Startups Directory

Expel is a 24/7 managed SOC (Security Operations Center) that monitors cloud, hybrid, and on-premises environments using its proprietary Expel Workbench platform paired with expert security analysts. Unlike traditional MSSPs, Expel operates with complete transparency—customers see the same interface and investigation details as Expel analysts, eliminating the black box. The company helps organizations stop cyberattacks faster by extracting maximum value from existing security investments through API-based integrations that deploy in hours, not weeks.

Wiz is a cloud-native security platform that provides real-time visibility across multi-cloud environments (AWS, Azure, GCP, OCI, Kubernetes) using agentless APIs and graph-based analysis. It identifies exploitable attack paths and prioritizes risk based on business impact, enabling security teams to fix issues before they reach production. The platform serves enterprise security teams and has won over 40% of Fortune 100 companies with its unified "single pane of glass" approach to cloud security.

Cyera is an AI-native data security platform that discovers, classifies, governs, and protects sensitive data across cloud, SaaS, on-premise, and AI environments. It converges Data Security Posture Management (DSPM), Data Loss Prevention (DLP), and identity into a single unified platform. The platform deploys agentlessly in five minutes with an AI-powered classification engine delivering 95% accuracy, and includes Browser Shield for real-time visibility and policy enforcement on AI tool usage. Cyera secures data for 20% of the Fortune 500 across financial services, retail, healthcare, technology, and telecom.

Socure is an AI-powered identity verification and fraud prevention platform that processes identity data across 400+ authoritative sources to make real-time verification decisions in milliseconds. The platform serves financial services, fintechs, gaming, healthcare, and e-commerce companies seeking to approve more customers while reducing fraud risk. Socure's self-learning models improve with each verification through feedback from its Risk Insights Network of 2,300+ customers, enabling significantly higher auto-approval rates for underserved demographics like Gen Z and immigrants.

ID.me is a digital identity verification platform that enables users to complete one high-assurance identity verification (document + liveness check) and reuse that credential across government and private-sector portals. Operating as "Sign in with Google" for high-stakes identity, ID.me uses machine vision, AI, and SIM verification to authenticate users and allow them to maintain control of their digital identity. The platform eliminates repeated verification friction across multiple agencies and services, powering over 409 million logins annually.

SandboxAQ develops Large Quantitative Models (LQMs)—physics-aware AI systems that solve complex problems in drug discovery, cybersecurity, and GPS-denied navigation. The company spun out from Alphabet in 2022 with six years of internal R&D and serves Global 1000 enterprises through cloud-delivered software subscriptions. Unlike general-purpose LLMs, SandboxAQ's models incorporate quantitative reasoning for measurable real-world outcomes in regulated, calculation-intensive domains.

Devo is a cloud-native security analytics platform that provides SIEM, SOAR, and UEBA capabilities for information security and operations teams. Unlike traditional solutions that index and transform data, Devo stores raw data in hot format with micro-indexing, delivering query results in milliseconds and maintaining 400 days of always-hot data retention. The platform excels at real-time alerting, threat detection, compliance, and fraud prevention, with particular strength in correlating security data for deeper context and faster incident response.

Island is an enterprise-grade secure browser built on Chromium that replaces legacy security tools like SASE platforms and VDI by embedding security controls directly into the browser. It enables organizations to enforce granular, context-based policies that allow data to flow freely between enterprise apps while preventing unauthorized sharing, data leakage, and malicious activities. The browser provides last-mile controls over print, downloads, screenshots, and copy/paste even outside the browser environment, giving enterprises complete visibility and governance over user activity.

Axonius is a cybersecurity asset management platform that aggregates and normalizes security data from 1,100+ business, IT, and security sources to provide unified visibility across endpoints, cloud services, and SaaS applications. The agentless, single virtual appliance integrates with 300+ security and IT solutions and automatically identifies security gaps while enforcing policies. It serves enterprise organizations including Fortune 500 companies and federal agencies seeking complete asset inventory and automated policy validation across their entire infrastructure.

Contrast Security embeds runtime security sensors directly into application code to detect vulnerabilities and attacks in real time across the entire software lifecycle. Unlike traditional static or dynamic scanning tools, it uses patented deep security instrumentation to observe actual data flows and execution paths in development, testing, and production environments. The platform combines IAST (Interactive Application Security Testing) and RASP (Runtime Application Self-Protection) capabilities in a single solution, dramatically reducing false positives and enabling developers and security teams to act on real threats. Trusted by Fortune 500 companies including BMW, AXA, and NTT.

BlueVoyant is an AI-driven managed cybersecurity platform that provides real-time threat monitoring, detection, and response across networks, endpoints, supply chains, and digital footprints (clear, deep, and dark web). The platform integrates managed detection and response, third-party risk management, and digital risk protection into a single unified solution. Founded by former U.S. Cyber Command and NSA officials alongside intelligence veterans, BlueVoyant serves 900+ clients across 40+ countries, combining advanced threat intelligence with automated response mechanisms to reduce detection and response times.

Devo is a cloud-native security data platform that provides real-time logging, SIEM, SOAR, and UEBA capabilities powered by AI. The platform ingests streaming data from applications, infrastructure, IoT devices, and logs, then correlates and analyzes it to accelerate threat detection and response. Devo's micro-indexing technology stores data in raw format with extended retention of up to 400 days, differentiating it from traditional legacy SIEM solutions. The platform serves large enterprises seeking to replace on-premise security infrastructure with cloud-first, AI-enhanced security operations.

Immuta automates sensitive data discovery, security, and access control across multiple cloud data platforms using attribute-based access control (ABAC) and privacy-enhancing technologies. The platform enables organizations to identify sensitive data, enforce dynamic policies, and monitor data activity at scale across AWS services, Snowflake, Databricks, and other data platforms. Founded by a former U.S. Army intelligence officer, Immuta serves enterprises handling regulated data who need to reduce manual policy management by 75X while maintaining compliance with GDPR, CCPA, and other privacy regulations.

Nozomi Networks provides an industrial cybersecurity platform that delivers unified visibility, threat detection, and automated remediation for operational technology (OT), IoT, and cyber-physical systems. The platform uses AI-powered analysis to classify assets, detect anomalies, and prioritize vulnerabilities across complex industrial environments. Built by experts in industrial network security and AI, Nozomi protects over 105 million devices across critical infrastructure, energy, manufacturing, and utilities sectors globally.