Startups Directory

1Password is a zero-knowledge password manager that securely stores and organizes credentials, payment cards, and personal information in an encrypted vault accessible only through a master password or biometric authentication. Used by over 100,000 businesses including IBM, Slack, and Shopify, it employs a two-key security model (account password plus Secret Key) that makes brute-force attacks practically impossible. The platform includes browser plugins for autofill, strong password generation, and team collaboration features, positioning itself as a 'human-centric' security solution that lets users focus on productivity rather than security complexity.

Orca Security provides agentless cloud security scanning for AWS, Azure, and Google Cloud environments using proprietary SideScanning technology that analyzes block storage without deploying agents or impacting workload performance. The platform delivers instant visibility across multi-cloud infrastructure, detecting vulnerabilities, misconfigurations, malware, and compliance violations. Orca serves enterprise organizations requiring rapid deployment, complete cloud asset visibility, and minimal operational overhead. The company has achieved $1.8B valuation with backing from Google, Temasek, and other tier-one investors.

NinjaOne is a unified IT operations platform that consolidates endpoint management, patch management, backup, and remote access into a single console. It serves MSPs and enterprises struggling with endpoint sprawl—over 50% of employees use 4-5 devices daily, yet 90% of organizations can't actively monitor all endpoints. The platform automates IT tasks, improves security, and reduces operational costs through a lightweight agent that provides centralized visibility and control across Windows, Mac, Linux, and mobile devices.

Ontic is a Connected Intelligence Platform that unifies security operations by aggregating threat indicators, OSINT data, and case management into a single system of record. It serves Fortune 500 companies and federal agencies to identify threats, assess risk, and respond faster to protect people and organizations. The platform consolidates research, incident investigation, real-time threat detection, and vulnerability assessments—solving the problem that investigators lose up to 50% of their time chasing down disparate data sources.

Drata is a security and compliance automation platform that continuously monitors an organization's tech stack to collect evidence of security controls and automate compliance workflows. It integrates with SaaS apps, cloud providers, and employee devices to centralize compliance data across 30+ frameworks including SOC 2, ISO 27001, HIPAA, and GDPR. The platform automates 80% of evidence collection and unifies risk, controls, and audits in a single dashboard, reducing manual compliance work from hundreds of hours to actionable automation.

Blackpoint Cyber delivers 24/7 managed detection, response, and remediation (MDR) services powered by a human-led Security Operations Center. The platform detects advanced threats by identifying malicious use of legitimate IT administration tools—a blind spot for traditional EDR and antivirus solutions. Built specifically for MSPs and their customers, Blackpoint eliminates alert fatigue by taking remediation action in real-time rather than leaving it to customers.

Tailscale is a Zero Trust identity-based connectivity platform that replaces legacy VPNs, SASE, and PAM solutions by enabling secure private networks through peer-to-peer mesh networking built on WireGuard. It connects remote teams, multi-cloud environments, CI/CD pipelines, Edge/IoT devices, and AI workloads without requiring port forwarding, firewall rule changes, or complex VPN configurations. The platform uses advanced NAT traversal (STUN/ICE) and DERP relay protocols to establish direct encrypted connections across any network topology. Trusted by 10,000+ paid business customers including Fortune 500 companies, AI startups like Mistral and Hugging Face, and enterprises like Duolingo, Instacart, and Revolut.

Sublime Security is an AI-powered email security platform that deploys autonomous agents to detect, triage, and stop targeted email attacks in real time. Built on Message Query Language (MQL), a domain-specific language for email behavior detection, it enables security teams to write and deploy custom defenses without MX record changes across Microsoft 365 or Google Workspace. The platform combines transparency and flexibility with autonomous threat investigation, reducing manual review work by 62% while catching significantly more threats than traditional blackbox solutions.

CHEQ is a go-to-market security platform that protects digital customer journeys by distinguishing legitimate users from bots, fraudsters, and malicious actors using real-time traffic, identity, and threat intelligence. The platform processes 6 trillion signals daily across 1 million domains with a false positive rate below 0.009%, serving over 15,000 brands globally. CHEQ's modular suite includes acquisition protection, form validation, analytics integration, and privacy compliance tools, delivering an estimated 671% ROI by eliminating wasted marketing spend on invalid traffic.

Noname Security is an AI-powered API security platform that automatically discovers, inventories, and protects all APIs across an organization's environment. The platform identifies vulnerabilities including data leakage, authorization issues, misconfigurations, and suspicious behavior without requiring agents or network modifications. It serves enterprises across financial services, healthcare, retail, and public sector, protecting over 10 million APIs and nearly $3 trillion in revenue streams. Noname was acquired by Akamai in May 2024 for $450M and is being integrated into Akamai's API Security offering.

Tines is a no-code AI orchestration platform that enables security and IT teams to automate mission-critical workflows without writing code. It serves as the integration layer between disparate security and IT tools, allowing teams to build intelligent agents that monitor alerts, manage compliance, handle employee lifecycle, and orchestrate patch management. Founded by former security leaders from eBay and DocuSign who experienced the pain of manual security operations firsthand, Tines has grown to a $1.125B valuation with 378 employees.

XBOW is an AI-powered autonomous penetration testing platform that identifies and exploits vulnerabilities in web applications without human intervention. Using swarms of AI agents, it simultaneously explores multiple attack vectors, reducing testing times from weeks to hours while providing reproducible proof of exploitation. The platform is trusted by Fortune 500 companies including UKG, Samsung SDS, and Moderna, and recently ranked #1 on the HackerOne leaderboard, outperforming thousands of human hackers.

CAST AI is a machine learning-powered platform that automatically optimizes Kubernetes clusters and cloud infrastructure in real time, reducing cloud costs by 50% or more while improving application performance and security. Unlike competitors that merely monitor and recommend fixes, CAST AI actively implements optimizations across AWS, Azure, GCP, and on-premises environments. The platform uses advanced ML algorithms to continuously analyze workload behavior, automate resource allocation, and eliminate waste through intelligent bin packing and pod scheduling.

Alkira is a cloud-native network infrastructure-as-a-service platform that unifies connectivity across multiple clouds, data centers, and on-premises environments through a single control plane. It solves the fragmentation of east-west traffic between clouds by providing enterprises with an intuitive design canvas to deploy and manage network connectivity in minutes without hardware or agents. Founded by the team behind Viptela (acquired by Cisco for $610M), Alkira has raised $184M from top-tier investors including Kleiner Perkins, Sequoia Capital, and Tiger Global Management.

CyCognito is an attack surface discovery platform that autonomously simulates attacker techniques to identify internet-exposed and unmanaged assets across an organization's infrastructure. Using machine learning, NLP, and graph data models, it discovers business relationships, subsidiaries, and cloud environments without requiring customer integration or configuration. The platform prioritizes critical risks by filtering false positives through advanced AI, enabling security teams to focus remediation efforts on actual threats rather than vulnerability lists.

Cape is a privacy-first mobile carrier that owns and operates its own mobile core and SIMs, addressing network-layer vulnerabilities that app-based solutions cannot fix. Unlike traditional MVNOs that resell carrier services, Cape embeds privacy and security at the cellular infrastructure level to protect against SIM swaps, surveillance, and metadata breaches. Founded by former Palantir executives with national security expertise, Cape serves U.S. government agencies, enterprise executives, journalists, and privacy-conscious consumers across the country.

Veriff is an AI-powered identity verification platform that automatically verifies customer identities using facial recognition, document validation, and behavioral analysis. The company serves fintech, marketplaces, and regulated industries through an API-based service that achieves 99.6% fraud detection accuracy in ~6 seconds. Veriff differentiates itself with support for 12,500+ identity documents (vs. competitors' ~2,500) and industry-leading speed, enabling businesses to reduce verification drop-offs and improve conversion rates.

ThreatLocker is a zero trust endpoint protection platform that stops ransomware and cyberattacks by using a deny-by-default application control model—only allowing approved software to run rather than trying to block threats after they appear. The platform includes application control, storage control, privileged access management, network access control, and EDR/MDR capabilities, with a learning mode that automatically catalogs apps and recognizes over 13,000 pre-built applications. It serves mid-market to enterprise organizations across all industries, with a particular focus on MSPs serving their customers. Over 50,000 businesses worldwide have adopted ThreatLocker to shrink their attack surface and reduce security incidents.