Startups Directory

Devo is a cloud-native security data platform that provides real-time logging, SIEM, SOAR, and UEBA capabilities powered by AI. The platform ingests streaming data from applications, infrastructure, IoT devices, and logs, then correlates and analyzes it to accelerate threat detection and response. Devo's micro-indexing technology stores data in raw format with extended retention of up to 400 days, differentiating it from traditional legacy SIEM solutions. The platform serves large enterprises seeking to replace on-premise security infrastructure with cloud-first, AI-enhanced security operations.

CyCognito is an attack surface discovery platform that autonomously simulates attacker techniques to identify internet-exposed and unmanaged assets across an organization's infrastructure. Using machine learning, NLP, and graph data models, it discovers business relationships, subsidiaries, and cloud environments without requiring customer integration or configuration. The platform prioritizes critical risks by filtering false positives through advanced AI, enabling security teams to focus remediation efforts on actual threats rather than vulnerability lists.

ExtraHop delivers a Network Detection and Response (NDR) platform called RevealX that applies cloud-scale AI to analyze petabytes of encrypted traffic daily across hybrid and multi-cloud environments. It combines NDR, network performance management, intrusion detection, and packet forensics in a single console to automatically discover devices, users, and applications while detecting threats and anomalies in real-time. The platform analyzes over 5,000 metrics and uses machine learning to baseline behavior and identify risks across all infrastructure and data-in-flight.

Immuta automates sensitive data discovery, security, and access control across multiple cloud data platforms using attribute-based access control (ABAC) and privacy-enhancing technologies. The platform enables organizations to identify sensitive data, enforce dynamic policies, and monitor data activity at scale across AWS services, Snowflake, Databricks, and other data platforms. Founded by a former U.S. Army intelligence officer, Immuta serves enterprises handling regulated data who need to reduce manual policy management by 75X while maintaining compliance with GDPR, CCPA, and other privacy regulations.

Cowbell Cyber is the leading provider of adaptive cyber insurance for small and medium-sized enterprises, serving nearly 30,000 businesses across the U.S., UK, and Australia. The company uses AI-powered continuous underwriting (Cowbell Factors) to compress the insurance process from submission to issuance in under 5 minutes, with renewal pricing directly tied to observed risk profiles throughout the year. Beyond insurance, Cowbell offers integrated Resiliency Services including MDR SOC, penetration testing, security training, and identity AI. Their largest cyber insurance distribution network in the U.S. spans over 14,000 producers and monitors 23 million businesses.

Pindrop uses acoustic fingerprinting and AI to authenticate phone callers by analyzing voice signatures, device characteristics, and behavioral patterns. The company serves banks, insurers, and large enterprises to prevent fraud across contact centers and voice communications. By extracting 147+ audio features and analyzing call metadata in milliseconds, Pindrop detects spoofed numbers, deepfakes, voice morphing, and synthesized voices that traditional authentication methods miss.

Claroty is an industrial cybersecurity platform that provides agentless, passive monitoring of OT, IoT, and IIoT assets across critical infrastructure environments. The platform integrates with existing security infrastructure to deliver visibility, threat detection, vulnerability management, and secure remote access without disrupting operational networks. Claroty's approach uses network traffic analysis rather than active scanning, making it the only practical solution for securing PLCs and SCADA systems that cannot tolerate downtime. The company serves Fortune 100 organizations in energy, manufacturing, pharmaceuticals, and other critical sectors.

Talon Cyber Security develops an enterprise-grade secure browser built on Chromium that isolates data and protects against threats across managed and unmanaged devices. The platform combines advanced data isolation techniques (screenshot prevention, clipboard restrictions) with workspace security and Zero Trust access policies for remote and hybrid workforces. It serves large enterprises seeking to prevent data breaches and enable secure access to corporate applications regardless of device type or operating system. The company was acquired by Palo Alto Networks in December 2023 for $625 million.

Human Security provides AI-powered bot management and fraud detection software that protects digital interactions across websites, apps, and APIs. The platform verifies over 20 trillion digital interactions weekly for 500+ global brands, detecting everything from basic scripts to sophisticated botnets and transaction fraud. Human Security differentiates itself through advanced behavioral analysis and multi-method detection that blocks fraudulent actors while enabling legitimate traffic and trusted AI agents to move freely.

Malwarebytes is a cybersecurity company that detects, prevents, and remediates malware, ransomware, spyware, and other cyber threats using AI-powered behavioral analysis and heuristics. The company serves both individual consumers and businesses through a freemium consumer model and a tiered enterprise offering (rebranded as ThreatDown). Unlike traditional antivirus software, Malwarebytes combines signature-based detection with behavioral analysis to catch threats competitors miss, earning recognition from The New York Times for its hybrid detection approach.

Bitwarden is an open-source password manager that enables individuals, teams, and enterprises to securely store and manage credentials with zero-knowledge encryption—meaning Bitwarden cannot access user data. The platform serves over 10 million users across 180+ countries and offers specialized products including a Password Manager, Secrets Manager for developers, and Passwordless.dev for building FIDO2 WebAuthn authentication. Bitwarden differentiates through open-source transparency, client-side encryption, fast enterprise deployment (70% live in under a month), and a freemium model that converts users to paid plans.

Veriff is an AI-powered identity verification platform that automatically verifies customer identities using facial recognition, document validation, and behavioral analysis. The company serves fintech, marketplaces, and regulated industries through an API-based service that achieves 99.6% fraud detection accuracy in ~6 seconds. Veriff differentiates itself with support for 12,500+ identity documents (vs. competitors' ~2,500) and industry-leading speed, enabling businesses to reduce verification drop-offs and improve conversion rates.

Nozomi Networks provides an industrial cybersecurity platform that delivers unified visibility, threat detection, and automated remediation for operational technology (OT), IoT, and cyber-physical systems. The platform uses AI-powered analysis to classify assets, detect anomalies, and prioritize vulnerabilities across complex industrial environments. Built by experts in industrial network security and AI, Nozomi protects over 105 million devices across critical infrastructure, energy, manufacturing, and utilities sectors globally.

ThreatLocker is a zero trust endpoint protection platform that stops ransomware and cyberattacks by using a deny-by-default application control model—only allowing approved software to run rather than trying to block threats after they appear. The platform includes application control, storage control, privileged access management, network access control, and EDR/MDR capabilities, with a learning mode that automatically catalogs apps and recognizes over 13,000 pre-built applications. It serves mid-market to enterprise organizations across all industries, with a particular focus on MSPs serving their customers. Over 50,000 businesses worldwide have adopted ThreatLocker to shrink their attack surface and reduce security incidents.

Nord Security is an integrated cybersecurity platform providing VPN, password management, encrypted cloud storage, identity theft protection, and threat exposure management for both consumers and businesses. Founded in Lithuania in 2012 as NordVPN and formalized as an umbrella company in 2017, Nord Security operates a suite of interconnected security products including NordVPN, NordPass, NordLocker, NordLayer, NordProtect, NordStellar, and Saily. The company addresses fragmented digital security needs by offering enterprise-grade solutions that share consistent security standards across consumer and B2B segments. With $200M in funding and a $3B valuation as of September 2023, Nord Security serves millions globally through both freemium and premium tiers.

Horizon3.ai provides NodeZero, an autonomous penetration testing platform that continuously simulates real-world attacks without agents or human intervention. The SaaS solution safely executes attack chains across AWS, Azure, and Kubernetes infrastructure to show exactly how attackers compromise systems and what data they access. Organizations use it to verify security fixes in production and stay ahead of evolving threats at scale.

Dream Security is an AI-native cybersecurity platform purpose-built for governments and critical infrastructure operators requiring sovereign deployment capabilities. The company's proprietary cyber language model—trained on threat intelligence datasets rather than general-purpose LLMs—automates threat detection, prediction, and response while operating entirely within national infrastructure, including classified and air-gapped systems. Dream transforms raw data into actionable threat narratives and defense strategies, with a founding team combining Israeli cyber expertise (NSO Group co-founder), Austrian political leadership, and IoT intelligence experience.