The directory added 13 listings in October 2026, down from 45 in September 2026. At month end it held 276 entries. The additions fell into three categories: Brand Protection, AI Agent Security and Cyber Resilience Act Compliance, and none were left uncategorised.
It was a thin month, and lopsided. Brand Protection supplied 9 of the 13. Penumbral Labs is the only Cyber Resilience Act Compliance listing, and ranwhat is the only open source entry.
The month in numbers
- 13 listings added in October 2026, against 45 in September 2026. The directory held 276 tools and companies at the end of the month.
- Categories: 3, led by Brand Protection (9), AI Agent Security (3), Cyber Resilience Act Compliance (1).
- Pricing: 10 not published, 1 open source, 1 published pricing, 1 free tier plus paid plans. 3 of 13 let a buyer see a price or a free tier without asking.
- Deployment: 11 cloud-hosted, 1 with a self-hosted option, 1 open source.
- Founded: of the 6 with a sourced founding year, 3 were founded in 2024 or later; the oldest dates from 2009.
- Most common capabilities (fixed-vocabulary tags, 13 of 13 tagged): threat intelligence (9), managed security services (6), breach dark web monitoring (5), ai agent security (3), attack surface management (2), browser security (2).
What was added in October 2026
| Listing | Category | Pricing | What it does |
|---|---|---|---|
| Allure Security | Brand Protection | Not published | Managed brand protection with takedowns run by a 24/7 SOC across domains, social, app stores and ads |
| BrandShield | Brand Protection | Not published | Brand protection with in-house enforcement against phishing, impersonation, counterfeits and trademark misuse |
| Check Point Exposure Management (formerly Cyberint) | Brand Protection | Not published | Exposure management platform whose brand protection module detects phishing and impersonation and runs takedowns |
| Clavitor | AI Agent Security | Free tier plus paid plans | Credential vault and proxy that injects API keys into agent requests so the agent never holds the secret |
| Doppel | Brand Protection | Not published | Social engineering defence platform that maps and takes down impersonation campaigns across channels |
| Fortra Brand Protection | Brand Protection | Not published | Detects and disrupts phishing, brand impersonation, fraudulent social accounts and scams across domains and social media |
| Memcyco | Brand Protection | Not published | Real-time protection for customers of impersonated brands: warns victims and protects their accounts while fakes are live |
| Netcraft | Brand Protection | Not published | Phishing and impersonation takedown service covering 100+ threat types, with browser blocking while removal runs |
| Penumbral Labs | Cyber Resilience Act Compliance | Not published | Luxembourg firm offering CRA readiness assessments, CRA-scoped product pen tests and vulnerability-reporting retainers |
| ranwhat | AI Agent Security | Open source | Open-source CLI that reviews what AI coding agents ran, finds leaked keys in their history and scores their credentials |
| Red Points | Brand Protection | Not published | Managed brand protection with unlimited takedowns, from counterfeits to fake sites, accounts and ads |
| Trent AI | AI Agent Security | Not published | AI security engineer that maps code, cloud and agents, finds exploitable attack chains and fixes them via coding agents |
| ZeroFox | Brand Protection | Published pricing | External threat platform with brand, domain and executive protection and takedowns across 180+ platforms |
What they have in common
Brand and impersonation defence runs through the batch. Threat intelligence appears as a tag on 9 of the 13 listings, managed security services on 6 and breach or dark web monitoring on 5. Several entries sell the enforcement as much as the detection: Netcraft, BrandShield, Red Points, Allure Security, Fortra Brand Protection and Doppel all describe takedowns or managed casework, while Memcyco and Check Point Exposure Management (formerly Cyberint) push the same problem towards live warning and exposure management.
Pricing is mostly hidden. 10 listings publish nothing, and the 3 that do are each different: ranwhat is open source, ZeroFox publishes pricing and Clavitor offers a free tier plus paid plans. 11 are cloud hosted and 1 offers a self hosted option. Founding years are known for 6, and 3 of those are recent, with Penumbral Labs and ranwhat at 2024 or later and Trent AI in 2025, against Allure Security in 2009 as the oldest recorded.
How this is counted
Listings are counted by the date they were added to the directory, which is not a launch date: some were founded years earlier and some were listed within weeks of appearing. Every listing cites its sources on its own page, and free listings are placed in the one category guide that genuinely fits, so the category counts reflect editorial placement rather than vendor self-description. Pricing is read from each listing's published pricing: a listing counts as published if a figure or a free tier is visible without contacting sales. Capability tags are assigned from a fixed vocabulary of 60 terms and checked by an editor; the figures above come from the directory database and none are estimated.
All editions
Every month's additions are listed at New cybersecurity tools, month by month. Vendors can submit a tool for a free listing; Featured listings are the paid product.