# Cyber Vendor Guide

Cyber Vendor Guide is a directory and comparison site for cybersecurity tools and companies. We aggregate publicly available information and add editorial commentary. Organic listings are ordered by reader upvotes, most-voted first, with ties broken alphabetically, and are not scored or rated by us. Featured listings are paid placements, boosted above the organic list and clearly labelled "Featured"; being featured never changes the organic listings or the comparisons.

## Buying guides
- [Application Security](https://www.cybervendorguide.com/guides/application-security): Compare the best application security tools in 2026. SCA, SAST, and open-source alternatives. Language support, CI/CD integration, and pricing compared.
- [Automotive Cybersecurity](https://www.cybervendorguide.com/guides/automotive-cybersecurity): Best automotive cybersecurity companies in 2026. Compare PCA Cyber Security, Upstream Security and VicOne on services, in-vehicle protection, and ISO/SAE 21434 and UNECE R155 compliance.
- [Autonomous AI Analysts](https://www.cybervendorguide.com/guides/autonomous-ai-analysts): Autonomous AI analysts in 2026: Legion Security, Dropzone AI and Prophet Security compared on autonomy, investigation transparency and deployment. No rankings, no scoring.
- [Cloud Security & CNAPP](https://www.cybervendorguide.com/guides/cloud-security-cnapp): Compare the best CNAPP vendors and cloud security tools in 2026: Wiz, Prisma Cloud, Orca Security, Aqua, Sysdig, Lacework and more, with agentless scanning, workload protection and pricing side by side.
- [Cyber Resilience Act Compliance](https://www.cybervendorguide.com/guides/cra-compliance): Compare EU Cyber Resilience Act (CRA) compliance companies in 2026: pi3g, Bureau Veritas, DEKRA, ONEKEY, SGS and TUV SUD. Services, conformity assessment and standards.
- [Data Security & Governance](https://www.cybervendorguide.com/guides/data-security): Compare the best data security platforms in 2026. Enterprise DLP, cloud data protection, and data discovery. Classification, compliance, and pricing compared.
- [Email Security](https://www.cybervendorguide.com/guides/email-security): Compare the best email security platforms in 2026. Cloud email security, AI-powered detection, enterprise gateways, and encryption. Features, detection rates, and pricing compared.
- [Endpoint & EDR](https://www.cybervendorguide.com/guides/endpoint-edr): Compare the best EDR and endpoint security platforms in 2026. Enterprise EDR, XDR, and SMB alternatives. Detection rates, response automation, and pricing compared.
- [Firewall & NGFW](https://www.cybervendorguide.com/guides/firewall-ngfw): Compare the best firewall and NGFW platforms in 2026. Enterprise next-gen firewalls, cloud-native firewalls, and SMB alternatives. Throughput, features, and pricing compared.
- [Identity & Access Management](https://www.cybervendorguide.com/guides/identity-access-management): Best identity and access management (IAM) tools in 2026. Compare Okta, Microsoft Entra ID, Auth0, JumpCloud, Keycloak, and more for SSO, MFA, and user lifecycle management.
- [Managed Security Service Providers](https://www.cybervendorguide.com/guides/mssps): Compare the top MSSPs and MDR providers in 2026. Arctic Wolf, Secureworks, Red Canary, Expel, eSentire, Critical Start. Services, EDR-neutrality, and delivery models.
- [Network Detection & Response (NDR)](https://www.cybervendorguide.com/guides/ndr): Compare network detection and response (NDR) tools and vendors: Corelight, Darktrace, Vectra AI, ExtraHop, Stamus Networks, Arista NDR, and Fidelis. Capabilities, deployment, and sources for each.
- [Observability Pipelines](https://www.cybervendorguide.com/guides/observability-pipelines): Observability pipeline tools in 2026: general-purpose telemetry routing for logs, metrics and traces, compared on cost control, deployment and destinations.
- [PCI PTS Compliance Testing Companies](https://www.cybervendorguide.com/guides/payment-device-security-testing): PCI PTS compliance testing companies in 2026: PCI Recognized evaluation laboratories and offensive security firms for payment device pre- and post-compliance testing, compared.
- [Penetration Testing Firms](https://www.cybervendorguide.com/guides/penetration-testing-firms): Compare the top penetration testing firms in 2026. Mandiant, NCC Group, Bishop Fox, Trail of Bits, IOActive, Praetorian. Services, specialisms, and delivery models.
- [Privileged Access Management](https://www.cybervendorguide.com/guides/privileged-access-management): Best privileged access management (PAM) tools in 2026: SplitSecure, BeyondTrust, CyberArk, Delinea, HashiCorp Boundary, StrongDM, Teleport and more, for session recording, JIT access and credential vaulting.
- [Product Threat Intelligence Providers](https://www.cybervendorguide.com/guides/product-threat-intelligence): Product threat intelligence providers in 2026: vulnerability intelligence, SBOM validation, and product-specific threat monitoring for automotive, payment, and embedded device makers.
- [SASE & Zero Trust](https://www.cybervendorguide.com/guides/sase-zero-trust): Compare the best SASE and zero trust vendors in 2026: Zscaler, Palo Alto Prisma Access, Netskope, Cisco, Fortinet, Cloudflare and Cato, with ZTNA, global coverage and pricing side by side.
- [SBOM Analysis](https://www.cybervendorguide.com/guides/sbom-analysis): SBOM analysis tools and providers in 2026: Black Duck, Finite State, ONEKEY, PCA Cyber Security, Trivy and more, compared on how they build, validate and act on a software bill of materials.
- [Secrets Management](https://www.cybervendorguide.com/guides/secrets-management): Compare secrets management tools in 2026: SplitSecure, HashiCorp Vault, AWS Secrets Manager, Doppler, Infisical, CyberArk Conjur and more, with pricing, open-source and enterprise options side by side.
- [Security Data Pipeline](https://www.cybervendorguide.com/guides/security-data-pipeline): Compare security data pipeline tools in 2026: Realm.Security, CeTu, Cribl and Tenzir, on routing, SIEM cost control, deployment and detection-data quality.
- [SIEM & Security Analytics](https://www.cybervendorguide.com/guides/siem): Compare the best SIEM platforms in 2026. Enterprise SIEM, cloud-native analytics, and open-source alternatives. Detection, scalability, and pricing compared.
- [Tier 1 SOC Automation](https://www.cybervendorguide.com/guides/tier-1-soc-automation): Tier 1 SOC automation tools in 2026: Legion Security, Dropzone AI, Intezer, Prophet Security, Qevlar AI, Radiant Security, Simbian and Torq compared on autonomy, integrations and deployment.
- [Tier 2 SOC Automation](https://www.cybervendorguide.com/guides/tier-2-soc-automation): Tier 2 SOC automation tools in 2026: Legion Security and Exaforce, compared on investigation depth, blast radius and response actions.
- [Vulnerability Management](https://www.cybervendorguide.com/guides/vulnerability-management): Compare the best vulnerability management platforms in 2026. Enterprise scanners, cloud-native tools, and open-source alternatives. Coverage, accuracy, and pricing compared.

## Best-of lists
- [Best AI-Native and Agentic Security Platforms](https://www.cybervendorguide.com/best/best-ai-native-agentic-security-platforms): The best AI-native and agentic security platforms in 2026: Legion Security, Abnormal Security, Dropzone AI, Prophet Security, Qevlar AI, Radiant Security, Sawmills, Simbian and Torq compared on autonomy, transparency and deployment.
- [Best CASB for Unified SASE](https://www.cybervendorguide.com/best/sase-casb-platforms): Best CASB for unified SASE in 2026. Compare Netskope, Zscaler, Skyhigh, Palo Alto, and Cisco for shadow IT discovery, inline DLP, and app risk scoring.
- [Best Cloud-Native SWG](https://www.cybervendorguide.com/best/cloud-native-swg): Best cloud-native secure web gateways in 2026. Replace legacy proxies with cloud-delivered web security ranked by performance and threat detection.
- [Best Code Security & Secret Scanning Tools](https://www.cybervendorguide.com/best/code-security-scanning-tools): Best code security and secret scanning tools in 2026. Compare Semgrep, SonarQube, Snyk, GitHub Advanced Security, and Checkmarx for SAST, SCA, and secret detection.
- [Best CrowdStrike Alternatives](https://www.cybervendorguide.com/best/crowdstrike-alternatives): Compare the best CrowdStrike alternatives in 2026. Expert-ranked endpoint protection platforms evaluated on detection, deployment, pricing, and support.
- [Best CrowdStrike Alternatives 2026](https://www.cybervendorguide.com/best/crowdstrike-alternatives-2026): Updated for 2026: the best CrowdStrike alternatives ranked by detection, price, and deployment. Expert picks for enterprise endpoint protection.
- [Best CrowdStrike Alternatives for Endpoint Deployment](https://www.cybervendorguide.com/best/crowdstrike-alternatives-endpoint-deployment): CrowdStrike alternatives ranked by deployment ease. Find endpoint protection that deploys faster with less operational overhead across all platforms.
- [Best CrowdStrike Alternatives for Enterprise EDR](https://www.cybervendorguide.com/best/crowdstrike-alternatives-enterprise-edr): Find the best enterprise EDR alternatives to CrowdStrike Falcon. Ranked by telemetry depth, scalability, SIEM integration, and large-scale deployment capabilities.
- [Best CrowdStrike Alternatives for Incident Response](https://www.cybervendorguide.com/best/crowdstrike-alternatives-incident-response): Top CrowdStrike alternatives for incident response and forensics. Evaluated on containment speed, forensic depth, remediation automation, and IR workflow support.
- [Best CrowdStrike Alternatives for SMBs](https://www.cybervendorguide.com/best/crowdstrike-alternatives-smb): Best CrowdStrike alternatives for SMBs in 2026. Compare cost-effective endpoint protection platforms with simpler deployment, MSP support, and SMB-friendly pricing.
- [Best CrowdStrike Alternatives With Cheaper Licensing](https://www.cybervendorguide.com/best/crowdstrike-alternatives-cheaper-licensing): Find CrowdStrike alternatives with cheaper licensing. Ranked by value: same detection quality at 20-60% lower cost with fewer add-on charges.
- [Best CrowdStrike Competitors in Independent Tests](https://www.cybervendorguide.com/best/crowdstrike-competitors-independent-tests): CrowdStrike competitors ranked by independent test results. See which EDR platforms beat CrowdStrike in AV-TEST, SE Labs, and MITRE ATT&CK evaluations.
- [Best CyberArk Alternatives With Faster Deployment](https://www.cybervendorguide.com/best/cyberark-alternatives-faster-deployment): CyberArk alternatives ranked by deployment speed and support quality. Find PAM solutions that deploy in days instead of months with simpler architecture.
- [Best Email Data Loss Prevention Solutions](https://www.cybervendorguide.com/best/email-dlp-solutions): The best email DLP solutions in 2026: Fortra Data Security and other platforms for preventing data loss through email, compared on policy controls and content inspection.
- [Best Email Encryption for HIPAA Compliance](https://www.cybervendorguide.com/best/email-encryption-hipaa-compliance): Compare the best email encryption tools for HIPAA compliance in 2026. Expert-ranked platforms evaluated on BAA availability, encryption method, audit logging, and ease of use.
- [Best Email Security Tools](https://www.cybervendorguide.com/best/best-email-security-tools): The best email security tools in 2026: Proofpoint, Mimecast, Abnormal Security, Microsoft Defender for Office 365, IRONSCALES, Barracuda Email Security and more, compared on detection, deployment and pricing.
- [Best Firewalls for Remote Branch Offices](https://www.cybervendorguide.com/best/firewalls-remote-branch-offices): Best firewalls for remote branch offices in 2026. Ranked by zero-touch deployment, SD-WAN integration, centralized management, and branch security features.
- [Best open-source application security tools](https://www.cybervendorguide.com/best/best-open-source-application-security-tools): Best open-source application security tools: Semgrep, SonarQube, Trivy. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source IAM tools](https://www.cybervendorguide.com/best/best-open-source-identity-access-management-tools): Best open-source IAM tools: authentik, Bitwarden (Business), Keycloak. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source PAM tools](https://www.cybervendorguide.com/best/best-open-source-privileged-access-management-tools): Best open-source PAM tools: CyberArk Conjur, HashiCorp Boundary, Teleport. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source secrets management tools](https://www.cybervendorguide.com/best/best-open-source-secrets-management-tools): Best open-source secrets management tools: Bitwarden (Business), cert-manager, CyberArk Conjur, External Secrets Operator, and more. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source security data pipeline tools](https://www.cybervendorguide.com/best/best-open-source-security-data-pipeline-tools): Best open-source security data pipeline tools: Fluentd, Tenzir, Vector. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source SIEM tools](https://www.cybervendorguide.com/best/best-open-source-siem-tools): Best open-source SIEM tools: Elastic Security, Graylog, Wazuh. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source vulnerability management tools](https://www.cybervendorguide.com/best/best-open-source-vulnerability-management-tools): Best open-source vulnerability management tools: Greenbone OpenVAS, Nuclei, Trivy. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best Palo Alto Alternatives for SMB Endpoint Security](https://www.cybervendorguide.com/best/palo-alto-alternatives-smb-endpoint): Top Palo Alto alternatives for SMB endpoint security. Simpler, more affordable endpoint protection ranked for small and midsize businesses.
- [Best Platforms for Eliminating Static Credentials in Kubernetes](https://www.cybervendorguide.com/best/kubernetes-secrets-platforms): The best platforms for Kubernetes secrets management in 2026: SplitSecure and others that replace static credentials with dynamic secrets, workload identity and zero-trust access.
- [Best SASE Platforms for Government & FedRAMP](https://www.cybervendorguide.com/best/sase-government-fedramp): Best SASE platforms for government and FedRAMP in 2026. Compare iboss, Zscaler, Palo Alto, Cisco, and Cloudflare for FedRAMP authorization and federal zero trust.
- [Best Secret Scanning Tools](https://www.cybervendorguide.com/best/secret-scanning-tools): The best secret scanning tools in 2026: SplitSecure and others, compared on detection accuracy, CI/CD integration, false positive rates and remediation.
- [Best Secrets Management for Developers](https://www.cybervendorguide.com/best/secrets-management-developers): The best secrets management tools for developers in 2026: SplitSecure, Doppler, Infisical and more, compared on developer experience, SDK quality, local dev integration and workflow simplicity.
- [Best Secrets Management Tools](https://www.cybervendorguide.com/best/secrets-management-tools): The best secrets management tools in 2026: SplitSecure, HashiCorp Vault, AWS Secrets Manager, Doppler, Infisical and more, for securing API keys, credentials and certificates.
- [Best Secrets Management Tools for DevOps](https://www.cybervendorguide.com/best/secrets-management-devops): The best secrets management tools for DevOps teams in 2026: SplitSecure, HashiCorp Vault and more, compared on CI/CD integration, Kubernetes support, IaC compatibility and developer workflow.
- [Best Secure Web Gateways for Unified SASE](https://www.cybervendorguide.com/best/secure-web-gateways): Compare the best secure web gateways for SASE in 2026. Ranked by cloud-native architecture, ZTNA integration, DLP, and unified platform capabilities.
- [Best Security Data Pipelines](https://www.cybervendorguide.com/best/best-security-data-pipelines): The best security data pipeline tools in 2026: Realm.Security, CeTu, Cribl and Tenzir, compared on routing, cost control and SOC fit.
- [Best Tier 1 SOC Automation Tools](https://www.cybervendorguide.com/best/best-tier-1-soc-automation-tools): The best tier 1 SOC automation tools in 2026: Legion Security, Dropzone AI, Intezer, Prophet Security, Qevlar AI, Radiant Security, Simbian and Torq compared on autonomy, integrations and deployment.
- [Best Tier 2 SOC Automation Tools](https://www.cybervendorguide.com/best/best-tier-2-soc-automation-tools): The best tier 2 SOC automation tools in 2026: Legion Security and Exaforce, compared on investigation depth, blast radius and response actions.
- [Best UEBA Tools for SOC Using Splunk](https://www.cybervendorguide.com/best/ueba-tools-soc-splunk): Top UEBA tools for Splunk-based SOCs. Ranked by Splunk integration, behavioral analytics, insider threat detection, and SOC workflow enhancement.
- [Best Unified SASE Platforms With Zero Trust](https://www.cybervendorguide.com/best/sase-platforms-zero-trust): Best unified SASE platforms with zero trust in 2026. Compare vendors for SD-WAN, SWG, CASB, ZTNA, and FWaaS in a single cloud-delivered platform.
- [Best Wiz Alternatives for CSPM](https://www.cybervendorguide.com/best/wiz-alternatives-cspm): Top Wiz alternatives for cloud security posture management. Compare CSPM platforms ranked by agentless scanning, compliance, and multicloud coverage.
- [Best XDR Platforms](https://www.cybervendorguide.com/best/xdr-platforms): Compare the best XDR platforms in 2026. Expert-ranked alternatives to CrowdStrike and Palo Alto for unified detection, investigation, and response.
- [Best Zero Trust Network Access (ZTNA) for SASE](https://www.cybervendorguide.com/best/sase-ztna-platforms): Best ZTNA for SASE in 2026. Compare Zscaler, Cloudflare, Palo Alto, Cato Networks, and Netskope for identity-aware access, micro-segmentation, and VPN replacement.
- [FedRAMP-authorized IAM tools](https://www.cybervendorguide.com/best/fedramp-authorized-identity-access-management-tools): FedRAMP-authorized IAM tools: Cloudflare Access, Duo Security, Microsoft Entra ID, Okta Workforce Identity, and more. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [FedRAMP-authorized PAM tools](https://www.cybervendorguide.com/best/fedramp-authorized-privileged-access-management-tools): FedRAMP-authorized PAM tools: BeyondTrust, BeyondTrust Password Safe, CyberArk Privilege Cloud, Saviynt Privileged Access. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.

## Glossary
- [CASB. Cloud Access Security Broker](https://www.cybervendorguide.com/definitions/casb): A security policy enforcement point placed between cloud service consumers and cloud service providers to monitor activity, enforce security policies, and prote
- [CSPM. Cloud Security Posture Management](https://www.cybervendorguide.com/definitions/cspm): A category of security tools that continuously monitor cloud infrastructure configurations to identify misconfigurations, compliance violations, and security ri
- [CNAPP. Cloud-Native Application Protection Platform](https://www.cybervendorguide.com/definitions/cnapp): An integrated security platform that combines cloud workload protection, cloud security posture management, infrastructure-as-code scanning, and runtime protect
- [Cybersecurity Compliance Frameworks](https://www.cybervendorguide.com/definitions/compliance-frameworks): Structured sets of guidelines, standards, and best practices that organizations follow to manage cybersecurity risk, protect data, and meet regulatory requireme
- [DLP. Data Loss Prevention](https://www.cybervendorguide.com/definitions/dlp): A set of tools and processes designed to detect and prevent the unauthorized transmission of sensitive data outside an organization's network, endpoints, or clo
- [Email Security](https://www.cybervendorguide.com/definitions/email-security): The technologies and practices designed to protect email communications from threats including phishing, business email compromise (BEC), malware, spam, and dat
- [EDR. Endpoint Detection and Response](https://www.cybervendorguide.com/definitions/edr): A security solution that continuously monitors endpoint devices (laptops, servers, workstations) to detect, investigate, and respond to cyber threats using beha
- [XDR. Extended Detection and Response](https://www.cybervendorguide.com/definitions/xdr): A unified security platform that integrates detection and response across endpoints, networks, cloud workloads, email, and identity to provide correlated threat
- [IAM. Identity and Access Management](https://www.cybervendorguide.com/definitions/iam): A framework of policies and technologies that ensures the right individuals have appropriate access to technology resources, encompassing authentication, author
- [IGA. Identity Governance and Administration](https://www.cybervendorguide.com/definitions/iga): A framework of policies and technologies that manages digital identities and governs access rights, including access request workflows, access certification cam
- [IR. Incident Response](https://www.cybervendorguide.com/definitions/incident-response): The organized approach to preparing for, detecting, containing, eradicating, and recovering from cybersecurity incidents, guided by a formal incident response p
- [MITRE ATT&CK Framework](https://www.cybervendorguide.com/definitions/mitre-attack): A globally accessible, curated knowledge base of adversary tactics and techniques based on real-world observations, used as a common language for describing and
- [MFA. Multi-Factor Authentication](https://www.cybervendorguide.com/definitions/mfa): A security mechanism that requires users to provide two or more independent verification factors. Something they know (password), something they have (phone/key
- [NDR. Network Detection and Response](https://www.cybervendorguide.com/definitions/ndr): Network detection and response (NDR) is a category of security tools that monitor network traffic to detect, investigate, and respond to threats, using behavior
- [NGFW. Next-Generation Firewall](https://www.cybervendorguide.com/definitions/ngfw): A network security device that combines traditional firewall capabilities (packet filtering, stateful inspection, NAT) with advanced features including applicat
- [Penetration Testing](https://www.cybervendorguide.com/definitions/pentesting): A simulated cyberattack against an organization's systems, networks, or applications conducted by authorized security professionals to identify exploitable vuln
- [PAM. Privileged Access Management](https://www.cybervendorguide.com/definitions/pam): A security discipline and set of tools that control, monitor, and audit access to critical systems by privileged users such as system administrators, database a
- [Ransomware](https://www.cybervendorguide.com/definitions/ransomware): A type of malicious software that encrypts an organization's data or locks systems and demands payment (ransom) in exchange for the decryption key or restored a
- [Secrets Management](https://www.cybervendorguide.com/definitions/secrets-management): The practice and tooling for securely storing, accessing, rotating, and auditing sensitive credentials such as API keys, database passwords, certificates, and e
- [SASE. Secure Access Service Edge](https://www.cybervendorguide.com/definitions/sase): A cloud-delivered architecture that converges wide-area networking (SD-WAN) and network security services (SWG, CASB, ZTNA, FWaaS) into a single, globally distr
- [Security Data Pipeline](https://www.cybervendorguide.com/definitions/data-pipeline): Infrastructure for collecting, transforming, routing, and delivering security telemetry (logs, metrics, traces) from sources to destinations like SIEMs, data la
- [SIEM. Security Information and Event Management](https://www.cybervendorguide.com/definitions/siem): A platform that aggregates, correlates, and analyzes security event data from across an organization's IT infrastructure to detect threats, support incident res
- [SOAR. Security Orchestration, Automation and Response](https://www.cybervendorguide.com/definitions/soar): A category of security tools that combine incident response case management, workflow automation, and threat intelligence aggregation to help security teams res
- [SBOM. Software Bill of Materials](https://www.cybervendorguide.com/definitions/sbom): A comprehensive inventory of all components, libraries, and dependencies that make up a software product, analogous to a list of ingredients on food packaging, 
- [SCA. Software Composition Analysis](https://www.cybervendorguide.com/definitions/sca): A security practice and toolset that identifies open-source and third-party components in a codebase, detects known vulnerabilities in those dependencies, and m
- [SAST. Static Application Security Testing](https://www.cybervendorguide.com/definitions/sast): A method of analyzing application source code, bytecode, or binaries for security vulnerabilities without executing the program, typically integrated into the d
- [TI. Threat Intelligence](https://www.cybervendorguide.com/definitions/threat-intelligence): The evidence-based knowledge about existing or emerging cyber threats, including context about threat actors, their motivations, capabilities, and indicators of
- [VM. Vulnerability Management](https://www.cybervendorguide.com/definitions/vulnerability-management): The continuous process of identifying, evaluating, prioritizing, and remediating security vulnerabilities across an organization's IT assets including software,
- [ZTA. Zero Trust Architecture](https://www.cybervendorguide.com/definitions/zero-trust): A security model based on the principle of "never trust, always verify" that requires continuous authentication and authorization for every user, device, and ne

## Tools
- [1Password (Business)](https://www.cybervendorguide.com/tools/1password-business): Secrets automation and password management for teams and CI/CD
- [Abnormal Security](https://www.cybervendorguide.com/tools/abnormal-security): AI-powered email security platform specializing in behavioral detection of social engineering attacks
- [Acronis Cyber Protect](https://www.cybervendorguide.com/tools/acronis): Integrated backup, disaster recovery, and AI-based endpoint security (anti-ransomware, EDR) in one platform.
- [Acronis Email Security](https://www.cybervendorguide.com/tools/acronis-email-security): Acronis Cyber Protect Cloud with Acronis Email Security protects Microsoft 365, Google Workspace, and other mailboxes against phishing, BEC, account takeover, malware, and zero-day threats, integrated with backup, endpoint protection, and DLP.
- [Akeyless](https://www.cybervendorguide.com/tools/akeyless): SaaS-based zero-knowledge secrets management platform
- [Aqua Security](https://www.cybervendorguide.com/tools/aqua-security): Cloud-native security platform specializing in container, Kubernetes, and serverless protection
- [Arctic Wolf](https://www.cybervendorguide.com/tools/arctic-wolf): Managed security operations platform with concierge-delivered vulnerability management services
- [Arista NDR](https://www.cybervendorguide.com/tools/arista-ndr): Agentless, AI-assisted network detection and response for campus, data center and cloud
- [Ausculte Scan](https://www.cybervendorguide.com/tools/ausculte-scan): Free external WordPress audit covering TLS, headers, exposure, DNS and performance
- [Auth0](https://www.cybervendorguide.com/tools/auth0): Developer-first CIAM with SDKs and docs
- [authentik](https://www.cybervendorguide.com/tools/authentik): Open-source identity provider with modern UI and protocol support
- [AWS Secrets Manager](https://www.cybervendorguide.com/tools/aws-secrets-manager): Native AWS secrets management service with automatic rotation
- [Azure Data Explorer](https://www.cybervendorguide.com/tools/azure-data-explorer): Microsoft's fast data analytics service for real-time analysis of streaming security data
- [Azure Key Vault](https://www.cybervendorguide.com/tools/azure-key-vault): Microsoft Azure's managed secrets, keys, and certificate service
- [Barracuda CloudGen Firewall](https://www.cybervendorguide.com/tools/barracuda-cloudgen): Cloud-optimized next-generation firewall with native multi-cloud deployment and integrated SD-WAN
- [Barracuda Email Security](https://www.cybervendorguide.com/tools/barracuda-email-security): Email threat protection platform available as gateway appliance or cloud service
- [BeyondTrust](https://www.cybervendorguide.com/tools/beyondtrust): Unified privilege management and secure remote access platform
- [BeyondTrust Password Safe](https://www.cybervendorguide.com/tools/beyondtrust-password-safe): Enterprise PAM with strong Unix/Linux/Mac coverage
- [BigID](https://www.cybervendorguide.com/tools/bigid): Data intelligence platform using ML for discovery, classification, and privacy management
- [Bishop Fox](https://www.cybervendorguide.com/tools/bishop-fox): Offensive security firm pairing high-end penetration testing with Cosmos, a continuous attack-surface management platform.
- [Bitdefender GravityZone](https://www.cybervendorguide.com/tools/bitdefender): Unified endpoint security with top-rated protection efficacy and low performance impact
- [Bitwarden (Business)](https://www.cybervendorguide.com/tools/bitwarden-business): Open-source enterprise password manager with self-hosting and transparent security
- [Black Duck](https://www.cybervendorguide.com/tools/black-duck): Enterprise SCA platform with deep open-source detection, license compliance, and code origin analysis
- [Bureau Veritas](https://www.cybervendorguide.com/tools/bureau-veritas): Global TIC group whose cybersecurity unit delivers end-to-end CRA compliance, RED testing, penetration testing, and conformity assessment for connected products.
- [Cato Networks](https://www.cybervendorguide.com/tools/cato-networks): Single-vendor cloud-native SASE platform with private global backbone and converged architecture
- [cert-manager](https://www.cybervendorguide.com/tools/cert-manager): Kubernetes certificate controller supporting Let's Encrypt, Vault, and more
- [CeTu](https://www.cybervendorguide.com/tools/cetu): AI-powered security data pipeline for intelligent log ingestion, enrichment, and routing at scale
- [Check Point CloudGuard](https://www.cybervendorguide.com/tools/check-point-cloudguard): Cloud security posture and network security platform backed by Check Point's threat prevention expertise
- [Check Point Quantum](https://www.cybervendorguide.com/tools/check-point-quantum): Enterprise network security gateway with ThreatCloud AI intelligence and Maestro hyperscale orchestration
- [Checkmarx](https://www.cybervendorguide.com/tools/checkmarx): Enterprise application security platform with deep SAST, SCA, DAST, and supply chain security
- [Cisco Firepower](https://www.cybervendorguide.com/tools/cisco-firepower): Cisco's next-generation firewall with Talos threat intelligence and deep network infrastructure integration
- [Cisco Secure Access](https://www.cybervendorguide.com/tools/cisco-secure-access): Cisco's unified SASE platform converging Umbrella, Duo, and Meraki into cloud-delivered security
- [Cisco Secure Email](https://www.cybervendorguide.com/tools/cisco-secure-email): Enterprise email security gateway with Cisco Talos threat intelligence integration
- [Cloudflare Access](https://www.cybervendorguide.com/tools/cloudflare-access): Zero trust network access that replaces VPNs with identity-aware policies
- [Cloudflare Zero Trust](https://www.cybervendorguide.com/tools/cloudflare-zero-trust): Developer-friendly zero trust platform built on Cloudflare's global Anycast network
- [Command Zero](https://www.cybervendorguide.com/tools/command-zero): Question-led autonomous investigation platform for escalated cases, root cause and threat hunting
- [Corelight](https://www.cybervendorguide.com/tools/corelight): Open NDR platform built on the open-source Zeek network monitoring framework
- [Cribl](https://www.cybervendorguide.com/tools/cribl): Security data pipeline platform for routing, reducing, and transforming observability data
- [Critical Start](https://www.cybervendorguide.com/tools/critical-start): MDR provider built around its Trusted Behavior Registry and MOBILESOC app, delivering managed detection across multiple EDR, XDR, and SIEM platforms.
- [CrowdStrike](https://www.cybervendorguide.com/tools/crowdstrike): Cloud-native endpoint protection platform with AI-powered threat detection
- [CrowdStrike Falcon Spotlight](https://www.cybervendorguide.com/tools/crowdstrike-falcon-spotlight): EDR-integrated scanless vulnerability assessment built on the CrowdStrike Falcon platform
- [CyberArk](https://www.cybervendorguide.com/tools/cyberark): Enterprise privileged access management and identity security platform
- [CyberArk Conjur](https://www.cybervendorguide.com/tools/cyberark-conjur): Enterprise privileged access and secrets management platform
- [CyberArk Privilege Cloud](https://www.cybervendorguide.com/tools/cyberark-privilege-cloud): Enterprise PAM delivered as a SaaS
- [Cybereason](https://www.cybervendorguide.com/tools/cybereason): AI-driven EDR with MalOp behavioral attack detection
- [Cyera](https://www.cybervendorguide.com/tools/cyera): AI-powered data security platform providing agentless data discovery, classification, and risk assessment
- [D3 Security Morpheus](https://www.cybervendorguide.com/tools/d3-security-morpheus): Agentic SOC platform doing autonomous triage, attack-path investigation and response execution
- [Darktrace](https://www.cybervendorguide.com/tools/darktrace): AI-driven cyber defense using self-learning technology
- [Dashlane (Business)](https://www.cybervendorguide.com/tools/dashlane-business): Business password management with built-in VPN, phishing protection, and SSO integration
- [Datadog Observability Pipelines](https://www.cybervendorguide.com/tools/datadog-observability-pipelines): Managed observability pipeline for routing and transforming telemetry data at scale
- [Datadog Security](https://www.cybervendorguide.com/tools/datadog-security): Unified security and observability platform with cloud SIEM and posture management
- [DEKRA](https://www.cybervendorguide.com/tools/dekra): Major TIC organization offering CRA readiness, security evaluation, and certification, with EUCC accreditation and CRA notified-body status from June 2026.
- [Delinea](https://www.cybervendorguide.com/tools/delinea): Cloud-ready PAM platform built on Secret Server and privilege management
- [Delinea Secret Server](https://www.cybervendorguide.com/tools/delinea-secret-server): Enterprise password and privileged credential vault
- [Doppler](https://www.cybervendorguide.com/tools/doppler): Developer-first universal secrets management platform
- [Dropzone AI](https://www.cybervendorguide.com/tools/dropzone-ai): AI SOC analyst that autonomously investigates tier-1 security alerts
- [Duo Security](https://www.cybervendorguide.com/tools/duo-security): Cisco's MFA and zero trust access platform known for ease of deployment
- [Echoworx](https://www.cybervendorguide.com/tools/echoworx): Enterprise email encryption platform with seven delivery methods and brandable portals
- [Egress](https://www.cybervendorguide.com/tools/egress): Adaptive, AI-driven email encryption that adjusts protection based on risk
- [Elastic Security](https://www.cybervendorguide.com/tools/elastic-security): Open-source SIEM and security analytics built on the ELK Stack
- [Ermetic](https://www.cybervendorguide.com/tools/ermetic): Cloud identity security platform specializing in CIEM and entitlement management, now part of Tenable
- [eSentire](https://www.cybervendorguide.com/tools/esentire): Canadian MDR pioneer delivering 24/7 SOC services on the Atlas security operations platform, with strong financial-services and legal-vertical specialisation.
- [ESET PROTECT](https://www.cybervendorguide.com/tools/eset-protect): Lightweight multilayered endpoint security with 30+ years of threat research
- [Exabeam](https://www.cybervendorguide.com/tools/exabeam): Behavioral analytics SIEM with automated investigation and response
- [Exaforce](https://www.cybervendorguide.com/tools/exaforce): Agentic SOC platform with separate agents for detection, triage, investigation and response
- [Expel](https://www.cybervendorguide.com/tools/expel): Vendor-neutral MDR founded by former Mandiant leaders, known for transparent operations and an API-only bring-your-own-tech model.
- [External Secrets Operator](https://www.cybervendorguide.com/tools/external-secrets-operator): K8s operator that syncs secrets from external stores into Kubernetes Secrets
- [ExtraHop](https://www.cybervendorguide.com/tools/extrahop): Cloud-native NDR with line-rate network traffic analysis
- [Fidelis Network](https://www.cybervendorguide.com/tools/fidelis-network): Network detection and response component of the Fidelis Elevate XDR platform
- [Finite State](https://www.cybervendorguide.com/tools/finite-state): AI-native Product Security OS analyzing firmware and binaries across connected devices, with exploit-based threat prioritization.
- [Fluentd](https://www.cybervendorguide.com/tools/fluentd): Open-source unified data collector and log aggregator from the CNCF ecosystem
- [Forcepoint DLP](https://www.cybervendorguide.com/tools/forcepoint-dlp): Enterprise DLP platform with risk-adaptive protection and multi-channel data loss prevention
- [ForgeRock](https://www.cybervendorguide.com/tools/forgerock): Enterprise identity platform with AI-driven orchestration for complex deployments
- [Fortinet FortiGate](https://www.cybervendorguide.com/tools/fortinet-fortigate): Integrated network security platform with ASIC-accelerated performance and Security Fabric ecosystem
- [Fortinet FortiSASE](https://www.cybervendorguide.com/tools/fortinet-fortisase): Converged SASE platform powered by FortiOS with competitive pricing and integrated SD-WAN
- [Fortra Data Security](https://www.cybervendorguide.com/tools/fortra): Unified, AI-native data security platform bringing together DSPM, data classification and DLP
- [GitHub Advanced Security](https://www.cybervendorguide.com/tools/github-advanced-security): GitHub-native security scanning with CodeQL SAST, secret scanning, and Dependabot dependency management
- [Google Cloud Secret Manager](https://www.cybervendorguide.com/tools/gcp-secret-manager): GCP-native secrets storage with versioning and audit
- [Graylog](https://www.cybervendorguide.com/tools/graylog): Open-source log management and SIEM platform with intuitive analytics
- [Greenbone OpenVAS](https://www.cybervendorguide.com/tools/greenbone-openvas): The most widely used open-source vulnerability scanner with 100,000+ network vulnerability tests
- [HashiCorp Boundary](https://www.cybervendorguide.com/tools/hashicorp-boundary): Session broker from HashiCorp, pairs with Vault for JIT credential injection
- [HashiCorp Vault](https://www.cybervendorguide.com/tools/hashicorp-vault): Industry-standard open-source secrets management platform
- [IBM QRadar](https://www.cybervendorguide.com/tools/ibm-qradar): AI-powered enterprise SIEM with automated threat detection and investigation
- [iboss](https://www.cybervendorguide.com/tools/iboss): Cloud-native zero trust platform with FedRAMP authorization and competitive mid-market pricing
- [Infisical](https://www.cybervendorguide.com/tools/infisical): Open-source end-to-end encrypted secrets management for teams
- [Intezer](https://www.cybervendorguide.com/tools/intezer): AI SOC platform that autonomously investigates and triages alerts with forensic analysis
- [IOActive, Inc.](https://www.cybervendorguide.com/tools/ioactive): Independent global research-driven security consultancy specialising in full-stack, hardware, embedded, and critical-infrastructure testing.
- [IRONSCALES](https://www.cybervendorguide.com/tools/ironscales): AI-powered anti-phishing platform with crowdsourced threat intelligence
- [JumpCloud](https://www.cybervendorguide.com/tools/jumpcloud): All-in-one directory, SSO, and device management for SMBs
- [Juniper SRX](https://www.cybervendorguide.com/tools/juniper-srx): High-performance security gateway with advanced routing and Junos OS networking heritage
- [Keeper (Business)](https://www.cybervendorguide.com/tools/keeper-business): Zero-knowledge enterprise password and secrets management with dark web monitoring
- [Keycloak](https://www.cybervendorguide.com/tools/keycloak): A widely used open-source IAM platform, backed by Red Hat
- [KUMO](https://www.cybervendorguide.com/tools/kumo-domain-recon): Open-source domain reconnaissance and OSINT framework that runs 26 parallel scanning modules against a target domain.
- [Lacework](https://www.cybervendorguide.com/tools/lacework): Data-driven cloud security platform using behavioral analytics for automated threat detection
- [LastPass (Business)](https://www.cybervendorguide.com/tools/lastpass-business): Widely adopted enterprise password management with extensive SSO and MFA integration
- [Legion Security](https://www.cybervendorguide.com/tools/legion-security): Agentic security operations platform that learns analyst workflows and turns them into agentic playbooks
- [Lepide Data Security Platform](https://www.cybervendorguide.com/tools/lepide): Unstructured data security, access governance, auditing, threat detection and DSPM across AD, M365 and file servers.
- [LogRhythm](https://www.cybervendorguide.com/tools/logrhythm): Unified SIEM platform with threat lifecycle management and built-in SOAR
- [LuxSci](https://www.cybervendorguide.com/tools/luxsci): Combined HIPAA-compliant email hosting and encryption with multiple delivery methods
- [ManageEngine PAM360](https://www.cybervendorguide.com/tools/manageengine-pam360): Mid-market PAM from ManageEngine at a much lower price point than the leaders
- [Mandiant (part of Google Cloud)](https://www.cybervendorguide.com/tools/mandiant): Elite incident response and offensive security consultancy operating as the threat-intelligence arm of Google Cloud Security.
- [Mend.io](https://www.cybervendorguide.com/tools/mend-io): Open-source security and license compliance platform with comprehensive SCA and supply chain risk management
- [Mezmo](https://www.cybervendorguide.com/tools/mezmo): Log management and observability pipeline platform with intelligent data routing
- [Microsoft Defender for Endpoint](https://www.cybervendorguide.com/tools/microsoft-defender): Enterprise endpoint protection deeply integrated with Microsoft 365 security stack
- [Microsoft Defender for Office 365](https://www.cybervendorguide.com/tools/microsoft-defender-office-365): Microsoft's native email security for Microsoft 365 with XDR integration
- [Microsoft Defender Vulnerability Management](https://www.cybervendorguide.com/tools/microsoft-defender-vulnerability-management): Microsoft's built-in vulnerability management integrated with Defender for Endpoint
- [Microsoft Entra ID](https://www.cybervendorguide.com/tools/microsoft-entra-id): Microsoft's cloud IAM, bundled with M365 and Azure
- [Microsoft Purview](https://www.cybervendorguide.com/tools/microsoft-purview): Microsoft unified data governance and compliance platform with deep M365 integration
- [Microsoft Sentinel](https://www.cybervendorguide.com/tools/microsoft-sentinel): Cloud-native Azure SIEM with AI-powered detection and automated response
- [Mimecast](https://www.cybervendorguide.com/tools/mimecast): Cloud email security platform with threat protection, archiving, and continuity
- [NCC Group](https://www.cybervendorguide.com/tools/ncc-group): FTSE 250 global cybersecurity and software resilience firm offering technical assurance, managed detection, and incident response.
- [Netskope](https://www.cybervendorguide.com/tools/netskope): Cloud-native SASE platform with CASB and granular SaaS visibility
- [Netwrix](https://www.cybervendorguide.com/tools/netwrix): Data security and auditing platform for change tracking, compliance, and user behavior monitoring
- [Nuclei](https://www.cybervendorguide.com/tools/nuclei): Fast, template-based open-source vulnerability scanner with 8,000+ community-contributed detection templates
- [Okta Workforce Identity](https://www.cybervendorguide.com/tools/okta): Cloud IAM with the broadest integration catalog
- [One Identity](https://www.cybervendorguide.com/tools/one-identity): Unified identity security platform with PAM and governance
- [One Identity Safeguard](https://www.cybervendorguide.com/tools/one-identity-safeguard): Enterprise PAM from Quest Software, hardened appliance deployment
- [ONEKEY](https://www.cybervendorguide.com/tools/onekey): European product-cybersecurity platform automating SBOM generation, vulnerability management, and CRA compliance for connected-device makers.
- [OneLogin](https://www.cybervendorguide.com/tools/onelogin): Mid-market cloud IAM at a lower price point than Okta
- [Opsis OSINT](https://www.cybervendorguide.com/tools/opsis-osint): OSINT platform searching usernames, emails and domains across public sources
- [Orca Security](https://www.cybervendorguide.com/tools/orca-security): Agentless cloud security platform using SideScanning technology for full-stack visibility
- [Palo Alto Cortex XDR](https://www.cybervendorguide.com/tools/cortex-xdr): XDR platform integrating endpoint, network, and cloud data from Palo Alto ecosystem
- [Palo Alto Networks](https://www.cybervendorguide.com/tools/paloalto): Enterprise next-generation firewall platform with advanced threat prevention, application visibility, and centralized management
- [Palo Alto Prisma Access](https://www.cybervendorguide.com/tools/palo-alto-prisma-access): Enterprise SASE platform extending Palo Alto's next-gen firewall to cloud-delivered security
- [Paubox](https://www.cybervendorguide.com/tools/paubox): HIPAA-compliant email encryption built for healthcare with seamless delivery
- [PCA Cyber Security](https://www.cybervendorguide.com/tools/pca-cyber-security): Offensive automotive and embedded security: vehicle penetration testing, threat intelligence, and product SOC monitoring
- [PCA Cyber Security](https://www.cybervendorguide.com/tools/pca): Payment-device and embedded penetration testing firm; tests payment terminals beyond PCI PTS certification.
- [pfSense](https://www.cybervendorguide.com/tools/pfsense): Open-source firewall and router platform based on FreeBSD with zero licensing costs
- [pi3g](https://www.cybervendorguide.com/tools/pi3g): German embedded-Linux and IoT specialist helping SME manufacturers make connected products compliant with the EU Cyber Resilience Act.
- [PII Crawler](https://www.cybervendorguide.com/tools/pii-crawler): Local, air-gapped desktop and CLI scanner that finds SSNs and 30+ PII types in files and databases
- [Ping Identity](https://www.cybervendorguide.com/tools/ping-identity): Enterprise-grade IAM with hybrid deployment and strong federation
- [Praetorian](https://www.cybervendorguide.com/tools/praetorian): Offensive security firm delivering continuous penetration testing and attack-surface management through its Chariot platform.
- [Prisma Cloud](https://www.cybervendorguide.com/tools/prisma-cloud): Comprehensive CNAPP from Palo Alto Networks securing applications from code to cloud
- [Proofpoint](https://www.cybervendorguide.com/tools/proofpoint): Enterprise email security platform for advanced threat protection, compliance, and data loss prevention
- [Prophet Security](https://www.cybervendorguide.com/tools/prophet-security): Agentic AI platform for autonomous security alert triage and investigation
- [Proton Mail Business](https://www.cybervendorguide.com/tools/protonmail-business): Swiss-hosted zero-access encrypted email with the strongest privacy protections
- [Pulumi ESC](https://www.cybervendorguide.com/tools/pulumi-esc): Secrets composition layer: pull from Vault/AWS/Doppler and expose to any runtime
- [Qevlar AI](https://www.cybervendorguide.com/tools/qevlar-ai): Autonomous alert investigation platform for SOC teams and MSSPs
- [Qualys VMDR](https://www.cybervendorguide.com/tools/qualys-vmdr): Cloud-native vulnerability management platform with integrated detection, prioritization, and patch management
- [Radiant Security](https://www.cybervendorguide.com/tools/radiant-security): AI SOC platform that triages, investigates, and responds to security alerts
- [Rapid7 InsightVM](https://www.cybervendorguide.com/tools/rapid7-insightvm): Risk-based vulnerability management platform with live dashboards and remediation project tracking
- [Realm.Security](https://www.cybervendorguide.com/tools/realm-security): Security data fabric platform for intelligent routing and optimization of security telemetry
- [Red Canary (a Zscaler company)](https://www.cybervendorguide.com/tools/red-canary): MDR provider known for deep Microsoft Defender expertise and high-fidelity detection engineering, acquired by Zscaler in 2025.
- [RoboShadow](https://www.cybervendorguide.com/tools/roboshadow): Vulnerability scanning and automated third-party patching with Microsoft 365 sync
- [SailPoint](https://www.cybervendorguide.com/tools/sailpoint): AI-driven identity governance and administration platform
- [Saviynt Privileged Access](https://www.cybervendorguide.com/tools/saviynt-pam): Cloud-native PAM built into Saviynt's converged identity platform
- [Sawmills](https://www.cybervendorguide.com/tools/sawmills): AI telemetry pipeline that filters and optimises logs, metrics and traces pre-ingestion to cut observability cost.
- [Scalefusion OneIdP](https://www.cybervendorguide.com/tools/scalefusion-oneidp): UEM-linked IAM suite with SSO, MFA, conditional access and just-in-time admin
- [Sealed Secrets](https://www.cybervendorguide.com/tools/sealed-secrets): Encrypt Kubernetes secrets into a format safe to store in Git
- [Secureworks (a Sophos company)](https://www.cybervendorguide.com/tools/secureworks): Long-established MDR and XDR provider built around the Taegis platform, now operating as part of Sophos.
- [Securiti](https://www.cybervendorguide.com/tools/securiti): AI-powered data security, privacy, and governance platform with DSPM and compliance automation
- [Securonix](https://www.cybervendorguide.com/tools/securonix): Cloud-native SIEM with advanced UEBA and analytics
- [Semgrep](https://www.cybervendorguide.com/tools/semgrep): Lightweight, open-source static analysis with intuitive pattern-matching rules and fast scan performance
- [SentinelOne](https://www.cybervendorguide.com/tools/sentinelone): AI-powered autonomous endpoint protection with one-click remediation
- [SERMA Safety & Security](https://www.cybervendorguide.com/tools/serma-safety-security): French security evaluation lab (ITSEF); PCI Recognized for PTS, plus EMVCo and Common Criteria.
- [SGS](https://www.cybervendorguide.com/tools/sgs): World-leading testing and certification company that, through SGS Brightsight, provides CRA and RED security evaluation, conformity assessment, and notified-body services.
- [SGS Brightsight](https://www.cybervendorguide.com/tools/sgs-brightsight): Major PCI Recognized security evaluation lab for payment devices, EMVCo and Common Criteria.
- [Simbian](https://www.cybervendorguide.com/tools/simbian): AI agents that triage, investigate, and respond to security alerts
- [Skyhigh Security](https://www.cybervendorguide.com/tools/skyhigh-security): Data-aware SSE platform with pioneering CASB technology and deep cloud data protection
- [Snyk](https://www.cybervendorguide.com/tools/snyk): Developer-first application security platform for finding and fixing vulnerabilities in code, dependencies, containers, and IaC
- [SonarQube](https://www.cybervendorguide.com/tools/sonarqube): Open-source code quality and security analysis platform with broad language support
- [SonicWall](https://www.cybervendorguide.com/tools/sonicwall): High-performance firewalls with advanced threat detection for SMB to enterprise
- [Sophos Intercept X](https://www.cybervendorguide.com/tools/sophos-intercept-x): Endpoint protection with deep learning AI and synchronized security ecosystem
- [Sophos XGS](https://www.cybervendorguide.com/tools/sophos-xgs): Synchronized security firewall with endpoint integration, Xstream TLS inspection, and cloud management
- [SOPS](https://www.cybervendorguide.com/tools/sops): CLI tool for encrypting YAML/JSON/ENV files with KMS, age, or PGP
- [SPIFFE / SPIRE](https://www.cybervendorguide.com/tools/spiffe-spire): Workload identity standard: short-lived SVIDs replace shared service secrets
- [Spirion](https://www.cybervendorguide.com/tools/spirion): Sensitive data discovery and classification platform with high-accuracy identification of regulated data
- [SplitSecure](https://www.cybervendorguide.com/tools/splitsecure): Distributed secrets management. No vault, no vendor dependency
- [Splunk](https://www.cybervendorguide.com/tools/splunk): Enterprise SIEM and security analytics platform for threat detection and incident response
- [Splunk Data Stream Processor](https://www.cybervendorguide.com/tools/splunk-dsp): Splunk's real-time stream processing engine for data optimization and routing
- [SRC Security Research & Consulting](https://www.cybervendorguide.com/tools/src-security): German PCI Recognized lab for PCI PTS device evaluation and German payment terminal schemes.
- [Stamus Networks](https://www.cybervendorguide.com/tools/stamus-networks): Suricata-based network detection and response with an open-source community edition
- [StrongDM](https://www.cybervendorguide.com/tools/strongdm): Infrastructure access proxy with credential injection and session recording
- [Sumo Logic](https://www.cybervendorguide.com/tools/sumo-logic): Cloud-native SIEM and security analytics with automated threat detection
- [Sysdig](https://www.cybervendorguide.com/tools/sysdig): Cloud and container security platform built on open-source Falco for runtime threat detection
- [Tanium](https://www.cybervendorguide.com/tools/tanium): Converged endpoint management platform with real-time vulnerability assessment at massive enterprise scale
- [Teleport](https://www.cybervendorguide.com/tools/teleport): Modern identity-aware access for SSH, Kubernetes, databases, and apps
- [Tenable](https://www.cybervendorguide.com/tools/tenable): Vulnerability management platform with Nessus scanning, cloud-native VM, and exposure management
- [Tenzir](https://www.cybervendorguide.com/tools/tenzir): Open-source security data pipeline with native support for security-specific data formats
- [Tessian](https://www.cybervendorguide.com/tools/tessian): Human layer security platform preventing inbound threats and outbound misdirected emails
- [Torq](https://www.cybervendorguide.com/tools/torq): Hyperautomation platform with the HyperSOC agentic SOC and Socrates AI analyst
- [Trail of Bits](https://www.cybervendorguide.com/tools/trail-of-bits): High-end security research and engineering firm known for deep code audits, cryptography reviews, and smart-contract security work.
- [Trellix](https://www.cybervendorguide.com/tools/trellix): XDR platform combining McAfee Enterprise and FireEye capabilities
- [Trend Micro Cloud One](https://www.cybervendorguide.com/tools/trend-micro-cloud-one): Multi-cloud security platform offering modular workload protection and posture management
- [Trend Micro Email Security](https://www.cybervendorguide.com/tools/trend-micro-email-security): Cloud email security gateway with AI-powered BEC detection and XDR integration
- [Trend Micro Vision One](https://www.cybervendorguide.com/tools/trend-micro): XDR platform with unified visibility across endpoints, email, cloud, and network
- [Trivy](https://www.cybervendorguide.com/tools/trivy): Open-source vulnerability scanner for containers, file systems, IaC, and Kubernetes with zero-config setup
- [Tuta](https://www.cybervendorguide.com/tools/tuta): Open-source end-to-end encrypted email with zero-access architecture
- [TUV SUD](https://www.cybervendorguide.com/tools/tuv-sud): Global testing and certification body offering CRA readiness assessment, vulnerability-management support, third-party conformity assessment, and training.
- [UL Solutions](https://www.cybervendorguide.com/tools/ul-solutions): Global TIC firm and PCI Recognized lab for payment terminal (PTS POI/HSM) and EMVCo testing.
- [UnderDefense](https://www.cybervendorguide.com/tools/underdefense): MDR, managed SOC and compliance services delivered from the US, Poland and Ukraine
- [Upstream Security](https://www.cybervendorguide.com/tools/upstream-security): Cloud-based, agentless connected-vehicle cybersecurity platform with a managed Vehicle SOC
- [Varonis](https://www.cybervendorguide.com/tools/varonis): Data security and governance platform for access visibility, insider threat detection, and sensitive data protection
- [Vector](https://www.cybervendorguide.com/tools/vector): High-performance open-source observability pipeline built in Rust by Datadog
- [Vector Informatik](https://www.cybervendorguide.com/tools/vector-informatik): Automotive embedded security stacks, fuzz testing tools and ISO 21434 consulting
- [Vectra AI](https://www.cybervendorguide.com/tools/vectra-ai): AI-powered NDR with Attack Signal Intelligence for hybrid cloud
- [Veracode](https://www.cybervendorguide.com/tools/veracode): Cloud-based application security testing platform with SAST, SCA, DAST, and penetration testing
- [VicOne](https://www.cybervendorguide.com/tools/vicone): Trend Micro subsidiary delivering end-to-end automotive cybersecurity across the vehicle lifecycle
- [Virtru](https://www.cybervendorguide.com/tools/virtru): End-to-end encryption for Gmail and Outlook with persistent sender control
- [VMware Carbon Black](https://www.cybervendorguide.com/tools/carbon-black): Behavioral EDR platform with continuous endpoint activity recording
- [Vulert](https://www.cybervendorguide.com/tools/vulert): Agentless SCA that monitors dependencies from uploaded manifests or SBOMs
- [VxLabs](https://www.cybervendorguide.com/tools/vxlabs): Automotive TARA, SBOM and compliance platform plus security engineering services
- [Warpgate](https://www.cybervendorguide.com/tools/warpgate): Open-source clientless bastion for SSH, HTTPS, RDP, VNC, Kubernetes and databases
- [WatchGuard Firebox](https://www.cybervendorguide.com/tools/watchguard-firebox): SMB-focused unified threat management with simplified deployment and MSP-friendly cloud management
- [Wazuh](https://www.cybervendorguide.com/tools/wazuh): Open-source unified XDR and SIEM platform
- [WebSlurp](https://www.cybervendorguide.com/tools/webslurp): Chrome DevTools extension to capture, edit and replay HTTP requests
- [Wiz](https://www.cybervendorguide.com/tools/wiz): Agentless cloud security platform with full-stack visibility and risk prioritization across multi-cloud environments
- [Zix (OpenText)](https://www.cybervendorguide.com/tools/zix): Enterprise email encryption with the larger install base and policy-based automation
- [Zscaler](https://www.cybervendorguide.com/tools/zscaler): Cloud-native SASE and zero trust platform for secure internet and private application access