SourceLevel
sourcelevel.io
SourceLevel is a SaaS product that helps developers, managers, CTOs, and all companies with visibility on their development flow by using metrics and providing automated code review. It's Analytics for software development. Stop the guesswork, and start making data-based decisions.
GuardRails
guardrails.io
GuardRails is an end-to-end security platform that makes AppSec easier for both security and development teams. We scan, detect, and provide real-time guidance to fix vulnerabilities early. Trusted by hundreds of teams around the world to build safer apps, GuardRails integrates seamlessly into the developers’ workflow, quietly scans as they code, and shows how to fix security issues on the spot via Just-in-Time training. GuardRails commits to keeping the noise low and only reporting high-impact vulnerabilities that are relevant to your organization. GuardRails helps organizations shift security everywhere and build a strong DevSecOps pipeline, so they can go faster to market without risking security.
Detectify
detectify.com
Complete External Attack Surface Management for AppSec & ProdSec teams, Start covering your external attack surface with rigorous discovery, 99.7% accurate vulnerability assessments, and accelerated remediation through actionable guidance, all from one complete standalone EASM platform.
SOOS
soos.io
Application Security Posture Management Platform Your organization’s application security posture should be more than just a checklist. SOOS’s ASPM is a dynamic, comprehensive approach to safeguarding your application infrastructure from vulnerabilities across the Software Development Life Cycle (SDLC) and live deployments. All in one dashboard.
Escape
escape.tech
Find and fix GraphQL security flaws at scale within your DevSecOps process. Leverage the new generation DAST & ASM for early, real-time Business Logic vulnerability detection and remediation in GraphQL, enhancing security from development to deployment.
Trickest
trickest.com
Trickest provides an innovative approach to offensive cybersecurity automation and asset and vulnerability discovery. Its platform combines extensive adversary tactics and techniques with full transparency, hyper customization, and hyper scalability, making it the go-to platform for offensive security operations.
Strobes
strobes.co
Empower your business with complete visibility and control over your application security posture. Eliminate blind spots, prioritize threats effectively, and streamline remediation. Strobes ASPM Advantage: 1. Immediate efficiency boosts for both security and development teams, thanks to streamlined processes and clear visibility. 2. Effective security management, achieved through advanced automation and enhanced process visibility. 3. Environment-specific risk prioritization, ensuring that security efforts are aligned with your unique risk landscape 4. Quick risk mitigation, supported by automated guardrails and sustained compliance efforts. 5. Improved cross-departmental collaboration, fostering a culture of security and efficiency.
CyCognito
cycognito.com
CyCognito is a cybersecurity solution designed to help organizations discover, test, and prioritize security issues across their digital landscape. By leveraging advanced artificial intelligence, CyCognito scans billions of websites, cloud applications, and APIs to identify potential vulnerabilities and critical risks. This proactive approach enables organizations to address security concerns before they can be exploited by malicious actors, thereby enhancing their overall security posture. The target audience for CyCognito includes emerging companies, government agencies, and Fortune 500 organizations, all of which face increasing threats in today's digital environment. These entities require robust security measures to protect sensitive data and maintain compliance with various regulations. CyCognito serves as an essential tool for security teams, providing them with the insights needed to understand their risk exposure and prioritize remediation efforts effectively. One of the key features of the CyCognito platform is its comprehensive scanning capability, which covers a vast range of digital assets. This extensive reach ensures that organizations can identify vulnerabilities across all their online presence, including third-party services and shadow IT. The platform's AI-driven analysis further enhances its effectiveness by automatically assessing the severity of identified risks, allowing security teams to focus on the most critical issues that could lead to significant breaches. In addition to risk discovery, CyCognito offers actionable guidance for remediation, helping organizations to implement effective security measures. The platform provides detailed insights into the nature of the vulnerabilities and suggests specific steps to mitigate them. This feature not only streamlines the remediation process but also empowers organizations to build a more resilient security framework over time. By integrating CyCognito into their cybersecurity strategy, organizations can significantly reduce their risk exposure and enhance their ability to respond to emerging threats. The platform's unique combination of extensive scanning, AI-driven risk assessment, and actionable remediation guidance positions it as a valuable asset for any organization looking to strengthen its security posture in an increasingly complex threat landscape.
Secure Blink
secureblink.com
Threatspy, is a developer-first, AI-powered AppSec management platform. Threatspy empowers developers and security teams to proactively identify and mitigate both known and unknown vulnerabilities in applications and APIs through automated detection, prioritization, and remediation processes. By leveraging Threatspy, organisations can enhance their security posture, reduce risk, and ensure the resilience of their digital infrastructure.
ResilientX
resilientx.com
ResilientX Security is a fast-growing Cyber Security company that helps organizations of all sizes identify, quantify and manage their cyber risks and cyber exposure. At ResilientX, we are committed to delivering state-of-the-art security solutions to help organizations safeguard their digital assets and maintain compliance. Our First-Party and Third-Party Risk and Exposure Management platform is designed for those who take security and compliance seriously.
Phidata
phidata.com
An open-source platform to build, ship and monitor agentic systems.
Contrast Security
contrastsecurity.com
Contrast Security is the world’s leader in Runtime Application Security, embedding code analysis and attack prevention directly into software. Contrast’s patented security instrumentation disrupts traditional AppSec approaches with integrated and comprehensive security observability that delivers highly accurate assessment and continuous protection of an entire application portfolio. The Contrast Runtime Security Platform enables powerful Application Security Testing and Application Detection and Response, allowing developers, AppSec teams, and SecOps teams to better protect and defend their applications against the ever-evolving threat landscape. Application Security programs need to modernize and Contrast empowers teams to innovate with confidence.
DerSecur
derscanner.com
DerScanner is a complete application security testing solution to eliminate known and unknown code threats across Software Development Lifecycle. DerScanner static code analysis offers developers the support for 43 programming languages ensuring thorough security coverage for almost any application. DerScanner's SAST uniquely analyzes both source and binary files, revealing hidden vulnerabilities that are often missed in standard scans. This is especially crucial for legacy applications or when source code access is limited. DerScanner’s DAST feature mimics an external attacker, similar to penetration testing. This is vital for finding vulnerabilities that only appear when the application is operational. DAST in DerScanner enriches SAST findings by cross-checking and correlating vulnerabilities detected by both methods. With DerScanner Software Composition Analysis you can gain critical insights into open-source components and dependencies in your projects. It helps identify vulnerabilities early and ensures compliance with licensing terms, reducing legal risks. DerScanner's Supply Chain Security continuously monitors public repositories, evaluating the security posture of each package. This allows you to make informed decisions about using open-source components in your applications.
Jit
jit.io
Jit's Open ASPM Platform is the easiest way to secure your code and cloud, providing full application and cloud security coverage in minutes. Tailor a developer security toolchain to your use case and implement it across your repos in a few clicks.
GlitchSecure
glitchsecure.com
GlitchSecure helps companies secure their products and infrastructure through real-time continuous security testing.
Trava Security
travasecurity.com
More than a GRC tool, we're your compliance experts. Simplifying processes, freeing your time and resources, fueling your business growth. Unlock the power of Vulnerability Management Software and vCISO Services to fortify your organization against cyber threats while safeguarding your digital assets. Our integrated solutions offer comprehensive support for compliance frameworks including SOC2, ISO 27001, GDPR, CCPA, FedRAMP, CMMC, and more, along with expert security program management. Achieve compliance effortlessly and bolster your security posture with our trusted services.
GitGuardian
gitguardian.com
The new ways of building software create the necessity to support new vulnerabilities and new remediation workflows. These needs have emerged so abruptly that they have given rise to a young and highly fragmented DevSecOps tooling market. Solutions are specialized based on the type of vulnerabilities being addressed: SAST, DAST, IAST, RASP, SCA, Secrets Detection, Container Security, and Infrastructure as Code Security. However, the market is fragmented and tools are not well-integrated into the developers’ workflow. GitGuardian, founded in 2017 by Jérémy Thomas and Eric Fourrier, has emerged as the leader in secrets detection and is now focused on providing a holistic code security platform while enabling the Shared Responsibility Model of AppSec. The company has raised a $56M total investment to date. With more than 150K installs, GitGuardian is the n°1 security application on the GitHub Marketplace. Its enterprise-grade features truly enable AppSec and Development teams in a collaborative manner to deliver a secret-free code. Its detection engine is based on 350 detectors able to catch secrets in both public and private repositories and containers at every step of the CI/CD pipeline.
Conviso
convisoappsec.com
Conviso Platform has got the whole security pipeline covered to empower developers to build secure applications. Because Security shouldn't be an isolated part of your development pipeline — it should be an ongoing, collaborative activity between all teams. Conviso now presents five products within its platform to help you in this mission.
Data Theorem
datatheorem.com
RamQuest’s solutions include our fully integrated closing, escrow accounting, imaging, transaction management, esigning, and digital marketplace solutions and are available on-premise or in a hosted environment
Bright Security
brightsec.com
Bright Security’s dev-centric DAST platform empowers both developers and AppSec professionals with enterprise-grade security testing capabilities for web applications, APIs, and GenAI and LLM applications. Bright knows how to deliver the right tests, at the right time in the SDLC, in developers and AppSec tools and stacks of choice with minimal false positives and alert fatigue.
OnSecurity
onsecurity.io
OnSecurity is a leading CREST-accredited penetration testing vendor based in the UK, dedicated to delivering high-impact, high-intelligence penetration testing services to businesses of all sizes. By simplifying the management and delivery of pentesting, we make it easier for organisations to enhance their security posture and mitigate risks, contributing to a safer, more secure digital environment for everyone. Pentesting, Vulnerability Scanning and Threat Intelligence all in one platform. Start your offensive cyber security journey today: https://www.onsecurity.io/
CrowdSec
crowdsec.net
CrowdSec is an open-source security stack that detects aggressive behaviors and prevents them from accessing your systems. Its user-friendly design and ease of integration into your current security infrastructure offer a low technical entry barrier and a high-security gain. Once an unwanted behavior is detected, it is automatically blocked. The aggressive IP, scenario triggered and the timestamp is sent for curation, to avoid poisoning & false positives. If verified, this IP is then redistributed to all CrowdSec users running the same scenario. By sharing the threat they faced, all users are protecting each other.
Sysdig
sysdig.com
Sysdig Secure is our CNAPP platform that more than 700 enterprise customers use to address CNAPP, VM, CSPM, CIEM, container security and more - at enterprise scale. Our platform spans prevention, detection, and response so customers can confidently secure containers, Kubernetes, hosts/servers, and cloud services. Sysdig provides real-time visibility at scale across multiple clouds, eliminating security blind spots. We use intelligence from runtime to prioritize alerts so teams can focus on high-impact security events and improve efficiency. By understanding the entire source to response flow and suggesting guided remediation, customers can both fix issues in production with no wasted time and also detect and respond to threats in real time. With Sysdig Secure, you can: - Stop attacks up to 10x faster - Reduce vulnerabilities by up to 95% - Instantly detect risk changes - Close permissions gaps in less than 2 minutes Sysdig. Secure Every Second.
Orca Security
orca.security
The Orca Cloud Security Platform identifies, prioritizes, and remediates risks and compliance issues in workloads, configurations, and identities across your cloud estate spanning AWS, Azure, Google Cloud, Kubernetes, Alibaba Cloud, and Oracle Cloud. Orca offers the industry’s most comprehensive cloud security solution in a single platform — eliminating the need to deploy and maintain multiple point solutions. Orca is agentless-first, and connects to your environment in minutes using Orca’s patented SideScanning™ technology that provides deep and wide visibility into your cloud environment, without requiring agents. In addition, Orca can integrate with third-party agents for runtime visibility and protection for critical workloads. Orca is at the forefront of leveraging Generative AI for simplified investigations and accelerated remediation – reducing required skill levels and saving cloud security, DevOps, and development teams time and effort, while significantly improving security outcomes. As a Cloud Native Application Protection Platform (CNAPP), Orca consolidates many point solutions in one platform, including: CSPM, CWPP, CIEM, Vulnerability Management, Container and Kubernetes Security, DSPM, API Security, CDR, Multi-cloud Compliance, Shift Left Security, and AI-SPM.
Endor Labs
endorlabs.com
The Endor Labs Software Supply Chain Security Platform addresses three key software supply chain security pain points and outcomes: Open Source Code Security: Endor Labs helps engineers improve application performance and minimize attack surface by selecting and maintaining secure & high quality dependencies across the SDLC. Endor Labs replaces the existing breed of SCA solutions that lack context on code usage, thereby cutting ~80% of SCA noise so teams can focus on what matters. CI/CD Pipeline Security: Endor Labs helps you discover pipelines and shadow engineering, ensure consistent security tool coverage, monitor the posture of repositories, and implement build integrity verification, all through a single hook and policy-as-code framework integrated into your pipeline. Compliance & SBOMs: Endor Labs helps teams adhere to standards and regulations by detecting legal risk, generating and ingesting SBOMs/VEX, code signing, and align with NIST SSDF and CIS frameworks.
Hubbl Diagnostics
hubbl.com
Hubbl Diagnostics is setting the standard for Salesforce success through secure, automated, ML-driven org intelligence. - Monitor health and performance: Instantly gain a holistic view of your org. - Improve security: Pinpoint security and compliance risks. - Unlock ecosystem insights: Benchmark against industry standards. - Take action: Identify and fix your high priority issues—fast. - Streamline processes: Optimize your business process, inside Salesforce. Our solution provides the C-suite, Salesforce admins, architects, and consultants with the broadest and most actionable insights into any Salesforce org. Tackle technical debt, redundant automation, and ever-expanding org complexity to get the best return on your Salesforce investment, faster. Established in 2022, Hubbl Diagnostics is built by Uncommon Purpose (formerly Traction on Demand), a Salesforce product development and incubator firm based out of Vancouver, Canada.
Intigriti
intigriti.com
Intigriti is a rapidly growing cybersecurity company specializing in crowdsourced security services to help organizations protect themselves from cybercrime and data breaches. Our industry-leading cybersecurity platform enables companies to tap into our global community of 70,000 security researchers, who use their unique expertise to find and report vulnerabilities to protect businesses. Intigriti is trusted by some of the biggest and most interesting companies globally, including Intel, Yahoo!, and Red Bull trust our platform to reduce the risk of cyber-attacks and data breaches. Our range of complementary security testing services helps companies keep their digital assets secure and reduce the risk of damage resulting from breaches. Our solutions span: - Bug Bounty - Vulnerability Disclosure Programs (VDP) - Hybrid Pentest - Live Hacking Events - Reward Services Founded in 2016, Intigriti now has a global team of 100+ employees globally
Cloudanix
cloudanix.com
Cloudanix is a Ycombinator-backed security platform for your code, cloud, identities, and workloads. Cloudanix provides solutions for your multi-environments which may include multi-clouds, multi-accounts, multi-regions, multi-runtimes, etc Cloudanix enables organizations across industries and geographies from startups to enterprises to not just identify and mitigate, but also remediate risks and threats. Onboarding takes less than 30 minutes and just 1 click.
JFrog
jfrog.com
Deliver Trusted Software with Speed. The only software supply chain platform to give you end-to-end visibility, security, and control for automating the delivery of trusted releases. The massively scalable, hybrid JFrog Platform is open, flexible, and integrated with all the package technologies and tools comprising the software supply chain. Organizations benefit from full traceability to any type of release and deployment environment including ML models, software that runs on the edge, and software deployed in production data centers.
Panoptica
panoptica.app
Panoptica is Cisco’s powerful cloud native application protection platform that uncovers and remediates vulnerabilities during development through to production, ensuring your applications are secure and compliant. Through graph-based technology, the platform is able to unlock visual insights, critical attack paths, and speed up remediation to safeguard your modern apps across multiple hybrid cloud platforms. Visit https://www.panoptica.app Key Features: - Visibility and Context: Panoptica offers clear visibility and context by identifying attack paths and prioritizing risks, helping you make informed decisions. - Holistic and Complete Coverage: Manage your cloud-native environments effortlessly through Panoptica's integrated security platform, reducing gaps often caused by using separate siloed solutions. - Advanced Analysis: Utilize advanced attack path and root cause analysis techniques to spot potential risks from an attacker's perspective. - Agentless Scanning: Panoptica's agentless technology scans any cloud environment—Azure, AWS, GCP, Kubernetes, or a combination thereof. - Comprehensive Visualization: Map assets and relationships onto an advanced graph database for a complete visual representation of your cloud stack. Benefits - Advanced CNAPP: Panoptica enhances Cloud Native Application Protection Platform capabilities. - Multi-Cloud Compliance: Ensure compliance across various cloud platforms. - End-to-End Visualization: Gain insights into your entire cloud application stack. - Dynamic Remediation: Employ dynamic techniques to resolve issues effectively. - Increased Efficiency: Streamline security processes and reduce response times. - Reduced Overheads: Minimize resource expenditure while optimizing security.
© 2025 WebCatalog, Inc.