Startups Directory

Expel is a 24/7 managed SOC (Security Operations Center) that monitors cloud, hybrid, and on-premises environments using its proprietary Expel Workbench platform paired with expert security analysts. Unlike traditional MSSPs, Expel operates with complete transparency—customers see the same interface and investigation details as Expel analysts, eliminating the black box. The company helps organizations stop cyberattacks faster by extracting maximum value from existing security investments through API-based integrations that deploy in hours, not weeks.

Wiz is a cloud-native security platform that provides real-time visibility across multi-cloud environments (AWS, Azure, GCP, OCI, Kubernetes) using agentless APIs and graph-based analysis. It identifies exploitable attack paths and prioritizes risk based on business impact, enabling security teams to fix issues before they reach production. The platform serves enterprise security teams and has won over 40% of Fortune 100 companies with its unified "single pane of glass" approach to cloud security.

AtlasEdge is a European edge data center operator that designs, builds, and operates secure, scalable colocation facilities across 14 strategic locations to deliver ultra-low latency infrastructure. The company, formed as a joint venture between DigitalBridge and Liberty Global in 2021, specializes in bringing computing power closer to end-users through customizable colocation solutions including single/multi-rack deployments, customer cages, and bespoke facilities. AtlasEdge differentiates itself by focusing on next-wave European markets including Lisbon, Vienna, Barcelona, Madrid, Brussels, and German cities, serving enterprises deploying AI, cloud, and mission-critical workloads requiring 2N redundancy.

Saviynt's Identity Cloud is an AI-powered platform that maps, governs, and secures all types of identities—human, machine, and AI agents—across on-premises, cloud, and hybrid environments. The platform unifies identity governance and administration (IGA), privileged access management (PAM), application access governance, and identity security posture management into a single SaaS solution. It helps enterprises automate lifecycle tasks like onboarding, offboarding, access reviews, and compliance reporting while enforcing just-in-time security principles. Saviynt serves 600+ enterprises including more than one-fifth of the Fortune 100, managing over 100 million identities at half the cost of competitors like SailPoint.

Invicti Security is an application security platform that unifies DAST, SAST, IAST, SCA, API security, secrets scanning, and container security to help enterprises identify and remediate vulnerabilities across their application portfolio. The platform's core differentiator is proof-based scanning, which safely exploits potential vulnerabilities to confirm they are real and exploitable, achieving 99.98% accuracy and eliminating alert fatigue. Invicti serves over 3,600 organizations globally across banking, healthcare, government, and technology sectors.

1Password is a zero-knowledge password manager that securely stores and organizes credentials, payment cards, and personal information in an encrypted vault accessible only through a master password or biometric authentication. Used by over 100,000 businesses including IBM, Slack, and Shopify, it employs a two-key security model (account password plus Secret Key) that makes brute-force attacks practically impossible. The platform includes browser plugins for autofill, strong password generation, and team collaboration features, positioning itself as a 'human-centric' security solution that lets users focus on productivity rather than security complexity.

SentinelOne's Singularity Platform is a unified, AI-driven endpoint security solution that prevents, detects, and autonomously responds to threats across endpoints, IoT devices, and cloud workloads in real-time. The platform uses patented behavioral AI and machine learning to block known and unknown threats without relying on signatures, with autonomous decision-making at the device level rather than requiring cloud decisions. A key differentiator is the one-click instant rollback capability that reverts systems to a safe state before damage occurs. Enterprise customers across all industries rely on SentinelOne to protect trillions of dollars in enterprise value across millions of endpoints.

Ten Eleven Ventures is the original cybersecurity-focused venture capital firm investing across all stages, from seed to growth equity. Founded in 2014 and managing over $1 billion in assets under management, the firm exclusively targets exceptional founders addressing critical digital security challenges, including AI defense systems and privacy technologies. Beyond capital deployment, Ten Eleven operates as a platform for the cybersecurity community through technical coaching and curated retreats connecting portfolio founders with senior security professionals. The firm has generated 7 unicorns and 21 acquisitions including Cylance ($1.4B), KnowBe4 ($4.6B), and Ping Identity.

Orca Security provides agentless cloud security scanning for AWS, Azure, and Google Cloud environments using proprietary SideScanning technology that analyzes block storage without deploying agents or impacting workload performance. The platform delivers instant visibility across multi-cloud infrastructure, detecting vulnerabilities, misconfigurations, malware, and compliance violations. Orca serves enterprise organizations requiring rapid deployment, complete cloud asset visibility, and minimal operational overhead. The company has achieved $1.8B valuation with backing from Google, Temasek, and other tier-one investors.

Cyera is an AI-native data security platform that discovers, classifies, governs, and protects sensitive data across cloud, SaaS, on-premise, and AI environments. It converges Data Security Posture Management (DSPM), Data Loss Prevention (DLP), and identity into a single unified platform. The platform deploys agentlessly in five minutes with an AI-powered classification engine delivering 95% accuracy, and includes Browser Shield for real-time visibility and policy enforcement on AI tool usage. Cyera secures data for 20% of the Fortune 500 across financial services, retail, healthcare, technology, and telecom.

Snyk is a developer-first application security platform that scans and monitors custom code, open-source dependencies, containers, and cloud infrastructure for vulnerabilities. It integrates directly into development workflows and CI/CD pipelines, enabling developers to identify and fix security issues before deployment. Used by over 2,300 companies including Google, Salesforce, and Spotify, Snyk differentiates itself through developer-centric remediation, accuracy, and per-developer pricing that scales with team size.

ReliaQuest's GreyMatter platform is an XDR-based security operations platform that consolidates alerts and telemetry from siloed security tools (SIEM, EDR, IDS, cloud, antivirus, firewall) into a single normalized view without requiring a data lake. The platform uses AI and automation to reduce duplicate alerts by 41-43% and enables automated threat containment within 5 minutes of detection. GreyMatter Discover, launched October 2025, unifies asset data across security and cloud tools to surface exposures and enable immediate action.

NinjaOne is a unified IT operations platform that consolidates endpoint management, patch management, backup, and remote access into a single console. It serves MSPs and enterprises struggling with endpoint sprawl—over 50% of employees use 4-5 devices daily, yet 90% of organizations can't actively monitor all endpoints. The platform automates IT tasks, improves security, and reduces operational costs through a lightweight agent that provides centralized visibility and control across Windows, Mac, Linux, and mobile devices.

Kiteworks is a unified secure communication platform that consolidates email, file sharing, managed file transfer, and data forms into a single solution with consistent security policies. It serves highly regulated enterprises and government agencies that need to protect sensitive data across multiple channels while maintaining audit compliance. The platform unifies disparate communication channels under one Data Policy Engine, provides DRM-enabled file editing, and includes an AI Data Gateway for safe generative AI usage.

Socure is an AI-powered identity verification and fraud prevention platform that processes identity data across 400+ authoritative sources to make real-time verification decisions in milliseconds. The platform serves financial services, fintechs, gaming, healthcare, and e-commerce companies seeking to approve more customers while reducing fraud risk. Socure's self-learning models improve with each verification through feedback from its Risk Insights Network of 2,300+ customers, enabling significantly higher auto-approval rates for underserved demographics like Gen Z and immigrants.

Armis provides an agentless cybersecurity platform that identifies, monitors, and protects managed, unmanaged, and IoT devices across enterprise networks in real-time. Unlike traditional solutions requiring agent installation, Armis uses passive network monitoring and an AI-powered Asset Intelligence Engine to detect threats across the entire attack surface regardless of device type or operating system. The platform serves Fortune 100/500 companies and government entities, delivering comprehensive asset visibility and threat detection without the operational overhead of agent deployment.

SonarSource provides a unified code quality and security analysis platform that scans over 750 billion lines of code daily across 35+ programming languages. The company offers SonarQube (self-managed and cloud), SonarQube for IDE, and related tools to help engineering teams prevent bugs, vulnerabilities, and code quality issues before they reach production. Used by 75% of Fortune 100 companies and 7M+ developers globally, SonarSource positions itself as the 'clean code' platform combining quality, security, and maintainability—differentiating from point solutions focused solely on security.

NetSPI is the pioneer of Penetration Testing as a Service (PTaaS), combining AI-driven speed with 350+ in-house pentesters to deliver continuous attack surface management, expert-validated vulnerability findings, and streamlined remediation workflows. The platform serves Fortune 500 companies, including 9 of the top 10 U.S. banks, 4 of the top 5 cloud providers, and 4 of the top 5 healthcare companies. NetSPI differentiates through its 20+ year history, proprietary Resolve™ orchestration platform, and integrated approach spanning penetration testing, attack surface management, and breach simulation.

Netskope is a cloud-native security platform that provides converged security and networking services through a CASB (Cloud Access Security Broker) and SASE architecture. The company monitors and governs cloud, SaaS, web, and private application traffic while preventing data theft and malware attacks using policies, algorithms, and heuristics. Netskope serves enterprises needing zero-trust security at scale, with 25% of Fortune 100 companies as customers. The platform went public in September 2025 after raising $1.44B across 9 funding rounds.

Arctic Wolf delivers cloud-native managed detection and response (MDR) and security operations services through its AI-driven Aurora Platform, serving mid-market to enterprise organizations across endpoints, networks, cloud environments, and web applications. The company's Security Operations Graph processes over nine trillion telemetry events weekly, built on golden datasets curated by 1,000+ security experts over 14+ years, to detect ransomware, malware, and advanced threats without alert fatigue. Arctic Wolf's managed service delivery model differentiates it from point solutions—Concierge Security Teams provide 24/7 monitoring, automated remediation, and expert analysis aligned with customer business context. The company has established itself as the system-of-record platform in cybersecurity operations, serving 6,000+ customers globally.

Sysdig is a cloud-native security platform that stops cloud attacks in real time through runtime insights and AI-powered threat detection. It delivers unified visibility across cloud workloads, identities, and services to uncover hidden attack paths and prioritize vulnerabilities that matter most. The platform combines vulnerability management, adaptive runtime defense, compliance automation, and forensics in a single agent, serving enterprise DevOps and security teams managing containerized and Kubernetes environments. Sysdig differentiates through its ContainerVision and ServiceVision technologies, offering both security and observability capabilities that competitors typically provide separately.

ID.me is a digital identity verification platform that enables users to complete one high-assurance identity verification (document + liveness check) and reuse that credential across government and private-sector portals. Operating as "Sign in with Google" for high-stakes identity, ID.me uses machine vision, AI, and SIM verification to authenticate users and allow them to maintain control of their digital identity. The platform eliminates repeated verification friction across multiple agencies and services, powering over 409 million logins annually.

eSentire is a cloud-native managed detection and response (MDR) platform that combines AI/ML with 24/7 human-led threat hunting to detect and contain cyber attacks in under 15 minutes. The company serves 2,000+ organizations across 80+ countries and 35 industries, with particular strength in financial services, legal, healthcare, and government. eSentire differentiates through its Atlas XDR platform, elite threat hunter access, and Threat Response Unit (TRU) for advanced incident investigation, complemented by digital forensics capabilities acquired through CyFIR.

Quantinuum develops trapped-ion quantum computing hardware and software middleware for enterprise applications in cybersecurity, drug discovery, materials science, and financial modeling. The company operates Helios, the world's most accurate commercial quantum computer with 98 fully connected qubits and 99.9975% single-qubit gate fidelity. Its software products, including InQuanto for quantum chemistry simulations and TKET optimization toolkit, enable organizations to run production quantum applications on Quantinuum's hardware and other quantum platforms.

SandboxAQ develops Large Quantitative Models (LQMs)—physics-aware AI systems that solve complex problems in drug discovery, cybersecurity, and GPS-denied navigation. The company spun out from Alphabet in 2022 with six years of internal R&D and serves Global 1000 enterprises through cloud-delivered software subscriptions. Unlike general-purpose LLMs, SandboxAQ's models incorporate quantitative reasoning for measurable real-world outcomes in regulated, calculation-intensive domains.

Chainguard provides secure-by-default container images, language libraries, and VM images with zero known CVEs, eliminating vulnerabilities at the source rather than scanning after deployment. Every artifact includes built-in SBOMs, signed provenance, and daily security patches with an SLA-backed remediation guarantee. The platform delivers a 97.6% reduction in CVEs on average and serves enterprises and development teams building software supply chains that require compliance and security assurance.

Devo is a cloud-native security analytics platform that provides SIEM, SOAR, and UEBA capabilities for information security and operations teams. Unlike traditional solutions that index and transform data, Devo stores raw data in hot format with micro-indexing, delivering query results in milliseconds and maintaining 400 days of always-hot data retention. The platform excels at real-time alerting, threat detection, compliance, and fraud prevention, with particular strength in correlating security data for deeper context and faster incident response.

Island is an enterprise-grade secure browser built on Chromium that replaces legacy security tools like SASE platforms and VDI by embedding security controls directly into the browser. It enables organizations to enforce granular, context-based policies that allow data to flow freely between enterprise apps while preventing unauthorized sharing, data leakage, and malicious activities. The browser provides last-mile controls over print, downloads, screenshots, and copy/paste even outside the browser environment, giving enterprises complete visibility and governance over user activity.

Coalition is an active cyber insurance provider that combines continuous vulnerability scanning, threat detection, and automated response with traditional insurance coverage. Unlike reactive cyber insurance that only pays claims, Coalition proactively monitors policyholders' internet-facing devices 65,000 times weekly to identify and remediate risks before incidents occur. The company serves over 100,000 SMB and mid-market customers across North America, delivering 70% lower claims frequency than the industry average while resolving 56% of incidents at no cost to policyholders.

BitSight is a cybersecurity intelligence platform that measures and monitors security performance through proprietary security ratings (250-900 scale) based on billions of cyber events and data points. The company serves enterprises, insurers, governments, and investment firms to manage third-party cyber risk, conduct M&A due diligence, and underwrite cyber insurance policies. BitSight created the security ratings category and operates one of the world's largest cyber risk datasets, processing 540B+ cyber events annually and monitoring 65K+ vendors globally.

Abnormal Security is an AI-native email and cloud application security platform that uses behavioral anomaly detection and natural language processing to stop sophisticated Business Email Compromise (BEC) attacks and account takeovers. The platform deploys via API in minutes and ingests thousands of behavioral signals to block socially engineered, payloadless attacks that bypass traditional email filters. It protects over 3,200 organizations including 25%+ of Fortune 500 companies across email, Microsoft 365, Google Workspace, and 12+ SaaS applications including Salesforce, Workday, and Slack. What sets Abnormal apart is its AI-first approach that replaces legacy Secure Email Gateways with autonomous threat detection that learns legitimate business communication patterns.

Upwind Security is a cloud security platform that consolidates CSPM, CWPP, CDR, vulnerability management, identity security, and container security into a single offering. It uses eBPF kernel-level monitoring paired with cloud telemetry to detect malicious activity and correlate runtime context with build-time data, reducing alert noise by ~95%. The platform serves enterprise security teams protecting cloud infrastructure across AWS, Azure, and other environments.

Cato Networks delivers a cloud-native SASE (Secure Access Service Edge) platform that converges WAN and network security into a single unified service, eliminating the need for traditional MPLS and dispersed security stacks. Built on a globally distributed private backbone, the platform uses physical or virtual Cato Sockets at network edges to route and inspect traffic through Cato's cloud infrastructure with integrated security enforcement. The company serves 3,000+ enterprises including Carlsberg and TAG Heuer Porsche Formula E, replacing legacy on-premises architectures with a subscription-based, cloud-native alternative.

Ontic is a Connected Intelligence Platform that unifies security operations by aggregating threat indicators, OSINT data, and case management into a single system of record. It serves Fortune 500 companies and federal agencies to identify threats, assess risk, and respond faster to protect people and organizations. The platform consolidates research, incident investigation, real-time threat detection, and vulnerability assessments—solving the problem that investigators lose up to 50% of their time chasing down disparate data sources.

Critical Start delivers AI-assisted managed detection and response (MDR) with contractual response accountability, combining 24x7 AI-accelerated threat detection with human-validated investigation across IT and OT environments. The platform uses the Trusted Behavior Registry (TBR) Agent to filter known-good behavior and surface true threats faster, with guaranteed sub-60-minute time-to-respond for critical alerts. Serving global enterprises in finance, healthcare, and manufacturing, Critical Start differentiates through complete signal coverage, flexible deployment, and transparent SLA-backed service delivery.

Verkada is an AI-powered, cloud-native security platform that unifies video surveillance, access control, alarms, intercoms, and air quality monitoring through a single integrated software interface called Verkada Command. Built by Stanford founders and a Meraki veteran, it replaces legacy hardware-based security systems with a modern, subscription-based model where sensors stream to secure cloud infrastructure with hybrid architecture for continuous operation during outages. The platform processes over 20 million images per hour to provide actionable insights like occupancy rates, foot traffic patterns, and security violations across enterprise campuses.

Axonius is a cybersecurity asset management platform that aggregates and normalizes security data from 1,100+ business, IT, and security sources to provide unified visibility across endpoints, cloud services, and SaaS applications. The agentless, single virtual appliance integrates with 300+ security and IT solutions and automatically identifies security gaps while enforcing policies. It serves enterprise organizations including Fortune 500 companies and federal agencies seeking complete asset inventory and automated policy validation across their entire infrastructure.

Drata is a security and compliance automation platform that continuously monitors an organization's tech stack to collect evidence of security controls and automate compliance workflows. It integrates with SaaS apps, cloud providers, and employee devices to centralize compliance data across 30+ frameworks including SOC 2, ISO 27001, HIPAA, and GDPR. The platform automates 80% of evidence collection and unifies risk, controls, and audits in a single dashboard, reducing manual compliance work from hundreds of hours to actionable automation.

Aleo is a Layer 1 blockchain that uses zero-knowledge proofs to enable private, scalable decentralized applications. Unlike traditional blockchains where validators execute every transaction, Aleo offloads smart contract execution off-chain through a Prover Market, allowing users to hide transaction details while processing thousands of transactions per second. The platform combines general-purpose programmability with privacy by default, differentiating itself as one of the first blockchains to leverage zero-knowledge technology for both privacy and scalability.

Upscale AI develops high-performance AI networking infrastructure combining custom silicon (SkyHammer ASICs), systems, and software to enable ultra-low-latency connections between GPUs, AI accelerators, and storage in large-scale AI clusters. The company competes directly with Nvidia's NVSwitch by building open-standards networking solutions designed for hyperscalers and AI infrastructure operators seeking scalable alternatives to proprietary architectures. Founded by serial entrepreneurs from Palo Alto Networks, Innovium, and Cavium, Upscale is backed by $300M+ in funding and positioning open standards as superior to closed ecosystems for AI infrastructure.

Blackpoint Cyber delivers 24/7 managed detection, response, and remediation (MDR) services powered by a human-led Security Operations Center. The platform detects advanced threats by identifying malicious use of legitimate IT administration tools—a blind spot for traditional EDR and antivirus solutions. Built specifically for MSPs and their customers, Blackpoint eliminates alert fatigue by taking remediation action in real-time rather than leaving it to customers.

CyberCube provides AI-powered cyber risk analytics and modeling software that translates cybersecurity exposures into quantified financial risk for insurance underwriting and portfolio management. The platform serves insurers, reinsurers, and brokers across the cyber insurance value chain, enabling data-driven decision-making beyond traditional underwriting factors like industry and geography. CyberCube's actuarial science combined with big data AI can predict risk multipliers (2x, 10x, 20x) for individual companies, and has demonstrated forecast accuracy within 1% of actual industry loss ratios. The company is trusted by 75% of top 40 US/European cyber insurers and commands over two-thirds of the global cyber reinsurance market by premium.

DataBahn.ai is an AI-powered data pipeline and fabric platform that enables enterprises to securely collect, enrich, orchestrate, and optimize telemetry across security, application, observability, and IoT/OT systems. The platform solves critical challenges in SOCs by automating the identification and filtering of redundant, duplicated, or noisy security telemetry—over 80% of which may be unnecessary—reducing SIEM costs by up to 50% while maintaining incident detection coverage. With 500+ integrations and AI agents like Cruz (which detects schema drift) and the newly launched AIDI (Autonomous In-Stream Data Intelligence), DataBahn processes data in transit rather than after delivery, ensuring it arrives normalized, classified, and ready for use.

Tailscale is a Zero Trust identity-based connectivity platform that replaces legacy VPNs, SASE, and PAM solutions by enabling secure private networks through peer-to-peer mesh networking built on WireGuard. It connects remote teams, multi-cloud environments, CI/CD pipelines, Edge/IoT devices, and AI workloads without requiring port forwarding, firewall rule changes, or complex VPN configurations. The platform uses advanced NAT traversal (STUN/ICE) and DERP relay protocols to establish direct encrypted connections across any network topology. Trusted by 10,000+ paid business customers including Fortune 500 companies, AI startups like Mistral and Hugging Face, and enterprises like Duolingo, Instacart, and Revolut.

Contrast Security embeds runtime security sensors directly into application code to detect vulnerabilities and attacks in real time across the entire software lifecycle. Unlike traditional static or dynamic scanning tools, it uses patented deep security instrumentation to observe actual data flows and execution paths in development, testing, and production environments. The platform combines IAST (Interactive Application Security Testing) and RASP (Runtime Application Self-Protection) capabilities in a single solution, dramatically reducing false positives and enabling developers and security teams to act on real threats. Trusted by Fortune 500 companies including BMW, AXA, and NTT.

Vanta is an agentic trust platform that automates compliance and security monitoring by performing 1,200+ control checks hourly across 35+ global frameworks. It replaces manual, point-in-time compliance processes with continuous monitoring and AI-powered automation that reduces audit completion times by 50%. The platform integrates with 300+ systems to collect evidence automatically and power real-time risk detection, enabling organizations to maintain compliance at scale without manual overhead.

Sublime Security is an AI-powered email security platform that deploys autonomous agents to detect, triage, and stop targeted email attacks in real time. Built on Message Query Language (MQL), a domain-specific language for email behavior detection, it enables security teams to write and deploy custom defenses without MX record changes across Microsoft 365 or Google Workspace. The platform combines transparency and flexibility with autonomous threat investigation, reducing manual review work by 62% while catching significantly more threats than traditional blackbox solutions.

CHEQ is a go-to-market security platform that protects digital customer journeys by distinguishing legitimate users from bots, fraudsters, and malicious actors using real-time traffic, identity, and threat intelligence. The platform processes 6 trillion signals daily across 1 million domains with a false positive rate below 0.009%, serving over 15,000 brands globally. CHEQ's modular suite includes acquisition protection, form validation, analytics integration, and privacy compliance tools, delivering an estimated 671% ROI by eliminating wasted marketing spend on invalid traffic.

DTiQ is a cloud-based business intelligence and loss prevention platform that combines intelligent video analytics with POS data integration to help restaurants and retail locations detect theft, prevent fraud, and identify operational inefficiencies. The platform generates automated 'smart audit' scores that rate store operational effectiveness, working camera-agnostically with existing IP and analog camera infrastructure. DTiQ serves over 37,000 locations globally including major brands like McDonald's, Dunkin, Burger King, and Subway, demonstrating real ROI—one customer recovered $13/hour in prevented theft. The company differentiates by positioning itself as primarily a software/analytics platform rather than a hardware vendor, enabling quick deployment without requiring camera replacement.

Torq is an AI-driven security hyperautomation platform that automates threat detection, investigation, prioritization, and response across enterprise security operations. The platform uses agentic AI (notably its Socrates agent) to autonomously handle alert triage, case management, and threat remediation at scale, claiming to resolve 95% of Tier-1 alerts without human intervention. It serves Fortune 500 enterprises and MSSPs seeking to reduce mean time to respond (MTTR) and investigation overhead, positioning itself as an open, modern alternative to monolithic legacy SOAR platforms from Palo Alto Networks and Splunk.