Vulnerability management
Scanning and assessment of systems for known vulnerabilities and misconfigurations, with tracking of remediation.
54 vendors · alphabetical
- AnchoreAnchore sells an SBOM-powered solution that enables continuous scanning of applications from cloud-native deployments to legacy on-prem installations for security and compliance issues.Privately held
- Astra SecurityAstra Security sells a platform that performs continuous offensive pentests across apps, APIs and cloud.Privately held
- AttaxionAttaxion sells a platform that maps an organization's entire attack surface, identifies critical vulnerabilities and supports remediation with guided next steps and workflows.Ownership not established
- AxoniusAxonius sells asset intelligence that security and IT teams use to discover what is unknown, fix what is exposed, and prove cyber resilience.Ownership not established
- BitsightBitsight delivers a map of assets and vulnerabilities across an enterprise and its supply chain, prioritized by real-time threat intelligence.Ownership not established
- Blackpoint CyberBlackpoint Cyber sells managed detection and response to organizations of all sizes around the world, along with the CompassOne platform.Ownership not established
- Blue MantisBlue Mantis combines 24/7 MDR, threat hunting, vulnerability management, cloud security, GRC, ransomware defense, penetration testing and red teaming to prioritize remediation and strengthen resilience.Ownership not established
- BrinqaBrinqa sells an exposure management platform that unifies every data source.Ownership not established
- CognitionCognition sells Devin, an agent that plans, writes, tests and ships production code on its own, working inside a customer's codebase and the tools its team already uses.Privately held · primary category
- ConnectSecureConnectSecure sells the ConnectSecure cybersecurity platform, which features what MSPs need to harden their clients’ attack surface and manage tightening compliance requirements.Ownership not established · primary category
- CyberKordCyberKord sells a service that answers security alerts day and night, without waiting for a person.Ownership not established
- CyberProofCyberProof is a cloud first security operations company and a Managed Detection & Response provider for global enterprises.Ownership not established
- CyrenityCyrenity sells managed cybersecurity services covering managed detection and response, threat intelligence, vulnerability management, advisory, AI security, and 24/7 incident response, run as one operation.Ownership not established
- D3 SecurityD3 Security sells Morpheus, an agentic SOC platform.Privately held
- DeepSeasDeepSeas sells cybersecurity services that range from strategic guidance to offensive testing and 24/7 defense, aimed at lean teams protecting complex environments.Ownership not established
- DefendifyDefendify sells a cybersecurity platform designed for IT teams.Ownership not established
- DynatraceDynatrace sells an AI-powered observability platform.Public (NYSE: DT) · primary category
- EclypsiumEclypsium sells a platform that provides continuous assurance of mission-critical infrastructure throughout its lifecycle.Ownership not established
- FireMonFireMon is a network security company focused on firewall policy control for the hybrid enterprise.Ownership not established
- FlashpointFlashpoint sells threat data and intelligence that spans cyber threat intelligence, vulnerability intelligence, geopolitical risk, physical security, fraud and brand protection.Ownership not established
- GuardareGuardare sells a platform that connects data from existing security tools to uncover exposures, prioritize what matters, and give teams clear next steps across people, devices, software, and cloud.Privately held
- HackenProofHackenProof is a security company that connects projects with verified security researchers who hunt for vulnerabilities across Web3 and Web2, and provides penetration testing services for web and mobile apps, APIs, and cloud infrastructure.Ownership not established
- HackerOneHackerOne puts Continuous Threat Exposure Management (CTEM) in practice through a continuous loop of discovery, validation, prioritization and remediation.Ownership not established
- Halo SecurityHalo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together.Ownership not established
- HCLSoftwareHCLSoftware develops, markets, sells and supports solutions in four areas: digital transformation, data and analytics, AI and intelligent automation, and enterprise security.Ownership not established
- HelixHelix sells tailored cybersecurity solutions and certification training seminars.Ownership not established
- Hive ProHive Pro sells The Hive Pro Platform, one platform offering threat exposure management through exposure assessment and adversarial exposure validation.Ownership not established
- ICFICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats.Ownership not established
- IndurexIndurex sells an AI-native platform to asset-intensive operators managing cyber-physical systems.Privately held
- InfosysInfosys sells cyber security services in consulting, transformation and managed services.Public (NSE, BSE, NYSE: INFY)
- IntruderIntruder sells a single platform for continuous scanning across infrastructure, apps and cloud environments.Ownership not established · primary category
- JupiterOneJupiterOne is an AI Risk Management platform that continuously discovers every digital asset across an environment and maps the relationships between them.Ownership not established
- LansweeperLansweeper sells software that gives IT and Security teams one shared view across IT, OT, cloud, and AI.Ownership not established
- LeidosLeidos is a technology company that serves government and commercial customers with digital and mission innovations, with AI, cyber and mission software at its core.Public (NYSE: LDOS)
- MiggoMiggo is an Application Detection and Response (ADR) platform that shows which vulnerabilities are exploitable in running banking applications and shields them at runtime while the patch waits.Ownership not established
- NopSecNopSec sells a Cyber Threat Exposure Management (CTEM) platform and penetration testing services.Ownership not established
- Nucleus SecurityNucleus Security sells vulnerability and exposure management software for enterprise organizations and government agencies.Ownership not established · primary category
- ParsonsParsons is a global solutions provider in the national security and critical infrastructure markets that delivers integrated program management solutions.Ownership not established
- PentioPentio is a Toronto team of senior ServiceNow experts that plans, implements and runs the platform for large organizations, from ITSM and Security Operations to Now Assist and AI Agents.Ownership not established
- ProficioProficio sells managed detection and response (MDR) services.Ownership not established
- QualysQualys provides the Enterprise TruRisk Platform, an end-to-end solution for all aspects of IT, security and compliance.Ownership not established · primary category
- RAD SecurityRAD Security sells AI Workers that investigate, triage, and act on threats across a customer's entire stack.Ownership not established
- Rapid7Rapid7 sells the Command Platform, which runs cloud security, SIEM, application security, vulnerability management, automation and attack surface management solutions, along with managed services offerings built on these solutions.Ownership not established · primary category
- RapidFortRapidFort sells a single platform that combines runtime visibility, secure image foundations, vulnerability analysis, automated hardening, and compliance validation.Ownership not established
- Reach SecurityReach Security is an AI-native security company focused on giving customers a single interface to understand and operate security controls at scale.Privately held
- Red HatRed Hat sells a portfolio of hybrid cloud infrastructure, application services, cloud-native application development, automation, and artificial intelligence solutions.Ownership not established
- Red SentryRed Sentry sells offensive security services, from one-off penetration tests to ongoing PTaaS (Penetration Testing as a Service) partnerships.Ownership not established
- Rival SecurityRival Security sells the Agent Harness, a platform that gives customers the capabilities and context to run security agents.Ownership not established
- ServiceNowServiceNow sells Security Operations, a product that unifies security, IT, and risk into a single system of action.Ownership not established
- TenableTenable sells Tenable One, a platform that unifies security visibility, insight and action across an attack surface.Ownership not established · primary category
- Third Wave InnovationsThird Wave Innovations helps growing businesses understand cyber risk, reduce exposure, stay insurable, and recover when something goes wrong.Ownership not established
- VulnCheckVulnCheck sells a Cyber Threat Intelligence platform that provides exploit and vulnerability intelligence for prioritizing and remediating vulnerabilities.Privately held
- YesWeHackYesWeHack sells a Continuous Offensive Security and Exposure Management platform.Ownership not established
- Zafran SecurityZafran Security sells a platform that brings vulnerability findings together across existing tools into a unified view of exposure across the hybrid enterprise.Ownership not established