, and Microsoft 365.

Risk data and analytics provider whose ThreatMetrix, Emailage and InstantID products detect fraud and verify digital identities for banks, insurers and governments.

US engineering consultancy offering ISO 21434 consulting, TARA, security verification and automotive cybersecurity training.

Living Security provides a platform that measures and reduces human risk in organisations.

Lookout provides mobile security solutions that protect devices and data from cyber threats.

Lorikeet Security provides penetration testing, incident response, and security leadership services.

Lumu provides network detection and response to identify and stop cyber threats in real time.

LuxSci provides secure email, marketing and forms for healthcare organisations.

Provides email security products for managed service providers, including filtering, encryption and DMARC tools.

MailRoute is a cloud email security provider.

Malwarebytes provides antivirus, VPN and identity protection software for individuals and businesses.

Mend.io provides application security and AI security software for code and AI systems.

GRC software covering IT and cyber risk, IT and cyber compliance, vendor and third-party risk, enterprise risk, regulatory compliance, internal audit and resilience.

Mezmo sells an open-source agent harness called AURA, which runs in a customer's own environment using their tools, telemetry and operational context.

MonsterCloud provides managed cloud, IT and cyber security services, including ransomware recovery, to businesses across the United States.

Morphisec sells endpoint security software that blocks ransomware and governs AI tools on devices.

MyDataRemoval removes personal information from people search and data broker websites.

Netarx provides real-time deepfake detection across video, voice, email and messaging for businesses.

Netgate provides open source firewall and network security software and hardware appliances.

Netrio provides managed IT, cybersecurity, cloud, and connectivity services to mid-market enterprises.

NetRise analyses compiled software to create an inventory of components and identify supply chain risks.

NetWitness provides cybersecurity platforms for threat detection, investigation and response across IT and OT environments.

Provides managed IT support, cybersecurity services and custom software to small businesses.

Fraud management, money laundering detection, KYC and trading compliance software for banks and financial institutions, with case management and investigation tools.

NINJIO provides cybersecurity awareness training and human risk management through personalised coaching and phishing simulations.

Noma Security provides a platform to discover, govern, test, and protect AI applications and agents.

Provides a network security platform for businesses to secure connections and stay compliant.

NowSecure provides mobile app security and AI governance.

Nozomi Networks provides OT and IoT security solutions for critical infrastructure, offering asset visibility and threat detection.

Nucleus Security provides a platform to automate vulnerability and exposure management for enterprises and government agencies.

nuHarbor provides cybersecurity services and managed security operations to organisations across government, healthcare, finance and enterprise.

Obsidian Security provides security for third-party applications and AI agents.

Provides a platform for managing cryptographic trust across devices, systems and AI.

One Identity provides identity security and access management software.

OneLogin sells identity and access management software.

Ontinue provides managed detection and response services for Microsoft security customers.

Provides a trust layer that lets organisations run AI on sensitive data with hardware-enforced governance and verifiable proof.

OpenOrigins provides trust infrastructure for the AI internet.

Opportify provides risk intelligence and fraud prevention tools.

Opsis provides an OSINT search platform for looking up emails, usernames and domains across public sources.

Audit, risk and compliance software, formerly AuditBoard, with controls management, cyber risk management, third-party risk, regulatory compliance and AI governance products.

Ordr provides a platform that discovers and enforces security policies for connected devices across IT, IoT, OT, and IoMT.

Paramount Defenses provides software to assess privileged access and identify privilege escalation paths in Microsoft Active Directory.

Paravision builds identity AI software.

PathSolutions sells TotalView, a network operations intelligence platform.

Paubox provides HIPAA compliant email and security services for healthcare organisations.

Picus Security provides a platform that validates exposures and security controls by simulating cyber attacks.

PII Crawler scans files, network shares and email for personal data on your own hardware.

Pindrop provides deepfake detection and identity verification for voice and video interactions.

Ping Identity provides identity and access management software for enterprises.

PlexTrac provides a platform for penetration test reporting, vulnerability management, and remediation orchestration.

PowerDMARC provides a cloud-based platform for email authentication and domain security.

Prescient Assurance provides SOC 2 audits and security compliance certifications for SaaS companies.

Private.Me provides identity infrastructure for AI agents and machine-to-machine systems.

ProcessUnity provides a software platform for managing third-party and cybersecurity risk.

Flowmon network detection and response, plus MOVEit file transfer, Kemp LoadMaster load balancing, ShareFile, Chef, Telerik and other business software.

ProjectDiscovery builds open-source security tools and infrastructure for mapping, probing, crawling, and detecting vulnerabilities.

Pulumi provides an infrastructure as code platform that lets teams build and manage cloud infrastructure using general purpose programming languages such as TypeScript, Python, Go, .NET, Java, YAML and HCL.

Quantara AI provides an AI-native platform for cyber risk quantification and prioritization.

Quzara provides FedRAMP compliance advisory and managed detection and response services.

Reality Defender provides deepfake detection to stop AI-generated media from causing harm.

Realm Security provides a SOC-aware security data pipeline that reduces SIEM log volume without breaking threat detections.

Reco provides an AI agent security platform that maps, governs, and protects AI agents across enterprise applications.

Open source software company whose Advanced Cluster Security product protects Kubernetes and container workloads, alongside Red Hat Enterprise Linux and OpenShift.

RedLattice provides cyber capabilities for military, intelligence and law enforcement missions.

REJIS provides technology solutions for public safety and government agencies.

ReliaQuest provides an AI security operations platform for enterprises to detect and respond to threats.

RemoteThreat provides an offensive cyber operations platform for red teams and government mission teams.

ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software.

Riskified provides AI-powered fraud prevention and chargeback protection for ecommerce merchants.

RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk.

RoboForm is a password manager that stores and generates passwords and fills online forms.

Generates SBOMs for embedded code and hardens vehicle ECU software against memory-based exploits at runtime.

SafeBreach provides a platform that validates security controls and manages cyber exposure for enterprises.

Safeguard is a software supply chain security platform.

Salt Security provides a platform to discover and secure AI agents, MCP servers, and APIs.

SANS Institute provides cybersecurity training, certifications, and resources to professionals and organisations worldwide.

Saviynt provides identity governance and security for human and non-human identities across applications and data.

Sawmills provides an agentic telemetry management platform.

SCYTHE provides a platform for continuous adversarial exposure validation across IT, cloud, and OT environments.

Second Front Systems provides a DevSecOps suite that helps software providers and government agencies build, secure, and deploy software to government and regulated networks.

Sunnyvale and Pune firm selling in-vehicle intrusion detection, vehicle SOC analytics, secure OTA and security assessments.

Securiti provides a platform for data security, privacy, governance and compliance across hybrid multicloud environments.

Securonix provides a cloud-native platform for security operations, combining SIEM, UEBA, SOAR and threat intelligence.

Semperis provides identity-driven cyber resilience and crisis management for critical identity systems.

Sendmarc provides a platform for managing DMARC, SPF, and DKIM email authentication.

Senteon automates endpoint hardening and CIS benchmark compliance for audits.

Sentra provides data security solutions to discover and protect sensitive data from AI applications.

Sevii provides an autonomous defense and remediation platform that stops cyber adversaries without human intervention.

ShieldApps Software Innovations is an international software development company that builds security, privacy and performance tools for home computers.

Onboard monitoring platform that detects cyber and electronic warfare threats on military vehicles, aircraft, ships and trains.

Siemba provides autonomous and expert-led penetration testing for security teams.

Signifyd provides a commerce protection platform that helps online retailers approve orders and reduce fraud.

Silverfort provides runtime identity security for enterprises, protecting human and machine identities across cloud and on-premises environments.

Simbian provides AI agents that automate security operations tasks such as alert triage and threat hunting.

SkillBit provides hands-on cybersecurity skills training and assessment through bite-sized labs.

Skyhigh Security provides data-first security service edge for cloud and hybrid environments.

OSINT and social media investigation software, including SL Crimewall, an API and a Maltego integration, used by law enforcement and corporate security teams.

Socure provides an AI-powered identity verification and fraud prevention platform.

Sonatype provides tools to manage and secure open source components and AI models in software development.

SonicWall provides unified cybersecurity for SMBs, MSPs, and IT teams.

Splunk provides a data platform for security, observability, and AI.

SpyCloud is a cybersecurity company that specialises in identity threat protection.

Provides managed IT services, cybersecurity, compliance support and AI adoption guidance to businesses.

Stamus Networks provides network detection and response systems for enterprise security teams.

Stellar Cyber provides an AI-native security operations platform that unifies detection and response tools.

StingBox sells a network honeypot and intrusion alarm.

StrongDM provides just-in-time, least-privilege access to databases, containers, cloud infrastructure and AI agents.

StrongestLayer provides AI email security for Microsoft 365 and Google Workspace.

Sucuri provides cloud-based website security.

Sumo Logic provides cloud log management, monitoring, and SIEM tools for security and operations teams.

Swif.ai sells mobile device management and unified endpoint management software.

Swimlane provides agentic AI automation for security operations, vulnerability management, and compliance.

Symmatrics provides one-time pad encryption products for data in transit and at rest.

Sysdig provides cloud security built on the open-source Falco project, with an emphasis on runtime detection inside running workloads.

Tanium provides a platform for managing and securing endpoints across large networks.

Team Cymru provides global threat intelligence from internet traffic for proactive defence.

Teleport provides a unified identity layer for securing access to infrastructure, applications, and AI agents.

TestPros is an independent IT compliance firm that has been testing since 1988.

Tragentics is a security and operations layer for AI agents that customers already run on their own infrastructure.

Transmit Security provides customer identity and access management and fraud prevention software for enterprises.

Georgia start-up whose TranzSecure service flags cyber attacks, unknown devices and cargo theft across trucking fleets.

TRM Labs provides blockchain intelligence and AI tools to help investigate and disrupt criminal networks.

Trust Onion makes an app that helps trusted groups verify each other's identity using rotating codewords and signed selfies.

Tufin provides a unified control plane for network security policy management across hybrid environments.

Twingate provides identity-based access to private resources, replacing traditional VPNs for remote work.

UnderDefense provides managed detection and response, incident response, and compliance automation services.

UpGuard provides a platform for managing cyber risk across vendors, attack surface, and workforce.

Valimail provides automated DMARC and email authentication services to stop phishing and domain impersonation.

Vanta provides a platform for automating security compliance and risk management.

vCISO Lite sells a subscription platform that helps growing companies handle security compliance and risk.

Vectra AI provides AI-native security and observability to detect and respond to cyber threats.

Veeam provides data resilience, security, and AI trust solutions for hybrid cloud environments.

Third-party risk management software with outsourced vendor control assessments, continuous vendor risk monitoring and managed services, now part of Ncontracts.

Veracode provides a platform that identifies and fixes security flaws in software.

VeriSwarm provides a trust layer for AI agents.

Versa Networks provides secure access service edge (SASE) solutions that combine networking and security.

Vicarius provides a platform for automated vulnerability remediation, patching, and patchless protection.

Virtru provides encryption and access control for email, files, and SaaS applications.

Virtue AI provides an enterprise AI safety platform for securing AI agents and applications.

VulnCheck sells a cyber threat intelligence platform built around exploit and vulnerability data.

Web-based software that automates vehicle threat analysis and risk assessment, plus vulnerability tracking and consulting.

WatchGuard provides unified cybersecurity solutions for networks, endpoints, identities, and cloud environments.

Wazuh provides an open source platform for security monitoring and threat detection.

Whistic provides a platform for assessing, monitoring, and sharing vendor security and compliance information.

Wiz provides a cloud and AI security platform that connects code, cloud, and runtime for risk reduction and threat response.

Embedded cryptography firm whose wolfHSM ports its crypto library to automotive hardware security modules in ECUs.

Provides managed IT services including security, cloud desktops, networks and AI deployment support.

Z-JAK Technologies is a Louisville-based provider of managed IT and cybersecurity services for small and midsize businesses, typically with 5 to 150 employees.

Zimperium provides mobile security for devices and applications.

AegisAI provides agentic email security for Microsoft 365 and Google Workspace.

Akeyless provides identity security for machines, AI agents, and humans.

Akto provides a platform to secure AI agents, MCPs, and LLMs for enterprises.

Arcserve provides data protection, backup, and disaster recovery solutions for organisations.

Athena Agentic provides a unified cyber operations platform that automates detection, response, and hardening.

Asset intelligence platform that builds one inventory of every asset from connected IT and security tools to find coverage gaps and prioritise exposures.

Beyond Identity provides identity security software that eliminates passwords and verifies users and devices.

OpenTelemetry pipeline that collects, reduces, masks and routes logs and other telemetry to SIEM, storage and observability tools.

BlueRock provides observability and guardrails for AI agents in production.

Cybersecurity consulting and engineering for US government and industry, including threat hunting, zero trust, incident response and defence of critical infrastructure and weapon systems.

Cantina provides an agentic security platform that uses autonomous AI agents to detect, respond to, and fix security issues.

Chainguard builds hardened, verified open source container images, libraries and packages to reduce vulnerabilities.

Provides penetration testing, PCI ASV scanning, and managed security services for compliance and threat detection.

Cloudrise provides security services to enterprises and technology partners.

Data security and backup platform with immutable backups, threat detection and ransomware recovery, protecting more than 1,000 workload types.

Contrast Security provides runtime application security that detects and blocks attacks from inside running applications.

Cortile automates vendor security reviews for healthcare third-party risk teams.

Resells security products and provides assessment, testing and advisory services with a data platform.

Cyberneza provides cybersecurity and compliance consulting for defense contractors and regulated organizations.

Deep Instinct provides deep learning-based data security that prevents malware and ransomware across cloud, NAS, applications, and endpoints.

DigiCert provides digital certificates and PKI solutions to secure websites, devices, software, and digital content.

DNSFilter provides DNS filtering and threat blocking services for organisations.

Doppel provides an AI-powered platform for social engineering defense and digital risk protection.

Provides a platform for managing email authentication, DNS and threat intelligence to protect domains from spoofing.

Elisity provides identity-based microsegmentation software to contain lateral movement across enterprise networks.

Provides a data and AI security platform built on confidential computing to protect data in use.

GetReal Security provides deepfake detection and identity verification software for enterprises.

Authentication products including FIDO security keys, smart cards and passkey management, alongside physical access control, credential issuance and identity technology.

Security service edge combining ZTNA, secure web gateway, CASB and firewall as a service, alongside HPE servers, storage, networking and hybrid cloud.

HUMAN Security protects digital interactions from bots, fraud, and abuse across advertising, applications, and accounts.

IntelliGRC provides software that helps managed service providers automate cybersecurity compliance and audit readiness.

Invicti provides web application and API security testing software for enterprises.

Keyfactor provides software for managing machine identities and cryptographic keys.

Managed security operations, threat intelligence and incident response services delivered from global security operations centres by an IT infrastructure services provider.

Lattix Technologies Corp provides data security with encryption, policy, and audit trails.

Mandiant provides threat intelligence and incident response, now sold as Google Threat Intelligence alongside VirusTotal within Google Cloud.

SBOM and vulnerability management platform that helps carmakers and suppliers track risk in vehicle software.

Memcyco provides real-time detection and prevention of digital impersonation and account takeover fraud.

Mile2 provides vendor-neutral cybersecurity certification and training programmes for professionals worldwide.

Mountain Theory provides an execution-layer security system that checks and controls autonomous AI actions before they run.

Netwrix provides software to protect data and secure identities across IT environments.

NSS Labs provides independent testing and validation of cybersecurity controls and AI systems.

Observo AI built an AI-native security data pipeline that filtered and enriched telemetry before it reached the SIEM.

Third-party management and tech risk and compliance software, alongside privacy automation, consent management and AI governance tools.

OPSWAT provides cybersecurity solutions to protect critical infrastructure from file-borne and device-borne threats.

Optiv advises, deploys, and operates cybersecurity programs for organizations.

Identity and access management with OCI IAM, Oracle Access Management and Oracle Access Governance, alongside Oracle Cloud Infrastructure and Oracle's business applications.

Third-party cyber risk management platform with vendor security questionnaires, external attack surface ratings, continuous monitoring and remediation workflows for suppliers.

Polyguard provides real-time identity verification to confirm a real person is present during hiring and other digital interactions.

Proofpoint provides cybersecurity solutions to protect people, data, and AI across email, cloud, and collaboration tools.

Prophet Security provides an AI SOC platform that automates alert triage, investigation, and response for security teams.

Puma Security provides .NET static analysis tools and application security services.

Quint monitors AI agents at the operating system level and compares their actions against what they declared.

Recorded Future provides a threat intelligence platform that indexes open, dark and technical sources. Acquired by Mastercard for $2.65bn.

Embedded firmware hardening and runtime monitoring for devices, including Symbiote protection for vehicle ECUs and calibration data.

Zscaler provides cloud-based security, network and transformation services for enterprises.

RSA provides identity and access management solutions for government, financial, and high-assurance organisations.

runZero provides exposure management software that discovers and profiles assets across IT, OT, IoT, cloud and mobile networks.

Thales provides cybersecurity products and services to protect data, applications, and identities.

Safetica provides AI-powered data protection, insider risk, cloud security, and compliance software.

SecurityScorecard provides a platform for managing third-party and supply chain cyber risk.

Semgrep provides a platform for scanning code and dependencies to find security issues.

Integrated risk management software for policy, compliance, audit and third-party risk, sold as part of a wider IT and business workflow platform.

ShadowDragon provides an OSINT software platform for investigators to collect and analyse public data.

ShieldLabs provides fraud detection and prevention for web apps by scoring visitor risk.

Connected vehicle software firm offering OTA updates, data logging and a vehicle security operations centre for fleets.

Sift provides a fraud prevention platform that uses machine learning to distinguish legitimate customers from fraudsters in real time.

Snyk provides a security platform that finds and fixes vulnerabilities in code, dependencies, containers, and cloud infrastructure.

SSL.com issues digital certificates and provides PKI solutions for secure communications and content.

Straiker provides security teams with tools to discover, test, and defend AI agents in enterprises.

TigerByte Cyber provides cyber hardening for AI and edge devices in mission-critical environments.

Self-hosted gateway that inspects and governs AI agent traffic inside a company's own network.

Upstream Security provides a cybersecurity and intelligence platform for physical AI, vehicles, and smart mobility.

Veza provides an identity security platform that manages access to data across cloud and on-premises systems.

VxLabs provides an AI-powered platform for automotive cybersecurity compliance and risk management.

Wallarm provides an AI security and API security platform for enterprises running AI on AWS.

YSecurity provides an on-demand cybersecurity team for startups, handling compliance and security reviews.

ZeroFox provides external cybersecurity services to discover, validate, and disrupt digital threats.