CISO Tribune

Vendor comparison · 2 companies

Cognition vs RAD Security

Cognition sells Devin, an agent that plans, writes, tests and ships production code on its own, working inside a customer's codebase and the tools its team already uses. RAD Security sells AI Workers that investigate, triage, and act on threats across a customer's entire stack. CISO Tribune files both under Vulnerability management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Cognition
  • RAD Security
Cognition vs RAD Security: Products, Customers and Funding Compared
CognitionCognition sells Devin, an agent that plans, writes, tests and ships production code on its own, working inside a customer's codebase and the tools its team already uses.cognition.comRAD SecurityRAD Security sells AI Workers that investigate, triage, and act on threats across a customer's entire stack.radsecurity.ai
What it sells
  • Devin[1][2][4][5][6][11][12]Devin plans, writes, tests and ships production code on its own.
  • Devin Security[1][4][5][6][12]A set of Devin features, some of which use cyber-capable models or third-party models restricted by region.
  • Devin Security Swarm[4][5]Devin Security Swarm finds, validates and remediates code vulnerabilities autonomously.
  • RAD Bot[6][7][8][9]An AI agent with direct access to a customer's live environment data.
  • RADQL[9][10][11]A SQL-like query language built for security data.
  • AgentKeeper[2][14]An open-source tool that maps a cloud identity attack surface.
  • Evidence Room[12]Aggregates vulnerabilities, misconfigurations, runtime threats, and attack paths into one prioritized view.
  • AI Insights[13]Continuously analyzes a cloud-native environment and surfaces what matters most.
  • Explore[6][10]Asset discovery and investigation across a Kubernetes environment, powered by RAD Bot.
  • Dashboards[11]Pre-built and customizable dashboards powered by RADQL.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Privately held[6][13][14]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 28, 2026Corridor is joining Cognition, with plans to take Devin Security further.[12]
  • September 23, 2026Cognizant and Cognition announced production results from autonomous AI engineering at Odyssey Logistics and a set of joint offerings built on Cognition's Devin.[11]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Cognition's platform terms offer its services to individuals or entities who register for and use them. For vulnerability remediation, Cognition's pages describe federal agencies as needing to close a backlog that scanners and manual triage were never built to address, and Cognition has a federal team. The region-restricted Devin Security features are available to enterprise customers only, with availability confirmed as part of contracting. For certain services, customers can deploy the data plane in their own cloud service provider account.RAD Security says RADQL lets security teams explore, analyze, and visualize cloud security data. The Evidence Room is described for people who are triaging alerts, remediating issues, or preparing for an audit. RAD Security provides audit-ready compliance documentation for CIS, HIPAA, and NSA Hardening frameworks, among others, and a weekly summary for leadership.
Last verified
November 11, 2026October 21, 2026

Where they overlap

  • Cognition and RAD Security are both filed under Vulnerability management.

Where they differ, field by field

  • Cognition's primary category is Vulnerability management; RAD Security's is Cloud-native application protection (CNAPP).
  • RAD Security is also filed under Cloud workload protection and Cloud security posture management.
  • Cognition lists Devin, Devin Security and Devin Security Swarm. RAD Security lists RAD Bot, RADQL, AgentKeeper, Evidence Room, AI Insights and 2 more.
  • Cognition is privately held.

What it sells: Cognition

What Devin does[1][2][4][5][6][11][12]
Devin plans, writes, tests and ships production code on its own, working inside a customer's codebase and the tools its team already uses. Devin validates that vulnerabilities are exploitable at runtime and ships remediation PRs.
What Devin Security does[1][4][5][6][12]
Cognition applies a regional availability policy to the Devin Security features that use cyber-capable models or third-party models restricted by region. The regional policy does not apply to Devin Security as a whole, and other Devin features are not affected by it. The region-restricted Devin Security features are available to enterprise customers only, and availability is confirmed as part of contracting.
What Devin Security Swarm does[4][5]
Devin Security Swarm is a Cognition offering to find, validate and remediate code vulnerabilities autonomously. Security Swarm is powered by an approach Cognition calls Agentic MapReduce, and Security Swarm reasons across an entire codebase. Devin Security Swarm runs parallel agents that trace data flows, validate what is exploitable at runtime and ship reviewed remediation PRs.

What it sells: RAD Security

What RAD Bot does[6][7][8][9]
RAD Bot queries a customer's live environment, correlates the results, and delivers findings with full source attribution. RAD Bot connects to Jira, Slack, ServiceNow, and email so users can escalate, assign, and remediate without leaving the conversation. RAD Bot workflows run multi-step investigations automatically and deliver results to an inbox, Slack, email, or ticketing system.
What RADQL does[9][10][11]
RADQL is a SQL-like query language built for security data. RADQL searches containers, correlates vulnerabilities, analyzes runtime behavior, and investigates incidents. RAD Bot can generate RADQL queries from natural language descriptions. RADQL results can be exported to CSV or JSON.
What AgentKeeper does[2][14]
AgentKeeper is RAD Security's open-source tool that maps a cloud identity attack surface. AgentKeeper visualizes IAM permissions, detects over-privileged roles, and uncovers hidden access paths.
What Evidence Room does[12]
The Evidence Room aggregates vulnerabilities, misconfigurations, runtime threats, and attack paths into a single prioritized view. Findings in the Evidence Room are automatically mapped to compliance frameworks such as CIS, SOC 2, PCI-DSS, and NIST. Findings flow into existing tools so that users can create tickets, alert teams, and export to a SIEM.
What AI Insights does[13]
AI Insights continuously analyzes a cloud-native environment and surfaces what matters most. Every insight is categorized so that issues route to the right team with the right context. Rankings are based on exploitability, blast radius, business context, and attack path relevance.
What Explore does[6][10]
Explore is powered by RAD Bot and the same query engine behind every feature on the platform. RAD Security's sensors continuously discover and track every asset in a Kubernetes environment, including containers, images, workloads, network connections, and process executions.
What Dashboards does[11]
RAD Security dashboards visualize security posture, infrastructure, and compliance data with pre-built templates, flexible widgets, and real-time updates powered by RADQL. Dashboards pull from Kubernetes, cloud, runtime, and external integrations.

Questions about Cognition and RAD Security

What do Cognition and RAD Security sell?
Cognition sells Devin, Devin Security and Devin Security Swarm. RAD Security sells RAD Bot, RADQL, AgentKeeper, Evidence Room, AI Insights and 2 more.
Are Cognition and RAD Security in the same category?
They share Vulnerability management. Cognition's primary category is Vulnerability management and RAD Security's is Cloud-native application protection (CNAPP).
Who owns Cognition and RAD Security?
Cognition is privately held.
Who are Cognition and RAD Security sold to?
Cognition's platform terms offer its services to individuals or entities who register for and use them. RAD Security says RADQL lets security teams explore, analyze, and visualize cloud security data.
What have Cognition and RAD Security announced recently?
October 28, 2026: Corridor is joining Cognition, with plans to take Devin Security further.

About Cognition

Cognition sells Devin, an agent that plans, writes, tests and ships production code on its own, working inside a customer's codebase and the tools its team already uses. Cognition builds tools for software creation, stating that software shapes nearly every aspect of modern life. Cognition describes engineers operating more like architects, strategizing, designing systems and focusing on problem solving, while agents handle the repetitive engineering work. Cognition's services generate or return code, suggestions, completions, responses, results and actions based on the input that customers and their authorized users provide. Cognition's platform terms govern use of the Cognition Platform and other software offerings. FrontierCode is a Cognition benchmark that measures whether a model writes code that a maintainer would actually merge. FrontierCode combines custom rubrics, verifiers and tests to check for correctness, test quality, scope discipline, style and adherence to codebase standards.[1][2][3]

Devin Security Swarm is a Cognition offering to find, validate and remediate code vulnerabilities autonomously. Security Swarm is powered by an approach Cognition calls Agentic MapReduce, and Security Swarm reasons across an entire codebase. Devin validates that vulnerabilities are exploitable at runtime and ships remediation PRs. Devin Security Swarm runs parallel agents that reason across an entire codebase, tracing data flows, validating what is exploitable at runtime and shipping reviewed remediation PRs. Devin works end to end, from a clearinghouse advisory to a shipped, reviewed fix.[4][5]

The White House's Gold Eagle Initiative and CISA's BOD 26-04 have turned vulnerability remediation into a binding order to find, prove and fix vulnerabilities on a 72-hour clock. Cognition states that federal agencies must now close a backlog that scanners and manual triage were never built to address. Cognition has a federal team.[5]

Cognition applies a regional availability policy to the Devin Security features that use cyber-capable models or third-party models restricted by region. The regional policy for Devin Security does not apply to Devin Security as a whole, and other Devin features are not affected by it. The providers of those models make them available only in certain countries and regions, and Cognition applies the same list to the Devin Security features that use them. For the region-restricted Devin Security features, territories and dependencies of a listed country are supported, for example Puerto Rico as a territory of the United States. The region-restricted Devin Security features are available to enterprise customers only, and availability is confirmed as part of contracting. Cognition may block access to the region-restricted Devin Security features when end users of qualifying customers attempt to reach them from unsupported regions. All use of Cognition products and services remains subject to the Acceptable Use Policy, the applicable terms of service and applicable export control and sanctions laws.

Cognition's services are delivered as a software-as-a-service offering. For certain services, the data plane can be deployed either in the customer's own cloud service provider account or in an account controlled by Cognition. A Master Services Agreement, together with any applicable Order Form, governs the relationship between Cognition AI, Inc. and the customer. Some customers may have licensed Cognition's services from Exafunction, Inc., unless they have received notice that the license was assigned to Cognition AI, Inc. Under the Master Services Agreement, each customer is responsible for evaluating whether output is appropriate for its use case, including where human review is appropriate, before using or sharing it.[3][7][8]

Cognition maintains a documented security program based on security frameworks such as SOC 2 Type II and ISO 27001. Cognition has implemented a formal information security management system. Privileged access to Cognition's software services is reviewed at least quarterly and removed promptly upon termination of employment. Cognition runs a third party risk management program that assesses the security compliance of vendors, contractors and subprocessors. Monitoring and logging technology is used to help detect and prevent unauthorized access attempts to Cognition's network and equipment. Cognition's cloud service datacenters and on-premise datacenters are reviewed regularly for compliance with ISO 27001 and SOC 2, as applicable. Network-level isolation and other network security controls separate Cognition's development and production environments.[7]

Cognition's service level agreement covers service availability and support when it is expressly included in an Order Form or referenced in a signed agreement with Cognition. Under its service level agreement, Cognition commits to System Availability of at least 99% during each calendar month of the term. Cognition's headquarters are in San Francisco, with a growing global presence across New York, Austin, Washington D.C., London, Singapore and Japan. Cognition states that it has raised over $3.5B from Founders Fund, Lux Capital, 8VC, Bain Capital Ventures and other investors.[1][3][8][9]

Cognition on the record

Sources

Cognition full record

  1. [1]cognition.comCognition · cognition.com · undated page, accessed November 11, 2026 · Tier A
  2. [2]CognitionCognition · undated page, accessed November 12, 2026 · Tier A
  3. [3]Platform Terms of Service | CognitionCognition · undated page, accessed November 12, 2026 · Tier A
  4. [4]Devin Security Swarm Launch | CognitionCognition · undated page, accessed November 12, 2026 · Tier A
  5. [5]Gold Eagle Ready: Closing Federal Vulnerabilities within 72 Hours with Devin Security Swarm | CognitionCognition · undated page, accessed November 12, 2026 · Tier A
  6. [6]Devin Security Supported Regions | CognitionCognition · undated page, accessed November 12, 2026 · Tier A
  7. [7]Cognition Security | CognitionCognition · undated page, accessed November 12, 2026 · Tier A
  8. [8]Master Services Agreement | CognitionCognition · undated page, accessed November 12, 2026 · Tier A
  9. [9]Service Level Agreement | CognitionCognition · undated page, accessed November 12, 2026 · Tier A
  10. [10]About | CognitionCognition · undated page, accessed November 12, 2026 · Tier A
  11. [11]Cognizant and Cognition put autonomous AI engineering into production at Odyssey Logistics, with a 37 percent net cost savingPR Newswire · published September 23, 2026 · Tier A
  12. [12]Blog | CognitionCognition · published October 28, 2026 · Tier A
  13. [13]Deep Cognition Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 12, 2026 · Tier C
  14. [14]Cognition Reviews, Ratings & Features 2026Gartner Peer Insights · undated page, accessed November 12, 2026 · Tier C

RAD Security full record

  1. [1]Female foundersRAD Security · radsecurity.ai · published April 29, 2024 · Tier A
  2. [2]radsecurity.aiRAD Security · radsecurity.ai · undated page, accessed October 21, 2026 · Tier A
  3. [3]PressRAD Security · radsecurity.ai · undated page, accessed October 21, 2026 · Tier A
  4. [4]AI-Native Cloud Security Platform | RAD Security | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]Stop Managing Alerts. Start Running Security. | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Explore — Asset Discovery & Investigation | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]Ask RAD — AI Security Assistant | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]Knowledge Base — Searchable Security Knowledge | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]RADQL — Security Query Language | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]RADQL Engine — Advanced Security Analytics | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Security Dashboards — Real-Time Visibility | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Evidence Room — Unified Security Findings | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]AI Insights — Prioritized Security Intelligence | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Exports | RAD Security | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.