Startups Directory

BitSight is a cybersecurity intelligence platform that measures and monitors security performance through proprietary security ratings (250-900 scale) based on billions of cyber events and data points. The company serves enterprises, insurers, governments, and investment firms to manage third-party cyber risk, conduct M&A due diligence, and underwrite cyber insurance policies. BitSight created the security ratings category and operates one of the world's largest cyber risk datasets, processing 540B+ cyber events annually and monitoring 65K+ vendors globally.

Abnormal Security is an AI-native email and cloud application security platform that uses behavioral anomaly detection and natural language processing to stop sophisticated Business Email Compromise (BEC) attacks and account takeovers. The platform deploys via API in minutes and ingests thousands of behavioral signals to block socially engineered, payloadless attacks that bypass traditional email filters. It protects over 3,200 organizations including 25%+ of Fortune 500 companies across email, Microsoft 365, Google Workspace, and 12+ SaaS applications including Salesforce, Workday, and Slack. What sets Abnormal apart is its AI-first approach that replaces legacy Secure Email Gateways with autonomous threat detection that learns legitimate business communication patterns.

Verkada is an AI-powered, cloud-native security platform that unifies video surveillance, access control, alarms, intercoms, and air quality monitoring through a single integrated software interface called Verkada Command. Built by Stanford founders and a Meraki veteran, it replaces legacy hardware-based security systems with a modern, subscription-based model where sensors stream to secure cloud infrastructure with hybrid architecture for continuous operation during outages. The platform processes over 20 million images per hour to provide actionable insights like occupancy rates, foot traffic patterns, and security violations across enterprise campuses.

Vanta is an agentic trust platform that automates compliance and security monitoring by performing 1,200+ control checks hourly across 35+ global frameworks. It replaces manual, point-in-time compliance processes with continuous monitoring and AI-powered automation that reduces audit completion times by 50%. The platform integrates with 300+ systems to collect evidence automatically and power real-time risk detection, enabling organizations to maintain compliance at scale without manual overhead.

Torq is an AI-driven security hyperautomation platform that automates threat detection, investigation, prioritization, and response across enterprise security operations. The platform uses agentic AI (notably its Socrates agent) to autonomously handle alert triage, case management, and threat remediation at scale, claiming to resolve 95% of Tier-1 alerts without human intervention. It serves Fortune 500 enterprises and MSSPs seeking to reduce mean time to respond (MTTR) and investigation overhead, positioning itself as an open, modern alternative to monolithic legacy SOAR platforms from Palo Alto Networks and Splunk.

SparkCognition is an industrial AI company that delivers machine learning solutions for predictive maintenance, anomaly detection, and cybersecurity. The platform uses IoT sensor data and advanced algorithms to predict equipment failures before they occur, identify cyber threats, and optimize operations across industrial assets like turbines, pumps, and generators. SparkCognition serves energy, manufacturing, and maritime sectors, helping operators avoid costly downtime and reduce operational inefficiencies by billions of dollars.

Silverfort provides agentless, proxyless Runtime Access Protection (RAP) that extends MFA, risk-based authentication, and Zero Trust policies across all enterprise systems—on-premise, cloud, and legacy applications—without requiring endpoint or application modifications. It integrates directly with existing Active Directory and identity systems to analyze authentication risk in real-time and enforce MFA on resources previously unprotectable by traditional solutions. Silverfort serves over 1,000 enterprise customers globally and differentiates through its ability to protect legacy, custom, and command-line tools that competitors cannot cover.

SpyCloud is a cybercrime analytics platform that recaptures and analyzes darknet breach and malware data to protect enterprises from identity-based attacks. The company operates the world's largest repository of compromised credentials and malware intelligence, enabling organizations to detect and remediate exposures across employees, contractors, customers, and non-human accounts in minutes. SpyCloud integrates with existing security infrastructure (EDR, IdP, SIEM, SOAR) to automate identity risk mitigation at scale, serving half of the Fortune 10 and government agencies globally.

Veza is the authorization platform for data security built on a graph-based architecture that maps access permissions across 300+ integrations in hybrid and multi-cloud environments. It enables enterprises to visualize, manage, and control granular access down to specific data objects, tables, and cloud resources. Used by Global 500 companies like Expedia, Blackstone, and Wynn Resorts to solve privileged access monitoring, non-human identity security, and identity governance challenges. Recently acquired by ServiceNow in December 2025 at a $1B-$1.5B valuation.

Cyberhaven is a unified data security platform that combines DSPM, DLP, insider risk management, and AI security with deep data lineage capabilities. It records every event for every piece of data—every move, copy, edit, and share—across endpoints and cloud applications to provide complete visibility into how data moves throughout an organization. The platform delivers 95% fewer false positives than traditional DLP solutions and enables customers to investigate incidents up to five times faster. Founded by five PhD researchers, it's trusted by top 5 North American banks, Fortune 500 companies, and highly regulated enterprises.

Horizon3.ai provides NodeZero, an autonomous penetration testing platform that safely executes real attack techniques at scale without agents or network disruption. The platform discovers and exploits vulnerabilities by chaining attack paths together—exactly as real attackers would—across internal networks, external surfaces, cloud infrastructure (AWS, Azure, Kubernetes), and web applications. Built by veterans in tech and military, it's trusted by 3,000+ organizations including Fortune 500 companies and national defense partners who need continuous proof of their security posture.

Coro is a unified cybersecurity platform that consolidates 14 integrated modules—including EDR, SASE, email security, and threat detection—into a single solution for SMBs and mid-market companies. Using AI-driven automation, it detects and remediates over 92% of threats automatically while maintaining ease of use and affordability. The platform is designed to replace 15-25 disparate security tools, reducing complexity and cost for organizations that lack dedicated security teams.

Horizon3.ai provides NodeZero, an autonomous penetration testing platform that continuously simulates real-world attacks without agents or human intervention. The SaaS solution safely executes attack chains across AWS, Azure, and Kubernetes infrastructure to show exactly how attackers compromise systems and what data they access. Organizations use it to verify security fixes in production and stay ahead of evolving threats at scale.