Startups Directory

NEC Corporation is a 125-year-old multinational IT and network solutions provider delivering systems integration, cloud computing, AI, IoT platforms, and telecommunications infrastructure to enterprises and governments globally. The company operates through ~15,000 systems engineers providing end-to-end design, development, deployment, and operations support. NEC differentiates through leadership in Open RAN, biometric authentication (Bio-IDIOM deployed in 70+ countries), and a patent portfolio exceeding 45,000 covering AI, 5G/6G, and cybersecurity. It serves diverse sectors including finance, government, healthcare, manufacturing, aerospace, and telecommunications across Japan and internationally.

BlueVoyant is an AI-driven managed cybersecurity platform that provides real-time threat monitoring, detection, and response across networks, endpoints, supply chains, and digital footprints (clear, deep, and dark web). The platform integrates managed detection and response, third-party risk management, and digital risk protection into a single unified solution. Founded by former U.S. Cyber Command and NSA officials alongside intelligence veterans, BlueVoyant serves 900+ clients across 40+ countries, combining advanced threat intelligence with automated response mechanisms to reduce detection and response times.

Noname Security is an AI-powered API security platform that automatically discovers, inventories, and protects all APIs across an organization's environment. The platform identifies vulnerabilities including data leakage, authorization issues, misconfigurations, and suspicious behavior without requiring agents or network modifications. It serves enterprises across financial services, healthcare, retail, and public sector, protecting over 10 million APIs and nearly $3 trillion in revenue streams. Noname was acquired by Akamai in May 2024 for $450M and is being integrated into Akamai's API Security offering.

Tines is a no-code AI orchestration platform that enables security and IT teams to automate mission-critical workflows without writing code. It serves as the integration layer between disparate security and IT tools, allowing teams to build intelligent agents that monitor alerts, manage compliance, handle employee lifecycle, and orchestrate patch management. Founded by former security leaders from eBay and DocuSign who experienced the pain of manual security operations firsthand, Tines has grown to a $1.125B valuation with 378 employees.

Semperis is an enterprise identity protection platform that enables organizations to automatically recover from Active Directory disasters, cyberattacks, and accidental changes. The platform combines hybrid identity threat prevention, detection, response, and purpose-built disaster recovery using patented technology that decouples Active Directory from the underlying operating system to prevent malware reinfection. It serves Fortune 500 enterprises across financial services, healthcare, government, and other industries worldwide. The company achieved unicorn status in 2024 with $1B valuation after growing to $100M ARR.

Kai is an AI-native cybersecurity platform that autonomously performs critical security tasks across IT and OT environments without human intervention. Built from the ground up by the founders of category-defining companies Claroty and SecurityMatters, it integrates threat detection, vulnerability management, compliance automation, and remediation into a unified agentic AI system. Unlike legacy security tools that bolt AI onto fragmented dashboards, Kai reasons and acts at machine speed to eliminate human-speed bottlenecks in security operations.

SparkCognition is an industrial AI company that delivers machine learning solutions for predictive maintenance, anomaly detection, and cybersecurity. The platform uses IoT sensor data and advanced algorithms to predict equipment failures before they occur, identify cyber threats, and optimize operations across industrial assets like turbines, pumps, and generators. SparkCognition serves energy, manufacturing, and maritime sectors, helping operators avoid costly downtime and reduce operational inefficiencies by billions of dollars.

Versa Networks provides a unified SASE (Secure Access Service Edge) platform that converges SD-WAN, next-generation firewall, zero-trust network access, and security services on a single OS and software stack. Built from the ground up rather than assembled from point products, Versa serves enterprises and service providers globally with on-premises, cloud, and hybrid deployment options. The platform eliminates vendor sprawl and complexity by delivering full network and security convergence with centralized management and policy enforcement across WAN, LAN, cloud, and data center environments.

Cybereason is a cybersecurity platform combining EDR (Endpoint Detection and Response), XDR (Extended Detection and Response), and next-gen antivirus to detect and remediate threats across endpoints, servers, cloud workloads, and networks. Founded by Israeli Unit 8200 veterans, the platform uses behavioral analysis and cross-machine correlation to identify complex attacks with exceptional accuracy. The company has achieved perfect scores in MITRE ATT&CK evaluations and is trusted by Fortune 500 companies including Lockheed Martin. It differentiates through deep expertise in offensive cyber operations translated into defensive capabilities, enabling threat hunting and root cause analysis at scale.

Oasis Security is a platform for discovering, inventorying, and securing non-human identities (service accounts, API keys, secrets, tokens, certificates) across hybrid cloud environments. The platform combines automated discovery with contextual risk assessment and policy-driven remediation to enforce least privilege access without manual overhead. Founded by former Israeli intelligence operatives, Oasis has raised $195M and serves Fortune 500 enterprises including Chipotle, JLL, and Mercury Financial, achieving 5x ARR growth year-over-year.

XBOW is an AI-powered autonomous penetration testing platform that identifies and exploits vulnerabilities in web applications without human intervention. Using swarms of AI agents, it simultaneously explores multiple attack vectors, reducing testing times from weeks to hours while providing reproducible proof of exploitation. The platform is trusted by Fortune 500 companies including UKG, Samsung SDS, and Moderna, and recently ranked #1 on the HackerOne leaderboard, outperforming thousands of human hackers.

Exein develops embedded runtime security that integrates directly into device firmware to detect and prevent threats in real-time at the kernel level. The platform uses eBPF-based observability and AI-driven behavior analysis to protect IoT, industrial, automotive, and aerospace devices without degrading performance or requiring hardware changes. Unlike traditional endpoint security that detects breaches after compromise, Exein blocks malicious execution paths before they can run, eliminating entire attack classes at the edge.

Silverfort provides agentless, proxyless Runtime Access Protection (RAP) that extends MFA, risk-based authentication, and Zero Trust policies across all enterprise systems—on-premise, cloud, and legacy applications—without requiring endpoint or application modifications. It integrates directly with existing Active Directory and identity systems to analyze authentication risk in real-time and enforce MFA on resources previously unprotectable by traditional solutions. Silverfort serves over 1,000 enterprise customers globally and differentiates through its ability to protect legacy, custom, and command-line tools that competitors cannot cover.

SpyCloud is a cybercrime analytics platform that recaptures and analyzes darknet breach and malware data to protect enterprises from identity-based attacks. The company operates the world's largest repository of compromised credentials and malware intelligence, enabling organizations to detect and remediate exposures across employees, contractors, customers, and non-human accounts in minutes. SpyCloud integrates with existing security infrastructure (EDR, IdP, SIEM, SOAR) to automate identity risk mitigation at scale, serving half of the Fortune 10 and government agencies globally.

CAST AI is a machine learning-powered platform that automatically optimizes Kubernetes clusters and cloud infrastructure in real time, reducing cloud costs by 50% or more while improving application performance and security. Unlike competitors that merely monitor and recommend fixes, CAST AI actively implements optimizations across AWS, Azure, GCP, and on-premises environments. The platform uses advanced ML algorithms to continuously analyze workload behavior, automate resource allocation, and eliminate waste through intelligent bin packing and pod scheduling.

Veza is the authorization platform for data security built on a graph-based architecture that maps access permissions across 300+ integrations in hybrid and multi-cloud environments. It enables enterprises to visualize, manage, and control granular access down to specific data objects, tables, and cloud resources. Used by Global 500 companies like Expedia, Blackstone, and Wynn Resorts to solve privileged access monitoring, non-human identity security, and identity governance challenges. Recently acquired by ServiceNow in December 2025 at a $1B-$1.5B valuation.

Cyberhaven is a unified data security platform that combines DSPM, DLP, insider risk management, and AI security with deep data lineage capabilities. It records every event for every piece of data—every move, copy, edit, and share—across endpoints and cloud applications to provide complete visibility into how data moves throughout an organization. The platform delivers 95% fewer false positives than traditional DLP solutions and enables customers to investigate incidents up to five times faster. Founded by five PhD researchers, it's trusted by top 5 North American banks, Fortune 500 companies, and highly regulated enterprises.

Horizon3.ai provides NodeZero, an autonomous penetration testing platform that safely executes real attack techniques at scale without agents or network disruption. The platform discovers and exploits vulnerabilities by chaining attack paths together—exactly as real attackers would—across internal networks, external surfaces, cloud infrastructure (AWS, Azure, Kubernetes), and web applications. Built by veterans in tech and military, it's trusted by 3,000+ organizations including Fortune 500 companies and national defense partners who need continuous proof of their security posture.

Coro is a unified cybersecurity platform that consolidates 14 integrated modules—including EDR, SASE, email security, and threat detection—into a single solution for SMBs and mid-market companies. Using AI-driven automation, it detects and remediates over 92% of threats automatically while maintaining ease of use and affordability. The platform is designed to replace 15-25 disparate security tools, reducing complexity and cost for organizations that lack dedicated security teams.

Devo is a cloud-native security data platform that provides real-time logging, SIEM, SOAR, and UEBA capabilities powered by AI. The platform ingests streaming data from applications, infrastructure, IoT devices, and logs, then correlates and analyzes it to accelerate threat detection and response. Devo's micro-indexing technology stores data in raw format with extended retention of up to 400 days, differentiating it from traditional legacy SIEM solutions. The platform serves large enterprises seeking to replace on-premise security infrastructure with cloud-first, AI-enhanced security operations.

Upwind Security is a cloud security platform that protects cloud infrastructure, workloads, applications, and APIs through a runtime-first approach using eBPF technology. The platform combines posture management, vulnerability and identity security, container and serverless protection, and cloud detection and response in a single environment. Its key differentiator is reducing alert noise by ~95%, enabling security teams to focus on critical threats. The company serves enterprise customers globally including Waste Management, Siemens, Carvana, Roku, and others.

Alkira is a cloud-native network infrastructure-as-a-service platform that unifies connectivity across multiple clouds, data centers, and on-premises environments through a single control plane. It solves the fragmentation of east-west traffic between clouds by providing enterprises with an intuitive design canvas to deploy and manage network connectivity in minutes without hardware or agents. Founded by the team behind Viptela (acquired by Cisco for $610M), Alkira has raised $184M from top-tier investors including Kleiner Perkins, Sequoia Capital, and Tiger Global Management.

CyCognito is an attack surface discovery platform that autonomously simulates attacker techniques to identify internet-exposed and unmanaged assets across an organization's infrastructure. Using machine learning, NLP, and graph data models, it discovers business relationships, subsidiaries, and cloud environments without requiring customer integration or configuration. The platform prioritizes critical risks by filtering false positives through advanced AI, enabling security teams to focus remediation efforts on actual threats rather than vulnerability lists.

Cape is a privacy-first mobile carrier that owns and operates its own mobile core and SIMs, addressing network-layer vulnerabilities that app-based solutions cannot fix. Unlike traditional MVNOs that resell carrier services, Cape embeds privacy and security at the cellular infrastructure level to protect against SIM swaps, surveillance, and metadata breaches. Founded by former Palantir executives with national security expertise, Cape serves U.S. government agencies, enterprise executives, journalists, and privacy-conscious consumers across the country.

ExtraHop delivers a Network Detection and Response (NDR) platform called RevealX that applies cloud-scale AI to analyze petabytes of encrypted traffic daily across hybrid and multi-cloud environments. It combines NDR, network performance management, intrusion detection, and packet forensics in a single console to automatically discover devices, users, and applications while detecting threats and anomalies in real-time. The platform analyzes over 5,000 metrics and uses machine learning to baseline behavior and identify risks across all infrastructure and data-in-flight.

Immuta automates sensitive data discovery, security, and access control across multiple cloud data platforms using attribute-based access control (ABAC) and privacy-enhancing technologies. The platform enables organizations to identify sensitive data, enforce dynamic policies, and monitor data activity at scale across AWS services, Snowflake, Databricks, and other data platforms. Founded by a former U.S. Army intelligence officer, Immuta serves enterprises handling regulated data who need to reduce manual policy management by 75X while maintaining compliance with GDPR, CCPA, and other privacy regulations.

Cowbell Cyber is the leading provider of adaptive cyber insurance for small and medium-sized enterprises, serving nearly 30,000 businesses across the U.S., UK, and Australia. The company uses AI-powered continuous underwriting (Cowbell Factors) to compress the insurance process from submission to issuance in under 5 minutes, with renewal pricing directly tied to observed risk profiles throughout the year. Beyond insurance, Cowbell offers integrated Resiliency Services including MDR SOC, penetration testing, security training, and identity AI. Their largest cyber insurance distribution network in the U.S. spans over 14,000 producers and monitors 23 million businesses.

Pindrop uses acoustic fingerprinting and AI to authenticate phone callers by analyzing voice signatures, device characteristics, and behavioral patterns. The company serves banks, insurers, and large enterprises to prevent fraud across contact centers and voice communications. By extracting 147+ audio features and analyzing call metadata in milliseconds, Pindrop detects spoofed numbers, deepfakes, voice morphing, and synthesized voices that traditional authentication methods miss.

Claroty is an industrial cybersecurity platform that provides agentless, passive monitoring of OT, IoT, and IIoT assets across critical infrastructure environments. The platform integrates with existing security infrastructure to deliver visibility, threat detection, vulnerability management, and secure remote access without disrupting operational networks. Claroty's approach uses network traffic analysis rather than active scanning, making it the only practical solution for securing PLCs and SCADA systems that cannot tolerate downtime. The company serves Fortune 100 organizations in energy, manufacturing, pharmaceuticals, and other critical sectors.

Talon Cyber Security develops an enterprise-grade secure browser built on Chromium that isolates data and protects against threats across managed and unmanaged devices. The platform combines advanced data isolation techniques (screenshot prevention, clipboard restrictions) with workspace security and Zero Trust access policies for remote and hybrid workforces. It serves large enterprises seeking to prevent data breaches and enable secure access to corporate applications regardless of device type or operating system. The company was acquired by Palo Alto Networks in December 2023 for $625 million.

Human Security provides AI-powered bot management and fraud detection software that protects digital interactions across websites, apps, and APIs. The platform verifies over 20 trillion digital interactions weekly for 500+ global brands, detecting everything from basic scripts to sophisticated botnets and transaction fraud. Human Security differentiates itself through advanced behavioral analysis and multi-method detection that blocks fraudulent actors while enabling legitimate traffic and trusted AI agents to move freely.

Malwarebytes is a cybersecurity company that detects, prevents, and remediates malware, ransomware, spyware, and other cyber threats using AI-powered behavioral analysis and heuristics. The company serves both individual consumers and businesses through a freemium consumer model and a tiered enterprise offering (rebranded as ThreatDown). Unlike traditional antivirus software, Malwarebytes combines signature-based detection with behavioral analysis to catch threats competitors miss, earning recognition from The New York Times for its hybrid detection approach.

Bitwarden is an open-source password manager that enables individuals, teams, and enterprises to securely store and manage credentials with zero-knowledge encryption—meaning Bitwarden cannot access user data. The platform serves over 10 million users across 180+ countries and offers specialized products including a Password Manager, Secrets Manager for developers, and Passwordless.dev for building FIDO2 WebAuthn authentication. Bitwarden differentiates through open-source transparency, client-side encryption, fast enterprise deployment (70% live in under a month), and a freemium model that converts users to paid plans.

Veriff is an AI-powered identity verification platform that automatically verifies customer identities using facial recognition, document validation, and behavioral analysis. The company serves fintech, marketplaces, and regulated industries through an API-based service that achieves 99.6% fraud detection accuracy in ~6 seconds. Veriff differentiates itself with support for 12,500+ identity documents (vs. competitors' ~2,500) and industry-leading speed, enabling businesses to reduce verification drop-offs and improve conversion rates.

Nozomi Networks provides an industrial cybersecurity platform that delivers unified visibility, threat detection, and automated remediation for operational technology (OT), IoT, and cyber-physical systems. The platform uses AI-powered analysis to classify assets, detect anomalies, and prioritize vulnerabilities across complex industrial environments. Built by experts in industrial network security and AI, Nozomi protects over 105 million devices across critical infrastructure, energy, manufacturing, and utilities sectors globally.

ThreatLocker is a zero trust endpoint protection platform that stops ransomware and cyberattacks by using a deny-by-default application control model—only allowing approved software to run rather than trying to block threats after they appear. The platform includes application control, storage control, privileged access management, network access control, and EDR/MDR capabilities, with a learning mode that automatically catalogs apps and recognizes over 13,000 pre-built applications. It serves mid-market to enterprise organizations across all industries, with a particular focus on MSPs serving their customers. Over 50,000 businesses worldwide have adopted ThreatLocker to shrink their attack surface and reduce security incidents.

Apiiro is an Application Security Posture Management (ASPM) platform that unifies application risk visibility, prioritization, and remediation across the entire software development lifecycle using proprietary Risk Graph technology and Deep Code Analysis. It provides contextual security insights starting from the design phase through production, integrating software supply chain security with native CI/CD pipeline and source control visibility. Built by former Microsoft and IDF cybersecurity experts, Apiiro serves enterprise organizations seeking a developer-centric approach to application security that minimizes backlogs and triage time.

Nord Security is an integrated cybersecurity platform providing VPN, password management, encrypted cloud storage, identity theft protection, and threat exposure management for both consumers and businesses. Founded in Lithuania in 2012 as NordVPN and formalized as an umbrella company in 2017, Nord Security operates a suite of interconnected security products including NordVPN, NordPass, NordLocker, NordLayer, NordProtect, NordStellar, and Saily. The company addresses fragmented digital security needs by offering enterprise-grade solutions that share consistent security standards across consumer and B2B segments. With $200M in funding and a $3B valuation as of September 2023, Nord Security serves millions globally through both freemium and premium tiers.

Horizon3.ai provides NodeZero, an autonomous penetration testing platform that continuously simulates real-world attacks without agents or human intervention. The SaaS solution safely executes attack chains across AWS, Azure, and Kubernetes infrastructure to show exactly how attackers compromise systems and what data they access. Organizations use it to verify security fixes in production and stay ahead of evolving threats at scale.

Dream Security is an AI-native cybersecurity platform purpose-built for governments and critical infrastructure operators requiring sovereign deployment capabilities. The company's proprietary cyber language model—trained on threat intelligence datasets rather than general-purpose LLMs—automates threat detection, prediction, and response while operating entirely within national infrastructure, including classified and air-gapped systems. Dream transforms raw data into actionable threat narratives and defense strategies, with a founding team combining Israeli cyber expertise (NSO Group co-founder), Austrian political leadership, and IoT intelligence experience.

Noma Security is an enterprise AI security platform that discovers, secures, and monitors AI systems across entire organizations. The platform provides three integrated capabilities: Discovery maps the complete AI ecosystem including models, agents, and data sources; Secure defines approved AI supply chains and runs continuous security validation; Protect enforces real-time runtime policies to block unauthorized actions and malicious prompts. Built by former Israeli military intelligence leaders, Noma has raised $132M in under two years and serves Fortune 500 companies across finance, life sciences, retail, and technology.