Vulnerability Management

Dependency-Track

Software Composition Analysis

OWASP's intelligent component analysis platform for monitoring third-party components for vulnerabilities.

Patchstack

Vulnerability Management

WordPress vulnerability patching and monitoring

Dynatrace

Configuration Management Tools

Dynatrace is an observability and application security platform that provides AI-powered monitoring across full-stack environments including cloud-native, multi-cloud, and hybrid architectur...

Anchore

Data Pipeline Orchestration

Anchore provides container security and software supply chain compliance tools that help organizations enforce security policies for container images throughout the development pipeline.

Mobb

Code Security Scanning

Automated vulnerability fixer platform generating code fixes for SAST findings automatically.

Acunetix

Static Application Security Testing

Invicti-owned web vulnerability scanner providing automated DAST to detect and report on SQL injection, XSS, and thousands of other web vulnerabilities.

Nullify

AI Security Platforms

Engineering-led security platform using AI to find and fix issues across code, cloud, and containers.

HackerOne

Vulnerability Management Platforms

HackerOne provides a bug bounty platform connecting organizations with ethical hackers to find and fix security vulnerabilities.

Black Duck

Code Snippet Management

Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code.

Horizon3.ai

Penetration Testing

Horizon3.ai provides autonomous penetration testing that continuously finds and verifies exploitable attack paths in enterprise environments without manual effort.

Qualys

Dynamic Application Security Testing

Qualys provides cloud-based vulnerability management and web application scanning that helps organizations identify and prioritize security risks across their attack surface.

Vulcan Cyber

Vulnerability Management Platforms

Cyber risk management platform orchestrating vulnerability remediation by prioritizing risks and automating fix workflows across security tools.

Vicarius

Patch Management

Vulnerability remediation platform providing contextual risk assessment and automated patch management.

Greenbone

Compliance Management

Open-source vulnerability management provider maintaining OpenVAS and delivering enterprise vulnerability scanning and compliance checking.

AccuKnox

OT Security

AccuKnox provides zero-trust runtime security for containers and Kubernetes using eBPF-powered monitoring and dynamic policy enforcement.

Tenacity

Attack Surface Management

Intruder-acquired cloud security platform providing automated cloud configuration scanning and vulnerability assessment for AWS environments.

Shodan

Attack Surface Management

Internet-connected device search engine used by security professionals to discover exposed assets, services, and vulnerabilities across the internet.

Edgescan

Vulnerability Management Platforms

Full-stack vulnerability management platform combining scanning, pentesting-as-a-service, and API discovery with a human validation layer.

Vdoo

Vulnerability Management

JFrog-acquired firmware security platform providing automated analysis and vulnerability detection for IoT and embedded device firmware.

Mend.io

Dynamic Application Security Testing

Mend.io is a software composition analysis and application security platform that helps development teams identify and remediate vulnerabilities in open-source dependencies.

AuditBase

Static Application Security Testing

Audiological database and practice management system for hearing clinics with Noah-compatible audiometry data management.

WebARX

Vulnerability Management

WordPress security and firewall for agencies

Protect AI

AI Security Platforms

AI security platform for scanning ML models, detecting vulnerabilities, and securing the AI supply chain.

Docker

Configuration Management Tools

Docker is a platform for developing, shipping, and running applications in containers. It provides tools for building container images, managing registries, and orchestrating containerized w...

Assetnote

Attack Surface Management

Attack surface management platform providing continuous monitoring and security analysis of external assets with automated vulnerability detection.

Seemplicity

Vulnerability Management Platforms

Risk operations center for vulnerability remediation workflows

Strobes

Attack Surface Management

Continuous vulnerability management platform aggregating findings from pentest, DAST, and scanner tools with risk-based prioritization.

Nucleus Security

Vulnerability Management Platforms

Vulnerability management platform aggregating scan data from multiple sources and automating prioritization and remediation workflows.

Nozomi Networks

Network Security

OT and IoT security platform providing real-time network visibility, threat detection, and vulnerability assessment for industrial environments.

Phoenix Security

Application Security Posture Management

Application and cloud security posture management platform providing risk-based vulnerability prioritization.

Vulncheck

Threat Intelligence Platforms

Exploit and vulnerability intelligence platform

Radiflow

OT Security

OT cybersecurity and risk management platform with iSID threat detection and CIARA risk simulator. Serves power, water, and manufacturing operators.

Nessus

Vulnerability Management Platforms

Industry-standard vulnerability scanner providing comprehensive assessment capabilities for identifying vulnerabilities, misconfigurations, and malware.

Pentera

Vulnerability Management Platforms

Pentera provides automated penetration testing that continuously validates security controls by safely emulating real-world attack techniques.

Hackuity

Vulnerability Management Platforms

Risk-based vulnerability management platform aggregating findings from multiple scanners and prioritizing remediation based on business context.

Bugcrowd

Vulnerability Management Platforms

Bugcrowd provides crowdsourced security testing with bug bounty programs, pen testing, and vulnerability disclosure through vetted researchers.

Holm Security

Attack Surface Management

Next-generation vulnerability management platform covering systems, web apps, users, and cloud in one solution.

Treescale

Container Registry

Private Docker registry service with vulnerability scanning and team collaboration features.

Brinqa

Vulnerability Management Platforms

Cyber risk intelligence platform unifying vulnerability and risk data for actionable insights.

Fleet

Version Control Hosting

Fleet is an open-source device management platform built on osquery that provides real-time visibility, vulnerability management, and MDM for servers, laptops, and cloud infrastructure.

Cybellum

Mobile Application Security

Product security platform delivering SBOM analysis, vulnerability management, and compliance for automotive, medical, and industrial devices.

Metasploit

Dynamic Application Security Testing

Rapid7's open-source penetration testing framework with thousands of exploits and auxiliary modules.

NopSec

Threat Intelligence Platforms

Risk-based vulnerability management platform correlating scanner output with threat intelligence for prioritization.

Wazuh

SIEM

Open-source security platform providing intrusion detection, vulnerability detection, and server monitoring with SIEM integration.

DefectDojo

Application Security Posture Management

Open-source application vulnerability management tool making it easy to track findings across tools.

Malwarebytes

Patch Management

Malwarebytes provides endpoint protection and remediation for businesses and consumers with anti-malware, ransomware protection, and threat detection.

Balbix

AI Security Platforms

AI-powered cyber risk quantification platform providing continuous vulnerability assessment and breach likelihood prediction across the enterprise.

Rootshell Security

Penetration Testing

Penetration testing and vulnerability management platform providing threat-led assessments.

Fluid Attacks

Dynamic Application Security Testing

Continuous hacking service combining AI and expert pen testers to find vulnerabilities across application stacks.

Cylus

OT Security

Cybersecurity platform purpose-built for rail operators covering signaling, rolling stock, and depot networks. Protects critical rail OT from cyberattacks.

ConnectSecure

Cybersecurity

Vulnerability scanning for MSPs.

Bionic

Attack Surface Management

Application security posture management platform by CrowdStrike providing runtime architecture and risk visibility.

Checkmarx

Supply Chain Planning

Checkmarx provides a comprehensive application security platform including software composition analysis, SAST, DAST, and API security for enterprise DevSecOps programs.

Endor Labs

Supply Chain Management

Endor Labs provides dependency lifecycle management that helps organizations reduce open-source risk by identifying reachable vulnerabilities and unmaintained dependencies.

Theori

Penetration Testing

Offensive cybersecurity consulting firm with research and services

NeuVector

Zero Trust Security

SUSE-owned open-source container security platform providing full lifecycle protection from vulnerability scanning to runtime detection and response.

AttackForge

Project Management

Pentest management platform automating project workflow, reporting, and findings integration across pentesting engagements.

HostedScan

Code Security Scanning

Continuous vulnerability scanning SaaS for SMB

Asimily

Asset Inventory for Security

IoT security platform providing risk management and vulnerability remediation for connected devices in healthcare and enterprise environments.

Halo Security

Attack Surface Management

External attack surface management platform monitoring web applications, domains, and cloud assets for vulnerabilities and security risks.