{"dataset":"CISO Tribune vendor directory — security vendors by category","license":"Free to use with attribution and a link to cisotribune.com","note":"A record, not a ranking. No vendor pays to be listed. Each vendor's canonical page is its url.","generated":"2026-10-01","count":259,"taxonomy":{"groups":[{"slug":"network-security","name":"Network security","definition":"Products that inspect, filter and control traffic moving across corporate networks and between users and the internet.","categories":[{"slug":"firewall-ngfw","name":"Firewalls and NGFW","definition":"Hardware, virtual and cloud firewalls that enforce traffic policy by port, application, user and content."},{"slug":"sase-sse","name":"SASE and SSE","definition":"Cloud-delivered bundles of secure web gateway, cloud access security broker and private access services, with or without SD-WAN networking."},{"slug":"ztna","name":"Zero trust network access","definition":"Standalone services that grant users access to specific private applications after checking identity and device, in place of a network-level VPN."},{"slug":"ndr","name":"Network detection and response","definition":"Tools that analyse network traffic and metadata to detect threats and support investigation and response."},{"slug":"microsegmentation","name":"Microsegmentation","definition":"Software that limits which workloads, devices and users can talk to each other inside a network to contain lateral movement."},{"slug":"network-access-control","name":"Network access control","definition":"Systems that identify devices as they connect to wired and wireless networks and decide what each may reach."},{"slug":"ddos-protection","name":"DDoS protection","definition":"Services and appliances that absorb or filter distributed denial-of-service traffic before it overwhelms a target."},{"slug":"dns-security","name":"DNS security","definition":"Protective DNS resolvers and DNS infrastructure products that block malicious domains and protect name resolution."},{"slug":"network-visibility","name":"Network visibility and traffic brokering","definition":"Taps, packet brokers and observability fabrics that deliver copies of network traffic to security and monitoring tools."}]},{"slug":"endpoint-security","name":"Endpoint security","definition":"Products that protect laptops, servers, phones and the firmware underneath them.","categories":[{"slug":"edr-xdr","name":"EDR and XDR","definition":"Agents and platforms that record endpoint activity to detect, investigate and respond to attacks, extended in XDR to other telemetry sources."},{"slug":"epp","name":"Endpoint protection platforms","definition":"Antivirus and prevention-focused agents that block known and unknown malware on endpoints."},{"slug":"mobile-security","name":"Mobile security","definition":"Threat defence for smartphones and tablets, covering malicious apps, phishing, network attacks and device compromise."},{"slug":"endpoint-management-control","name":"Endpoint management and application control","definition":"Tools that inventory, configure and patch endpoints, or restrict which applications and privileges may run on them."},{"slug":"firmware-device-security","name":"Firmware and device supply chain security","definition":"Products that verify and monitor firmware, hardware components and device integrity below the operating system."}]},{"slug":"identity-security","name":"Identity security","definition":"Products that establish who or what is requesting access and govern what each identity may do.","categories":[{"slug":"iam-sso","name":"Workforce IAM and SSO","definition":"Directories, single sign-on, multi-factor authentication and access policy for employees and contractors."},{"slug":"pam","name":"Privileged access management","definition":"Vaulting, brokering and recording of administrator and other high-privilege access to systems."},{"slug":"iga","name":"Identity governance and administration","definition":"Provisioning, access requests, role management and periodic access reviews across applications."},{"slug":"ciam","name":"Customer identity and access management","definition":"Sign-up, login, consent and profile management for an organization's own customers."},{"slug":"itdr","name":"Identity threat detection and response","definition":"Monitoring of identity systems such as Active Directory and identity providers to detect and stop identity-based attacks."},{"slug":"passwordless-mfa","name":"Passwordless authentication and authenticators","definition":"Hardware keys, device-bound credentials and phishing-resistant authenticators that replace or strengthen passwords."},{"slug":"password-management","name":"Password and secrets vaults for people","definition":"Password managers that store and share credentials for individuals and teams."},{"slug":"non-human-identity","name":"Non-human identity security","definition":"Discovery, governance and protection of service accounts, API keys, tokens and workload or AI agent identities."},{"slug":"machine-identity-pki","name":"Machine identity and PKI","definition":"Certificate authorities and certificate lifecycle management for TLS, code signing and device identity."}]},{"slug":"cloud-security","name":"Cloud security","definition":"Products that secure infrastructure, workloads and software-as-a-service applications running in public clouds.","categories":[{"slug":"cnapp","name":"Cloud-native application protection (CNAPP)","definition":"Platforms that combine posture, workload, identity and code-to-cloud risk analysis for cloud environments in one product."},{"slug":"cspm","name":"Cloud security posture management","definition":"Continuous checks of cloud account configuration against security policy and compliance frameworks."},{"slug":"cwpp","name":"Cloud workload protection","definition":"Runtime protection for virtual machines, containers, Kubernetes and serverless functions."},{"slug":"ciem","name":"Cloud identity entitlements (CIEM)","definition":"Analysis and reduction of the permissions granted to human and machine identities in cloud platforms."},{"slug":"cloud-detection-response","name":"Cloud detection and response","definition":"Detection, investigation and response built on cloud control-plane logs and runtime signals."},{"slug":"saas-security","name":"SaaS security posture","definition":"Monitoring of configuration, integrations, users and data exposure inside third-party SaaS applications."}]},{"slug":"application-security","name":"Application security","definition":"Products that find and fix weaknesses in software an organization builds, and protect that software in production.","categories":[{"slug":"sast","name":"Static application security testing","definition":"Analysis of source code, bytecode and infrastructure-as-code for security flaws without running the application."},{"slug":"dast","name":"Dynamic application security testing","definition":"Testing of running web applications and APIs by sending crafted requests and observing responses."},{"slug":"sca","name":"Software composition analysis","definition":"Identification of open-source and third-party components in software, with their known vulnerabilities and licences."},{"slug":"aspm","name":"Application security posture management","definition":"Aggregation, correlation and prioritisation of findings from many application security tools across the software lifecycle."},{"slug":"api-security","name":"API security","definition":"Discovery, testing and runtime protection of application programming interfaces."},{"slug":"software-supply-chain","name":"Software supply chain security","definition":"Protection of build pipelines, artifacts, container images and package ecosystems against tampering and malicious components."},{"slug":"secrets-detection","name":"Secrets detection","definition":"Scanning of code, repositories and collaboration tools for exposed credentials, keys and tokens."},{"slug":"waf-waap","name":"WAF and WAAP","definition":"Web application firewalls and web application and API protection services that filter malicious requests to web properties."},{"slug":"app-shielding","name":"Application shielding and RASP","definition":"Obfuscation and anti-tampering for mobile and desktop apps, and runtime self-protection instrumented into running applications."}]},{"slug":"data-security","name":"Data security and privacy","definition":"Products that find, classify, protect and govern sensitive data, and manage privacy obligations about it.","categories":[{"slug":"dlp","name":"Data loss prevention","definition":"Controls that detect and block sensitive data leaving through endpoints, email, web and cloud channels."},{"slug":"dspm","name":"Data security posture management","definition":"Discovery and classification of sensitive data across cloud and on-premises stores, with analysis of who can reach it."},{"slug":"encryption-key-management","name":"Encryption, tokenization and key management","definition":"Encryption and tokenization of data, hardware security modules and systems that manage cryptographic keys."},{"slug":"post-quantum-cryptography","name":"Post-quantum cryptography","definition":"Products that inventory cryptography and migrate it to algorithms designed to resist attack by quantum computers."},{"slug":"data-privacy","name":"Privacy management","definition":"Software for consent, data subject requests, records of processing and other privacy-law obligations."}]},{"slug":"email-collaboration","name":"Email and collaboration security","definition":"Products that protect email and workplace messaging from phishing, impersonation and malicious content.","categories":[{"slug":"email-security","name":"Email security","definition":"Gateways and API-based services that filter phishing, malware, spam and business email compromise."},{"slug":"email-authentication","name":"Email authentication and DMARC","definition":"Services that deploy and monitor SPF, DKIM, DMARC and BIMI to stop others sending mail as an organization's domains."},{"slug":"collaboration-security","name":"Collaboration app security","definition":"Threat and data protection for messaging and file-sharing tools such as Slack, Teams and shared drives."}]},{"slug":"security-operations","name":"Security operations","definition":"Products and services that collect security telemetry, detect threats, and run investigation and response.","categories":[{"slug":"siem","name":"SIEM","definition":"Platforms that collect and correlate logs and events to detect threats and support investigation and compliance reporting."},{"slug":"soar","name":"SOAR and security automation","definition":"Workflow and playbook engines that automate security operations tasks across tools."},{"slug":"ai-soc","name":"AI SOC analysts","definition":"Software agents that triage, investigate and document security alerts with limited human input."},{"slug":"security-data-lake","name":"Security data lakes and pipelines","definition":"Products that route, reduce and store security telemetry, often separately from where detection runs."},{"slug":"threat-intelligence","name":"Threat intelligence","definition":"Feeds, platforms and research services about threat actors, infrastructure, malware and vulnerabilities being exploited."},{"slug":"mdr-managed-soc","name":"MDR and managed SOC","definition":"Services in which a provider's analysts monitor a customer's environment around the clock and respond to threats."},{"slug":"incident-response","name":"Incident response and forensics","definition":"Breach investigation and containment services, digital forensics tools, and platforms that coordinate incident response."},{"slug":"deception","name":"Deception technology","definition":"Decoys, honeypots and canary tokens that alert when an attacker touches them."}]},{"slug":"exposure-management","name":"Exposure management","definition":"Products and services that find, test and prioritise the weaknesses an attacker could use.","categories":[{"slug":"vulnerability-management","name":"Vulnerability management","definition":"Scanning and assessment of systems for known vulnerabilities and misconfigurations, with tracking of remediation."},{"slug":"attack-surface-management","name":"External attack surface management","definition":"Continuous discovery and monitoring of an organization's internet-facing assets from an outside-in view."},{"slug":"caasm","name":"Cyber asset inventory (CAASM)","definition":"Aggregation of asset data from existing tools to build an inventory and find coverage gaps."},{"slug":"bas-pentest-platforms","name":"Breach simulation and automated pen-testing","definition":"Platforms that safely emulate attacker techniques against live environments to validate whether controls work."},{"slug":"ctem","name":"Exposure prioritisation and CTEM","definition":"Platforms that unify findings across scanners and apply context to decide which exposures to fix first, as part of a continuous programme."},{"slug":"crowdsourced-security","name":"Bug bounty and crowdsourced testing","definition":"Platforms that connect organizations with outside researchers who find and report vulnerabilities."},{"slug":"digital-risk-protection","name":"Digital risk protection","definition":"Monitoring of the open, deep and dark web and social platforms for brand abuse, leaked data and impersonation, with takedown services."}]},{"slug":"ot-iot-security","name":"OT, ICS and IoT security","definition":"Products that secure industrial control systems, medical devices and other connected equipment that cannot run standard agents.","categories":[{"slug":"ot-ics-security","name":"OT and ICS security","definition":"Asset visibility, threat detection and secure access for industrial control systems and operational technology networks."},{"slug":"iot-device-security","name":"IoT and medical device security","definition":"Discovery, risk assessment and protection of connected devices such as medical, building and enterprise IoT equipment."},{"slug":"ot-data-transfer","name":"Unidirectional gateways and secure transfer","definition":"Hardware and software that move data or files into and out of isolated networks under strict control."}]},{"slug":"grc","name":"Governance, risk and compliance","definition":"Products that document controls, measure risk and prove compliance to auditors, regulators and customers.","categories":[{"slug":"grc-platforms","name":"GRC and integrated risk platforms","definition":"Systems of record for policies, risks, controls, audits and issues across an enterprise."},{"slug":"compliance-automation","name":"Compliance automation","definition":"Tools that connect to company systems to collect evidence and track readiness for frameworks such as SOC 2, ISO 27001 and FedRAMP."},{"slug":"third-party-risk","name":"Third-party risk and security ratings","definition":"Assessment and monitoring of suppliers' security, including questionnaires and outside-in security ratings."},{"slug":"cyber-risk-quantification","name":"Cyber risk quantification","definition":"Models that express cyber risk in financial terms for boards, insurers and investment decisions."}]},{"slug":"human-risk","name":"Security awareness and human risk","definition":"Products that train people and measure and reduce the risk that comes from human behaviour.","categories":[{"slug":"security-awareness-training","name":"Security awareness training","definition":"Training content and phishing simulations that teach employees to recognise and report attacks."},{"slug":"human-risk-management","name":"Human risk management","definition":"Platforms that combine behaviour data from security tools to measure each person's risk and intervene in real time."},{"slug":"insider-risk","name":"Insider risk management","definition":"Monitoring of user activity to detect data theft, sabotage or policy violations by trusted insiders."}]},{"slug":"fraud-identity-verification","name":"Fraud and identity verification","definition":"Products that confirm people are who they claim to be and detect fraud and automated abuse.","categories":[{"slug":"identity-verification","name":"Identity verification","definition":"Document, biometric and data checks that verify a person's identity at onboarding or account recovery."},{"slug":"fraud-prevention","name":"Fraud prevention","definition":"Risk scoring of transactions, accounts and sessions to detect payment fraud, account takeover and scams."},{"slug":"bot-management","name":"Bot and abuse management","definition":"Detection and blocking of automated traffic such as scrapers, credential stuffing and fake account creation."}]},{"slug":"browser-security","name":"Browser security","definition":"Products that secure the web browser as the place where work and data access happen.","categories":[{"slug":"enterprise-browser","name":"Enterprise browsers","definition":"Browsers built for organizations, with security and management controls inside the browser itself."},{"slug":"browser-protection","name":"Browser protection extensions","definition":"Extensions and agents that add threat, data and policy controls to existing consumer browsers."},{"slug":"browser-isolation","name":"Remote browser isolation","definition":"Services that run web content away from the user's device and send only a safe rendering."}]},{"slug":"ai-security","name":"AI security","definition":"Products that secure AI models, applications and agents, and govern how an organization uses AI.","categories":[{"slug":"ai-model-agent-security","name":"AI model and agent security","definition":"Scanning, red-teaming and runtime monitoring of models, AI applications and autonomous agents for attacks and unsafe behaviour."},{"slug":"ai-firewall-guardrails","name":"AI firewalls and guardrails","definition":"Inline filters that inspect prompts, responses and tool calls of AI applications an organization builds."},{"slug":"ai-usage-security","name":"Workforce AI usage security","definition":"Discovery and control of employees' use of third-party AI tools, including data sent to them."},{"slug":"ai-governance","name":"AI governance","definition":"Inventory, policy, risk assessment and regulatory compliance tracking for AI systems."}]},{"slug":"backup-resilience","name":"Backup and cyber resilience","definition":"Products that preserve data and systems so an organization can recover after an attack.","categories":[{"slug":"backup-recovery","name":"Backup and cyber recovery","definition":"Backup, immutable storage and recovery of data and workloads, including recovery after ransomware."},{"slug":"identity-system-recovery","name":"Directory backup and recovery","definition":"Backup and forest recovery for directory services such as Active Directory and Entra ID."}]},{"slug":"security-services","name":"Consultancies and managed services","definition":"Firms that sell security expertise and operations as a service rather than as software.","categories":[{"slug":"mssp","name":"Managed security service providers","definition":"Providers that run security technology for customers, such as firewalls, identity or monitoring, under a managed contract."},{"slug":"security-consulting","name":"Security consulting and advisory","definition":"Assessment, architecture, programme and compliance advisory services, excluding incident response and penetration testing."},{"slug":"pentest-services","name":"Penetration testing and red team services","definition":"Human-led testing engagements in which consultants attack an organization's systems to find weaknesses."},{"slug":"security-solutions-integrator","name":"Security resellers and integrators","definition":"Firms that select, resell, deploy and integrate other vendors' security products."}]}]},"vendors":[{"slug":"42crunch","name":"42Crunch","website":"https://42crunch.com/","primaryCategory":"api-security","secondaryCategories":["ai-model-agent-security","dast"],"hq":{"city":"London","country":"United Kingdom"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/42crunch"},{"slug":"a10-networks","name":"A10 Networks","website":"https://www.a10networks.com","primaryCategory":"ddos-protection","secondaryCategories":["api-security"],"hq":{"city":"San Jose","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"ATEN","exchange":"NYSE"},"url":"https://www.cisotribune.com/companies/a10-networks"},{"slug":"abnormal-ai","name":"Abnormal AI","website":"https://abnormal.ai","primaryCategory":"email-security","secondaryCategories":["itdr","ai-usage-security","ai-model-agent-security"],"hq":{"city":"San Francisco","country":"United States"},"founded":2018,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/abnormal-ai"},{"slug":"absolute-security","name":"Absolute Security","website":"https://www.absolute.com","primaryCategory":"firmware-device-security","secondaryCategories":["endpoint-management-control"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/absolute-security"},{"slug":"accenture","name":"Accenture","website":"https://www.accenture.com","primaryCategory":"security-consulting","secondaryCategories":["mssp","incident-response"],"hq":{"city":"Dublin","country":"Ireland"},"founded":null,"ownership":{"type":"public","ticker":"ACN","exchange":"NYSE"},"url":"https://www.cisotribune.com/companies/accenture"},{"slug":"adaptive-security","name":"Adaptive Security","website":"https://www.adaptivesecurity.com","primaryCategory":"security-awareness-training","secondaryCategories":["email-security","ai-governance"],"hq":{"city":"New York","country":"United States"},"founded":2024,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/adaptive-security"},{"slug":"aembit","name":"Aembit","website":"https://aembit.io","primaryCategory":"non-human-identity","secondaryCategories":[],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/aembit"},{"slug":"anecdotes","name":"Anecdotes","website":"https://www.anecdotes.ai/","primaryCategory":"grc-platforms","secondaryCategories":["third-party-risk","compliance-automation"],"hq":{"city":"Tel Aviv","country":"Israel"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/anecdotes"},{"slug":"anomali","name":"Anomali","website":"https://www.anomali.com","primaryCategory":"ai-soc","secondaryCategories":["threat-intelligence","security-data-lake"],"hq":{"city":"Redwood City","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/anomali"},{"slug":"apono","name":"Apono","website":"https://www.apono.io","primaryCategory":"pam","secondaryCategories":["non-human-identity","ai-model-agent-security"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"1Password","year":2026},"url":"https://www.cisotribune.com/companies/apono"},{"slug":"appdome","name":"Appdome","website":"https://www.appdome.com/","primaryCategory":"app-shielding","secondaryCategories":["mobile-security","api-security"],"hq":{"city":"Redwood City","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/appdome"},{"slug":"appomni","name":"AppOmni","website":"https://appomni.com","primaryCategory":"saas-security","secondaryCategories":["ai-model-agent-security"],"hq":{"city":"San Mateo","country":"United States"},"founded":2018,"ownership":null,"url":"https://www.cisotribune.com/companies/appomni"},{"slug":"aqua-security","name":"Aqua Security","website":"https://www.aquasec.com","primaryCategory":"cnapp","secondaryCategories":["cwpp","software-supply-chain"],"hq":{"city":"Boston","country":"United States"},"founded":2015,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/aqua-security"},{"slug":"arctic-wolf","name":"Arctic Wolf","website":"https://arcticwolf.com","primaryCategory":"mdr-managed-soc","secondaryCategories":["attack-surface-management","incident-response","security-awareness-training"],"hq":{"city":"Eden Prairie","country":"United States"},"founded":2012,"ownership":null,"url":"https://www.cisotribune.com/companies/arctic-wolf"},{"slug":"arista-networks","name":"Arista Networks","website":"https://www.arista.com","primaryCategory":"ndr","secondaryCategories":[],"hq":{"city":"Santa Clara","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"ANET","exchange":"NYSE"},"url":"https://www.cisotribune.com/companies/arista-networks"},{"slug":"arkose-labs","name":"Arkose Labs","website":"https://www.arkoselabs.com","primaryCategory":"bot-management","secondaryCategories":["fraud-prevention"],"hq":{"city":"San Mateo","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/arkose-labs"},{"slug":"armis","name":"Armis","website":"https://www.armis.com","primaryCategory":"iot-device-security","secondaryCategories":["ot-ics-security"],"hq":{"city":null,"country":"United States"},"founded":2015,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/armis"},{"slug":"asimily","name":"Asimily","website":"https://asimily.com","primaryCategory":"iot-device-security","secondaryCategories":[],"hq":{"city":"Sunnyvale","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/asimily"},{"slug":"astrix-security","name":"Astrix Security","website":"https://astrix.security","primaryCategory":"non-human-identity","secondaryCategories":[],"hq":{"city":"New York City","country":"United States"},"founded":2021,"ownership":{"type":"acquired","parent":"Cisco","year":2026},"url":"https://www.cisotribune.com/companies/astrix-security"},{"slug":"attackiq","name":"AttackIQ","website":"https://www.attackiq.com","primaryCategory":"ctem","secondaryCategories":["bas-pentest-platforms"],"hq":{"city":"Los Altos","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/attackiq"},{"slug":"au10tix","name":"AU10TIX","website":"https://www.au10tix.com","primaryCategory":"identity-verification","secondaryCategories":["fraud-prevention"],"hq":{"city":null,"country":"Netherlands"},"founded":2002,"ownership":null,"url":"https://www.cisotribune.com/companies/au10tix"},{"slug":"aurascape","name":"Aurascape","website":"https://aurascape.ai","primaryCategory":"ai-usage-security","secondaryCategories":["ai-firewall-guardrails"],"hq":{"city":"Santa Clara","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/aurascape"},{"slug":"baffle","name":"Baffle","website":"https://baffle.io","primaryCategory":"encryption-key-management","secondaryCategories":[],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/baffle"},{"slug":"barracuda","name":"Barracuda Networks","website":"https://www.barracuda.com","primaryCategory":"email-security","secondaryCategories":["waf-waap","dlp","mdr-managed-soc"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"KKR","year":2022},"url":"https://www.cisotribune.com/companies/barracuda"},{"slug":"bigid","name":"BigID","website":"https://bigid.com","primaryCategory":"dspm","secondaryCategories":["dlp","data-privacy"],"hq":{"city":"New York","country":"United States"},"founded":2016,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/bigid"},{"slug":"bishop-fox","name":"Bishop Fox","website":"https://bishopfox.com","primaryCategory":"pentest-services","secondaryCategories":["attack-surface-management"],"hq":{"city":"Tempe","country":"United States"},"founded":2005,"ownership":null,"url":"https://www.cisotribune.com/companies/bishop-fox"},{"slug":"bitdefender","name":"Bitdefender","website":"https://www.bitdefender.com","primaryCategory":"edr-xdr","secondaryCategories":["mdr-managed-soc","epp"],"hq":{"city":"Bucharest","country":"Romania"},"founded":2001,"ownership":null,"url":"https://www.cisotribune.com/companies/bitdefender"},{"slug":"bitwarden","name":"Bitwarden","website":"https://bitwarden.com","primaryCategory":"password-management","secondaryCategories":[],"hq":{"city":"Santa Barbara","country":"United States"},"founded":2016,"ownership":null,"url":"https://www.cisotribune.com/companies/bitwarden"},{"slug":"black-duck","name":"Black Duck","website":"https://www.blackduck.com","primaryCategory":"sca","secondaryCategories":["sast","dast"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Clearlake Capital Group and Francisco Partners","year":2024},"url":"https://www.cisotribune.com/companies/black-duck"},{"slug":"black-kite","name":"Black Kite","website":"https://blackkite.com/","primaryCategory":"third-party-risk","secondaryCategories":["cyber-risk-quantification"],"hq":{"city":"Boston","country":"United States"},"founded":2016,"ownership":null,"url":"https://www.cisotribune.com/companies/black-kite"},{"slug":"breachrx","name":"BreachRx","website":"https://www.breachrx.com","primaryCategory":"incident-response","secondaryCategories":[],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/breachrx"},{"slug":"britive","name":"Britive","website":"https://britive.com","primaryCategory":"pam","secondaryCategories":["non-human-identity","ciem"],"hq":{"city":"Glendale","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/britive"},{"slug":"broadcom","name":"Broadcom","website":"https://www.broadcom.com","primaryCategory":"edr-xdr","secondaryCategories":["email-security","dlp"],"hq":{"city":"San Jose","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"AVGO","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/broadcom"},{"slug":"bugcrowd","name":"Bugcrowd","website":"https://www.bugcrowd.com","primaryCategory":"crowdsourced-security","secondaryCategories":[],"hq":{"city":"San Francisco","country":"United States"},"founded":2012,"ownership":null,"url":"https://www.cisotribune.com/companies/bugcrowd"},{"slug":"cato-networks","name":"Cato Networks","website":"https://www.catonetworks.com","primaryCategory":"sase-sse","secondaryCategories":["ztna","ai-usage-security"],"hq":{"city":"Tel Aviv","country":"Israel"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/cato-networks"},{"slug":"cayosoft","name":"Cayosoft","website":"https://www.cayosoft.com","primaryCategory":"identity-system-recovery","secondaryCategories":["iga","itdr"],"hq":{"city":"Westerville","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/cayosoft"},{"slug":"censys","name":"Censys","website":"https://censys.com","primaryCategory":"attack-surface-management","secondaryCategories":["threat-intelligence"],"hq":{"city":"Ann Arbor","country":"United States"},"founded":2017,"ownership":null,"url":"https://www.cisotribune.com/companies/censys"},{"slug":"cequence-security","name":"Cequence Security","website":"https://www.cequence.ai/","primaryCategory":"api-security","secondaryCategories":["bot-management","waf-waap"],"hq":{"city":"Sunnyvale","country":"United States"},"founded":2015,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/cequence-security"},{"slug":"chainguard","name":"Chainguard","website":"https://www.chainguard.dev","primaryCategory":"software-supply-chain","secondaryCategories":[],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/chainguard"},{"slug":"check-point","name":"Check Point Software Technologies","website":"https://www.checkpoint.com","primaryCategory":"firewall-ngfw","secondaryCategories":["sase-sse","email-security","edr-xdr"],"hq":{"city":"Tel Aviv","country":"Israel"},"founded":1993,"ownership":{"type":"public","ticker":"CHKP","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/check-point"},{"slug":"checkmarx","name":"Checkmarx","website":"https://checkmarx.com","primaryCategory":"sast","secondaryCategories":["dast","sca","aspm"],"hq":null,"founded":2006,"ownership":{"type":"acquired","parent":"Hellman & Friedman","year":2020},"url":"https://www.cisotribune.com/companies/checkmarx"},{"slug":"cisco","name":"Cisco","website":"https://www.cisco.com/site/us/en/products/security/index.html","primaryCategory":"firewall-ngfw","secondaryCategories":["sase-sse","network-access-control","siem"],"hq":{"city":"San Jose","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"CSCO","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/cisco"},{"slug":"cloudflare","name":"Cloudflare","website":"https://www.cloudflare.com","primaryCategory":"ddos-protection","secondaryCategories":["waf-waap","sase-sse","dns-security"],"hq":{"city":"San Francisco","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"NET","exchange":"NYSE"},"url":"https://www.cisotribune.com/companies/cloudflare"},{"slug":"cobalt","name":"Cobalt","website":"https://www.cobalt.io","primaryCategory":"pentest-services","secondaryCategories":[],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/cobalt"},{"slug":"cofense","name":"Cofense","website":"https://cofense.com/","primaryCategory":"email-security","secondaryCategories":["security-awareness-training","human-risk-management"],"hq":{"city":"Arlington","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/cofense"},{"slug":"cohesity","name":"Cohesity","website":"https://www.cohesity.com","primaryCategory":"backup-recovery","secondaryCategories":[],"hq":{"city":"San Jose","country":"United States"},"founded":2013,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/cohesity"},{"slug":"commvault","name":"Commvault","website":"https://www.commvault.com","primaryCategory":"backup-recovery","secondaryCategories":["identity-system-recovery"],"hq":{"city":"Tinton Falls","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"CVLT","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/commvault"},{"slug":"concentric-ai","name":"Concentric AI","website":"https://concentric.ai","primaryCategory":"dspm","secondaryCategories":["dlp","ai-usage-security"],"hq":{"city":"San Jose","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/concentric-ai"},{"slug":"contrast-security","name":"Contrast Security","website":"https://www.contrastsecurity.com","primaryCategory":"app-shielding","secondaryCategories":["dast"],"hq":null,"founded":2014,"ownership":null,"url":"https://www.cisotribune.com/companies/contrast-security"},{"slug":"corelight","name":"Corelight","website":"https://corelight.com","primaryCategory":"ndr","secondaryCategories":["network-visibility"],"hq":{"city":"San Francisco","country":"United States"},"founded":2016,"ownership":null,"url":"https://www.cisotribune.com/companies/corelight"},{"slug":"cranium","name":"Cranium","website":"https://cranium.ai","primaryCategory":"ai-governance","secondaryCategories":["ai-model-agent-security"],"hq":{"city":"Short Hills","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/cranium"},{"slug":"credo-ai","name":"Credo AI","website":"https://www.credo.ai","primaryCategory":"ai-governance","secondaryCategories":["ai-model-agent-security"],"hq":{"city":"San Francisco","country":"United States"},"founded":2020,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/credo-ai"},{"slug":"cribl","name":"Cribl","website":"https://cribl.io","primaryCategory":"security-data-lake","secondaryCategories":["siem"],"hq":{"city":"San Francisco","country":"United States"},"founded":2018,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/cribl"},{"slug":"critical-start","name":"Critical Start","website":"https://www.criticalstart.com","primaryCategory":"mdr-managed-soc","secondaryCategories":[],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/critical-start"},{"slug":"cyberark","name":"CyberArk","website":"https://www.cyberark.com","primaryCategory":"pam","secondaryCategories":["iga","non-human-identity"],"hq":{"city":"Petach-Tikva","country":"Israel"},"founded":null,"ownership":{"type":"acquired","parent":"Palo Alto Networks","year":2026},"url":"https://www.cisotribune.com/companies/cyberark"},{"slug":"cyberhaven","name":"Cyberhaven","website":"https://www.cyberhaven.com","primaryCategory":"dlp","secondaryCategories":["dspm","insider-risk"],"hq":{"city":null,"country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/cyberhaven"},{"slug":"cyble","name":"Cyble","website":"https://cyble.com","primaryCategory":"threat-intelligence","secondaryCategories":["digital-risk-protection","attack-surface-management"],"hq":{"city":"Cupertino","country":"United States"},"founded":2020,"ownership":null,"url":"https://www.cisotribune.com/companies/cyble"},{"slug":"cycode","name":"Cycode","website":"https://cycode.com","primaryCategory":"aspm","secondaryCategories":["software-supply-chain","sast"],"hq":null,"founded":2019,"ownership":null,"url":"https://www.cisotribune.com/companies/cycode"},{"slug":"cycognito","name":"CyCognito","website":"https://www.cycognito.com","primaryCategory":"attack-surface-management","secondaryCategories":[],"hq":{"city":"Palo Alto","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/cycognito"},{"slug":"cyderes","name":"Cyderes","website":"https://www.cyderes.com","primaryCategory":"mssp","secondaryCategories":["iam-sso","mdr-managed-soc","ctem"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/cyderes"},{"slug":"cyera","name":"Cyera","website":"https://www.cyera.com","primaryCategory":"dspm","secondaryCategories":["dlp","non-human-identity"],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/cyera"},{"slug":"cymulate","name":"Cymulate","website":"https://cymulate.com","primaryCategory":"bas-pentest-platforms","secondaryCategories":[],"hq":null,"founded":2016,"ownership":null,"url":"https://www.cisotribune.com/companies/cymulate"},{"slug":"cynerio","name":"Cynerio","website":"https://www.cynerio.com","primaryCategory":"iot-device-security","secondaryCategories":[],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Axonius","year":2025},"url":"https://www.cisotribune.com/companies/cynerio"},{"slug":"cyware","name":"Cyware","website":"https://www.cyware.com","primaryCategory":"threat-intelligence","secondaryCategories":["soar"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/cyware"},{"slug":"darktrace","name":"Darktrace","website":"https://www.darktrace.com","primaryCategory":"ndr","secondaryCategories":["email-security","ot-ics-security"],"hq":{"city":"Cambridge","country":"United Kingdom"},"founded":2013,"ownership":{"type":"acquired","parent":"Thoma Bravo","year":2024},"url":"https://www.cisotribune.com/companies/darktrace"},{"slug":"data-theorem","name":"Data Theorem","website":"https://www.datatheorem.com/","primaryCategory":"api-security","secondaryCategories":["sast","mobile-security","cnapp"],"hq":{"city":"Palo Alto","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/data-theorem"},{"slug":"deep-instinct","name":"Deep Instinct","website":"https://www.deepinstinct.com","primaryCategory":"epp","secondaryCategories":[],"hq":null,"founded":2015,"ownership":null,"url":"https://www.cisotribune.com/companies/deep-instinct"},{"slug":"deepwatch","name":"Deepwatch","website":"https://www.deepwatch.com","primaryCategory":"mdr-managed-soc","secondaryCategories":[],"hq":{"city":"Palo Alto","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/deepwatch"},{"slug":"detectify","name":"Detectify","website":"https://detectify.com","primaryCategory":"dast","secondaryCategories":["attack-surface-management"],"hq":{"city":"Stockholm","country":"Sweden"},"founded":2013,"ownership":{"type":"acquired","parent":"Insight Partners","year":2024},"url":"https://www.cisotribune.com/companies/detectify"},{"slug":"devo","name":"Devo","website":"https://www.devo.com","primaryCategory":"security-data-lake","secondaryCategories":["siem","soar"],"hq":{"city":"Cambridge","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/devo"},{"slug":"dmarcian","name":"dmarcian","website":"https://dmarcian.com/","primaryCategory":"email-authentication","secondaryCategories":[],"hq":null,"founded":2012,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/dmarcian"},{"slug":"drata","name":"Drata","website":"https://drata.com/","primaryCategory":"compliance-automation","secondaryCategories":["third-party-risk"],"hq":{"city":"San Diego","country":"United States"},"founded":2020,"ownership":null,"url":"https://www.cisotribune.com/companies/drata"},{"slug":"dropzone-ai","name":"Dropzone AI","website":"https://www.dropzone.ai","primaryCategory":"ai-soc","secondaryCategories":[],"hq":{"city":"Seattle","country":"United States"},"founded":2023,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/dropzone-ai"},{"slug":"druva","name":"Druva","website":"https://www.druva.com","primaryCategory":"backup-recovery","secondaryCategories":[],"hq":{"city":"Santa Clara","country":"United States"},"founded":2008,"ownership":null,"url":"https://www.cisotribune.com/companies/druva"},{"slug":"dtex-systems","name":"DTEX Systems","website":"https://www.dtex.ai","primaryCategory":"insider-risk","secondaryCategories":["dlp","ai-model-agent-security"],"hq":{"city":"San Jose","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/dtex-systems"},{"slug":"eclecticiq","name":"EclecticIQ","website":"https://www.eclecticiq.com","primaryCategory":"threat-intelligence","secondaryCategories":[],"hq":{"city":null,"country":"Netherlands"},"founded":2014,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/eclecticiq"},{"slug":"egress","name":"Egress","website":"https://www.egress.com","primaryCategory":"email-security","secondaryCategories":["dlp","human-risk-management"],"hq":{"city":"London","country":"United Kingdom"},"founded":2007,"ownership":{"type":"acquired","parent":"KnowBe4","year":2024},"url":"https://www.cisotribune.com/companies/egress"},{"slug":"elisity","name":"Elisity","website":"https://www.elisity.com","primaryCategory":"microsegmentation","secondaryCategories":["network-access-control"],"hq":{"city":"San Jose","country":"United States"},"founded":2019,"ownership":null,"url":"https://www.cisotribune.com/companies/elisity"},{"slug":"enkrypt-ai","name":"Enkrypt AI","website":"https://www.enkryptai.com","primaryCategory":"ai-model-agent-security","secondaryCategories":["ai-firewall-guardrails","ai-governance"],"hq":{"city":"Brighton","country":"United States"},"founded":2022,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/enkrypt-ai"},{"slug":"entrust","name":"Entrust","website":"https://www.entrust.com","primaryCategory":"machine-identity-pki","secondaryCategories":[],"hq":{"city":"Minneapolis","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/entrust"},{"slug":"escape","name":"Escape","website":"https://escape.tech/","primaryCategory":"api-security","secondaryCategories":["dast","attack-surface-management"],"hq":{"city":"Biarritz","country":"France"},"founded":2020,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/escape"},{"slug":"esentire","name":"eSentire","website":"https://www.esentire.com","primaryCategory":"mdr-managed-soc","secondaryCategories":["incident-response","ctem"],"hq":{"city":null,"country":"Canada"},"founded":2001,"ownership":null,"url":"https://www.cisotribune.com/companies/esentire"},{"slug":"exabeam","name":"Exabeam","website":"https://www.exabeam.com","primaryCategory":"siem","secondaryCategories":["ai-soc"],"hq":{"city":"Foster City","country":"United States"},"founded":2013,"ownership":{"type":"acquired","parent":"Thoma Bravo","year":2024},"url":"https://www.cisotribune.com/companies/exabeam"},{"slug":"expel","name":"Expel","website":"https://expel.com","primaryCategory":"mdr-managed-soc","secondaryCategories":[],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/expel"},{"slug":"f5","name":"F5","website":"https://www.f5.com","primaryCategory":"waf-waap","secondaryCategories":["api-security"],"hq":{"city":"Seattle","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"FFIV","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/f5"},{"slug":"fable-security","name":"Fable Security","website":"https://fablesecurity.com","primaryCategory":"human-risk-management","secondaryCategories":[],"hq":{"city":"San Francisco","country":"United States"},"founded":2024,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/fable-security"},{"slug":"feedzai","name":"Feedzai","website":"https://www.feedzai.com","primaryCategory":"fraud-prevention","secondaryCategories":[],"hq":{"city":"New York","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/feedzai"},{"slug":"finite-state","name":"Finite State","website":"https://finitestate.io","primaryCategory":"firmware-device-security","secondaryCategories":["software-supply-chain"],"hq":{"city":"Columbus","country":"United States"},"founded":2017,"ownership":null,"url":"https://www.cisotribune.com/companies/finite-state"},{"slug":"forescout","name":"Forescout","website":"https://www.forescout.com","primaryCategory":"network-access-control","secondaryCategories":["iot-device-security","ot-ics-security"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/forescout"},{"slug":"fortanix","name":"Fortanix","website":"https://www.fortanix.com","primaryCategory":"encryption-key-management","secondaryCategories":["post-quantum-cryptography"],"hq":{"city":"Santa Clara","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/fortanix"},{"slug":"fortinet","name":"Fortinet","website":"https://www.fortinet.com","primaryCategory":"firewall-ngfw","secondaryCategories":["sase-sse","siem","edr-xdr"],"hq":{"city":"Sunnyvale","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"FTNT","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/fortinet"},{"slug":"gitguardian","name":"GitGuardian","website":"https://www.gitguardian.com","primaryCategory":"secrets-detection","secondaryCategories":["non-human-identity"],"hq":null,"founded":2017,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/gitguardian"},{"slug":"graylog","name":"Graylog","website":"https://graylog.org","primaryCategory":"siem","secondaryCategories":["ai-soc"],"hq":{"city":"Houston","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/graylog"},{"slug":"greynoise","name":"GreyNoise","website":"https://www.greynoise.io","primaryCategory":"threat-intelligence","secondaryCategories":[],"hq":{"city":"Washington","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/greynoise"},{"slug":"grip-security","name":"Grip Security","website":"https://www.grip.security","primaryCategory":"saas-security","secondaryCategories":["non-human-identity","ai-usage-security"],"hq":null,"founded":2021,"ownership":null,"url":"https://www.cisotribune.com/companies/grip-security"},{"slug":"guardsix","name":"Guardsix","website":"https://guardsix.com","primaryCategory":"siem","secondaryCategories":["soar","ndr"],"hq":{"city":"Copenhagen","country":"Denmark"},"founded":null,"ownership":{"type":"acquired","parent":"Summa Equity","year":2023},"url":"https://www.cisotribune.com/companies/guardsix"},{"slug":"guardsquare","name":"Guardsquare","website":"https://www.guardsquare.com/","primaryCategory":"app-shielding","secondaryCategories":[],"hq":{"city":"Leuven","country":"Belgium"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/guardsquare"},{"slug":"guidepoint-security","name":"GuidePoint Security","website":"https://www.guidepointsecurity.com","primaryCategory":"security-consulting","secondaryCategories":["mssp","pentest-services"],"hq":{"city":"Reston","country":"United States"},"founded":2011,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/guidepoint-security"},{"slug":"hiddenlayer","name":"HiddenLayer","website":"https://www.hiddenlayer.com","primaryCategory":"ai-model-agent-security","secondaryCategories":["ai-firewall-guardrails"],"hq":{"city":"Austin","country":"United States"},"founded":2022,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/hiddenlayer"},{"slug":"horizon3-ai","name":"Horizon3.ai","website":"https://horizon3.ai","primaryCategory":"bas-pentest-platforms","secondaryCategories":[],"hq":{"city":"San Francisco","country":"United States"},"founded":2019,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/horizon3-ai"},{"slug":"hoxhunt","name":"Hoxhunt","website":"https://hoxhunt.com","primaryCategory":"human-risk-management","secondaryCategories":["security-awareness-training"],"hq":{"city":"Helsinki","country":"Finland"},"founded":2016,"ownership":null,"url":"https://www.cisotribune.com/companies/hoxhunt"},{"slug":"human-security","name":"HUMAN Security","website":"https://www.humansecurity.com","primaryCategory":"bot-management","secondaryCategories":["fraud-prevention"],"hq":{"city":"New York","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/human-security"},{"slug":"hunters","name":"Hunters","website":"https://www.hunters.security","primaryCategory":"siem","secondaryCategories":["ai-soc","security-data-lake"],"hq":{"city":"Boston","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/hunters"},{"slug":"hycu","name":"HYCU","website":"https://www.hycu.com","primaryCategory":"backup-recovery","secondaryCategories":[],"hq":{"city":"Boston","country":"United States"},"founded":2018,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/hycu"},{"slug":"hyperproof","name":"Hyperproof","website":"https://hyperproof.io/","primaryCategory":"compliance-automation","secondaryCategories":["grc-platforms","third-party-risk"],"hq":{"city":"Seattle","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/hyperproof"},{"slug":"icounter","name":"iCOUNTER","website":"https://icounter.com","primaryCategory":"third-party-risk","secondaryCategories":["digital-risk-protection","fraud-prevention"],"hq":null,"founded":2020,"ownership":null,"url":"https://www.cisotribune.com/companies/icounter"},{"slug":"illumio","name":"Illumio","website":"https://www.illumio.com","primaryCategory":"microsegmentation","secondaryCategories":["network-visibility"],"hq":{"city":"Sunnyvale","country":"United States"},"founded":2013,"ownership":null,"url":"https://www.cisotribune.com/companies/illumio"},{"slug":"impart-security","name":"Impart Security","website":"https://www.impart.ai/","primaryCategory":"ai-firewall-guardrails","secondaryCategories":["ai-model-agent-security","bot-management"],"hq":{"city":"San Francisco","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/impart-security"},{"slug":"imperva","name":"Imperva","website":"https://www.imperva.com/","primaryCategory":"waf-waap","secondaryCategories":["api-security","bot-management","ddos-protection"],"hq":{"city":"Redwood Shores","country":"United States"},"founded":null,"ownership":{"type":"acquired","parent":"Thales"},"url":"https://www.cisotribune.com/companies/imperva"},{"slug":"incode","name":"Incode","website":"https://www.incode.com","primaryCategory":"identity-verification","secondaryCategories":["fraud-prevention"],"hq":{"city":"San Francisco","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/incode"},{"slug":"integrity360","name":"Integrity360","website":"https://www.integrity360.com","primaryCategory":"mssp","secondaryCategories":["security-consulting","pentest-services","incident-response"],"hq":{"city":"Dublin","country":"Ireland"},"founded":2005,"ownership":null,"url":"https://www.cisotribune.com/companies/integrity360"},{"slug":"intel-471","name":"Intel 471","website":"https://www.intel471.com","primaryCategory":"threat-intelligence","secondaryCategories":["ctem"],"hq":null,"founded":2014,"ownership":null,"url":"https://www.cisotribune.com/companies/intel-471"},{"slug":"invicti","name":"Invicti","website":"https://www.invicti.com","primaryCategory":"dast","secondaryCategories":["sast","sca","api-security"],"hq":{"city":"Austin","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/invicti"},{"slug":"ironscales","name":"IRONSCALES","website":"https://ironscales.com","primaryCategory":"email-security","secondaryCategories":["ai-soc"],"hq":{"city":"Atlanta","country":"United States"},"founded":2014,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/ironscales"},{"slug":"ivanti","name":"Ivanti","website":"https://www.ivanti.com","primaryCategory":"endpoint-management-control","secondaryCategories":["ztna"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/ivanti"},{"slug":"jamf","name":"Jamf","website":"https://www.jamf.com","primaryCategory":"endpoint-management-control","secondaryCategories":["mobile-security"],"hq":{"city":"Minneapolis","country":"United States"},"founded":null,"ownership":{"type":"acquired","parent":"Francisco Partners","year":2026},"url":"https://www.cisotribune.com/companies/jamf"},{"slug":"jumio","name":"Jumio","website":"https://www.jumio.com","primaryCategory":"identity-verification","secondaryCategories":["fraud-prevention"],"hq":{"city":"Palo Alto","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/jumio"},{"slug":"jumpcloud","name":"JumpCloud","website":"https://jumpcloud.com","primaryCategory":"iam-sso","secondaryCategories":["endpoint-management-control"],"hq":{"city":"Denver","country":"United States"},"founded":2012,"ownership":null,"url":"https://www.cisotribune.com/companies/jumpcloud"},{"slug":"juniper-networks","name":"Juniper Networks","website":"https://www.juniper.net/us/en/security.html","primaryCategory":"firewall-ngfw","secondaryCategories":["sase-sse","ztna"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Hewlett Packard Enterprise","year":2025},"url":"https://www.cisotribune.com/companies/juniper-networks"},{"slug":"kai","name":"Kai","website":"https://www.kai.security","primaryCategory":"ai-soc","secondaryCategories":["attack-surface-management","threat-intelligence"],"hq":{"city":"San Jose","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/kai"},{"slug":"kaspersky","name":"Kaspersky","website":"https://www.kaspersky.com","primaryCategory":"edr-xdr","secondaryCategories":["epp"],"hq":null,"founded":1997,"ownership":null,"url":"https://www.cisotribune.com/companies/kaspersky"},{"slug":"keep-aware","name":"Keep Aware","website":"https://www.keepaware.com/","primaryCategory":"browser-protection","secondaryCategories":["dlp","ai-usage-security"],"hq":{"city":"Austin","country":"United States"},"founded":null,"ownership":{"type":"acquired","parent":"Jamf"},"url":"https://www.cisotribune.com/companies/keep-aware"},{"slug":"keepit","name":"Keepit","website":"https://www.keepit.com","primaryCategory":"backup-recovery","secondaryCategories":[],"hq":{"city":"Copenhagen","country":"Denmark"},"founded":2007,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/keepit"},{"slug":"keepnet-labs","name":"Keepnet Labs","website":"https://keepnetlabs.com","primaryCategory":"human-risk-management","secondaryCategories":["security-awareness-training","threat-intelligence","incident-response"],"hq":{"city":"London","country":"United Kingdom"},"founded":2017,"ownership":null,"url":"https://www.cisotribune.com/companies/keepnet-labs"},{"slug":"ketch","name":"Ketch","website":"https://www.ketch.com","primaryCategory":"data-privacy","secondaryCategories":["dspm","ai-governance"],"hq":{"city":"San Francisco","country":"United States"},"founded":2020,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/ketch"},{"slug":"keyfactor","name":"Keyfactor","website":"https://www.keyfactor.com","primaryCategory":"machine-identity-pki","secondaryCategories":[],"hq":{"city":"Independence","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/keyfactor"},{"slug":"knostic","name":"Knostic","website":"https://www.knostic.ai","primaryCategory":"ai-model-agent-security","secondaryCategories":["ai-governance"],"hq":{"city":"Reston","country":"United States"},"founded":2023,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/knostic"},{"slug":"knowbe4","name":"KnowBe4","website":"https://www.knowbe4.com","primaryCategory":"security-awareness-training","secondaryCategories":["human-risk-management","email-security","ai-model-agent-security"],"hq":{"city":"Clearwater","country":"United States"},"founded":2010,"ownership":{"type":"acquired","parent":"Vista Equity Partners","year":2023},"url":"https://www.cisotribune.com/companies/knowbe4"},{"slug":"kudelski-security","name":"Kudelski Security","website":"https://kudelskisecurity.com","primaryCategory":"security-consulting","secondaryCategories":["mssp"],"hq":{"city":"Cheseaux-sur-Lausanne","country":"Switzerland"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/kudelski-security"},{"slug":"kyndryl","name":"Kyndryl","website":"https://www.kyndryl.com","primaryCategory":"mdr-managed-soc","secondaryCategories":["incident-response","security-consulting"],"hq":{"city":"New York","country":"United States"},"founded":2021,"ownership":{"type":"public","ticker":"KD","exchange":"NYSE"},"url":"https://www.cisotribune.com/companies/kyndryl"},{"slug":"lakera","name":"Lakera","website":"https://www.lakera.ai","primaryCategory":"ai-firewall-guardrails","secondaryCategories":["ai-model-agent-security","ai-usage-security"],"hq":{"city":"Zurich","country":"Switzerland"},"founded":2021,"ownership":{"type":"acquired","parent":"Check Point Software Technologies","year":2025},"url":"https://www.cisotribune.com/companies/lakera"},{"slug":"lasso-security","name":"Lasso Security","website":"https://www.lasso.security","primaryCategory":"ai-firewall-guardrails","secondaryCategories":["ai-model-agent-security","ai-usage-security"],"hq":null,"founded":2023,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/lasso-security"},{"slug":"lastpass","name":"LastPass","website":"https://www.lastpass.com","primaryCategory":"password-management","secondaryCategories":[],"hq":{"city":"Boston","country":"United States"},"founded":2008,"ownership":{"type":"acquired","parent":"Francisco Partners","year":2024},"url":"https://www.cisotribune.com/companies/lastpass"},{"slug":"legit-security","name":"Legit Security","website":"https://www.legitsecurity.com","primaryCategory":"aspm","secondaryCategories":["secrets-detection","software-supply-chain"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/legit-security"},{"slug":"levo-ai","name":"Levo.ai","website":"https://www.levo.ai/","primaryCategory":"api-security","secondaryCategories":["ai-model-agent-security"],"hq":{"city":"San Francisco","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/levo-ai"},{"slug":"living-security","name":"Living Security","website":"https://www.livingsecurity.com","primaryCategory":"human-risk-management","secondaryCategories":["security-awareness-training"],"hq":{"city":"Austin","country":"United States"},"founded":2017,"ownership":null,"url":"https://www.cisotribune.com/companies/living-security"},{"slug":"logicgate","name":"LogicGate","website":"https://www.logicgate.com/","primaryCategory":"grc-platforms","secondaryCategories":["third-party-risk"],"hq":{"city":"Chicago","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/logicgate"},{"slug":"lookout","name":"Lookout","website":"https://www.lookout.com","primaryCategory":"mobile-security","secondaryCategories":[],"hq":{"city":"San Francisco","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/lookout"},{"slug":"malwarebytes","name":"Malwarebytes","website":"https://www.malwarebytes.com","primaryCategory":"edr-xdr","secondaryCategories":["mdr-managed-soc","itdr"],"hq":{"city":"Santa Clara","country":"United States"},"founded":2008,"ownership":null,"url":"https://www.cisotribune.com/companies/malwarebytes"},{"slug":"menlo-security","name":"Menlo Security","website":"https://www.menlosecurity.com/","primaryCategory":"browser-isolation","secondaryCategories":["enterprise-browser","dlp"],"hq":{"city":"Mountain View","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/menlo-security"},{"slug":"metricstream","name":"MetricStream","website":"https://www.metricstream.com/","primaryCategory":"grc-platforms","secondaryCategories":["third-party-risk","compliance-automation"],"hq":{"city":"San Jose","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/metricstream"},{"slug":"microsoft","name":"Microsoft","website":"https://www.microsoft.com/en-us/security","primaryCategory":"edr-xdr","secondaryCategories":["siem","iam-sso","endpoint-management-control"],"hq":{"city":"Redmond","country":"United States"},"founded":1975,"ownership":{"type":"public","ticker":"MSFT","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/microsoft"},{"slug":"mimecast","name":"Mimecast","website":"https://www.mimecast.com","primaryCategory":"email-security","secondaryCategories":["email-authentication","collaboration-security","insider-risk"],"hq":{"city":"London","country":"United Kingdom"},"founded":2003,"ownership":{"type":"acquired","parent":"Permira","year":2022},"url":"https://www.cisotribune.com/companies/mimecast"},{"slug":"mindgard","name":"Mindgard","website":"https://mindgard.ai","primaryCategory":"ai-model-agent-security","secondaryCategories":["ai-firewall-guardrails"],"hq":{"city":"Boston","country":"United States"},"founded":2022,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/mindgard"},{"slug":"mitiga","name":"Mitiga","website":"https://www.mitiga.io","primaryCategory":"cloud-detection-response","secondaryCategories":["saas-security","itdr"],"hq":{"city":"New York","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/mitiga"},{"slug":"morphisec","name":"Morphisec","website":"https://www.morphisec.com","primaryCategory":"epp","secondaryCategories":[],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/morphisec"},{"slug":"nagomi-security","name":"Nagomi Security","website":"https://nagomisecurity.com","primaryCategory":"ctem","secondaryCategories":[],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/nagomi-security"},{"slug":"netscout","name":"NETSCOUT","website":"https://www.netscout.com","primaryCategory":"ddos-protection","secondaryCategories":["network-visibility","ndr"],"hq":{"city":"Westford","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"NTCT","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/netscout"},{"slug":"netskope","name":"Netskope","website":"https://www.netskope.com","primaryCategory":"sase-sse","secondaryCategories":["ztna","dlp","ai-usage-security"],"hq":{"city":"Santa Clara","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"NTSK","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/netskope"},{"slug":"noma-security","name":"Noma Security","website":"https://noma.security","primaryCategory":"ai-model-agent-security","secondaryCategories":["ai-firewall-guardrails","ai-governance"],"hq":null,"founded":2023,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/noma-security"},{"slug":"nowsecure","name":"NowSecure","website":"https://www.nowsecure.com/","primaryCategory":"mobile-security","secondaryCategories":["ai-model-agent-security"],"hq":{"city":"Chicago","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/nowsecure"},{"slug":"nozomi-networks","name":"Nozomi Networks","website":"https://www.nozominetworks.com","primaryCategory":"ot-ics-security","secondaryCategories":["iot-device-security"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Mitsubishi Electric Corporation","year":2026},"url":"https://www.cisotribune.com/companies/nozomi-networks"},{"slug":"object-first","name":"Object First","website":"https://objectfirst.com","primaryCategory":"backup-recovery","secondaryCategories":[],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/object-first"},{"slug":"okta","name":"Okta","website":"https://www.okta.com","primaryCategory":"iam-sso","secondaryCategories":["ciam"],"hq":{"city":"San Francisco","country":"United States"},"founded":2009,"ownership":{"type":"public","ticker":"OKTA","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/okta"},{"slug":"one-identity","name":"One Identity","website":"https://www.oneidentity.com","primaryCategory":"iga","secondaryCategories":["pam"],"hq":{"city":"Cork","country":"Ireland"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/one-identity"},{"slug":"onetrust","name":"OneTrust","website":"https://www.onetrust.com","primaryCategory":"data-privacy","secondaryCategories":["third-party-risk","ai-governance"],"hq":{"city":"Atlanta","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/onetrust"},{"slug":"operant-ai","name":"Operant AI","website":"https://www.operant.ai","primaryCategory":"ai-firewall-guardrails","secondaryCategories":["ai-model-agent-security"],"hq":{"city":"San Francisco","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/operant-ai"},{"slug":"optro","name":"Optro","website":"https://optro.ai/","primaryCategory":"grc-platforms","secondaryCategories":["third-party-risk"],"hq":null,"founded":2014,"ownership":{"type":"acquired","parent":"Hg","year":2024},"url":"https://www.cisotribune.com/companies/optro"},{"slug":"orange-cyberdefense","name":"Orange Cyberdefense","website":"https://www.orangecyberdefense.com","primaryCategory":"mssp","secondaryCategories":["mdr-managed-soc","security-consulting"],"hq":{"city":"Paris","country":"France"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/orange-cyberdefense"},{"slug":"orca-security","name":"Orca Security","website":"https://orca.security","primaryCategory":"cnapp","secondaryCategories":["cwpp","cloud-detection-response"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/orca-security"},{"slug":"ordr","name":"Ordr","website":"https://ordr.net","primaryCategory":"iot-device-security","secondaryCategories":["network-access-control"],"hq":{"city":"Santa Clara","country":"United States"},"founded":2015,"ownership":null,"url":"https://www.cisotribune.com/companies/ordr"},{"slug":"osano","name":"Osano","website":"https://www.osano.com","primaryCategory":"data-privacy","secondaryCategories":["dspm","third-party-risk"],"hq":{"city":"Austin","country":"United States"},"founded":2018,"ownership":null,"url":"https://www.cisotribune.com/companies/osano"},{"slug":"palo-alto-networks","name":"Palo Alto Networks","website":"https://www.paloaltonetworks.com","primaryCategory":"firewall-ngfw","secondaryCategories":["cnapp","edr-xdr","pam"],"hq":{"city":"Santa Clara","country":"United States"},"founded":null,"ownership":{"type":"public","ticker":"PANW","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/palo-alto-networks"},{"slug":"pangea","name":"Pangea","website":"https://pangea.cloud","primaryCategory":"ai-model-agent-security","secondaryCategories":["ai-firewall-guardrails"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"CrowdStrike","year":2025},"url":"https://www.cisotribune.com/companies/pangea"},{"slug":"panorays","name":"Panorays","website":"https://panorays.com/","primaryCategory":"third-party-risk","secondaryCategories":[],"hq":null,"founded":2016,"ownership":null,"url":"https://www.cisotribune.com/companies/panorays"},{"slug":"panther","name":"Panther","website":"https://panther.com","primaryCategory":"ai-soc","secondaryCategories":["siem","security-data-lake"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/panther"},{"slug":"pentera","name":"Pentera","website":"https://pentera.io","primaryCategory":"bas-pentest-platforms","secondaryCategories":[],"hq":{"city":"Boston","country":"United States"},"founded":2015,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/pentera"},{"slug":"permiso","name":"Permiso","website":"https://permiso.io","primaryCategory":"itdr","secondaryCategories":["non-human-identity","cloud-detection-response"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Okta","year":2026},"url":"https://www.cisotribune.com/companies/permiso"},{"slug":"persona","name":"Persona","website":"https://withpersona.com","primaryCategory":"identity-verification","secondaryCategories":["fraud-prevention"],"hq":{"city":"San Francisco","country":"United States"},"founded":2018,"ownership":null,"url":"https://www.cisotribune.com/companies/persona"},{"slug":"picus-security","name":"Picus Security","website":"https://www.picussecurity.com","primaryCategory":"bas-pentest-platforms","secondaryCategories":[],"hq":null,"founded":2013,"ownership":null,"url":"https://www.cisotribune.com/companies/picus-security"},{"slug":"plerion","name":"Plerion","website":"https://www.plerion.com","primaryCategory":"cnapp","secondaryCategories":["cwpp","ai-model-agent-security"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/plerion"},{"slug":"pqshield","name":"PQShield","website":"https://pqshield.com","primaryCategory":"post-quantum-cryptography","secondaryCategories":["encryption-key-management"],"hq":{"city":null,"country":"United Kingdom"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/pqshield"},{"slug":"prevalent","name":"Prevalent","website":"https://www.prevalent.net/","primaryCategory":"third-party-risk","secondaryCategories":[],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Mitratech","year":2024},"url":"https://www.cisotribune.com/companies/prevalent"},{"slug":"promon","name":"Promon","website":"https://promon.io/","primaryCategory":"app-shielding","secondaryCategories":[],"hq":{"city":"Oslo","country":"Norway"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/promon"},{"slug":"prompt-security","name":"Prompt Security","website":"https://prompt.security","primaryCategory":"ai-firewall-guardrails","secondaryCategories":["ai-usage-security","ai-model-agent-security"],"hq":null,"founded":2023,"ownership":{"type":"acquired","parent":"SentinelOne","year":2025},"url":"https://www.cisotribune.com/companies/prompt-security"},{"slug":"proofpoint","name":"Proofpoint","website":"https://www.proofpoint.com","primaryCategory":"email-security","secondaryCategories":["collaboration-security","human-risk-management","insider-risk"],"hq":{"city":"Sunnyvale","country":"United States"},"founded":2002,"ownership":{"type":"acquired","parent":"Thoma Bravo","year":2021},"url":"https://www.cisotribune.com/companies/proofpoint"},{"slug":"prophet-security","name":"Prophet Security","website":"https://www.prophetsecurity.ai","primaryCategory":"ai-soc","secondaryCategories":[],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/prophet-security"},{"slug":"protegrity","name":"Protegrity","website":"https://www.protegrity.com","primaryCategory":"encryption-key-management","secondaryCategories":["dspm","data-privacy"],"hq":{"city":"Stamford","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/protegrity"},{"slug":"qusecure","name":"QuSecure","website":"https://www.qusecure.com","primaryCategory":"post-quantum-cryptography","secondaryCategories":["encryption-key-management"],"hq":{"city":"San Mateo","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/qusecure"},{"slug":"red-canary","name":"Red Canary","website":"https://redcanary.com","primaryCategory":"mdr-managed-soc","secondaryCategories":["threat-intelligence"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Zscaler","year":2025},"url":"https://www.cisotribune.com/companies/red-canary"},{"slug":"red-sift","name":"Red Sift","website":"https://redsift.com/","primaryCategory":"email-authentication","secondaryCategories":["attack-surface-management","digital-risk-protection","machine-identity-pki"],"hq":{"city":"London","country":"United Kingdom"},"founded":2015,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/red-sift"},{"slug":"riskrecon","name":"RiskRecon","website":"https://www.riskrecon.com/","primaryCategory":"third-party-risk","secondaryCategories":[],"hq":{"city":"Salt Lake City","country":"United States"},"founded":null,"ownership":{"type":"acquired","parent":"Mastercard"},"url":"https://www.cisotribune.com/companies/riskrecon"},{"slug":"runzero","name":"runZero","website":"https://www.runzero.com","primaryCategory":"caasm","secondaryCategories":["attack-surface-management"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Dragos","year":2026},"url":"https://www.cisotribune.com/companies/runzero"},{"slug":"safe-security","name":"Safe Security","website":"https://safe.security/","primaryCategory":"cyber-risk-quantification","secondaryCategories":["ctem","third-party-risk"],"hq":{"city":"Palo Alto","country":"United States"},"founded":2012,"ownership":null,"url":"https://www.cisotribune.com/companies/safe-security"},{"slug":"safebreach","name":"SafeBreach","website":"https://www.safebreach.com","primaryCategory":"bas-pentest-platforms","secondaryCategories":[],"hq":{"city":"Sunnyvale","country":"United States"},"founded":2014,"ownership":null,"url":"https://www.cisotribune.com/companies/safebreach"},{"slug":"sailpoint","name":"SailPoint","website":"https://www.sailpoint.com","primaryCategory":"iga","secondaryCategories":["non-human-identity"],"hq":{"city":"Austin","country":"United States"},"founded":2005,"ownership":{"type":"public","ticker":"SAIL","exchange":"NASDAQ"},"url":"https://www.cisotribune.com/companies/sailpoint"},{"slug":"salt-security","name":"Salt Security","website":"https://salt.security/","primaryCategory":"api-security","secondaryCategories":["ai-model-agent-security"],"hq":{"city":"Palo Alto","country":"United States"},"founded":2016,"ownership":null,"url":"https://www.cisotribune.com/companies/salt-security"},{"slug":"sandboxaq","name":"SandboxAQ","website":"https://www.sandboxaq.com","primaryCategory":"post-quantum-cryptography","secondaryCategories":["machine-identity-pki","encryption-key-management"],"hq":{"city":"Palo Alto","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/sandboxaq"},{"slug":"sardine","name":"Sardine","website":"https://www.sardine.ai","primaryCategory":"fraud-prevention","secondaryCategories":["identity-verification"],"hq":null,"founded":2020,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/sardine"},{"slug":"saviynt","name":"Saviynt","website":"https://www.saviynt.com","primaryCategory":"iga","secondaryCategories":["pam","non-human-identity"],"hq":{"city":"El Segundo","country":"United States"},"founded":2011,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/saviynt"},{"slug":"sectigo","name":"Sectigo","website":"https://www.sectigo.com","primaryCategory":"machine-identity-pki","secondaryCategories":[],"hq":{"city":"Scottsdale","country":"United States"},"founded":null,"ownership":{"type":"acquired","parent":"GI Partners","year":2020},"url":"https://www.cisotribune.com/companies/sectigo"},{"slug":"secureframe","name":"Secureframe","website":"https://secureframe.com/","primaryCategory":"compliance-automation","secondaryCategories":["third-party-risk"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/secureframe"},{"slug":"securiti","name":"Securiti","website":"https://securiti.ai","primaryCategory":"dspm","secondaryCategories":["data-privacy"],"hq":{"city":"San Jose","country":"United States"},"founded":null,"ownership":{"type":"acquired","parent":"Veeam Software","year":2025},"url":"https://www.cisotribune.com/companies/securiti"},{"slug":"securityscorecard","name":"SecurityScorecard","website":"https://securityscorecard.com/","primaryCategory":"third-party-risk","secondaryCategories":["threat-intelligence"],"hq":{"city":"New York","country":"United States"},"founded":2013,"ownership":null,"url":"https://www.cisotribune.com/companies/securityscorecard"},{"slug":"securonix","name":"Securonix","website":"https://www.securonix.com","primaryCategory":"siem","secondaryCategories":["soar","ai-soc"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/securonix"},{"slug":"seemplicity","name":"Seemplicity","website":"https://seemplicity.ai","primaryCategory":"ctem","secondaryCategories":[],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/seemplicity"},{"slug":"semgrep","name":"Semgrep","website":"https://semgrep.dev","primaryCategory":"sast","secondaryCategories":["sca","secrets-detection"],"hq":{"city":"San Francisco","country":"United States"},"founded":2017,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/semgrep"},{"slug":"sentra","name":"Sentra","website":"https://sentra.io","primaryCategory":"dspm","secondaryCategories":[],"hq":{"city":"New York","country":"United States"},"founded":2021,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/sentra"},{"slug":"seraphic-security","name":"Seraphic Security","website":"https://seraphicsecurity.com/","primaryCategory":"browser-protection","secondaryCategories":[],"hq":null,"founded":2020,"ownership":{"type":"acquired","parent":"CrowdStrike"},"url":"https://www.cisotribune.com/companies/seraphic-security"},{"slug":"sift","name":"Sift","website":"https://sift.com","primaryCategory":"fraud-prevention","secondaryCategories":[],"hq":{"city":"San Francisco","country":"United States"},"founded":2011,"ownership":null,"url":"https://www.cisotribune.com/companies/sift"},{"slug":"skyflow","name":"Skyflow","website":"https://www.skyflow.com","primaryCategory":"encryption-key-management","secondaryCategories":["data-privacy","ai-model-agent-security"],"hq":{"city":"Palo Alto","country":"United States"},"founded":2019,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/skyflow"},{"slug":"skyhawk-security","name":"Skyhawk Security","website":"https://skyhawk.security","primaryCategory":"cloud-detection-response","secondaryCategories":["bas-pentest-platforms"],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/skyhawk-security"},{"slug":"snyk","name":"Snyk","website":"https://snyk.io","primaryCategory":"sca","secondaryCategories":["sast","secrets-detection","software-supply-chain"],"hq":{"city":"Boston","country":"United States"},"founded":2015,"ownership":null,"url":"https://www.cisotribune.com/companies/snyk"},{"slug":"sonatype","name":"Sonatype","website":"https://www.sonatype.com","primaryCategory":"sca","secondaryCategories":["software-supply-chain"],"hq":{"city":"Fulton","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/sonatype"},{"slug":"sonicwall","name":"SonicWall","website":"https://www.sonicwall.com","primaryCategory":"firewall-ngfw","secondaryCategories":["sase-sse","edr-xdr","mdr-managed-soc"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Francisco Partners and Elliott Management","year":2016},"url":"https://www.cisotribune.com/companies/sonicwall"},{"slug":"sonrai-security","name":"Sonrai","website":"https://sonraisecurity.com","primaryCategory":"ciem","secondaryCategories":["non-human-identity","cspm"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/sonrai-security"},{"slug":"sophos","name":"Sophos","website":"https://www.sophos.com","primaryCategory":"edr-xdr","secondaryCategories":["firewall-ngfw","mdr-managed-soc"],"hq":{"city":"Oxford","country":"United Kingdom"},"founded":null,"ownership":{"type":"acquired","parent":"Thoma Bravo","year":2020},"url":"https://www.cisotribune.com/companies/sophos"},{"slug":"sosafe","name":"SoSafe","website":"https://sosafe-awareness.com","primaryCategory":"security-awareness-training","secondaryCategories":["human-risk-management"],"hq":null,"founded":2018,"ownership":null,"url":"https://www.cisotribune.com/companies/sosafe"},{"slug":"splunk","name":"Splunk","website":"https://www.splunk.com","primaryCategory":"siem","secondaryCategories":["soar","security-data-lake"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Cisco"},"url":"https://www.cisotribune.com/companies/splunk"},{"slug":"sprinto","name":"Sprinto","website":"https://sprinto.com/","primaryCategory":"compliance-automation","secondaryCategories":["third-party-risk","ai-governance"],"hq":{"city":null,"country":"India"},"founded":2020,"ownership":null,"url":"https://www.cisotribune.com/companies/sprinto"},{"slug":"squarex","name":"SquareX","website":"https://sqrx.com/","primaryCategory":"browser-protection","secondaryCategories":["dlp"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Zscaler","year":2026},"url":"https://www.cisotribune.com/companies/squarex"},{"slug":"stackhawk","name":"StackHawk","website":"https://www.stackhawk.com","primaryCategory":"dast","secondaryCategories":["api-security"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/stackhawk"},{"slug":"stellar-cyber","name":"Stellar Cyber","website":"https://stellarcyber.ai","primaryCategory":"siem","secondaryCategories":["ai-soc","mdr-managed-soc"],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/stellar-cyber"},{"slug":"stream-security","name":"Stream.Security","website":"https://www.stream.security","primaryCategory":"cloud-detection-response","secondaryCategories":["ai-model-agent-security"],"hq":{"city":"Tel Aviv","country":"Israel"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/stream-security"},{"slug":"sublime-security","name":"Sublime Security","website":"https://sublime.security","primaryCategory":"email-security","secondaryCategories":["dlp","ai-soc"],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/sublime-security"},{"slug":"sumo-logic","name":"Sumo Logic","website":"https://www.sumologic.com","primaryCategory":"siem","secondaryCategories":["security-data-lake"],"hq":{"city":"Redwood City","country":"United States"},"founded":null,"ownership":{"type":"acquired","parent":"Francisco Partners","year":2023},"url":"https://www.cisotribune.com/companies/sumo-logic"},{"slug":"swimlane","name":"Swimlane","website":"https://swimlane.com","primaryCategory":"soar","secondaryCategories":["ai-soc"],"hq":{"city":"Denver","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/swimlane"},{"slug":"synack","name":"Synack","website":"https://www.synack.com","primaryCategory":"crowdsourced-security","secondaryCategories":["pentest-services"],"hq":{"city":"Redwood City","country":"United States"},"founded":2013,"ownership":null,"url":"https://www.cisotribune.com/companies/synack"},{"slug":"tamnoon","name":"Tamnoon","website":"https://www.tamnoon.io","primaryCategory":"ctem","secondaryCategories":["mssp"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/tamnoon"},{"slug":"tanium","name":"Tanium","website":"https://www.tanium.com","primaryCategory":"endpoint-management-control","secondaryCategories":["edr-xdr"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/tanium"},{"slug":"thales","name":"Thales","website":"https://cpl.thalesgroup.com","primaryCategory":"encryption-key-management","secondaryCategories":["post-quantum-cryptography"],"hq":{"city":"Paris","country":"France"},"founded":null,"ownership":{"type":"public","ticker":"HO","exchange":"Euronext Paris"},"url":"https://www.cisotribune.com/companies/thales"},{"slug":"thoropass","name":"Thoropass","website":"https://www.thoropass.com/","primaryCategory":"compliance-automation","secondaryCategories":["third-party-risk"],"hq":{"city":"New York","country":"United States"},"founded":2019,"ownership":null,"url":"https://www.cisotribune.com/companies/thoropass"},{"slug":"threatconnect","name":"ThreatConnect","website":"https://threatconnect.com","primaryCategory":"threat-intelligence","secondaryCategories":[],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Dataminr","year":2025},"url":"https://www.cisotribune.com/companies/threatconnect"},{"slug":"tines","name":"Tines","website":"https://www.tines.com","primaryCategory":"soar","secondaryCategories":["ai-soc"],"hq":{"city":"Dublin","country":"Ireland"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/tines"},{"slug":"torq","name":"Torq","website":"https://torq.io","primaryCategory":"ai-soc","secondaryCategories":["soar"],"hq":{"city":"Tel Aviv","country":"Israel"},"founded":2020,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/torq"},{"slug":"trellix","name":"Trellix","website":"https://www.trellix.com","primaryCategory":"edr-xdr","secondaryCategories":[],"hq":null,"founded":2022,"ownership":{"type":"acquired","parent":"Symphony Technology Group","year":2022},"url":"https://www.cisotribune.com/companies/trellix"},{"slug":"trend-micro","name":"Trend Micro","website":"https://www.trendmicro.com","primaryCategory":"edr-xdr","secondaryCategories":["cnapp","email-security"],"hq":null,"founded":1988,"ownership":{"type":"public","ticker":"4704","exchange":"TSE"},"url":"https://www.cisotribune.com/companies/trend-micro"},{"slug":"truffle-security","name":"Truffle Security","website":"https://trufflesecurity.com","primaryCategory":"secrets-detection","secondaryCategories":["non-human-identity"],"hq":{"city":"San Francisco","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/truffle-security"},{"slug":"trulioo","name":"Trulioo","website":"https://www.trulioo.com","primaryCategory":"identity-verification","secondaryCategories":["fraud-prevention"],"hq":{"city":"Vancouver","country":"Canada"},"founded":2011,"ownership":null,"url":"https://www.cisotribune.com/companies/trulioo"},{"slug":"trustarc","name":"TrustArc","website":"https://trustarc.com","primaryCategory":"data-privacy","secondaryCategories":["ai-governance"],"hq":{"city":"San Francisco Bay Area","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/trustarc"},{"slug":"trustifi","name":"Trustifi","website":"https://trustifi.com","primaryCategory":"email-security","secondaryCategories":["dlp","collaboration-security","security-awareness-training"],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/trustifi"},{"slug":"trustwave","name":"Trustwave","website":"https://www.trustwave.com","primaryCategory":"mdr-managed-soc","secondaryCategories":["mssp"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"LevelBlue","year":2025},"url":"https://www.cisotribune.com/companies/trustwave"},{"slug":"txone-networks","name":"TXOne Networks","website":"https://www.txone.com","primaryCategory":"ot-ics-security","secondaryCategories":[],"hq":{"city":"Taipei","country":"Taiwan"},"founded":2019,"ownership":null,"url":"https://www.cisotribune.com/companies/txone-networks"},{"slug":"ultraviolet-cyber","name":"UltraViolet Cyber","website":"https://www.uvcyber.com","primaryCategory":"mdr-managed-soc","secondaryCategories":["pentest-services"],"hq":{"city":"McLean","country":"United States"},"founded":2023,"ownership":null,"url":"https://www.cisotribune.com/companies/ultraviolet-cyber"},{"slug":"upguard","name":"UpGuard","website":"https://www.upguard.com/","primaryCategory":"third-party-risk","secondaryCategories":["attack-surface-management","human-risk-management"],"hq":{"city":"Hobart","country":"Australia"},"founded":2012,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/upguard"},{"slug":"uptycs","name":"Uptycs","website":"https://www.uptycs.com","primaryCategory":"cnapp","secondaryCategories":["cwpp","cloud-detection-response"],"hq":{"city":"Waltham","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/uptycs"},{"slug":"valence-security","name":"Valence","website":"https://www.valencesecurity.com","primaryCategory":"saas-security","secondaryCategories":["non-human-identity","itdr"],"hq":null,"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/valence-security"},{"slug":"valimail","name":"Valimail","website":"https://www.valimail.com/","primaryCategory":"email-authentication","secondaryCategories":[],"hq":{"city":"San Francisco","country":"United States"},"founded":2015,"ownership":{"type":"acquired","parent":"DigiCert","year":2025},"url":"https://www.cisotribune.com/companies/valimail"},{"slug":"vectra-ai","name":"Vectra AI","website":"https://www.vectra.ai","primaryCategory":"ndr","secondaryCategories":["cloud-detection-response","itdr"],"hq":{"city":"San Jose","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/vectra-ai"},{"slug":"veeam","name":"Veeam","website":"https://www.veeam.com","primaryCategory":"backup-recovery","secondaryCategories":["dspm","incident-response"],"hq":{"city":"Seattle","country":"United States"},"founded":null,"ownership":{"type":"acquired","parent":"Insight Partners"},"url":"https://www.cisotribune.com/companies/veeam"},{"slug":"veracode","name":"Veracode","website":"https://www.veracode.com","primaryCategory":"sast","secondaryCategories":["dast","sca","software-supply-chain"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Thoma Bravo","year":2019},"url":"https://www.cisotribune.com/companies/veracode"},{"slug":"veriff","name":"Veriff","website":"https://www.veriff.com","primaryCategory":"identity-verification","secondaryCategories":["fraud-prevention"],"hq":{"city":"Tallinn","country":"Estonia"},"founded":2015,"ownership":null,"url":"https://www.cisotribune.com/companies/veriff"},{"slug":"versa-networks","name":"Versa Networks","website":"https://versa-networks.com","primaryCategory":"sase-sse","secondaryCategories":["firewall-ngfw"],"hq":null,"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/versa-networks"},{"slug":"veza","name":"Veza","website":"https://www.veza.com","primaryCategory":"iga","secondaryCategories":["ciem","non-human-identity"],"hq":{"city":"Los Gatos","country":"United States"},"founded":2020,"ownership":{"type":"acquired","parent":"ServiceNow","year":2026},"url":"https://www.cisotribune.com/companies/veza"},{"slug":"virtru","name":"Virtru","website":"https://www.virtru.com","primaryCategory":"encryption-key-management","secondaryCategories":["email-security","collaboration-security"],"hq":{"city":"Washington","country":"United States"},"founded":2012,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/virtru"},{"slug":"vulncheck","name":"VulnCheck","website":"https://vulncheck.com","primaryCategory":"threat-intelligence","secondaryCategories":["vulnerability-management"],"hq":{"city":"Lexington","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/vulncheck"},{"slug":"wallarm","name":"Wallarm","website":"https://www.wallarm.com/","primaryCategory":"api-security","secondaryCategories":["ai-model-agent-security","waf-waap"],"hq":{"city":"Austin","country":"United States"},"founded":null,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/wallarm"},{"slug":"watchguard","name":"WatchGuard Technologies","website":"https://www.watchguard.com","primaryCategory":"firewall-ngfw","secondaryCategories":["itdr","edr-xdr","iam-sso"],"hq":{"city":"Seattle","country":"United States"},"founded":null,"ownership":{"type":"acquired","parent":"Vector Capital","year":2022},"url":"https://www.cisotribune.com/companies/watchguard"},{"slug":"waterfall-security","name":"Waterfall Security Solutions","website":"https://waterfall-security.com","primaryCategory":"ot-data-transfer","secondaryCategories":["ot-ics-security"],"hq":null,"founded":2007,"ownership":null,"url":"https://www.cisotribune.com/companies/waterfall-security"},{"slug":"whistic","name":"Whistic","website":"https://www.whistic.com/","primaryCategory":"third-party-risk","secondaryCategories":[],"hq":{"city":null,"country":"United States"},"founded":2015,"ownership":null,"url":"https://www.cisotribune.com/companies/whistic"},{"slug":"witnessai","name":"WitnessAI","website":"https://witness.ai","primaryCategory":"ai-usage-security","secondaryCategories":["ai-firewall-guardrails","ai-governance"],"hq":{"city":"Mountain View","country":"United States"},"founded":2023,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/witnessai"},{"slug":"wiz","name":"Wiz","website":"https://www.wiz.io","primaryCategory":"cnapp","secondaryCategories":["cwpp","cloud-detection-response"],"hq":{"city":"New York","country":"United States"},"founded":2020,"ownership":{"type":"acquired","parent":"Google","year":2026},"url":"https://www.cisotribune.com/companies/wiz"},{"slug":"xage-security","name":"Xage Security","website":"https://xage.com","primaryCategory":"ot-ics-security","secondaryCategories":["ztna"],"hq":{"city":"Palo Alto","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/xage-security"},{"slug":"xm-cyber","name":"XM Cyber","website":"https://xmcyber.com","primaryCategory":"ctem","secondaryCategories":["bas-pentest-platforms"],"hq":{"city":"Herzliya","country":"Israel"},"founded":null,"ownership":{"type":"acquired","parent":"Schwarz Group","year":2021},"url":"https://www.cisotribune.com/companies/xm-cyber"},{"slug":"yubico","name":"Yubico","website":"https://www.yubico.com","primaryCategory":"passwordless-mfa","secondaryCategories":[],"hq":{"city":"Stockholm","country":"Sweden"},"founded":2007,"ownership":{"type":"public","ticker":"YUBICO","exchange":"Nasdaq First North Growth Market Stockholm"},"url":"https://www.cisotribune.com/companies/yubico"},{"slug":"zenity","name":"Zenity","website":"https://zenity.io","primaryCategory":"ai-model-agent-security","secondaryCategories":["ai-governance"],"hq":null,"founded":2021,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/zenity"},{"slug":"zero-networks","name":"Zero Networks","website":"https://zeronetworks.com","primaryCategory":"microsegmentation","secondaryCategories":["ztna"],"hq":{"city":null,"country":"Israel"},"founded":2019,"ownership":{"type":"private"},"url":"https://www.cisotribune.com/companies/zero-networks"},{"slug":"zerofox","name":"ZeroFox","website":"https://www.zerofox.com","primaryCategory":"digital-risk-protection","secondaryCategories":["threat-intelligence","attack-surface-management"],"hq":null,"founded":null,"ownership":{"type":"acquired","parent":"Haveli Investments","year":2024},"url":"https://www.cisotribune.com/companies/zerofox"},{"slug":"zimperium","name":"Zimperium","website":"https://www.zimperium.com","primaryCategory":"mobile-security","secondaryCategories":[],"hq":{"city":"Dallas","country":"United States"},"founded":null,"ownership":null,"url":"https://www.cisotribune.com/companies/zimperium"}]}