{"name":"Cyber Tool Stack cybersecurity vendors","description":"Structured vendor profiles with company facts, source URLs, and verification dates.","lastModified":"2026-08-12","recordCount":141,"records":[{"slug":"crowdstrike","name":"CrowdStrike","hq":"Austin, TX, USA","founded":2011,"sizeTier":"giant","focus":"Cloud-native endpoint, identity, and cloud protection via the Falcon platform.","website":"https://www.crowdstrike.com","sourceUrls":["https://www.crowdstrike.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Preempt Security","year":2020},{"name":"Humio","year":2021},{"name":"Flow Security","year":2024},{"name":"Adaptive Shield","year":2024}]},{"slug":"sentinelone","name":"SentinelOne","hq":"Mountain View, CA, USA","founded":2013,"sizeTier":"large","focus":"AI-driven autonomous endpoint, cloud, and identity protection via the Singularity platform.","website":"https://www.sentinelone.com","sourceUrls":["https://www.sentinelone.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Scalyr","year":2021},{"name":"Attivo Networks","year":2022},{"name":"PingSafe","year":2024},{"name":"Prompt Security","year":2025}]},{"slug":"hiddenlayer","name":"HiddenLayer","hq":"Austin, TX, USA","founded":2022,"sizeTier":"growth","focus":"Security for predictive, generative, and agentic AI across discovery, supply chain, attack simulation, and runtime protection.","website":"https://www.hiddenlayer.com","sourceUrls":["https://www.hiddenlayer.com","https://www.hiddenlayer.com/research/the-machine-learning-adversary-lifecycle","https://docs.hiddenlayer.ai/"],"verifiedAt":"2026-08-12"},{"slug":"microsoft","name":"Microsoft","hq":"Redmond, WA, USA","founded":1975,"sizeTier":"giant","focus":"Endpoint, identity, and cloud security via the Microsoft Defender and Entra portfolios, deeply integrated with Windows and Microsoft 365.","website":"https://www.microsoft.com","sourceUrls":["https://www.microsoft.com"],"verifiedAt":"2026-07-11"},{"slug":"palo-alto-networks","name":"Palo Alto Networks","hq":"Santa Clara, CA, USA","founded":2005,"sizeTier":"giant","focus":"Broad security platform spanning network firewalls, cloud security, SecOps (Cortex), and — since acquiring CyberArk in 2026 — the Idira identity security portfolio.","website":"https://www.paloaltonetworks.com","sourceUrls":["https://www.paloaltonetworks.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Cyvera","year":2014},{"name":"Demisto","year":2019},{"name":"Talon Cyber Security","year":2023},{"name":"CyberArk","year":2026}]},{"slug":"sophos","name":"Sophos","hq":"Abingdon, Oxfordshire, UK","founded":1987,"sizeTier":"large","focus":"Endpoint, network, and managed detection and response for SMB and mid-market; a Thoma Bravo portfolio company since 2020.","website":"https://www.sophos.com","sourceUrls":["https://www.sophos.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Invincea","year":2017},{"name":"Secureworks","year":2025}]},{"slug":"bitdefender","name":"Bitdefender","hq":"Bucharest, Romania","founded":2001,"sizeTier":"large","focus":"Antimalware and EDR technology widely OEM'd across the industry, plus the GravityZone business endpoint platform; founder-owned and bootstrapped.","website":"https://www.bitdefender.com","sourceUrls":["https://www.bitdefender.com"],"verifiedAt":"2026-07-11"},{"slug":"huntress","name":"Huntress","hq":"Ellicott City, MD, USA","founded":2015,"sizeTier":"growth","focus":"Managed detection and response built for MSPs and the SMBs they serve, with a human-staffed 24/7 SOC.","website":"https://www.huntress.com","sourceUrls":["https://www.huntress.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Level Effect (EDR technology)","year":2021},{"name":"Curricula","year":2022}]},{"slug":"jamf","name":"Jamf","hq":"Minneapolis, MN, USA","founded":2002,"sizeTier":"large","focus":"Apple-focused device management and endpoint security; taken private by Francisco Partners in 2026.","website":"https://www.jamf.com","sourceUrls":["https://www.jamf.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"ZuluDesk","year":2019},{"name":"Wandera","year":2021},{"name":"Identity Automation","year":2023}]},{"slug":"iru","name":"Iru","hq":"San Diego, CA, USA","founded":2018,"sizeTier":"growth","focus":"Device management, identity, and compliance platform for Apple, Windows, and Android fleets; rebranded from Kandji in late 2025.","website":"https://www.iru.com","sourceUrls":["https://www.iru.com"],"verifiedAt":"2026-07-11"},{"slug":"wazuh","name":"Wazuh, Inc.","hq":"Campbell, CA, USA","founded":2015,"sizeTier":"growth","focus":"Company behind the open-source Wazuh unified XDR/SIEM platform; bootstrapped, with paid managed cloud hosting.","website":"https://wazuh.com","sourceUrls":["https://wazuh.com"],"verifiedAt":"2026-07-11"},{"slug":"rapid7","name":"Rapid7","hq":"Boston, MA, USA","founded":2000,"sizeTier":"large","focus":"Vulnerability management, detection and response, and open-source security tooling (Metasploit, Velociraptor).","website":"https://www.rapid7.com","sourceUrls":["https://www.rapid7.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Metasploit","year":2009},{"name":"DivvyCloud","year":2020},{"name":"Velocidex (Velociraptor)","year":2021}]},{"slug":"malwarebytes","name":"Malwarebytes","hq":"Santa Clara, CA, USA","founded":2008,"sizeTier":"growth","focus":"Consumer anti-malware plus the ThreatDown business endpoint line for SMB and mid-market.","website":"https://www.malwarebytes.com","sourceUrls":["https://www.malwarebytes.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Saferbytes","year":2017},{"name":"AzireVPN","year":2024}]},{"slug":"eset","name":"ESET","hq":"Bratislava, Slovakia","founded":1992,"sizeTier":"large","focus":"Long-running privately held European vendor of endpoint protection, EDR, and encryption for businesses and consumers.","website":"https://www.eset.com","sourceUrls":["https://www.eset.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"DESlock","year":2016}]},{"slug":"okta","name":"Okta","hq":"San Francisco, CA, USA","founded":2009,"sizeTier":"large","focus":"Cloud identity and access management for workforce and customer identity, spanning SSO, MFA, and lifecycle management.","website":"https://www.okta.com","sourceUrls":["https://www.okta.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Auth0","year":2021},{"name":"Spera Security","year":2023}]},{"slug":"cisco","name":"Cisco","hq":"San Jose, CA, USA","founded":1984,"sizeTier":"giant","focus":"Networking giant with a broad security portfolio spanning the Duo access-security line acquired in 2018 and the Splunk observability and security analytics business acquired in 2024.","website":"https://www.cisco.com","sourceUrls":["https://www.cisco.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Duo Security","year":2018},{"name":"Splunk","year":2024}]},{"slug":"ping-identity","name":"Ping Identity","hq":"Denver, CO, USA","founded":2002,"sizeTier":"large","focus":"Enterprise identity and access management via the PingOne platform; owned by Thoma Bravo, which merged ForgeRock into the company in 2023.","website":"https://www.pingidentity.com","sourceUrls":["https://www.pingidentity.com"],"verifiedAt":"2026-07-11"},{"slug":"delinea","name":"Delinea","hq":"San Francisco, CA, USA","founded":2021,"sizeTier":"large","focus":"Privileged access management formed from the merger of Thycotic and Centrify; majority-owned by Silver Lake.","website":"https://delinea.com","sourceUrls":["https://delinea.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Authomize","year":2023},{"name":"Fastpath","year":2024}]},{"slug":"beyondtrust","name":"BeyondTrust","hq":"Johns Creek, GA, USA","founded":2018,"sizeTier":"large","focus":"Privileged access management and secure remote access; the current company was formed via the 2018 Bomgar–BeyondTrust merger and is PE-owned.","website":"https://www.beyondtrust.com","sourceUrls":["https://www.beyondtrust.com"],"verifiedAt":"2026-07-11"},{"slug":"sailpoint","name":"SailPoint","hq":"Austin, TX, USA","founded":2005,"sizeTier":"large","focus":"Identity governance and administration; returned to public markets in 2025 with Thoma Bravo retaining majority control.","website":"https://www.sailpoint.com","sourceUrls":["https://www.sailpoint.com"],"verifiedAt":"2026-07-11"},{"slug":"hashicorp","name":"HashiCorp","hq":"San Francisco, CA, USA","founded":2012,"sizeTier":"large","focus":"Infrastructure automation and secrets management (Vault, Terraform); a wholly owned IBM subsidiary since 2025.","website":"https://www.hashicorp.com","sourceUrls":["https://www.hashicorp.com"],"verifiedAt":"2026-07-11"},{"slug":"teleport","name":"Teleport","hq":"Oakland, CA, USA","founded":2015,"sizeTier":"growth","focus":"Identity-native infrastructure access — short-lived certificates instead of standing credentials for servers, Kubernetes, and databases.","website":"https://goteleport.com","sourceUrls":["https://goteleport.com"],"verifiedAt":"2026-07-11"},{"slug":"yubico","name":"Yubico","hq":"Stockholm, Sweden","founded":2007,"sizeTier":"growth","focus":"Inventor of the YubiKey hardware security key and a driving force behind the FIDO2/WebAuthn phishing-resistant authentication standards.","website":"https://www.yubico.com","sourceUrls":["https://www.yubico.com"],"verifiedAt":"2026-07-11"},{"slug":"saviynt","name":"Saviynt","hq":"El Segundo, CA, USA","founded":2010,"sizeTier":"growth","focus":"Cloud-native identity governance and administration converging IGA, application GRC, and privileged access.","website":"https://saviynt.com","sourceUrls":["https://saviynt.com"],"verifiedAt":"2026-07-11"},{"slug":"one-identity","name":"One Identity","hq":"Aliso Viejo, CA, USA","sizeTier":"large","focus":"Identity governance, privileged access, and Active Directory management; operates as a business unit of Quest Software.","website":"https://www.oneidentity.com","sourceUrls":["https://www.oneidentity.com"],"verifiedAt":"2026-07-11"},{"slug":"fortinet","name":"Fortinet","hq":"Sunnyvale, CA, USA","founded":2000,"sizeTier":"giant","focus":"Network security hardware and software spanning next-generation firewalls, SD-WAN, and SASE, built around the custom-silicon FortiOS platform.","website":"https://www.fortinet.com","sourceUrls":["https://www.fortinet.com"],"verifiedAt":"2026-07-11"},{"slug":"check-point","name":"Check Point Software Technologies","hq":"Tel Aviv, Israel / San Carlos, CA, USA","founded":1993,"sizeTier":"large","focus":"One of the original firewall vendors, now a broad security platform spanning network, cloud, and endpoint protection under the Check Point Infinity architecture.","website":"https://www.checkpoint.com","sourceUrls":["https://www.checkpoint.com"],"verifiedAt":"2026-07-11"},{"slug":"juniper-networks","name":"Juniper Networks","hq":"Sunnyvale, CA, USA","founded":1996,"sizeTier":"large","focus":"Enterprise networking and security hardware, including the SRX Series firewall line; became a wholly owned subsidiary of Hewlett Packard Enterprise when HPE's acquisition closed in July 2025.","website":"https://www.juniper.net","sourceUrls":["https://www.juniper.net"],"verifiedAt":"2026-07-11"},{"slug":"sonicwall","name":"SonicWall","hq":"Milpitas, CA, USA","founded":1991,"sizeTier":"large","focus":"Security appliances built for small and mid-sized businesses and the channel partners that resell them; majority-owned by Francisco Partners since being spun off from Dell in 2016.","website":"https://www.sonicwall.com","sourceUrls":["https://www.sonicwall.com"],"verifiedAt":"2026-07-11"},{"slug":"watchguard","name":"WatchGuard Technologies","hq":"Seattle, WA, USA","founded":1996,"sizeTier":"growth","focus":"Network security appliances built for small and mid-sized businesses and the MSPs that serve them, sold under the Firebox line; majority-owned by Vector Capital since 2022.","website":"https://www.watchguard.com","sourceUrls":["https://www.watchguard.com"],"verifiedAt":"2026-07-11"},{"slug":"netgate","name":"Netgate","hq":"Austin, TX, USA","sizeTier":"growth","focus":"Steward of the open-source pfSense project since 2008, selling pfSense-based security appliances and the proprietary pfSense Plus edition alongside the free Community Edition.","website":"https://www.netgate.com","sourceUrls":["https://www.netgate.com"],"verifiedAt":"2026-07-11"},{"slug":"deciso","name":"Deciso","hq":"Middelharnis, Netherlands","founded":2000,"sizeTier":"growth","focus":"Dutch network security company and creator of the open-source OPNsense firewall, first released in 2015 as a fork of pfSense/m0n0wall.","website":"https://www.deciso.com","sourceUrls":["https://www.deciso.com"],"verifiedAt":"2026-07-11"},{"slug":"darktrace","name":"Darktrace","hq":"Cambridge, UK","founded":2013,"sizeTier":"large","focus":"AI-driven detection and response across network, cloud, email, and OT environments via the Darktrace ActiveAI Security Platform; taken private in an all-cash acquisition by Thoma Bravo that closed in October 2024.","website":"https://www.darktrace.com","sourceUrls":["https://www.darktrace.com"],"verifiedAt":"2026-07-11"},{"slug":"corelight","name":"Corelight","hq":"San Francisco, CA, USA","founded":2013,"sizeTier":"growth","focus":"Open network detection and response built on the Zeek framework created by its founders, delivered as physical, virtual, or cloud sensors.","website":"https://corelight.com","sourceUrls":["https://corelight.com"],"verifiedAt":"2026-07-11"},{"slug":"extrahop","name":"ExtraHop","hq":"Seattle, WA, USA","founded":2007,"sizeTier":"growth","focus":"Network detection and response through decryption and analysis of east-west traffic; taken private by Bain Capital Private Equity and Crosspoint Capital Partners in 2021.","website":"https://www.extrahop.com","sourceUrls":["https://www.extrahop.com"],"verifiedAt":"2026-07-11"},{"slug":"vectra-ai","name":"Vectra AI","hq":"San Jose, CA, USA","founded":2011,"sizeTier":"growth","focus":"AI-driven attack detection across network, identity, and cloud signal, marketed as Attack Signal Intelligence; privately held with no public listing as of 2026.","website":"https://www.vectra.ai","sourceUrls":["https://www.vectra.ai"],"verifiedAt":"2026-07-11"},{"slug":"security-onion-solutions","name":"Security Onion Solutions","hq":"Evans, GA, USA","founded":2014,"sizeTier":"startup","focus":"Company behind the free Security Onion network security monitoring Linux distribution, providing paid training and professional services around the platform.","website":"https://securityonionsolutions.com","sourceUrls":["https://securityonionsolutions.com"],"verifiedAt":"2026-07-11"},{"slug":"zscaler","name":"Zscaler","hq":"San Jose, CA, USA","founded":2007,"sizeTier":"giant","focus":"Cloud-delivered SSE and SASE vendor whose Zero Trust Exchange inspects traffic across a global service network instead of a customer-run data center appliance.","website":"https://www.zscaler.com","sourceUrls":["https://www.zscaler.com"],"verifiedAt":"2026-07-11"},{"slug":"netskope","name":"Netskope","hq":"Santa Clara, CA, USA","founded":2012,"sizeTier":"large","focus":"Security service edge vendor with roots in CASB, now selling a converged SASE platform under the Netskope One brand; completed its IPO on Nasdaq in September 2025.","website":"https://www.netskope.com","sourceUrls":["https://www.netskope.com"],"verifiedAt":"2026-07-11"},{"slug":"cloudflare","name":"Cloudflare","hq":"San Francisco, CA, USA","founded":2009,"sizeTier":"giant","focus":"Global network operator whose edge spans CDN, DNS, DDoS mitigation, and zero trust access, sold together under the Cloudflare One umbrella.","website":"https://www.cloudflare.com","sourceUrls":["https://www.cloudflare.com"],"verifiedAt":"2026-07-11"},{"slug":"tailscale","name":"Tailscale","hq":"Toronto, Canada","founded":2019,"sizeTier":"growth","focus":"Zero-config mesh VPN built on the WireGuard protocol, connecting devices directly to each other under a centrally managed access policy instead of routing through a gateway.","website":"https://tailscale.com","sourceUrls":["https://tailscale.com"],"verifiedAt":"2026-07-11"},{"slug":"twingate","name":"Twingate","hq":"Redwood City, CA, USA","founded":2019,"sizeTier":"startup","focus":"Zero trust network access built to replace corporate VPNs, deployable without inbound firewall changes or exposing a public IP for internal resources.","website":"https://www.twingate.com","sourceUrls":["https://www.twingate.com"],"verifiedAt":"2026-07-11"},{"slug":"akamai","name":"Akamai Technologies","hq":"Cambridge, MA, USA","founded":1998,"sizeTier":"giant","focus":"One of the original content delivery network operators, now a broad security and cloud computing platform; DDoS mitigation is sold under the Prolexic brand acquired in 2014.","website":"https://www.akamai.com","sourceUrls":["https://www.akamai.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Prolexic Technologies","year":2014}]},{"slug":"radware","name":"Radware","hq":"Mahwah, NJ, USA / Tel Aviv, Israel","founded":1996,"sizeTier":"large","focus":"Independent, publicly traded network and application security vendor covering DDoS mitigation, web application, and API protection.","website":"https://www.radware.com","sourceUrls":["https://www.radware.com"],"verifiedAt":"2026-07-11"},{"slug":"netscout","name":"NETSCOUT Systems","hq":"Westford, MA, USA","founded":1984,"sizeTier":"large","focus":"Network performance management and cybersecurity vendor whose Arbor DDoS protection line originated with its 2015 acquisition of Arbor Networks.","website":"https://www.netscout.com","sourceUrls":["https://www.netscout.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Arbor Networks","year":2015}]},{"slug":"wiz","name":"Wiz","hq":"New York, NY, USA","founded":2020,"sizeTier":"large","focus":"Agentless-first cloud security (CNAPP) built around a graph of cloud resources, identities, and exposures; a Google (Alphabet) subsidiary since the ~$32B acquisition closed in March 2026, still operating under the Wiz brand within Google Cloud.","website":"https://www.wiz.io","sourceUrls":["https://www.wiz.io"],"verifiedAt":"2026-07-11"},{"slug":"orca-security","name":"Orca Security","hq":"Portland, OR, USA","founded":2019,"sizeTier":"growth","focus":"Agentless cloud security via its patented SideScanning technique, reading workloads' storage out-of-band instead of deploying agents; independent and VC-backed.","website":"https://orca.security","sourceUrls":["https://orca.security"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Opus Security","year":2025}]},{"slug":"upwind","name":"Upwind Security","hq":"San Francisco, CA, USA","founded":2022,"sizeTier":"growth","focus":"Runtime-powered CNAPP using eBPF sensors, founded by the team behind Spot.io; raised a $250M Series B in January 2026 at a $1.5B valuation.","website":"https://www.upwind.io","sourceUrls":["https://www.upwind.io"],"verifiedAt":"2026-07-11"},{"slug":"tenable","name":"Tenable","hq":"Columbia, MD, USA","founded":2002,"sizeTier":"large","focus":"Exposure and vulnerability management vendor behind Nessus, publicly traded (NASDAQ: TENB); its cloud security line is built on the identity-centric Ermetic platform acquired in 2023.","website":"https://www.tenable.com","sourceUrls":["https://www.tenable.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Ermetic","year":2023}]},{"slug":"prowler","name":"Prowler","hq":"Portland, ME, USA","founded":2023,"sizeTier":"startup","focus":"Company behind the open-source Prowler cloud security assessment tool (the project itself dates to 2016), incorporated in 2023 by its creator and selling a hosted Prowler Cloud edition.","website":"https://prowler.com","sourceUrls":["https://prowler.com"],"verifiedAt":"2026-07-11"},{"slug":"aqua-security","name":"Aqua Security","hq":"Ramat Gan, Israel / Burlington, MA, USA","founded":2015,"sizeTier":"growth","focus":"One of the original container security vendors, now selling the Aqua Platform CNAPP and stewarding the open-source Trivy scanner; independent and VC-backed.","website":"https://www.aquasec.com","sourceUrls":["https://www.aquasec.com"],"verifiedAt":"2026-07-11"},{"slug":"sysdig","name":"Sysdig","hq":"San Francisco, CA, USA","founded":2013,"sizeTier":"growth","focus":"Runtime-centric cloud and container security founded by a Wireshark co-creator; created the Falco runtime security engine and donated it to the CNCF in 2018. Still private and VC-backed.","website":"https://www.sysdig.com","sourceUrls":["https://www.sysdig.com"],"verifiedAt":"2026-07-11"},{"slug":"red-hat","name":"Red Hat","hq":"Raleigh, NC, USA","founded":1993,"sizeTier":"giant","focus":"Enterprise open-source software company behind RHEL and OpenShift, wholly owned by IBM since 2019; its Kubernetes security line descends from the 2021 StackRox acquisition.","website":"https://www.redhat.com","sourceUrls":["https://www.redhat.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"StackRox","year":2021}]},{"slug":"skyhigh-security","name":"Skyhigh Security","hq":"San Jose, CA, USA","founded":2022,"sizeTier":"growth","focus":"Security service edge vendor carved out of McAfee Enterprise by Symphony Technology Group in 2022, carrying the lineage of CASB pioneer Skyhigh Networks (founded 2011, acquired by McAfee in 2018).","website":"https://www.skyhighsecurity.com","sourceUrls":["https://www.skyhighsecurity.com"],"verifiedAt":"2026-07-11"},{"slug":"broadcom","name":"Broadcom","hq":"Palo Alto, CA, USA","sizeTier":"giant","focus":"Semiconductor and infrastructure software conglomerate whose security portfolio centers on the Symantec enterprise business acquired in 2019 and VMware acquired in 2023.","website":"https://www.broadcom.com","sourceUrls":["https://www.broadcom.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Symantec Enterprise Security business","year":2019},{"name":"VMware","year":2023}]},{"slug":"forcepoint","name":"Forcepoint","hq":"Austin, TX, USA","founded":1994,"sizeTier":"large","focus":"Data-first security vendor (DLP, web, and cloud app security) owned by Francisco Partners since 2021; sold its Global Governments and Critical Infrastructure unit to TPG in 2023.","website":"https://www.forcepoint.com","sourceUrls":["https://www.forcepoint.com"],"verifiedAt":"2026-07-11"},{"slug":"snyk","name":"Snyk","hq":"Boston, MA, USA","founded":2015,"sizeTier":"large","focus":"Developer-first application security platform spanning SAST, open-source dependency (SCA), container, and IaC scanning; still private and VC-backed, with a stalled IPO process and a rejected private-equity buyout as of 2026.","website":"https://snyk.io","sourceUrls":["https://snyk.io"],"verifiedAt":"2026-07-11"},{"slug":"veracode","name":"Veracode","hq":"Burlington, MA, USA","founded":2006,"sizeTier":"large","focus":"Application security testing platform (static, dynamic, and software composition analysis) delivered primarily as SaaS; majority-owned by TA Associates since a 2022 growth investment, with Thoma Bravo retaining a minority stake.","website":"https://www.veracode.com","sourceUrls":["https://www.veracode.com"],"verifiedAt":"2026-07-11"},{"slug":"checkmarx","name":"Checkmarx","hq":"Ramat Gan, Israel","founded":2006,"sizeTier":"large","focus":"Application security testing vendor built around the Checkmarx One platform (SAST, SCA, API security); majority-owned by Hellman & Friedman since a 2020 deal, and — since hiring the ZAP core development team in September 2024 — the primary corporate steward of the independent open-source scanner ZAP by Checkmarx.","website":"https://checkmarx.com","sourceUrls":["https://checkmarx.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Tromzo","year":2025}]},{"slug":"github","name":"GitHub","hq":"San Francisco, CA, USA","founded":2008,"sizeTier":"giant","focus":"Software development and collaboration platform whose security line, GitHub Advanced Security, was unbundled into standalone SKUs — GitHub Code Security and GitHub Secret Protection — in April 2025; a wholly owned Microsoft subsidiary since its 2018 acquisition.","website":"https://github.com","sourceUrls":["https://github.com"],"verifiedAt":"2026-07-11"},{"slug":"gitlab","name":"GitLab","hq":"San Francisco, CA, USA","founded":2014,"sizeTier":"large","focus":"All-remote DevSecOps platform combining source control, CI/CD, and integrated security scanning in one product; publicly traded on Nasdaq (GTLB) since its 2021 IPO and, as of mid-2026, still independent despite recurring acquisition speculation.","website":"https://about.gitlab.com","sourceUrls":["https://about.gitlab.com"],"verifiedAt":"2026-07-11"},{"slug":"semgrep","name":"Semgrep","hq":"San Francisco, CA, USA","founded":2017,"sizeTier":"growth","focus":"Maker of the Semgrep static analysis engine (formerly r2c) and the commercial Semgrep AppSec Platform; the CLI/engine is LGPL-2.1, but the bundled default rule registry moved to a separate, non-OSI Semgrep Rules License in December 2024, prompting the fully open Opengrep community fork in early 2025.","website":"https://semgrep.dev","sourceUrls":["https://semgrep.dev"],"verifiedAt":"2026-07-11"},{"slug":"sonarsource","name":"Sonar","hq":"Geneva, Switzerland","founded":2008,"sizeTier":"large","focus":"Maker of SonarQube's code quality and security analysis products (SonarQube Server, SonarQube Cloud, SonarQube Community Build), rebranded from the SonarQube/SonarCloud edition names in late 2024 alongside a licensing change that moved bundled language analyzers off LGPL onto a separate, non-OSI source-available license.","website":"https://www.sonarsource.com","sourceUrls":["https://www.sonarsource.com"],"verifiedAt":"2026-07-11"},{"slug":"hcl-software","name":"HCLSoftware","hq":"Noida, India","founded":2019,"sizeTier":"giant","focus":"Enterprise software division of HCLTech, formed to house a set of products acquired from IBM for $1.8B in 2019, including the AppScan application security testing suite it continues to develop.","website":"https://www.hcl-software.com","sourceUrls":["https://www.hcl-software.com"],"verifiedAt":"2026-07-11"},{"slug":"invicti-security","name":"Invicti Security","hq":"Austin, TX, USA","founded":2018,"sizeTier":"growth","focus":"Web application and API security testing vendor formed from the merger of Netsparker and Acunetix, selling both as separately branded DAST products; majority-owned by Summit Partners since a $625M 2021 growth investment, with Turn/River Capital retaining a minority stake.","website":"https://www.invicti.com","sourceUrls":["https://www.invicti.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Kondukto","year":2025}]},{"slug":"portswigger","name":"PortSwigger","hq":"Knutsford, England, UK","founded":2008,"sizeTier":"growth","focus":"Maker of Burp Suite, the standard toolkit for manual and automated web application penetration testing; founder-controlled since 2008, with Brighton Park Capital taking a minority investment in 2024 — its first outside funding.","website":"https://portswigger.net","sourceUrls":["https://portswigger.net"],"verifiedAt":"2026-07-11"},{"slug":"stackhawk","name":"StackHawk","hq":"Denver, CO, USA","founded":2019,"sizeTier":"growth","focus":"Developer-first, API-focused DAST built to run automatically inside CI/CD pipelines rather than as a standalone security-team tool; independent and VC-backed.","website":"https://www.stackhawk.com","sourceUrls":["https://www.stackhawk.com"],"verifiedAt":"2026-07-11"},{"slug":"projectdiscovery","name":"ProjectDiscovery","hq":"San Francisco, CA, USA","founded":2020,"sizeTier":"growth","focus":"Company behind Nuclei, the widely used open-source template-based vulnerability scanner, plus the commercial ProjectDiscovery Cloud Platform and 2026's autonomous pentesting product Neo; independent and VC-backed.","website":"https://projectdiscovery.io","sourceUrls":["https://projectdiscovery.io"],"verifiedAt":"2026-07-11"},{"slug":"endor-labs","name":"Endor Labs","hq":"Palo Alto, CA, USA","founded":2021,"sizeTier":"growth","focus":"Software composition analysis platform built around reachability analysis, aiming to cut dependency-vulnerability noise down to what an application actually invokes; independent and VC-backed, with a $93M Series B in April 2025.","website":"https://www.endorlabs.com","sourceUrls":["https://www.endorlabs.com"],"verifiedAt":"2026-07-11"},{"slug":"socket-security","name":"Socket","hq":"San Francisco, CA, USA","founded":2020,"sizeTier":"growth","focus":"Maker of Socket Firewall, which analyzes open-source package behavior — not just known CVEs — to catch supply-chain attacks before they reach a developer's machine or CI pipeline; independent and VC-backed, reaching a $1B valuation in a May 2026 Series C.","website":"https://socket.dev","sourceUrls":["https://socket.dev"],"verifiedAt":"2026-07-11"},{"slug":"aikido-security","name":"Aikido Security","hq":"Ghent, Belgium","founded":2022,"sizeTier":"growth","focus":"Consolidated application security platform aggregating SAST, SCA, secrets, container, IaC, and cloud scanning behind one interface aimed at small engineering teams; independent and VC-backed, reaching unicorn status in January 2026.","website":"https://www.aikido.dev","sourceUrls":["https://www.aikido.dev"],"verifiedAt":"2026-07-11"},{"slug":"f5","name":"F5","hq":"Seattle, WA, USA","founded":1996,"sizeTier":"giant","focus":"Application delivery and security vendor (NASDAQ: FFIV) spanning load balancing, WAF, and API security, sold as both the on-prem BIG-IP/NGINX lines and the SaaS-delivered F5 Distributed Cloud Services; acquired API security startup Wib in 2024.","website":"https://www.f5.com","sourceUrls":["https://www.f5.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Wib","year":2024}]},{"slug":"imperva","name":"Imperva","hq":"San Mateo, CA, USA","founded":2002,"sizeTier":"large","focus":"Application and data security vendor known for its web application firewall and bot/DDoS protection; became a wholly owned subsidiary of the French Thales Group when its ~$3.6B acquisition from Thoma Bravo closed in December 2023.","website":"https://www.imperva.com","sourceUrls":["https://www.imperva.com"],"verifiedAt":"2026-07-11"},{"slug":"salt-security","name":"Salt Security","hq":"Palo Alto, CA, USA","founded":2016,"sizeTier":"growth","focus":"API security platform using behavioral analysis of live traffic to discover and protect APIs; independent and VC-backed, having raised roughly $281M toward a ~$1.4B valuation.","website":"https://salt.security","sourceUrls":["https://salt.security"],"verifiedAt":"2026-07-11"},{"slug":"harness","name":"Harness","hq":"San Francisco, CA, USA","founded":2017,"sizeTier":"large","focus":"AI-native software delivery platform (CI/CD, feature flags, cloud cost management) that absorbed Traceable AI's API security and observability technology through a March 2025 merger, continuing to sell it as \"Traceable by Harness\" within its DevSecOps line.","website":"https://www.harness.io","sourceUrls":["https://www.harness.io"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Traceable AI","year":2025}]},{"slug":"proofpoint","name":"Proofpoint","hq":"Sunnyvale, CA, USA","founded":2002,"sizeTier":"large","focus":"Email, data, and human-risk security vendor spanning threat protection, data loss prevention, and security awareness training; taken private by Thoma Bravo in a $12.3B 2021 deal and still PE-owned as of mid-2026.","website":"https://www.proofpoint.com","sourceUrls":["https://www.proofpoint.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Hornetsecurity","year":2025}]},{"slug":"nightfall-ai","name":"Nightfall AI","hq":"San Francisco, CA, USA","founded":2018,"sizeTier":"growth","focus":"Data loss prevention purpose-built for SaaS apps, cloud storage, and generative AI tools, using machine-learned content classifiers instead of a network or endpoint agent; independent and VC-backed.","website":"https://www.nightfall.ai","sourceUrls":["https://www.nightfall.ai"],"verifiedAt":"2026-07-11"},{"slug":"cyera","name":"Cyera","hq":"New York, NY, USA","founded":2021,"sizeTier":"large","focus":"Data security posture management platform converging data discovery, classification, and identity/access context into what it markets as a \"trust layer\" for the AI era; independent and VC-backed, reaching a $12B valuation in a June 2026 funding round.","website":"https://www.cyera.com","sourceUrls":["https://www.cyera.com"],"verifiedAt":"2026-07-11"},{"slug":"bigid","name":"BigID","hq":"New York, NY, USA","founded":2016,"sizeTier":"growth","focus":"Data discovery and classification platform spanning security, privacy, and AI governance use cases under one data catalog; independent and VC-backed, valued above $1B since a March 2024 Series E.","website":"https://bigid.com","sourceUrls":["https://bigid.com"],"verifiedAt":"2026-07-11"},{"slug":"varonis","name":"Varonis","hq":"Miami, FL, USA","founded":2005,"sizeTier":"large","focus":"Publicly traded (NASDAQ: VRNS) data security vendor whose roots in data access governance and DLP have expanded into a full Varonis Data Security Platform spanning DSPM, threat detection, and identity risk.","website":"https://www.varonis.com","sourceUrls":["https://www.varonis.com"],"verifiedAt":"2026-07-11"},{"slug":"sentra","name":"Sentra","hq":"New York, NY, USA / Tel Aviv, Israel","founded":2021,"sizeTier":"growth","focus":"Cloud-native data security posture management platform built for petabyte-scale data estates, prioritizing sensitive data by access exposure and use in AI pipelines; independent and VC-backed.","website":"https://sentra.io","sourceUrls":["https://sentra.io"],"verifiedAt":"2026-07-11"},{"slug":"securiti","name":"Securiti","hq":"San Jose, CA, USA","founded":2019,"sizeTier":"growth","focus":"Data security, privacy, and AI governance platform (marketed as a \"DataAI Command Platform\") spanning DSPM alongside broader compliance automation; became a wholly owned subsidiary of Veeam when its ~$1.725B acquisition closed in December 2025, continuing to operate under the Securiti brand.","website":"https://securiti.ai","sourceUrls":["https://securiti.ai"],"verifiedAt":"2026-07-11"},{"slug":"thales","name":"Thales","hq":"La Défense, France","sizeTier":"giant","focus":"French aerospace, defense, and technology conglomerate whose data security business — sold through its Cloud Protection & Licensing division — centers on the CipherTrust Data Security Platform and Luna hardware security modules, built from its 2016 Vormetric and 2019 Gemalto acquisitions; also owns Imperva since 2023.","website":"https://www.thalesgroup.com","sourceUrls":["https://www.thalesgroup.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Vormetric","year":2016},{"name":"Gemalto","year":2019},{"name":"Imperva","year":2023}]},{"slug":"fortanix","name":"Fortanix","hq":"Santa Clara, CA, USA","founded":2016,"sizeTier":"growth","focus":"Confidential-computing-based data security vendor selling key management, tokenization, and secrets management through its Data Security Manager and unified Armor platform; independent and VC-backed.","website":"https://www.fortanix.com","sourceUrls":["https://www.fortanix.com"],"verifiedAt":"2026-07-11"},{"slug":"amazon","name":"Amazon Web Services","hq":"Seattle, WA, USA","founded":2006,"sizeTier":"giant","focus":"Amazon's cloud infrastructure and platform services division, spanning compute, storage, and a broad built-in security portfolio including key management, identity, and threat detection services.","website":"https://aws.amazon.com","sourceUrls":["https://aws.amazon.com"],"verifiedAt":"2026-07-11"},{"slug":"google","name":"Google Cloud","hq":"Mountain View, CA, USA","sizeTier":"giant","focus":"Alphabet's cloud computing division, offering infrastructure and platform services alongside a native security portfolio spanning key management, workload identity, and (since 2026) the acquired Wiz cloud security platform.","website":"https://cloud.google.com","sourceUrls":["https://cloud.google.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Wiz","year":2026}]},{"slug":"keyfactor","name":"Keyfactor","hq":"Independence, OH, USA","founded":2001,"sizeTier":"large","focus":"PKI-as-a-service and certificate lifecycle orchestration, built around the Keyfactor Command platform and the open-source EJBCA certificate authority; PE-backed.","website":"https://www.keyfactor.com","sourceUrls":["https://www.keyfactor.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"PrimeKey (EJBCA)","year":2021}]},{"slug":"digicert","name":"DigiCert","hq":"Lehi, UT, USA","founded":2003,"sizeTier":"giant","focus":"Digital trust provider and one of the world's largest public certificate authorities, spanning public TLS certificates, PKI, and certificate lifecycle management; PE-owned.","website":"https://www.digicert.com","sourceUrls":["https://www.digicert.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Symantec Website Security","year":2017}]},{"slug":"sectigo","name":"Sectigo","hq":"Roseland, NJ, USA","founded":1998,"sizeTier":"large","focus":"Certificate authority and cloud-native certificate lifecycle management vendor, formerly Comodo CA before its 2018 rebrand.","website":"https://www.sectigo.com","sourceUrls":["https://www.sectigo.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Entrust public certificate business","year":2025}]},{"slug":"appviewx","name":"AppViewX","hq":"New York, NY, USA","founded":2008,"sizeTier":"growth","focus":"Certificate lifecycle automation and machine identity management via the AVX ONE platform; majority-acquired by Haveli Investments in a deal completed in 2025.","website":"https://www.appviewx.com","sourceUrls":["https://www.appviewx.com"],"verifiedAt":"2026-07-11"},{"slug":"smallstep","name":"Smallstep","hq":"San Francisco, CA, USA","founded":2016,"sizeTier":"startup","focus":"Open-source PKI and device identity company behind step-ca and the step CLI, selling a hosted Certificate Manager on top.","website":"https://smallstep.com","sourceUrls":["https://smallstep.com"],"verifiedAt":"2026-07-11"},{"slug":"splunk","name":"Splunk","hq":"San Francisco, CA, USA","founded":2003,"sizeTier":"giant","focus":"Log analytics and SIEM pioneer whose platform spans security and observability; a wholly owned Cisco subsidiary since the $28B acquisition closed in March 2024, still operating under the Splunk brand.","website":"https://www.splunk.com","sourceUrls":["https://www.splunk.com"],"verifiedAt":"2026-07-11"},{"slug":"elastic","name":"Elastic","hq":"Amsterdam, Netherlands / Mountain View, CA, USA","founded":2012,"sizeTier":"large","focus":"Company behind Elasticsearch and the Elastic Stack (NYSE: ESTC), selling search, observability, and security analytics on one data platform; re-added the OSI-approved AGPL as a source-license option in 2024 alongside its own Elastic License.","website":"https://www.elastic.co","sourceUrls":["https://www.elastic.co"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Endgame","year":2019}]},{"slug":"sumo-logic","name":"Sumo Logic","hq":"Redwood City, CA, USA","founded":2010,"sizeTier":"growth","focus":"Cloud-native log analytics and SIEM vendor; taken private by Francisco Partners in a $1.7B deal that closed in May 2023 and still PE-owned as of mid-2026.","website":"https://www.sumologic.com","sourceUrls":["https://www.sumologic.com"],"verifiedAt":"2026-07-11"},{"slug":"datadog","name":"Datadog","hq":"New York, NY, USA","founded":2010,"sizeTier":"giant","focus":"Cloud observability platform (NASDAQ: DDOG) that has expanded sideways into security, selling SIEM, cloud security, and application security products on the same agent and data platform DevOps teams already run.","website":"https://www.datadoghq.com","sourceUrls":["https://www.datadoghq.com"],"verifiedAt":"2026-07-11"},{"slug":"exabeam","name":"Exabeam","hq":"Foster City, CA, USA","founded":2013,"sizeTier":"growth","focus":"SIEM and behavior-analytics vendor that merged with LogRhythm in July 2024 under Thoma Bravo's orchestration, keeping the Exabeam name while continuing to sell and develop the LogRhythm SIEM line.","website":"https://www.exabeam.com","sourceUrls":["https://www.exabeam.com"],"verifiedAt":"2026-07-11"},{"slug":"securonix","name":"Securonix","hq":"Addison, TX, USA","founded":2007,"sizeTier":"growth","focus":"SIEM and UEBA vendor built around behavior analytics; backed by a $1B+ Vista Equity Partners growth investment since 2022, and acquired threat-intel platform ThreatQuotient in 2025.","website":"https://www.securonix.com","sourceUrls":["https://www.securonix.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"ThreatQuotient","year":2025}]},{"slug":"panther-labs","name":"Panther Labs","hq":"San Francisco, CA, USA","founded":2018,"sizeTier":"growth","focus":"Cloud-native, detection-as-code SIEM built on a security data lake; Databricks announced an agreement to acquire the company in June 2026, with the deal not yet closed as of July 2026.","website":"https://panther.com","sourceUrls":["https://panther.com"],"verifiedAt":"2026-07-11"},{"slug":"tines","name":"Tines","hq":"Dublin, Ireland","founded":2018,"sizeTier":"growth","focus":"No-code workflow automation platform with roots in security orchestration, increasingly sold for IT and general operations automation as well; independent and VC-backed, valued at $1.125B after a 2025 Series C.","website":"https://www.tines.com","sourceUrls":["https://www.tines.com"],"verifiedAt":"2026-07-11"},{"slug":"torq","name":"Torq","hq":"Tel Aviv, Israel / Denver, CO, USA","founded":2020,"sizeTier":"growth","focus":"Security 'hyperautomation' vendor positioning its AI-driven workflow and autonomous-SOC platform against first-generation SOAR products; independent and VC-backed, valued at $1.2B after a January 2026 Series D.","website":"https://torq.io","sourceUrls":["https://torq.io"],"verifiedAt":"2026-07-11"},{"slug":"swimlane","name":"Swimlane","hq":"Denver, CO, USA","founded":2015,"sizeTier":"growth","focus":"Low-code security automation and SOAR vendor whose Turbine platform pairs workflow automation with case management for security operations teams; independent and VC-backed.","website":"https://swimlane.com","sourceUrls":["https://swimlane.com"],"verifiedAt":"2026-07-11"},{"slug":"shuffle","name":"Shuffle","hq":"Oslo, Norway","founded":2019,"sizeTier":"startup","focus":"Small company behind the open-source Shuffle security automation platform, selling hosted cloud and enterprise support tiers on top of the free AGPL-licensed self-hosted core.","website":"https://shuffler.io","sourceUrls":["https://shuffler.io"],"verifiedAt":"2026-07-11"},{"slug":"recorded-future","name":"Recorded Future","hq":"Somerville, MA, USA","founded":2009,"sizeTier":"large","focus":"Threat intelligence provider combining automated collection across the open, deep, and dark web with research from its Insikt Group analysts; a Mastercard subsidiary since December 2024.","website":"https://www.recordedfuture.com","sourceUrls":["https://www.recordedfuture.com"],"verifiedAt":"2026-07-11"},{"slug":"anomali","name":"Anomali","hq":"Redwood City, CA, USA","founded":2013,"sizeTier":"growth","focus":"Threat intelligence platform vendor (founded as ThreatStream, renamed in 2016) that aggregates, deduplicates, and operationalizes intel feeds, expanding into AI-driven security analytics; independent and VC-backed.","website":"https://www.anomali.com","sourceUrls":["https://www.anomali.com"],"verifiedAt":"2026-07-11"},{"slug":"flashpoint","name":"Flashpoint","hq":"New York, NY, USA","founded":2010,"sizeTier":"growth","focus":"Threat intelligence vendor specializing in visibility into illicit online communities — cybercrime forums, ransomware operations, fraud markets; majority-owned by Audax Private Equity since 2021.","website":"https://flashpoint.io","sourceUrls":["https://flashpoint.io"],"verifiedAt":"2026-07-11"},{"slug":"filigran","name":"Filigran","hq":"Paris, France","founded":2022,"sizeTier":"growth","focus":"French company behind the open-source OpenCTI threat intelligence platform and OpenBAS breach-simulation project, selling enterprise editions and hosted versions of both; VC-backed with roughly $125M raised.","website":"https://filigran.io","sourceUrls":["https://filigran.io"],"verifiedAt":"2026-07-11"},{"slug":"strangebee","name":"StrangeBee","hq":"Paris, France","founded":2018,"sizeTier":"startup","focus":"Company founded by the creators of TheHive open-source incident response platform, now developing and selling TheHive 5 as a commercial product while maintaining the open-source Cortex analysis engine.","website":"https://strangebee.com","sourceUrls":["https://strangebee.com"],"verifiedAt":"2026-07-11"},{"slug":"qualys","name":"Qualys","hq":"Foster City, CA, USA","founded":1999,"sizeTier":"large","focus":"SaaS security vendor (NASDAQ: QLYS) offering vulnerability management and compliance scanning through a shared cloud agent and platform.","website":"https://www.qualys.com","sourceUrls":["https://www.qualys.com"],"verifiedAt":"2026-07-11"},{"slug":"runzero","name":"runZero","hq":"Austin, TX, USA","founded":2018,"sizeTier":"startup","focus":"Asset discovery and exposure management company co-founded by Metasploit creator HD Moore; Accenture announced an agreement to acquire it in 2026 as part of a broader OT-security push, with the deal expected to close later that year.","website":"https://www.runzero.com","sourceUrls":["https://www.runzero.com"],"verifiedAt":"2026-07-11"},{"slug":"censys","name":"Censys","hq":"Ann Arbor, MI, USA","founded":2017,"sizeTier":"growth","focus":"Internet intelligence company spun out of University of Michigan research, continuously scanning the whole internet to power its search engine and attack surface management products; independent, raising $70M in 2026.","website":"https://censys.com","sourceUrls":["https://censys.com"],"verifiedAt":"2026-07-11"},{"slug":"pentera","name":"Pentera","hq":"Burlington, MA, USA","founded":2015,"sizeTier":"growth","focus":"Automated security validation vendor (founded in Israel as Pcysys) whose platform safely runs real attack techniques against production environments to prove which exposures are actually exploitable; independent, passing $100M ARR in 2026.","website":"https://pentera.io","sourceUrls":["https://pentera.io"],"verifiedAt":"2026-07-11"},{"slug":"safebreach","name":"SafeBreach","hq":"Sunnyvale, CA, USA","founded":2014,"sizeTier":"growth","focus":"Breach and attack simulation pioneer whose platform continuously replays a large library of real attacker techniques against a customer's defenses to measure what gets blocked or detected; independent and VC-backed, with a $53.5M Series D closed in November 2021 as its most recent major round.","website":"https://www.safebreach.com","sourceUrls":["https://www.safebreach.com"],"verifiedAt":"2026-07-11"},{"slug":"greenbone","name":"Greenbone","hq":"Osnabrück, Germany","founded":2008,"sizeTier":"growth","focus":"German vulnerability management company (Greenbone AG) that maintains the open-source OpenVAS scanner and sells enterprise appliances and a commercial feed on top of the free Greenbone Community Edition.","website":"https://www.greenbone.net","sourceUrls":["https://www.greenbone.net"],"verifiedAt":"2026-07-11"},{"slug":"magnet-forensics","name":"Magnet Forensics","hq":"Waterloo, Ontario, Canada","founded":2010,"sizeTier":"large","focus":"Digital forensics vendor serving law enforcement and enterprise investigators; taken private by Thoma Bravo in 2023 and merged with mobile-forensics maker Grayshift, whose GrayKey products it now sells alongside its own.","website":"https://www.magnetforensics.com","sourceUrls":["https://www.magnetforensics.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Grayshift (merger)","year":2023}]},{"slug":"binalyze","name":"Binalyze","hq":"Tallinn, Estonia","founded":2018,"sizeTier":"startup","focus":"Digital forensics and incident response automation company whose AIR platform collects and analyzes forensic evidence from endpoints at enterprise speed; independent and VC-backed.","website":"https://binalyze.com","sourceUrls":["https://binalyze.com"],"verifiedAt":"2026-07-11"},{"slug":"offsec","name":"OffSec","hq":"New York, NY, USA","founded":2007,"sizeTier":"growth","focus":"Security training and certification company (formerly Offensive Security) behind the OSCP certification and the Kali Linux penetration-testing distribution it maintains and funds.","website":"https://www.offsec.com","sourceUrls":["https://www.offsec.com"],"verifiedAt":"2026-07-11"},{"slug":"vanta","name":"Vanta","hq":"San Francisco, CA, USA","founded":2018,"sizeTier":"large","focus":"Compliance automation platform that continuously monitors and evidences security controls for frameworks like SOC 2, ISO 27001, and HIPAA; independent and VC-backed, valued at $4.15B after a July 2025 Series D.","website":"https://www.vanta.com","sourceUrls":["https://www.vanta.com"],"verifiedAt":"2026-07-11"},{"slug":"drata","name":"Drata","hq":"San Diego, CA, USA","founded":2020,"sizeTier":"growth","focus":"Continuous compliance automation platform for frameworks like SOC 2 and ISO 27001, competing directly with Vanta on control monitoring and audit evidence collection; independent and VC-backed, valued at $2B in its December 2022 Series C.","website":"https://drata.com","sourceUrls":["https://drata.com"],"verifiedAt":"2026-07-11"},{"slug":"secureframe","name":"Secureframe","hq":"San Francisco, CA, USA","founded":2020,"sizeTier":"growth","focus":"Compliance automation platform that monitors security controls and collects audit evidence across frameworks including SOC 2 and ISO 27001; independent and VC-backed.","website":"https://secureframe.com","sourceUrls":["https://secureframe.com"],"verifiedAt":"2026-07-11"},{"slug":"onetrust","name":"OneTrust","hq":"Atlanta, GA, USA","founded":2016,"sizeTier":"large","focus":"Broad governance, risk, and compliance platform spanning privacy management, third-party risk, and IT risk automation; sold its Ethics & Compliance business unit to EQS Group in 2024 but remains independent and VC-backed, last valued at $4.5B in 2023.","website":"https://www.onetrust.com","sourceUrls":["https://www.onetrust.com"],"verifiedAt":"2026-07-11"},{"slug":"servicenow","name":"ServiceNow","hq":"Santa Clara, CA, USA","founded":2004,"sizeTier":"giant","focus":"Enterprise workflow and IT service management platform (NYSE: NOW) whose Integrated Risk Management (IRM) line — renamed from GRC in 2023 but still marketed under GRC-branded apps — extends the same platform into policy, risk, and compliance automation.","website":"https://www.servicenow.com","sourceUrls":["https://www.servicenow.com"],"verifiedAt":"2026-07-11"},{"slug":"optro","name":"Optro","hq":"Cerritos, CA, USA","founded":2014,"sizeTier":"large","focus":"Connected risk platform for internal audit, SOX compliance, and enterprise risk teams; acquired by European private equity firm Hg for more than $3B in a deal announced May 2024, then rebranded from AuditBoard to Optro in March 2026.","website":"https://optro.ai","sourceUrls":["https://optro.ai"],"verifiedAt":"2026-07-11"},{"slug":"hyperproof","name":"Hyperproof","hq":"Seattle, WA, USA","founded":2018,"sizeTier":"growth","focus":"Compliance operations platform for managing controls, evidence, and risk across multiple frameworks from one workspace; independent and VC-backed, having raised a $40M growth round in 2023.","website":"https://hyperproof.io","sourceUrls":["https://hyperproof.io"],"verifiedAt":"2026-07-11"},{"slug":"eramba","name":"Eramba","hq":"London, UK / Bratislava, Slovakia","founded":2007,"sizeTier":"startup","focus":"Small, privately held company behind the eramba GRC platform, offering a free-to-use Community Edition under a custom non-redistributable license alongside paid Enterprise tiers.","website":"https://www.eramba.org","sourceUrls":["https://www.eramba.org"],"verifiedAt":"2026-07-11"},{"slug":"knowbe4","name":"KnowBe4","hq":"Clearwater, FL, USA","founded":2010,"sizeTier":"large","focus":"Security awareness training and human risk management pioneer; taken private by Vista Equity Partners in a $4.6B deal that closed in February 2023, and expanded into email security through its 2024 acquisition of Egress.","website":"https://www.knowbe4.com","sourceUrls":["https://www.knowbe4.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Egress","year":2024}]},{"slug":"hoxhunt","name":"Hoxhunt","hq":"Helsinki, Finland","founded":2016,"sizeTier":"growth","focus":"Human risk management platform combining adaptive phishing simulation with personalized micro-training; independent and VC-backed.","website":"https://hoxhunt.com","sourceUrls":["https://hoxhunt.com"],"verifiedAt":"2026-07-11"},{"slug":"sosafe","name":"SoSafe","hq":"Cologne, Germany","founded":2018,"sizeTier":"growth","focus":"European security awareness and human risk management platform combining training content, phishing simulation, and behavior analytics; independent and VC-backed.","website":"https://sosafe-awareness.com","sourceUrls":["https://sosafe-awareness.com"],"verifiedAt":"2026-07-11"},{"slug":"ninjio","name":"NINJIO","hq":"Westlake Village, CA, USA","founded":2015,"sizeTier":"growth","focus":"Security awareness training vendor known for short, Hollywood-style animated microlearning episodes; received a strategic growth investment from Gauge Capital in 2021.","website":"https://ninjio.com","sourceUrls":["https://ninjio.com"],"verifiedAt":"2026-07-11"},{"slug":"mimecast","name":"Mimecast","hq":"London, UK / Lexington, MA, USA","founded":2003,"sizeTier":"large","focus":"Email and human risk security vendor spanning secure email gateway, brand protection, and — following its 2024 acquisitions of Elevate Security, Code42, and Aware — collaboration-tool risk monitoring under a human risk management platform; taken private by Permira in a $5.8B deal that closed in May 2022.","website":"https://www.mimecast.com","sourceUrls":["https://www.mimecast.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Elevate Security","year":2024},{"name":"Code42","year":2024},{"name":"Aware","year":2024}]},{"slug":"abnormal-ai","name":"Abnormal AI","hq":"San Francisco, CA, USA","founded":2018,"sizeTier":"large","focus":"Behavioral AI email security vendor that baselines normal communication patterns to catch business email compromise and payload-free social engineering; renamed from Abnormal Security to Abnormal AI in April 2025, and independent and VC-backed, valued at $5.1B after an August 2024 Series D.","website":"https://abnormal.ai","sourceUrls":["https://abnormal.ai"],"verifiedAt":"2026-07-11"},{"slug":"sublime-security","name":"Sublime Security","hq":"Washington, D.C., USA","founded":2019,"sizeTier":"growth","focus":"Email security platform built around a transparent, editable detection engine rather than an opaque vendor model; independent and VC-backed, raising a $60M Series B in December 2024.","website":"https://sublime.security","sourceUrls":["https://sublime.security"],"verifiedAt":"2026-07-11"},{"slug":"material-security","name":"Material Security","hq":"Redwood City, CA, USA","founded":2017,"sizeTier":"growth","focus":"Cloud email and workspace security vendor focused on post-delivery protection inside Google Workspace and Microsoft 365; independent and venture-backed.","website":"https://material.security","sourceUrls":["https://material.security"],"verifiedAt":"2026-07-11"},{"slug":"barracuda","name":"Barracuda Networks","hq":"Campbell, CA, USA","founded":2003,"sizeTier":"large","focus":"Security vendor for small and mid-sized organizations spanning email, application, and network protection; a KKR portfolio company since KKR acquired it from Thoma Bravo in a deal that closed in August 2022.","website":"https://www.barracuda.com","sourceUrls":["https://www.barracuda.com"],"verifiedAt":"2026-07-11"},{"slug":"logicgate","name":"LogicGate","hq":"Chicago, IL, USA","founded":2015,"sizeTier":"growth","focus":"Risk management platform (Risk Cloud) built on a no-code workflow engine that lets risk and compliance teams configure their own processes instead of adapting to a fixed data model; independent and VC-backed, having raised a $113M Series C led by PSG.","website":"https://www.logicgate.com","sourceUrls":["https://www.logicgate.com"],"verifiedAt":"2026-07-11"},{"slug":"veeam","name":"Veeam Software","hq":"Kirkland, WA, USA","founded":2006,"sizeTier":"large","focus":"Enterprise backup, disaster recovery, and data resilience across virtual, physical, cloud, and SaaS workloads via the Veeam Data Platform; relocated its US headquarters from Columbus, Ohio to Kirkland, Washington in 2024.","website":"https://www.veeam.com","sourceUrls":["https://www.veeam.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Kasten","year":2020},{"name":"Coveware","year":2024},{"name":"Alcion","year":2024}]},{"slug":"rubrik","name":"Rubrik","hq":"Palo Alto, CA, USA","founded":2014,"sizeTier":"large","focus":"Zero-trust data security and cyber recovery vendor built around immutable backups and ransomware recovery; went public on the NYSE in its 2024 IPO.","website":"https://www.rubrik.com","sourceUrls":["https://www.rubrik.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Laminar","year":2023},{"name":"Predibase","year":2025}]},{"slug":"cohesity","name":"Cohesity","hq":"San Jose, CA, USA","founded":2013,"sizeTier":"large","focus":"Data security and backup platform that expanded its enterprise protection portfolio through the 2024 acquisition of Veritas's data protection business.","website":"https://www.cohesity.com","sourceUrls":["https://www.cohesity.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"Veritas enterprise data protection business","year":2024}]},{"slug":"commvault","name":"Commvault","hq":"Tinton Falls, NJ, USA","founded":1996,"sizeTier":"large","focus":"Publicly traded cyber resilience and data protection vendor; incorporated independently in 1996 from technology with Bell Labs roots dating to 1988, now centered on the Commvault Cloud platform.","website":"https://www.commvault.com","sourceUrls":["https://www.commvault.com"],"verifiedAt":"2026-07-11","notableAcquisitions":[{"name":"TrapX","year":2022},{"name":"Appranix","year":2024},{"name":"Clumio","year":2024},{"name":"Satori Cyber","year":2025}]},{"slug":"druva","name":"Druva","hq":"Santa Clara, CA, USA","founded":2008,"sizeTier":"growth","focus":"SaaS-native data protection vendor delivering fully managed, agentless backup and recovery entirely from its own isolated cloud.","website":"https://www.druva.com","sourceUrls":["https://www.druva.com"],"verifiedAt":"2026-07-11"},{"slug":"acronis","name":"Acronis","hq":"Schaffhausen, Switzerland / Singapore","founded":2003,"sizeTier":"growth","focus":"Integrated backup and cyber protection vendor built for MSPs, combining data protection with anti-malware and behavioral ransomware defense in a single agent.","website":"https://www.acronis.com","sourceUrls":["https://www.acronis.com"],"verifiedAt":"2026-07-11"},{"slug":"backblaze","name":"Backblaze","hq":"San Mateo, CA, USA","founded":2007,"sizeTier":"growth","focus":"Low-cost cloud backup and B2 object storage provider (NASDAQ: BLZE) known for flat-rate unlimited computer backup; went public in 2021.","website":"https://www.backblaze.com","sourceUrls":["https://www.backblaze.com"],"verifiedAt":"2026-07-11"}]}