Synack
synack.com
The Premier Platform for On-Demand Security. PTaaS Penetration Testing as a Service. Offensive Security Testing that Improves Your Security Posture Over Time One platform, many uses. Expect strategic penetration testing that provides full control and visibility, reveals patterns and deficiencies in your security program, enables organizations to improve overall security posture and provides executive-level reporting for the leadership and the board of directors. Synack’s Smart Security Testing Platform includes automation and augmented intelligence enhancements for greater attack surface coverage, continuous testing, and higher efficiency, delivering more insights into the challenges you face. The platform seamlessly orchestrates the optimal combination of human testing talent and smart scanning on a 24/7/365 basis—all under your control. As always, Synack not only deploys the elite Synack Red Team (SRT) to test your asset, but now simultaneously deploys SmartScan or integration with your company's scanner application tool. Synack’s SmartScan Product harnesses Hydra, our Platform’s proprietary scanner, to continuously discover suspected vulnerabilities for the SRT who then triage for only best-in-class results. On top of this, we provide an additional level of testing rigor through crowd-led penetration tests where the SRT researchers proactively hunt for vulnerabilities and complete compliance checklists. Using their own tools and techniques, they provide unparalleled human creativity and rigor. While leveraging the Synack platform to perform high-level, automated assessments of all apps and incentivizing the Synack Red Team to continuously and creatively stay engaged, Synack offers a unique coupling of our human intelligence and artificial intelligence, resulting in the most effective, efficient crowdsourced penetration test on the market. Also, now available on FedRAMP and the Azure Marketplace: Synack Platform delivers Penetration Testing as a Service (PTaaS)
Proofpoint
proofpoint.com
Proofpoint, Inc. is an American enterprise security company based in Sunnyvale, California that provides software as a service and products for inbound email security, outbound data loss prevention, social media, mobile devices, digital risk, email encryption, electronic discovery, and email archiving.
JupiterOne
jupiterone.com
JupiterOne is a cyber asset analysis platform for cybersecurity designed to continuously collect, connect, and analyze asset data so security teams can see and secure their entire attack surface through a single platform.
BetterCloud
bettercloud.com
BetterCloud is the market-leading SaaS management platform, enabling IT teams to eliminate up to 78% of SaaS management work. BetterCloud automates onboarding, offboarding & mid-lifecycle changes, SaaS application access & entitlements, and security policies in a multi-SaaS environment. By streamlining and automating critical work like user lifecycle processes and day-to-day operations, BetterCloud's thousands of customers enjoy greater operational efficiency and employee productivity. With 10+ years experience pioneering the SaaS Operations movement, BetterCloud now serves the world’s largest community of SaaSOps experts. As host of Altitude, the industry’s leading SaaSOps event, and publisher of the annual State of SaaSOps Report, the category’s definitive market research, BetterCloud is recognized by customers (G2) and leading analyst firms (Gartner and Forrester) as the market leader in SaaS Operations Management. For IT teams that manage multi-SaaS environments, BetterCloud automates onboarding, offboarding & mid-lifecycle changes, SaaS application access & entitlements, and security policies. Unlike Identity & Access Management solutions that require manual intervention and custom scripting, or IT Service Desk solutions that generate tickets to be manually worked, BetterCloud’s granular, powerful automation and unlimited customizable workflows complement your IAM and help desk automation to improve IT efficiency by reducing up to 78% of SaaS management work. If your IT team is scripting or manually managing access to applications, files, folders, and groups for anyone joining, leaving, or moving inside your organization, you’re throwing talent and resources you can't spare at problems BetterCloud can automate. Headquartered in New York City, with a product and engineering office in Atlanta, GA as well as innovation hubs & remote talent across the U.S., BetterCloud is backed, among others, by some of the best technology investors including Vista Equity Partners, Warburg Pincus, Bain Capital, and Accel.
Intruder
intruder.io
Intruder is an attack surface management platform that empowers organizations to discover, detect, and fix weaknesses on any vulnerable assets across their network. It provides actionable remediation advice on a continuous basis, by customizing the output of multiple industry-leading scanners using the expert advice of our in-house security team.
HostedScan
hostedscan.com
HostedScan provides 24x7 alerts and detection for security vulnerabilities. Industry-standard, open-source, vulnerability scans. Automated alerts when something changes. Manage target list manually or import automatically from providers, such as AWS, DigitalOcean, and Linode, with read-only access. Manage and audit risks with dashboarding and reporting.
Teramind
teramind.co
Teramind is the leading global provider of insider threat management, data loss prevention, and productivity and process optimization solutions powered by user behavior analytics. Serving enterprise, government and SMBs, Teramind has provided over 10,000 organizations around the world with actionable, data-backed workforce insights that reduce risk, increase productivity, and streamline business operations. Teramind's completely customizable platform enables businesses to bring data objectivity to their decision-making and operations. Available as an on-prem, cloud, private cloud or hybrid deployment, the Teramind platform empowers organizations to detect, prevent, and mitigate insider threats and loss of data with forensic backed evidence while providing granular behavioral data that enhances efficiency, productivity and performance.
Brandefense
brandefense.io
Brandefense is a proactive digital risk protection solution for organizations. Our AI-driven technology constantly scans the online world, including the dark, deep and surface web, to discover unknown events, automatically prioritize risks and deliver actionable intelligence you can use instantly to improve security.
Coro
coro.net
Coro is a new breed of cybersecurity platform. A single platform that secures your entire company. When you use Coro, you protect email, data, endpoint devices, cloud apps, and even user activity. With Coro, everybody can be a cybersecurity expert. Coro takes minutes to master and is designed to remove cybersecurity from your to-do list. Coro is powered by artificial intelligence that does the work for you. Our AI remediates 95% of threats, the rest you can handle with Coro’s unique One-Click-Resolve. Coro believes you have a right to enterprise-grade cybersecurity, regardless of your size. Get cybersecurity like you've never seen. Try Coro today.
CrowdStrike
crowdstrike.com
Unified cloud security, from endpoint to cloud. Stop cloud breaches and consolidate disjointed point products with the world’s only CNAPP built on a unified agent and agentless approach to cloud security for complete visibility and protection. We protect your cloud. You run your business.
Pentera
pentera.io
Pentera is the category leader for Automated Security Validation, allowing every organization to test with ease the integrity of all cybersecurity layers, unfolding true, current security exposures at any moment, at any scale. Thousands of security professionals and service providers around the world use Pentera to guide remediation and close security gaps before they are exploited. Its customers include Casey's General Stores, Emeria, LuLu International Exchange, IP Telecom PT, BrewDog, City National Bank, Schmitz Cargobull, and MBC Group. Pentera is backed by leading investors such as K1 Investment Management, Insight Partners, Blackstone, Evolution Equity Partners, and AWZ. Visit https://pentera.io/ for more information.
Recorded Future
recordedfuture.com
Recorded Future is the world’s largest threat intelligence company. Recorded Future’s Intelligence Cloud provides end-to-end intelligence across adversaries, infrastructure, and targets. Indexing the internet across the open web, dark web, and technical sources, Recorded Future provides real-time visibility into an expanding attack surface and threat landscape, empowering clients to act with speed and confidence to reduce risk and securely drive business forward. Headquartered in Boston with offices and employees around the world, Recorded Future works with over 1,800 businesses and government organizations across more than 75 countries to provide real-time, unbiased and actionable intelligence. Learn more at recordedfuture.com.
BlackFog
blackfog.com
Founded in 2015, BlackFog is a global cybersecurity company that has pioneered on-device anti data exfiltration (ADX) technology to protect companies from global security threats such as ransomware, spyware, malware, phishing, unauthorized data collection and profiling. Our ADX technology blocks threats across mobile and desktop endpoints, protecting organizations’ data and privacy, and strengthening regulatory compliance. BlackFog’s preventative approach to security recognizes the limitations of existing perimeter defense techniques and neutralizes attacks before they happen at multiple points in their lifecycle. Trusted by corporations all over the world BlackFog is redefining modern cyber security practices. There are both enterprise and personal protection versions of our software. BlackFog’s Anti Data Exfiltration (ADX) technology filters network traffic in real time and operates on layer 3 of the OSI stack. Using advanced AI based algorithms it can stop cyberattacks and prevent the exfiltration of data from a device, protecting trade secrets, personally identifiable information (PII), data theft and extortion. ADX technology automatically stops data leaving the device, without the need for human intervention. It also stops: - Communications with C2 servers - Lateral movement - Insider threats - Exfiltration to restricted countries - Data breaches - Over 99% of all ransomware BlackFog provides multiple layers of protection across all of your devices and all platforms. The platform provides complete management of all devices in the Cloud with a single agent install on each device. BlackFog is fully orchestrated by design, with no management overhead, no complex setup and operates 24/7 and requires less than 1% CPU overhead. In the interactive Enterprise console organizations can view all blocked events and activity across all devices in real time. With BlackFog’s “set it and forget it” approach, organizations do not need dedicated members of staff to monitor and respond to incoming cyberthreats. Our Virtual CISO (vCISO) offering provides all of the expertise without the hassle and expense of recruiting a full time CISO. We provide: • Access to our threat intelligence experts when you need them* • Protection from cyberattacks including ransomware thanks to our Anti Data Exfiltration (ADX) technology • A custom branded Enterprise console managed by our team of experts. • Detailed custom reporting for compliance and auditing.
runZero
runzero.com
runZero delivers the most complete security visibility possible, providing organizations the ultimate foundation for successfully managing risk and exposure. Rated number one on Gartner Peer Insights, their leading cyber asset attack surface management (CAASM) platform starts delivering insights in literally minutes, with coverage for both managed and unmanaged devices across the full spectrum of IT, OT, IoT, cloud, mobile, and remote assets. With a world-class NPS score of 82, runZero has been trusted by more than 30,000 users to improve security visibility since the company was founded by industry veterans HD Moore and Chris Kirsch. To discover the runZero Platform for yourself, start a free trial today or visit the website.
DoControl
docontrol.io
DoControl provides organizations with the automated, self-service tools they require for Software as a Service (SaaS) application data access monitoring, orchestration, and remediation. The solution uncovers all SaaS users, 3rd party collaborators, assets/metadata, OAuth apps, groups, and activity events. From there, security teams can create granular data access control policies to reduce the risk of data overexposure and exfiltration. We take a unique, customer-focused approach to the challenge of labor-intensive security risk management and data loss prevention (DLP) in SaaS. DoControl has no agents, no inline redirections, and no slow response times as commonly found in Cloud Access Security Broker (CASB) solutions.
Detectify
detectify.com
Complete External Attack Surface Management for AppSec & ProdSec teams, Start covering your external attack surface with rigorous discovery, 99.7% accurate vulnerability assessments, and accelerated remediation through actionable guidance, all from one complete standalone EASM platform.
Edgio
edg.io
Edgio (NASDAQ: EGIO) helps companies deliver online experiences and content faster, safer, and with more control. Our developer-friendly, globally scaled edge network, combined with our fully integrated application and media solutions, provide a single platform for the delivery of high-performing, secure web properties, and streaming content. Through this fully integrated platform and end-to-end edge services, companies can deliver content quicker and more securely, boosting overall revenue and business value. All services run at the edge of our private, global network with 250 Tbps of bandwidth capacity. We process 5% of all web traffic and are rapidly growing. Edgio is trusted and relied on by TD Ameritrade, Plus500, Solvay Bank, Yahoo, Shoe Carnival, Canadian Hockey League, World Champion Fantasy, Mars Wrigley, Coach, and Kate Spade.
Censys
censys.com
Censys’ Exposure Management solution arms organizations a real-time, contextualized view into all of their internet and cloud assets. This information empowers security teams to aggregate, prioritize, and remediate advanced threats and exposures. Censys offers the most up-to-date data available on the internet by conducting daily scans on the top 137 ports and top 1,440 ports in the cloud. Through Censys' dedicated infrastructure and leading Internet Map we scan 45x more services than the nearest competitor. Censys' platform covers key use cases like external attack surface management with >95% attribution accuracy, cloud asset discovery with vendor-agnostic cloud connectors, exposure & risk management, security framework & compliance, and monitoring of mergers & acquisition or subsidiary risk. See why the U.S. Government and over 50% of the Fortune 500 use Censys.
RiskProfiler
riskprofiler.io
RiskProfiler offers a comprehensive suite of products for Continuous Threat Exposure Management, addressing an organization's external attack surface. These include the Cyber RiskProfiler for cyber risk ratings, Recon RiskProfiler for External Attack Surface Management (EASM) capabilities, Cloud RiskProfiler for Cloud Attack Surface Management (CASM) that identifies actually exposed cloud resources and prioritizes risks, and Brand RiskProfiler for brand protection. Recon RiskProfiler is an advanced EASM and CASM solution with robust integrations across major cloud providers like AWS, Azure, and Google Cloud. It delivers comprehensive visibility into external cloud resources, enabling efficient identification, assessment, and management of vulnerabilities and risks. Vendor RiskProfiler is a comprehensive Cyber Risk and Vendor Risk Management solution that delivers company cyber risk ratings while enabling efficient sending, receiving, and validation of third-party vendor security questionnaires in near real-time, facilitating seamless risk assessment and communication. Brand RiskProfiler is a comprehensive brand protection solution that detects logo abuse, monitors passive phishing, identifies typosquats, enables domain takedowns, and uncovers fake apps, safeguarding organizations' digital reputation and customer trust. Cloud RiskProfiler employs advanced based on context based enriched graph data models to pinpoint and rank actually exposed external-facing assets in the cloud. Evaluating risks through a hacker's lens, it alerts on high-risk assets, fortifying the external cloud attack surface.
Scrut Automation
scrut.io
Scrut is a one-stop shop for compliance. Scrut is an automation platform that 24/7 monitors and collects evidence of an organisation’s security controls while streamlining compliance to assure audit readiness. Our software provides the fastest solution for achieving and maintaining SOC 2, ISO 27001, HIPAA, PCI, or GDPR compliance in a single place so that you can focus on your business and leave compliance to us. Scrut handles all the infosec compliance standards and internal SOPs in a single-window dashboard. Scrut automatically maps the evidence to applicable clauses across multiple standards while eliminating redundant and repetitive tasks – saving your money and time.
Cymulate
cymulate.com
Cymulate is a leading Security Validation Platform based on the industry's most comprehensive and user-friendly Breach and Attack Simulation technology. We empower security teams to continuously test and harden defenses in a dynamic threat landscape by taking the view of the attacker. Cymulate deploys within an hour, integrating with a vast tech alliance of security controls, from EDR, to email gateways, web gateways, SIEM, WAF and more across on-prem, Cloud and Kubernetes environments. Customers see increased prevention, detection and improvement to overall security posture from optimizing their existing defense investments end-to-end across the MITRE ATT&CK® framework. The platform provides out-of-the-box, expert, and threat intelligence-led risk assessments that are simple to deploy and use for all maturity levels, and are constantly updated. It also provides an open framework to create and automate red and purple teaming by generating penetration scenarios and advanced attack campaigns tailored to their unique environments and security policies.
Cyble
cyble.ai
Cyble is one of the fastest-growing threat intelligence provider. Cyble provides the fastest and most comprehensive coverage across adversaries, infrastructure, exposure, weaknesses, and targets. Cyble empowers governments and enterprises to safeguard their citizens and infrastructure by providing critical intelligence in a timely manner and enabling rapid detection, prioritization, and remediation of security threats through its advanced capabilities for data analysis, expert insights, and automated processes.
SwordEye
swordeye.io
In late 2018, it developed the first product that provides one-time digital asset issuance, called SwordEye Recon. In this process, it served dozens of customers until 2020. Thanks to the feedback received from customers, it started to develop a new product that constantly monitors digital assets, gives alarms when necessary, and automatically discovers all sub-products and services connected to the domain. With the investment it received in the first quarter of 2020, it developed the SwordEye Attack Surface Monitoring product and started to offer a product that gives a risk letter grade with a unique risk score algorithm that explains the importance of the attack surface and offers solutions.
Deepinfo
deepinfo.com
Deepinfo has the most comprehensive Internet-wide data and has been using this data for years to empower cybersecurity of all sizes of organizations worldwide. Deepinfo also provides comprehensive threat intelligence solutions, data, and APIs to top-notch cybersecurity companies. Deepinfo Attack Surface Platform discovers all your digital assets, monitors them 24/7, detects any issues, and notifies you quickly so you can take immediate action. An all-in-one web security monitoring solution to empower your organization's cyber security.
Cybersixgill
cybersixgill.com
Cybersixgill was founded in 2014 with a single mission: To disrupt the threat intelligence sector by improving the availability of threat intelligence from the clear, deep and dark web. Fast forward a few years and our agile, automated threat intelligence solutions are helping security teams fight cyber crime and minimize their risk exposure by detecting phishing, data leaks, fraud and vulnerabilities, while amplifying incident response – all in real-time. Our rapidly growing customer community includes enterprises, financial services organizations, government and law enforcement entities around the globe. We have also secured a number of technology alliances and partnerships with leading organizations. Today, Cybersixgill has over 100 employees in Israel, North America, EMEA and APAC.
Ceeyu
ceeyu.io
The Ceeyu SaaS platform periodically performs automated scans and risk analysis of the digital footprint of companies (aka Attack Surface Management or ASM) and their suppliers or partners (aka Third Party Risk Management). Because not all security risks can be identified in an automated manner, Ceeyu also offers the possibility to carry out questionnaire-based audits. This can be done by creating questionnaires tailored to the supplier, from a white sheet or starting from templates that Ceeyu makes available. The completion of the questionnaire by the supplier and the follow-up of the process by the customer is done in a secure environment on the same SaaS platform. This enables a simple, central follow-up, entirely online and without the intervention of third parties. The closed platform guarantees the confidentiality of the survey, since only authorized persons have access to the application.
Red Sift
redsift.com
Red Sift enables organizations to anticipate, respond to, and recover from cyber attacks while continuing to operate effectively. The award-winning Red Sift application suite is the only integrated solution that combines four interoperable applications, internet-scale cybersecurity intelligence, and innovative generative AI that puts organizations on a robust path to cyber resilience. Red Sift is a global organization with offices in North America, Australia, Spain, and the UK. It boasts a global client base across all industries, including Domino’s, ZoomInfo, Athletic Greens, Pipedrive, and top global law firms. Red Sift is also a trusted partner of Entrust, Microsoft, Cisco and Validity, among others. Learn more at redsift.com.
Informer
informer.io
Informer's External Attack Surface Management (EASM) and Pen Testing platform help CISOs, CTOs and IT teams map external assets and identify vulnerabilities in real time so they can be remediated before attackers can exploit them. The Informer.io platform provides 24/7, 365 automated security monitoring that helps you assess the risks relating to known and unknown assets, so you can take immediate action to protect and secure your valuable data. Integrated pentesting enables our team of ethical hackers to enhance automated security testing using manual pentesting for a more in-depth and detailed vulnerability assessment. Combining the power of automation and manual security testing we help our clients continuously map their attack surface, manage vulnerabilities, and remediate faster. Informer is a CREST accredited company operating at the highest security testing standards with a constant push to keep innovating.
Halo Security
halosecurity.com
Security testing for the modern attack surface. Our agentless vulnerability scanning and discovery solutions, combined with manual penetration testing services, help thousands of organizations gain full visibility into the risk posture of their websites and applications.
Glasstrail
glasstrail.com
Glasstrail does all the hard work of identifying weaknesses in your external attack surface before bad actors do. Weekly scans prioritise issues as digestible actions. Track progress via the dashboard and get alerts sent to your tool of choice - so you can focus on remediation. “Previously, we didn’t have the whole picture of our information security risks. With Glasstrail, we have a tool that locates vulnerabilities, tells us whether it’s a high-priority risk, and allows us to protect our data and systems. It’s a very efficient way to find risks as the intelligence built into Glasstrail does all the work.” Chief Security Officer, Teaching Council.
© 2025 WebCatalog, Inc.