Computed report · from the vendor directory
The security vendor landscape, by the record
520 vendor records · Updated · CSV download · free to cite with attribution
The CISO Tribune vendor directory holds 520 security vendor records, filed under 85 of the taxonomy's 87 categories in 17 groups. 159 records carry a founding year (median 2015, from 1847 to 2026), 226 a headquarters country (22 countries, 175 in the United States) and 214 an ownership type (112 privately held, 40 publicly listed, 62 owned by another company). The records list 1895 product lines, 3.6 per record, and 356 of them have been filled out from the company's own pages.
Every number on this page is counted by code from the records in the vendor directory, each of which cites the company's own pages or a tier A or B source for every fact it carries. A vendor is counted once, under the category it is filed in first; its other categories are counted apart. A record states a founding year, a headquarters or an owner only when a cited page does, so the counts below are of what the record holds, and the missing values are shown as missing.
By taxonomy group
The directory files each vendor under one primary category and up to three secondary categories from our own taxonomy: 17 groups, 87 categories, 85 of them with at least one primary filing and 87 with any filing.
Source: CISO Tribune vendor directory, 520 records on November 5, 2026 · Also on record, in the table below: Security awareness and human risk 11, Backup and cyber resilience 10, Browser security 5. A vendor counts once, under its primary category.
| Label | vendors |
|---|---|
| Security operations | 73 |
| Consultancies and managed services | 54 |
| Application security | 50 |
| Identity security | 44 |
| Endpoint security | 37 |
| Network security | 34 |
| Exposure management | 33 |
| Data security and privacy | 32 |
| AI security | 29 |
| Governance, risk and compliance | 29 |
| Cloud security | 26 |
| Fraud and identity verification | 20 |
| OT, ICS and IoT security | 17 |
| Email and collaboration security | 16 |
Founding years
159 of 520 records state when the company was founded: the median founding year is 2015, the earliest 1847 and the latest 2026. 361 records carry no founding year.
Source: CISO Tribune vendor directory, 520 records on November 5, 2026 · 159 of 520 records carry a founding year; 21 founded before 2003 are in the decade table.
| Label | vendors |
|---|---|
| 2003 | 3 |
| 2004 | 0 |
| 2005 | 5 |
| 2006 | 1 |
| 2007 | 4 |
| 2008 | 3 |
| 2009 | 5 |
| 2010 | 2 |
| 2011 | 5 |
| 2012 | 9 |
| 2013 | 8 |
| 2014 | 9 |
| 2015 | 12 |
| 2016 | 8 |
| 2017 | 7 |
| 2018 | 7 |
| 2019 | 8 |
| 2020 | 13 |
| 2021 | 8 |
| 2022 | 6 |
| 2023 | 9 |
| 2024 | 5 |
| 2025 | 0 |
| 2026 | 1 |
| Decade founded | Vendors |
|---|---|
| 1840s | 1 |
| 1910s | 1 |
| 1960s | 1 |
| 1970s | 1 |
| 1980s | 2 |
| 1990s | 5 |
| 2000s | 31 |
| 2010s | 75 |
| 2020s | 42 |
Headquarters
226 records carry a headquarters country, across 22 countries; 294 carry none. One spelling per country ("USA" counts as United States).
Source: CISO Tribune vendor directory, 520 records on November 5, 2026 · 226 records carry a headquarters country; 8 more countries are in the table below; 294 records carry none.
| Label | vendors |
|---|---|
| United States | 175 |
| United Kingdom | 10 |
| Israel | 8 |
| France | 4 |
| Ireland | 4 |
| Canada | 3 |
| Sweden | 3 |
| Denmark | 2 |
| Finland | 2 |
| Netherlands | 2 |
| Switzerland | 2 |
| Australia | 1 |
| Belgium | 1 |
| Estonia | 1 |
| Country | Vendors |
|---|---|
| United States | 175 |
| United Kingdom | 10 |
| Israel | 8 |
| France | 4 |
| Ireland | 4 |
| Canada | 3 |
| Sweden | 3 |
| Denmark | 2 |
| Finland | 2 |
| Netherlands | 2 |
| Switzerland | 2 |
| Australia | 1 |
| Belgium | 1 |
| Estonia | 1 |
| Germany | 1 |
| India | 1 |
| Japan | 1 |
| New Zealand | 1 |
| Norway | 1 |
| Romania | 1 |
| Spain | 1 |
| Taiwan | 1 |
Ownership and funding
112 records are privately held, 40 publicly listed and 62 owned by another company; 306 carry no ownership. A funding round is recorded only for a privately held, independent vendor whose latest named round a tier A or B source states: 4 records carry one.
Source: CISO Tribune vendor directory, 520 records on November 5, 2026 · Ownership is recorded from the company's own pages or a tier A or B source; a record with no such source carries none.
| Label | vendors |
|---|---|
| Privately held | 112 |
| Publicly listed | 40 |
| Owned by another company | 62 |
| Not recorded | 306 |
| Vendor | Latest recorded round | Source date |
|---|---|---|
| Abnormal AI | Series D | August 6, 2024 |
| Arctic Wolf | Series F | July 13, 2021 |
| Cyera | Series G | September 22, 2026 |
| Snyk | Series G | December 13, 2022 |
How much of each record is filled
A field counts when the record carries a usable value for it. 356 of 520 records have had the company's own pages read by the enrichment desk, which fills products, news, review-platform listings and "Who it fits".
Source: CISO Tribune vendor directory, 520 records on November 5, 2026 · A field counts when the record carries a usable value for it; every value rests on a source cited in the record.
| Label | % of records |
|---|---|
| Products | 99 |
| Headquarters | 43 |
| Founding year | 31 |
| Ownership | 41 |
| Dated news | 38 |
| Who it fits | 48 |
| Review platforms | 43 |
| Named customers | 4 |
| Funding round | 1 |
| Own pages read | 68 |
| Field | Records | Share |
|---|---|---|
| Products | 517 | 99% |
| Headquarters | 226 | 43% |
| Founding year | 159 | 31% |
| Ownership | 214 | 41% |
| Dated news | 196 | 38% |
| Who it fits | 249 | 48% |
| Review platforms | 223 | 43% |
| Named customers | 21 | 4% |
| Funding round | 4 | 1% |
| Own pages read | 356 | 68% |
Product lines per record
1895 product lines across 520 records, 3.6 per record; a product line is one the company names on its own pages, with a one-line description in our words.
Source: CISO Tribune vendor directory, 520 records on November 5, 2026 · 1895 product lines across 520 records, 3.6 per record.
| Label | vendors |
|---|---|
| 0 products | 3 |
| 1 product | 98 |
| 2 products | 69 |
| 3 products | 88 |
| 4 products | 79 |
| 5 products | 54 |
| 6 products | 107 |
| 7 products | 9 |
| 8 products | 13 |
Every category and its vendors
Every vendor on record, once, under its primary category, alphabetical, with a link to its record. A category's secondary count is the number of other vendors that also file there.
Network security 34 primary · 54 any
- Firewalls and NGFW 9 primary · 7 secondary
- Check Point Software Technologies, Cisco, Ecessa Corporation, Fortinet, Huawei, Juniper Networks, Palo Alto Networks, SonicWall, WatchGuard Technologies
- SASE and SSE 8 primary · 10 secondary
- Aryaka, AT&T, Cato Networks, Dispersive Stealth Networking, Hewlett Packard Enterprise, Netskope, Skyhigh Security, Versa Networks
- Zero trust network access 2 primary · 13 secondary
- Appgate, Dispel
- Network detection and response 5 primary · 3 secondary
- Arista Networks, Corelight, Darktrace, ExtraHop, Vectra AI
- Microsegmentation 3 primary · 2 secondary
- Elisity, Illumio, Zero Networks
- Network access control 1 primary · 4 secondary
- Forescout
- DDoS protection 3 primary · 7 secondary
- A10 Networks, Cloudflare, NETSCOUT
- DNS security 1 primary · 2 secondary
- doxx.net
- Network visibility and traffic brokering 2 primary · 5 secondary
- Gigamon, SolarWinds
Endpoint security 37 primary · 62 any
- EDR and XDR 12 primary · 17 secondary
- Bitdefender, Broadcom, CrowdStrike, Kaspersky, Malwarebytes, Microsoft, Nokia, SentinelOne, Sophos, Trellix, Trend Micro, Xcitium
- Endpoint protection platforms 8 primary · 4 secondary
- Deep Instinct, ESET, F-Secure, Gen Digital, Halcyon, McAfee, Morphisec, WithSecure
- Mobile security 6 primary · 10 secondary
- BlackBerry, iVerify, Lookout, NowSecure, Protectt.ai, Zimperium
- Endpoint management and application control 6 primary · 6 secondary
- Automox, HCLSoftware, Ivanti, Jamf, Tanium, ThreatLocker
- Firmware and device supply chain security 5 primary · 3 secondary
- Absolute Security, Eclypsium, Finite State, HP, NXP
Identity security 44 primary · 86 any
- Workforce IAM and SSO 5 primary · 18 secondary
- Amazon Web Services, JumpCloud, Okta, RSA Security, SecurEnvoy
- Privileged access management 8 primary · 11 secondary
- Apono, BeyondTrust, Britive, CyberArk, Delinea, HashiCorp, P0 Security, SSH Communications Security
- Identity governance and administration 6 primary · 4 secondary
- ConductorOne, One Identity, Orchid Security, SailPoint, Saviynt, Veza
- Customer identity and access management 2 primary · 3 secondary
- Auth0, Descope
- Identity threat detection and response 3 primary · 19 secondary
- Permiso, Semperis, Silverfort
- Passwordless authentication and authenticators 6 primary · 7 secondary
- Beyond Identity, HYPR, Oloid, OneSpan, Secret Double Octopus, Yubico
- Password and secrets vaults for people 3 primary · 3 secondary
- 1Password, Bitwarden, LastPass
- Non-human identity security 8 primary · 28 secondary
- Aembit, Akeyless, Astrix Security, Cygrid, Infisical, NewCore, Oasis Security, Token Security
- Machine identity and PKI 3 primary · 7 secondary
- Entrust, Keyfactor, Sectigo
Cloud security 26 primary · 50 any
- Cloud-native application protection (CNAPP) 10 primary · 10 secondary
- Aqua Security, Cyscale, Orca Security, Plerion, RAD Security, Sweet Security, Sysdig, Uptycs, Upwind, Wiz
- Cloud security posture management 0 primary · 6 secondary
- No vendor filed here as a primary category yet.
- Cloud identity entitlements (CIEM) 2 primary · 3 secondary
- Act Security, Sonrai
- Cloud detection and response 4 primary · 9 secondary
- Miggo, Mitiga, Skyhawk Security, Stream.Security
- SaaS security posture 5 primary · 8 secondary
- AppOmni, Grip Security, Obsidian Security, Spin.AI, Valence
Application security 50 primary · 73 any
- Static application security testing 8 primary · 14 secondary
- AISLE, Checkmarx, GitHub Advanced Security, GitLab, Kiuwan, OpenText, Semgrep, Veracode
- Dynamic application security testing 4 primary · 12 secondary
- Beagle Security, Detectify, Invicti, StackHawk
- Software composition analysis 4 primary · 16 secondary
- Black Duck, Mend.io, Snyk, Sonatype
- Application security posture management 6 primary · 2 secondary
- Apiiro, Arnica, Cycode, Legit Security, OX Security, Phoenix Security
- API security 9 primary · 15 secondary
- 42Crunch, Cequence Security, Data Theorem, Escape, Levo.ai, Pynt, Salt Security, Traceable AI, Wallarm
- Software supply chain security 7 primary · 15 secondary
- Anchore, Archipelo, Chainguard, JFrog, RapidFort, Red Hat, Socket
- Secrets detection 2 primary · 7 secondary
- GitGuardian, Truffle Security
- Application shielding and RASP 5 primary · 2 secondary
- Appdome, Contrast Security, Guardsquare, PreEmptive Solutions, Promon
Data security and privacy 32 primary · 65 any
- Data loss prevention 4 primary · 23 secondary
- Cyberhaven, Fasoo, Forcepoint, Next DLP
- Data security posture management 9 primary · 10 secondary
- Arexdata, BigID, Concentric AI, Cyera, IBM, Polymer, Securiti, Sentra, Symmetry Systems
- Encryption, tokenization and key management 8 primary · 12 secondary
- Baffle, Fortanix, General Dynamics Mission Systems, Protegrity, Skyflow, StratoKey, Thales, Virtru
- Post-quantum cryptography 7 primary · 6 secondary
- CryptoNext Security, EigenQ, IDEMIA, Patero, PQShield, QuSecure, SandboxAQ
- Privacy management 4 primary · 6 secondary
- Ketch, OneTrust, Osano, TrustArc
Email and collaboration security 16 primary · 26 any
- Email security 11 primary · 10 secondary
- Abnormal AI, Barracuda Networks, Cofense, Egress, Hornetsecurity, IRONSCALES, Material Security, Mimecast, Proofpoint, Sublime Security, Trustifi
- Email authentication and DMARC 5 primary · 2 secondary
- dmarcian, EasyDMARC, Red Sift, Sendmarc, Valimail
- Collaboration app security 0 primary · 4 secondary
- No vendor filed here as a primary category yet.
Security operations 73 primary · 126 any
- SIEM 12 primary · 14 secondary
- Alphabet, Elastic, Exabeam, Graylog, Guardsix, Gurucul, Hunters, RunReveal, Securonix, Splunk, Stellar Cyber, Sumo Logic
- SOAR and security automation 3 primary · 11 secondary
- D3 Security, Swimlane, Tines
- AI SOC analysts 9 primary · 14 secondary
- 7AI, Anomali, Dropzone AI, Kai, Mate Security, Mave, Panther, Prophet Security, Torq
- Security data lakes and pipelines 3 primary · 6 secondary
- Cribl, Devo, Mars Security
- Threat intelligence 19 primary · 18 secondary
- Cyble, Cyware, Dataminr, EclecticIQ, Filigran, Flashpoint, GreyNoise, Group-IB, Hold Security, LLC, Indra Group, Intel 471, Overwatch, Parsons, QuoIntelligence, Recorded Future, SOCRadar, Tego Cyber, ThreatConnect, VulnCheck
- MDR and managed SOC 22 primary · 28 secondary
- Agile Defense, Arctic Wolf, Binary Defense, Blackpoint Cyber, Critical Start, Deepwatch, DefenseStorm, eSentire, Expel, Guardz, Inversion6, Judy Security, Kyndryl, Leonardo, Quorum Cyber, Red Canary, Secureworks, Tenfold Security, Third Wave Innovations, Trustwave, UltraViolet Cyber, UnderDefense
- Incident response and forensics 4 primary · 26 secondary
- BreachRx, CYPFER, Kroll, Sygnia
- Deception technology 1 primary
- Thinkst Canary
Exposure management 33 primary · 80 any
- Vulnerability management 4 primary · 27 secondary
- ConnectSecure, Dynatrace, Qualys, Tenable
- External attack surface management 3 primary · 22 secondary
- Censys, CyCognito, Hadrian
- Cyber asset inventory (CAASM) 2 primary · 2 secondary
- Axonius, runZero
- Breach simulation and automated pen-testing 8 primary · 7 secondary
- Armadin, Assail, Cymulate, Fleuret AI, Horizon3.ai, Pentera, Picus Security, SafeBreach
- Exposure prioritisation and CTEM 11 primary · 8 secondary
- AttackIQ, Brinqa, Guardare, HackerOne, Nagomi Security, Outpost24, Reach Security, Seemplicity, Tamnoon, XM Cyber, Zafran Security
- Bug bounty and crowdsourced testing 3 primary · 1 secondary
- Bugcrowd, Synack, YesWeHack
- Digital risk protection 2 primary · 15 secondary
- BlackCloak, ZeroFox
OT, ICS and IoT security 17 primary · 32 any
- OT and ICS security 10 primary · 16 secondary
- Claroty, Elbit Systems, Honeywell, Indurex, Northrop Grumman, Nozomi Networks, Rockwell Automation, Siemens, TXOne Networks, Xage Security
- IoT and medical device security 6 primary · 5 secondary
- Armis, Asimily, Cynerio, Ordr, Phosphorus Cybersecurity, Subex
- Unidirectional gateways and secure transfer 1 primary · 3 secondary
- Waterfall Security Solutions
Governance, risk and compliance 29 primary · 48 any
- GRC and integrated risk platforms 8 primary · 6 secondary
- Anecdotes, Archer, Cynomi, LogicGate, MetricStream, Onspring, Optro, ServiceNow
- Compliance automation 9 primary · 15 secondary
- Apptega, Copla, Drata, Hyperproof, Knox Systems, RegScale, Secureframe, Sprinto, Thoropass
- Third-party risk and security ratings 9 primary · 25 secondary
- Bitsight, Black Kite, iCOUNTER, Panorays, Prevalent, RiskRecon, SecurityScorecard, UpGuard, Whistic
- Cyber risk quantification 3 primary · 3 secondary
- CyberSaint, Kovrr, Safe Security
Security awareness and human risk 11 primary · 28 any
- Security awareness training 4 primary · 12 secondary
- Adaptive Security, KnowBe4, NINJIO, SoSafe
- Human risk management 4 primary · 7 secondary
- Fable Security, Hoxhunt, Keepnet Labs, Living Security
- Insider risk management 3 primary · 6 secondary
- Code42, DTEX Systems, Teramind
Fraud and identity verification 20 primary · 36 any
- Identity verification 10 primary · 7 secondary
- 1Kosmos, AU10TIX, Incode, Jumio, LexisNexis Risk Solutions, Nametag, Persona, Socure, Trulioo, Veriff
- Fraud prevention 6 primary · 18 secondary
- BioCatch, Feedzai, Forter, Sardine, Sift, TransUnion
- Bot and abuse management 4 primary · 6 secondary
- Arkose Labs, Blackwall, DataDome, HUMAN Security
Browser security 5 primary · 8 any
- Enterprise browsers 1 primary · 1 secondary
- Island
- Browser protection extensions 3 primary · 1 secondary
- Keep Aware, Seraphic Security, SquareX
- Remote browser isolation 1 primary · 2 secondary
- Menlo Security
AI security 29 primary · 80 any
- AI model and agent security 15 primary · 41 secondary
- AIShield, Alice, Asymptote Labs, Enkrypt AI, HiddenLayer, Knostic, Mindgard, Noma Security, Onyx Security, Pangea, Promptfoo, Reco, SplxAI, Straiker, Zenity
- AI firewalls and guardrails 5 primary · 13 secondary
- Impart Security, Lakera, Lasso Security, Operant AI, Prompt Security
- Workforce AI usage security 4 primary · 19 secondary
- Aurascape, Harmonic Security, Pluto Security, WitnessAI
- AI governance 5 primary · 25 secondary
- Cranium, Credo AI, Holistic AI, Singulr, Transcend
Backup and cyber resilience 10 primary · 16 any
- Backup and cyber recovery 9 primary · 5 secondary
- Acronis, Cohesity, Commvault, Druva, HYCU, Keepit, Object First, Rubrik, Veeam
- Directory backup and recovery 1 primary · 3 secondary
- Cayosoft
Consultancies and managed services 54 primary · 74 any
- Managed security service providers 13 primary · 16 secondary
- Blue Mantis, CISO Global, Cyderes, Deutsche Telekom, Forte Technologies, Fortified Health Security, Integrity360, Orange Cyberdefense, Proximus NXT, Rackspace Technology, Telia, UST, Vodafone
- Security consulting and advisory 32 primary · 19 secondary
- Accenture, Airbus, Atos, Booz Allen Hamilton, BSI, Capgemini, CGI, Coalfire, CyberTrust Consulting, Cybolt, DXC Technology, EverOak Solutions, Fujitsu, Grant Thornton, GuidePoint Security, I-TRACING, IANS, ICF, Infosys, KPMG, Kudelski Security, Leidos, NGC Risk, NTT DATA, Optiv, Peraton, PwC, SAIC, Tata Consultancy Services, Trail of Bits, Unisys, Wipro
- Penetration testing and red team services 5 primary · 22 secondary
- Bishop Fox, Cobalt, Millennium Corporation, NCC Group, REDLattice
- Security resellers and integrators 4 primary · 1 secondary
- AccessIT Group, Freeit Data Solutions, General Dynamics Information Technology, NCS
How this is counted
Counted: the 520 vendor records the directory publishes on November 5, 2026, one file each, read by the same loader that builds the company pages; records on hold or awaiting verification are left out. Group and category sizes count each vendor once under its primary category, with secondary filings counted apart. Founding year, headquarters, ownership, funding round, product lines, named customers, dated news and review-platform listings are each counted when the record carries a usable value by the loader's own rules; every such value cites a page the desk read. Countries are counted under one spelling. The median founding year is the middle value (the lower of the two middles for an even count). "Updated" is the newest date any record carries, enriched or recorded, never the day the page was built.
Missing: 361 records state no founding year, 294 no headquarters, 306 no ownership and 164 have not yet had the company's own pages read, so every share here is of what is recorded, not of the companies. The directory holds the vendors the scouts and tips have reached, so it is a record, not a census of the market; the page carries no revenue, headcount, market-size or share figures, because no record does. Counts recompute on every deploy; the CSV below carries one row per vendor with the same fields.
Frequently asked questions
- How many security vendors are on the CISO Tribune record?
- 520 as of November 5, 2026, each with its own record page under /companies, filed under 85 of the taxonomy's 87 categories in 17 groups. The count is of records the directory publishes; a vendor the scouts have not reached is not on it.
- Which taxonomy group holds the most vendor records?
- Security operations, with 73 vendors filed there by primary category (126 counting secondary categories). A vendor is counted once, under its primary category; the table on this page lists every group and category with its count.
- Where are the vendors on record headquartered?
- 226 of the 520 records carry a headquarters country, across 22 countries; 175 are in the United States. 294 records carry no headquarters yet, because no page the desk read stated one; they are counted apart, never guessed.
- How is a vendor's founding year or ownership established?
- From the company's own pages or a tier A or B source cited in the record, each with the passage it rests on. 159 records carry a founding year, 214 an ownership type and 4 a latest funding round; the rest state nothing for that field.
Data: vendor-landscape.csv (one row per vendor, the columns above) and vendors.json (the directory with its taxonomy). Cite as "CISO Tribune, The security vendor landscape, by the record" with a link. A vendor missing from the record? Send a tip.
Related guides
Cyber Threat Intelligence: How to Build a Program Leaders Use
Build a cyber threat intelligence program leaders use: write requirements tied to decisions, deliver to named readers, and measure decisions changed.