Acquired by Google. Wiz is the leader in having an all-in-one cloud security platform by expanding into CTEM, ASPM, and Runtime capabilities all within a single dashboard. Their posture and vulnerability capabilities remain the strongest, but their Code and Defend offerings are competitive in their own right.
Oligo Security offers application layer insights as part of a CADR platform. They baseline application library activities at a function level, and can detect either malicious deviation, or the execution of known vulnerable functions. This extends into AI, allowing them to see, detect, and respond to AI applications.
Aikido provides everything the average startup to mid-market company needs for security in a box - every code and cloud security scanner under the sun without much feature compromise, alongside a surprisingly robust runtime application solution for things like bot prevention. A no-nonsense replacement for a lot of more "specialized" solutions that tend to slow developers down.
Upwind has built CNAPP from the ground-up around runtime insights provided from a network focused endpoint agent. They provide unique features like API security, alongside vulnerability prioritization and scanning, and the more generic CNAPP feature sets.
Exaforce is building an AI first SOC platform that can serve as an augment to your existing SOC via agentic capabilities, a SIEM replacement or augment via its data lake, as well as offering MDR capabilities via a managed offering.
Cloudflare is the traditional leader in API for good reason. They offer great in depth protection that is quick to respond to threats. The platform has grown overly complex for simple use cases.
Cycode offers a holistic all-in-one ASPM tool with their in house scanners alongside the ability to import third party findings. They offer about every scanner and feature you could need out of an AppSec tool.
Cyera is provides a robust collection of tools for data discovery, classification, and obfuscation. They've expanded the platform via acquisition and product into AI Security and NHI capabilities, providing AI abuse detections and NHI monitoring.
AI-powered endpoint security platform that gives teams control over everything running on their endpoints so they can adopt AI safely.
Pluto is a leading AI security solution that specializes in securing endpoints and agentic building solutions like Lovable and Base44
The core of Sweet Security is powerful incident detection and response capabilities for cloud environments. They have since created a larger CNAPP platform expanding more into vulnerability management, posture, and identity capabilities
Jamf is the long time king of apple MDM. They have a robust set of features and integrations that make them the go-to for apple device management with a rich feature set allowing a ton of customization. However, as with all enterprise software, there has also been an increase in bloat over time.