GitLab
gitlab.com
GitLab is a web-based DevOps lifecycle tool that provides a Git-repository manager providing wiki, issue-tracking and continuous integration and deployment pipeline features, using an open-source license, developed by GitLab Inc. The software was created by Ukrainian developers Dmitriy Zaporozhets and Valery Sizov.The code was originally written in Ruby, with some parts later rewritten in Go, initially as a source code management solution to collaborate within a team on software development. It later evolved to an integrated solution covering the software development life cycle, and then to the whole DevOps life cycle. The current technology stack includes Go, Ruby on Rails and Vue.js. It follows an open-core development model where the core functionality is released under an open-source (MIT) license while the additional functionality is under a proprietary license.
Codacy
codacy.com
Codacy Helps Build High Quality, Secure Applications. You can get up and running effortlessly and start increasing quality, test coverage, and security today. Codacy is a plug-and-play solution to quickly onboard and scale your team’s projects without hassle. - Start scanning git repos and code changes in minutes - Predictable user-based pricing model - Works with over 49 languages & frameworks
Cisco
cisco.com
Cisco Spaces is a cloud platform that connects people & things with spaces to transform buildings into smart spaces. Using the power of Cisco devices as sensors (Catalyst, Meraki, Webex) and the Spaces ecosystem, the platform aims to make buildings safe, smart, sustainable, and seamless. Cisco Spaces harnesses the power of Cisco hardware and sensors (Catalyst, Meraki, Webex) making buildings safe, smart and sustainable with seamless people experiences.
Synack
synack.com
The Premier Platform for On-Demand Security. PTaaS Penetration Testing as a Service. Offensive Security Testing that Improves Your Security Posture Over Time One platform, many uses. Expect strategic penetration testing that provides full control and visibility, reveals patterns and deficiencies in your security program, enables organizations to improve overall security posture and provides executive-level reporting for the leadership and the board of directors. Synack’s Smart Security Testing Platform includes automation and augmented intelligence enhancements for greater attack surface coverage, continuous testing, and higher efficiency, delivering more insights into the challenges you face. The platform seamlessly orchestrates the optimal combination of human testing talent and smart scanning on a 24/7/365 basis—all under your control. As always, Synack not only deploys the elite Synack Red Team (SRT) to test your asset, but now simultaneously deploys SmartScan or integration with your company's scanner application tool. Synack’s SmartScan Product harnesses Hydra, our Platform’s proprietary scanner, to continuously discover suspected vulnerabilities for the SRT who then triage for only best-in-class results. On top of this, we provide an additional level of testing rigor through crowd-led penetration tests where the SRT researchers proactively hunt for vulnerabilities and complete compliance checklists. Using their own tools and techniques, they provide unparalleled human creativity and rigor. While leveraging the Synack platform to perform high-level, automated assessments of all apps and incentivizing the Synack Red Team to continuously and creatively stay engaged, Synack offers a unique coupling of our human intelligence and artificial intelligence, resulting in the most effective, efficient crowdsourced penetration test on the market. Also, now available on FedRAMP and the Azure Marketplace: Synack Platform delivers Penetration Testing as a Service (PTaaS)
Pentest Tools
pentest-tools.com
Pentest-Tools.com is a cloud-based toolkit for offensive security testing, focused on web applications and network penetration testing.
Qualys
qualys.com
Qualys VMDR is an all-in-one risk-based vulnerability management solution that quantifies cyber risk. It gives organizations unprecedented insights into their risk posture and provides actionable steps to reduce risk. It also gives cybersecurity and IT teams a shared platform to collaborate, and the power to quickly align and automate no-code workflows to respond to threats with automated remediation and integrations with ITSM solutions such as ServiceNow.
Semgrep
semgrep.dev
Semgrep is a highly customizable application security platform built for security engineers and developers. Semgrep scans first and third-party code to find security issues unique to an organization, with an emphasis on surfacing actionable, low-noise, and developer friendly results at lightning speed. Semgrep's focus on confidence rating and reachability means that security teams can feel comfortable engaging developers directly in their workflows (e.g surfacing findings in PR comments), and Semgrep integrates seamlessly with CI and SCM tooling to automate these policies. With Semgrep, security teams can shift left and scale their programs with zero impact on developer velocity. With 3400+ out-of-the-box rules and the ability to easily create custom rules, Semgrep accelerates the time it takes to implement and scale a best-in-class AppSec program - all while adding value from Day 1.
Bugcrowd
bugcrowd.com
Bugcrowd is more than just a crowdsourced security company; we are a community of cybersecurity enthusiasts, united by a common purpose: to safeguard organizations from attackers. By connecting our customers with the right trusted hackers for their needs through our AI-powered platform, we empower them to take back control and stay ahead of even the most sophisticated threats. The Bugcrowd Security Knowledge Platform replaces the cost/complexity of multiple tools with a unified solution for crowdsourced pen testing as a service, managed bug bounty, managed vulnerability intake/disclosure, and attack surface management (a la carte pricing available) - with everything sharing the same infrastructure for scale, consistency, and efficiency. Bugcrowd has 10+ years of experience and 100s of customers in every industry, including OpenAI, National Australia Bank, Indeed, USAA, Twilio, and the US Department of Homeland Security.
JupiterOne
jupiterone.com
JupiterOne is a cyber asset analysis platform for cybersecurity designed to continuously collect, connect, and analyze asset data so security teams can see and secure their entire attack surface through a single platform.
Ethiack
ethiack.com
ETHIACK is an autonomous ethical hacking tool that helps organizations identify vulnerabilities in their digital infrastructure before they can be exploited. This tool combines Machine and Human Ethical Hacking techniques to provide both in-depth and broad security testing. One of the key features of ETHIACK is its External Attack Surface Management, which helps organizations gain a complete view of their entire digital exposure, including third-party services, APIs, and external tools. This allows them to identify weak points and manage their external attack surface effectively. The tool also offers Machine Ethical Hacking, which runs continuously with high accuracy in identifying vulnerabilities. Unlike traditional scanners that often produce false positives, ETHIACK's AI-powered hackers provide real-time reports with 99% accuracy. ETHIACK boasts an impressive track record, having identified over 20,000 vulnerabilities. Its team of world-class ethical hackers undergoes rigorous vetting and background checks to ensure the highest level of expertise and trustworthiness when testing critical systems. Organizations that use ETHIACK receive continuous evaluation and reports on vulnerabilities, along with detailed guides on exploitation and mitigation. This knowledge transfer helps them develop products with greater security and stay ahead of potential attacks. Overall, ETHIACK offers a comprehensive and proactive approach to ethical hacking, allowing businesses to better protect their digital assets and maintain a secure infrastructure.
Aqua Security
aquasec.com
Aqua Security stops cloud native attacks across the application lifecycle and is the only company with a $1M Cloud Native Protection Warranty to guarantee it. As the pioneer in cloud native security, Aqua helps customers reduce risk while building the future of their businesses. The Aqua Platform is the industry's most integrated Cloud Native Application Protection Platform (CNAPP), protecting the application lifecycle from code to cloud and back. Founded in 2015, Aqua is headquartered in Boston, MA and Ramat Gan, IL with Fortune 1000 customers in over 40 countries.
HostedScan
hostedscan.com
HostedScan provides 24x7 alerts and detection for security vulnerabilities. Industry-standard, open-source, vulnerability scans. Automated alerts when something changes. Manage target list manually or import automatically from providers, such as AWS, DigitalOcean, and Linode, with read-only access. Manage and audit risks with dashboarding and reporting.
Intruder
intruder.io
Intruder is an attack surface management platform that empowers organizations to discover, detect, and fix weaknesses on any vulnerable assets across their network. It provides actionable remediation advice on a continuous basis, by customizing the output of multiple industry-leading scanners using the expert advice of our in-house security team.
YesWeHack
yeswehack.com
Founded in 2015, YesWeHack is a global Bug Bounty and VDP Platform. YesWeHack offers companies an innovative approach to cybersecurity with Bug Bounty (pay-per-vulnerability discovered), connecting more than 45,000 cybersecurity experts (ethical hackers) across 170 countries with organisations to secure their exposed scopes and reporting vulnerabilities in their websites, mobile apps, infrastructure and connected devices. YesWeHack runs private (invitation based only) programs and public programs for hundreds of organisations worldwide in compliance with the strictest European regulations. In addition to the Bug Bounty platform, YesWeHack also offers: a creation and management solution for Vulnerability Disclosure Policy (VDP), a Pentest Management Platform, a learning platform for ethical hackers called Dojo and a training platform for educational institutions, YesWeHackEDU.
Maltego
maltego.com
Maltego is the world’s most used all-in-one intelligence platform for complex cyber investigations. It has empowered over one million investigations worldwide since 2008. Maltego empowers investigators worldwide to accelerate and simplify their investigations through link analysis. It is the all-in-one tool with easy data integration in a single interface, powerful visualization and collaborative capabilities to quickly zero in on relevant information. Maltego is used by a broad audience, from security professionals and pen testers to forensic investigators, investigative journalists, and market researchers. Headquartered in Munich, Maltego has grown to over 100 employees in Germany and works with customers including the Federal Bureau of Investigations, INTERPOL, and major tech and service companies including half of the DOW 30.
Brandefense
brandefense.io
Brandefense is a proactive digital risk protection solution for organizations. Our AI-driven technology constantly scans the online world, including the dark, deep and surface web, to discover unknown events, automatically prioritize risks and deliver actionable intelligence you can use instantly to improve security.
BugBase
bugbase.ai
BugBase is a Continuous Vulnerability Assessment Platform that conducts comprehensive security operations such as bug bounty programs and next-gen pentesting (VAPT) to assist startups and enterprises in effectively identifying, managing and mitigating vulnerabilities.
Pentera
pentera.io
Pentera is the category leader for Automated Security Validation, allowing every organization to test with ease the integrity of all cybersecurity layers, unfolding true, current security exposures at any moment, at any scale. Thousands of security professionals and service providers around the world use Pentera to guide remediation and close security gaps before they are exploited. Its customers include Casey's General Stores, Emeria, LuLu International Exchange, IP Telecom PT, BrewDog, City National Bank, Schmitz Cargobull, and MBC Group. Pentera is backed by leading investors such as K1 Investment Management, Insight Partners, Blackstone, Evolution Equity Partners, and AWZ. Visit https://pentera.io/ for more information.
Detectify
detectify.com
Complete External Attack Surface Management for AppSec & ProdSec teams, Start covering your external attack surface with rigorous discovery, 99.7% accurate vulnerability assessments, and accelerated remediation through actionable guidance, all from one complete standalone EASM platform.
Shield
shieldcyber.io
Shield is a continuous exposure management platform built by penetration testers and developed for security service providers. In a simple, 3-step deployment, Shield instantly shows you how an attacker could breach and take over your specific network. And tells you exactly what you need to do to remove those exposures. Shield is different from existing vulnerability management solutions in that it correlates your external attack surface, internal networks, and identity services to deliver hyper-efficient remediation guidance based on the severity and impact to a specific network. This enables security service providers to stop wasting time on fixes that don't matter, and remove the highest impact risks first. In other words, Shield distinguishes the critical few risks from the trivial many. What more could you accomplish if you could direct 2% of your efforts to reduce 98% of risk?
Hadrian
hadrian.io
Hadrian is an agentless SaaS product that continuously maps exposed assets, discovers risks, and prioritizes remediation so that security teams can harden their external attack surfaces. Using passive data sources, active scanning techniques, and machine learning models, Hadrian identifies digital assets and complex attack paths that security teams are unaware of. It incorporates how misconfigurations, exposed secrets, permissions, and vulnerabilities impact an organization’s security posture. Context-aware testing uses only relevant modules and secrets in attack paths. This combination of context and risk discovery allows Hadrian to prioritize the same targets attackers will exploit. All of this is presented in an online dashboard to help security teams focus on what matters and make their attack surface more secure.
Veracode
veracode.com
Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-assisted remediation engine, the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deployment. Thousands of the world’s leading development and security teams use Veracode every second of every day to get accurate, actionable visibility of exploitable risk, achieve real-time vulnerability remediation, and reduce their security debt at scale. Veracode is a multi-award-winning company offering capabilities to secure the entire software development life cycle, including Veracode Fix, Static Analysis, Dynamic Analysis, Software Composition Analysis, Container Security, Application Security Posture Management, and Penetration Testing.
Astra
getastra.com
Astra’s Pentest is a comprehensive penetration testing solution with an intelligent automated vulnerability scanner coupled with in-depth manual pentesting. Our Pentest platform emulates hackers behavior to find critical vulnerabilities in your application proactively. The automated scanner performs 10,000+ security checks, including security checks for all CVEs listed in the OWASP top 10 and SANS 25. It also conducts all required tests to comply with ISO 27001 and HIPAA. Astra offers an developer friendly pentest dashboard enabling easy analysis of the vulnerability, assign vulnerabilities to team members, and collaborate with security experts. And if the users don’t want to get back to the dashboard every time they can simply integrate the dashboard with slack and manage vulnerability easily. Integrate Astra with your CI/CD pipeline and ensure vulnerability assessment in the software development lifecycle. Astra can be integrated with Circle CI, Slack, Jenkins, Gitlab, Github, Azure and bitbucket With accurate risk scoring, zero false positives, and thorough remediation guidelines, Astra’s Pentest helps you prioritize the fixes, allocate resources efficiently, and maximize the ROI. Astra Continuous compliance scanning ensures that you stay compliant to (SOC2, ISO27001, PCI, GDPR etc.)
Resolver
resolver.com
See risk. Build resilience. Resolver gathers all risk data and analyzes it in context—revealing the true business impact within every risk. Resolver’s Risk Intelligence Platform traces the extended impact of all types of risk—whether compliance or audit, incidents, or threats—and translates those effects into quantifiable business metrics. So, customers can communicate risk persuasively, framing it in terms of the business. And with this changed perspective, comes an entirely new role for risk to play. Finally, risk goes from being seen as a barrier, to becoming a strategic partner driving the business. Welcome to the new world of Risk Intelligence. Resolver's mission is to transform Risk management to Risk Intelligence. Its intuitive and integrated risk software for enterprise organizations offers solutions for corporate security, risk & compliance, and information security teams. Resolver empowers businesses to respond effectively to regulatory and market shifts, to discover insights from security and risk incidents, and to streamline risk operations throughout the organization. Resolver is a Kroll operated business. Kroll provides proprietary data, technology and insights to help customers stay ahead of complex demands related to risk, governance and growth. Kroll solutions deliver a powerful competitive advantage, enabling faster, smarter and more sustainable decisions. With 5,000 experts around the world, Kroll creates value and impact for both customers and communities.
Forescout
forescout.com
Forescout is a leading cybersecurity platform focused on managing cyber risk and mitigating threats across various environments. Key Features: * Risk and Exposure Management: Identify and prioritize cybersecurity risks, ensuring organizations can effectively mitigate potential threats. * Network Security: Implement proactive and reactive controls to assess and segment networks, enhancing overall security posture. * Threat Detection and Response: Detect, investigate, and respond to genuine threats and incidents in real-time. * Operational Technology Security: Reduce risks in operational technology (OT) and industrial control systems (ICS), ensuring safety and security in critical infrastructures.
Recorded Future
recordedfuture.com
Recorded Future is the world’s largest threat intelligence company. Recorded Future’s Intelligence Cloud provides end-to-end intelligence across adversaries, infrastructure, and targets. Indexing the internet across the open web, dark web, and technical sources, Recorded Future provides real-time visibility into an expanding attack surface and threat landscape, empowering clients to act with speed and confidence to reduce risk and securely drive business forward. Headquartered in Boston with offices and employees around the world, Recorded Future works with over 1,800 businesses and government organizations across more than 75 countries to provide real-time, unbiased and actionable intelligence. Learn more at recordedfuture.com.
Bleach Cyber
bleachcyber.com
Bleach Cyber, an advanced cybersecurity platform tailored for SMBs and Startups and their service providers , that not only enhances operational cybersecurity but also fosters trust with customers and helps CISOs fortify their enterprise supply chains. Specifically designed to secure a business without buying expensive enterprise grade tools, Bleach ensures a swift, user-friendly, and cost-effective approach to bolstering security and compliance for SMBs. The platform integrates with their existing tech stack, offering proactive recommendations or "security opportunities" to mitigate risks and align with compliance standards. With a comprehensive array of security applications, Bleach empowers businesses to address and rectify identified opportunities, then makes it easy for them to establish a foundation of trust with their customers by sharing this with CISOs, Procurement and Compliance departments. No more need for expensive, drawn out and inaccurate SOC2 audits. Allowing faster deal closures for innovative small businesses and enabling CISOs and enterprise organisations to work securely with the latest in cutting edge software and technology.
Inspectiv
inspectiv.com
Inspectiv's Pentesting and fully-managed Bug Bounty as a Service helps security teams discover impactful vulnerabilities before they're exploited without the complexity, cost, and hassle of traditional bug bounty and manual testing. The Inspectiv platform allows you to review prioritized vulnerability findings, filter out the noise, get the signal that matters to you, and seamlessly orchestrate your actions. Learn more at inspectiv.com.
Tenacy
tenacy.io
Tenacy is the SaaS platform that simplifies cybersecurity management for all IT security teams. Thanks to intelligent modeling of frameworks and risks, Tenacy interconnects all your cyber processes. As a result, you can continuously measure your level of security, effectively monitor your operations, and unite all stakeholders around your cyber vision.
Derive
deriverisk.com
For Cybersecurity Managers (e.g., CISOs, IT Directors, and Risk Managers) who are tasked with assessing a company’s cyber risk exposure and required to allocate limited resources to adequately mitigate risk, Derive is a a SaaS subscription-based platform that quantifies the potential financial impact of cyber threats using proprietary data on cyber loss magnitudes, frequencies, control costs, and control effectiveness delivering a high resolution characterization of what risks they face and how they could address them. Unlike competitors Derive translates abstract cybersecurity concerns into concrete, actionable insights with financial clarity.
© 2025 WebCatalog, Inc.