Cyberattacks today are relentless, and businesses are demanding the latest defensive weapons to fight back. With attackers using increasingly sophisticated methods and technologies—including AI—the tools needed to fight off attacks must rapidly evolve to stay one step ahead. As part of CRN’s Stellar Startups for 2026, here are 58 security startups, founded in 2020 or later, that are developing leading-edge cybersecurity technology that solution providers should be aware of.
Staying Ahead Of The Bad Guys
Businesses and organizations—and the CISOs and security teams charged with protecting them—continue to face an unrelenting and rapidly evolving wave of cyberattacks including malware and ransomware, phishing scams, denial-of- service attacks and data theft. And thanks to the use of AI, those attacks are becoming increasingly sophisticated.
All this while the vulnerable “attack surface” for cyberattacks has expanded with the growth of hybrid/multi-cloud computing, the proliferation of IoT and mobile devices, the move to remote work and—especially—the rapidly growing number of deployed AI agents and applications.
This year has seen a number of widely felt cyberattacks including massive data-extortion campaigns, zero-day vulnerabilities and a sharp escalation in AI-powered attacks. They have included the exploitation of vulnerabilities in Cisco Catalyst SD-WAN systems, a data breach at LexisNexis, and a critical vulnerability in Ivanti’s Endpoint Manager Mobile tool.
With so many high-profile security incidents making headlines, cybersecurity is top-of-mind for many IT managers.
No surprise, then, that a new generation of cybersecurity startups are building sophisticated tools and platforms to provide businesses with more effective defensive capabilities. Some of the most innovative offerings for battling increasingly sophisticated cyberattacks come from startups that are pushing the boundaries of what cybersecurity technology can do.
And all this means that cybersecurity presents a major opportunity for solution providers and MSPs to work with these startups.
As part of CRN’s Stellar Startups for 2026, here are 58 security technology startups, founded in 2020 or later, that solution providers should get to know. The following slides include lightly edited company and product descriptions provided by the startups.
7AI
Founded: 2024
Headquarters: Boston
Top Executive: Lior Div, Co-Founder, CEO
7AI describes itself as the foundational AI security company. Its agentic security platform enables enterprises and partners to operate, customize and build AI agents across end-to-end modern security operations, investigating alerts and hunting threats and driving approved response so analysts are free to run higher-value work like proactive defense.
The 7AI Agentic Security Platform deploys swarms of specialized AI agents that execute the full SOC workflow—from alert triage and investigation to response and proactive defense. Midmarket and enterprise organizations use 7AI to offload non‑human work, strengthen detection and response, and give analysts the capacity to focus on higher‑value activities.
Website: https://7ai.com/
A Security
Founded: 2025
Headquarters: Wilmington, Del.
Top Executive: Yossi Torati, Co-Founder, CEO
A Security develops an autonomous offensive security and remediation platform that protects organizations against weaponized AI. The company was founded in response to non-hackers obtaining nation-state hacking capabilities with nothing but an AI subscription.
The A Security platform discovers, chains, validates and remediates exploitable weaknesses at machine speed, eliminating exploitable attack paths before malicious agents find them. It provides continuous AI-driven offensive testing, validated exploit paths, adaptive remediation and audit trails for enterprise organizations across finance, healthcare, critical infrastructure and technology.
Website: https://a.security/
Above Security
Founded: 2025
Headquarters: Wilmington, Del.
Top Executive: Aviv Nahum, Co-Founder, CEO
Above strives to democratize insider risk by making top-tier analysts available to all enterprises—not just the Fortune 100 and three-letter agencies. The company’s 24×7 AI investigators are highly tuned to intervene on risky actions to prevent incidents and also provide full behavioral timelines when they do happen.
AI isn’t a feature of Above—it’s the foundation, according to the company. Arbiter, the company’s AI engine, orchestrates a fleet of highly specialized AI agents that apply the investigative methodology of world-class insider threat experts to build behavioral context, infer intent, guide people through risky moments and automatically generate comprehensive investigation reports.
Website: https://www.above.security/
Artemis Security
Founded: 2025
Headquarters: New York
Top Executive: Shachar Hirshberg, Co-Founder, CEO
Artemis provides an AI-native platform for security operations, built to stop attacks in seconds. Unlike legacy solutions built to search logs, Artemis builds a living model of an organization’s environment and detects attacks against it directly.
Artemis detects and stops attacks at machine speed. It builds a living model of an organization’s environment and detects against it directly—reasoning about threats with AI agents across detection, investigation, hunting and response at the speed modern attacks actually move.
Website: https://artemissecurity.com/
Astelia
Founded: 2024
Headquarters: New York
Top Executive: Alon Noy (Neuhaus), CEO
Astelia is an AI-native cybersecurity company focused on exposure management. Astelia combines reachability analysis, agentic AI and attack-path modeling to identify vulnerabilities attackers can actually reach and exploit. The company serves enterprise security teams seeking evidence-driven exposure management, reduced vulnerability noise, and faster, more practical remediation.
Astelia’s AI-native exposure management platform maps real network topology, segmentation and security controls, while agentic AI analyzes the technical prerequisites for exploiting vulnerabilities. Astelia identifies the vulnerabilities that are truly reachable and exploitable, then delivers evidence-based, environment-specific remediation plans beyond patching.
Website: https://www.astelia.io/
Blacksmith Infosec
Founded: 2023
Headquarters: San Bruno, Calif.
Top Executive: Jared Casner, Founder
Blacksmith Infosec was founded by working experts in the compliance and security space to fill a growing need in the IT channel. The company’s focus is on SaaS compliance tools and educating MSPs about how to leverage compliance requirements/demand for both greater security and enhanced market positioning.
The Blacksmith platform enables MSPs and vCISOs to co-manage all the governance aspects of their clients’ security and compliance needs. Not just a compliance tool, Blacksmith says it helps MSPs win deals, expand accounts and prove value at every step.
Website: blacksmithinfosec.com
C1
Founded: 2020
Headquarters: San Francisco
Top Executive: Alex Bovee, Co-Founder, CEO
C1 powers the transition to the agentic enterprise with secure access for humans and agents. As the universal identity control plane, C1 governs every human, AI agent and non-human identity across every system an organization is running. Companies like Instacart, Ramp, Zscaler and Brex trust C1 to accelerate AI transformation.
The C1 AI-native identity platform unifies AI access management, autonomous AI agents, dynamic and just-in-time access controls, no-code identity automations, and a super directory into one control plane. It is built for mid to large enterprises adopting AI, replacing standing access with continuous, policy-driven governance.
Website: https://www.c1.ai/
Cavelo
Founded: 2020
Headquarters: Kitchener, Ontario
Top Executive: James Mignacca, CEO
Cavelo is a B2B SaaS cybersecurity company purpose-built for the MSP channel. Cavelo 360 combines attack surface management, vulnerability management and automated remediation. Cavelo is built for MSPs and serves SMB and midmarket businesses through a 100 percent channel-led model in North America.
Cavelo 360 is an MSP-delivered security platform powered by Cora, the company’s agentic AI engine, that triages vulnerabilities and generates tenant-specific remediation steps. It delivers asset discovery, data classification, vulnerability management, configuration compliance and AI triage—with autonomous patch deployment and AI-native RMM displacement on the road map.
Website: www.cavelo.com
Chainguard
Founded: 2021
Headquarters: Kirkland, Wash.
Top Executive: Dan Lorenc, Co-Founder, CEO
Chainguard is a trusted source for open source in the AI era. As AI accelerates software development and software supply chain attacks, Chainguard says it is redefining how organizations secure the software. Instead of relying on endless scanning, patching and vulnerability backlogs, customers start with trusted, secure-by-default software built for production.
Chainguard Containers are secure, production-ready container images built from source, continuously rebuilt, signed and shipped with SBOMs. Trusted by 600-plus organizations, including OpenAI, Canva, HPE and Public Storage, they replace vulnerability backlogs with momentum for engineers to spend less time firefighting and more time innovating.
Website: https://www.chainguard.dev/
Clutch Security
Founded: 2023
Headquarters: Tel Aviv, Israel
Top Executive: Ofir Har-Chen, CEO
Clutch provides what it calls the identity security platform for the AI era, securing every non-human identity, AI agent and secret through automated action and Zero Trust enforcement. It is powered by the Identity Lineage graph, which maps every identity to its origin, owners, storage, consumers and resources across the enterprise.
The Clutch platform, targeting enterprise security teams, secures non-human identities, AI agents and secrets across cloud, SaaS, on-premises, code, CI/CD and vaults. Key capabilities include full discovery and context through Identity Lineage, risk prioritization and remediation, AI agent governance, and Zero Trust enforcement including migration to ephemeral credentials.
Website: www.clutch.security
Command Zero
Founded: 2021
Headquarters: Austin, Texas
Top Executive: Dov Yoran, Co-Founder, CEO
Command Zero says it is transforming security operations in complex enterprise environments with its autonomous, AI-assisted SOC platform that combines expert-encoded knowledge, controlled AI agents and human-led investigations to deliver consistent, auditable analysis.
The Command Zero platform’s federated data model connects existing security tools without data migration, enabling AI and analysts to collaborate seamlessly on investigations at scale. It reduces mean time to understand and respond from alert to response, while improving accuracy at scale. And it combines expert-encoded knowledge base, controlled AI agents and human-led investigation tools, delivering consistent, auditable analysis.
Website: https://www.commandzero.ai/
Cranium AI
Founded: 2023
Headquarters: Short Hills, N.J.
Top Executive: Jonathan Dambrot, CEO
Cranium provides an end-to-end AI security and governance platform to enable enterprise teams a single place to discover, observe, govern and secure every AI and agentic system they build, buy or rely on—so innovation never outruns trust.
Businesses are shipping AI everywhere—and the risk is multiplying just as quickly. Cranium ONE is one platform for true end-to-end AI security and governance: infrastructure and LLM-agnostic, with full visibility and continuous trust in every model, agent and vendor across a customer’s AI ecosystem.
Website: www.cranium.ai
CrunchAtlas
Founded: 2024
Headquarters: Portsmouth, N.H.
Top Executive: Ben Faberlle, Co-Founder, CEO
CrunchAtlas builds self-contained, AI-native cyber defense for critical infrastructure. The company’s agentic platform, AtlasCyber for autonomous threat detection and PurpleHaze for on-demand penetration testing, runs directly on the wire at the edge, air-gapped, with no cloud dependency. It protects both IT and OT environments where legacy tools fail.
AtlasCyber is the company’s mainstay: AI-native, agentic threat detection that hunts on the wire, no baselines, no cloud, air-gapped capable, mapping threats to MITRE ATT&CK autonomously. PurpleHaze adds on-demand agentic penetration testing. Both deploy virtually or on custom hardware, protecting critical infrastructure across IT and OT environments.
Website: www.crunchatlas.com
CyberFOX
Founded: 2022
Headquarters: Tampa, Fla.
Top Executive: David Bellini, CEO
CyberFOX makes affordable cybersecurity for lean IT teams and MSPs. Its three products cover privileged access, password management and DNS filtering. Where enterprise vendors build for Fortune 100 buyers, CyberFOX serves small and midmarket organizations that get attacked most but can respond least. Deployments take hours. It sells channel-first.
CyberFOX delivers four products: AutoElevate for privileged access, Password Manager for credential control, DNS Filtering for AI-powered web security and Timus SASE for zero trust network access. All run from one multitenant dashboard at a per-endpoint price. Built for MSPs and IT teams that want security fast.
Website: https://www.cyberfox.com/
CYGNVS
Founded: 2020
Headquarters: Los Altos, Calif.
Top Executive: Arvind Parthasarathi, Co-Founder, CEO
CYGNVS’ platform is the out-of-band command center that reduces the cost and impact of cyber/AI incidents and outages. When a major incident hits, security, legal, executives and outside counsel all need to respond. CYGNVS gives them one secure place to do it. Over 3,000 organizations rely on it, running 50-plus major incidents on the platform weekly.
Even when systems are unavailable or compromised, teams can collaborate inside CYGNVS to prepare and import response plans, practice in tabletop exercises, execute the response and report to regulators/customers.
Website: Https://cygnvs.com
Cynomi
Founded: 2021
Headquarters: Orlando, Fla.
Top Executive: David Primor, CEO
Cynomi is an AI-powered security growth platform for MSPs, MSSPs and vCISO firms. Powered by CISO Intelligence, it automates risk assessments, remediation planning and compliance management, helping partners scale cybersecurity services, improve efficiency, expand recurring revenue and grow without increasing senior head count.
Cynomi provides the decision-making logic of a security leader embedded into every workflow and helps service providers deliver, scale and grow cybersecurity services across every client and every maturity level.
Website: https://cynomi.com/
Descope
Founded: 2022
Headquarters: Los Altos, Calif.
Top Executive: Slavik Markovich, Co-Founder, CEO
Descope is a drag-and-drop external IAM platform for customer, partner and AI agent identity. Developers and IAM teams use no-code flows to build authentication, MFA, SSO, authorization and consent management, plus an Agentic Identity Hub securing AI agents and MCP servers.
Descope serves IAM teams and developers within thousands of organizations of all sizes across all industries.
The Descope customer and agentic identity platform helps organizations create identity journeys for their customers, partners and AI agents. It provides a no-code interface and developer tools to implement authentication, authorization, MFA, SSO, consent management, identity federation and agentic identity flows.
Website: https://www.descope.com
Furl.ai
Founded: 2022
Headquarters: Manhattan Beach, Calif.
Top Executive: Derek Abdine, CEO
Furl is the continuous autonomous remediation platform—an always-on agent that safely engineers and executes the fixes security tools can’t. Furl investigates every finding, builds a fix for that specific environment, deploys it through its own endpoint agent and proves it closed—all inside guardrails the customer sets.
The Forge agentic AI engine ingests findings from existing security and IT tools, investigates real-world system context on endpoints and servers, and autonomously executes remediation steps with built-in validation. Instead of producing more tickets, dashboards, or scripts, Furl performs the hands-on work of remediation—helping IT security teams turn findings into fixes.
Website: https://www.furl.ai/
Geordie AI
Founded: 2025
Headquarters: New York
Top Executive: Henry Comfort, Co-Founder, CEO
Geordie is a purpose-built security and governance platform for AI agents. It provides agent-native risk intelligence to some of the most forward-thinking organizations in the world by mapping agents’ full anatomy, connections and context for secure AI innovation.
Geordie is a vendor-agnostic security and governance platform for AI agents. It discovers, inventories and monitors agents across APIs, code and endpoints, providing real-time visibility, observability and risk assessment. Its proprietary remediation engine, Beam, proactively guides agent decisions with contextual controls, enabling enterprises to safely scale agentic AI.
Website: https://www.geordie.ai/
Gradient Cyber
Founded: 2023
Headquarters: South Lake, Texas
Top Executive: James Hamilton, CEO
Gradient Cyber is a channel-first cybersecurity company delivering AI-powered managed extended detection and response (MXDR) through its Quorum AI platform and 24/7 Security Operations Centers (SOC). The company serves mid-market organizations, helping customers improve visibility, reduce risk and respond faster, with scalable protection designed for lean IT and security teams.
Gradient Cyber Quorum AI is an AI-powered MXDR platform that unifies endpoint, network, identity, cloud and productivity telemetry. It combines 24×7 monitoring, network detection and response, automated threat correlation, human validation and rapid remediation for midmarket organizations, especially regulated industries and lean IT teams.
Website: gradientcyber.com
Guardz
Founded: 2022
Headquarters: Miami
Top Executive: Dor Eisner, Co-Founder, CEO
Guardz is an AI-native agentic SecOps platform for MSPs protecting SMB clients. The Guardz system consolidates identity, endpoint, email, cloud and data protection into one platform, using 24×7 agentic MDR to correlate signals, cut alert fatigue and automate response, letting MSPs deliver enterprise-grade protection at lower cost and complexity.
The Guardz platform unifies identity, endpoint, email, cloud and data protection. Key features include automated AI-driven threat detection and response and multi-tenant management. Guardz targets Managed Service Providers that cater to the underserved small and midsize businesses lacking expertise or resources to protect themselves.
Website: https://guardz.com
HacWare
Founded: 2020
Headquarters: Dallas
Top Executive: Tiffany Ricks, CEO
HacWare delivers AI-driven phishing simulations and automated security awareness training to reduce human cyber risk. The company’s technology personalizes training, automates compliance and integrates with Microsoft 365 and Google Workspace. It serves MSPs by making advanced cybersecurity awareness accessible, scalable and cost-effective.
HacWare Phish Plus empowers MSPs with AI-driven phishing simulations and automated awareness training that’s easy to deploy and manage. Benefits include reduced human cyber risk, new revenue streams, simplified compliance support and scalable multi-tenant management to help MSPs strengthen client security while growing their business.
Website: https://www.hacware.com
Inforcer
Founded: 2022
Headquarters: London, U.K.
Top Executive: Jamie Daum, CEO
Inforcer empowers MSPs to standardize Microsoft 365 policies across all tenants, automate environment configuration, monitor compliance in real time and reduce risk through policy drift detection, setting MSPs up to deliver advanced AI services to their customers. Nearly 1,400 MSPs across North America, EMEA and APAC use the platform.
Inforcer provides a multi-tenant Microsoft 365 management and security platform built for MSPs. It standardizes security policies across all customer tenants, automates configuration, detects and remediates policy drift and equips MSPs to assess Copilot readiness and govern AI adoption—replacing manual, tenant-by-tenant management at scale.
Website: https://www.inforcer.com/
Island
Founded: 2020
Headquarters: Dallas
Top Executive: Mike Fey, Co-Founder, CEO
Island is the enterprise work platform, the ideal environment for modern work. Its Enterprise Browser, Extension, Enterprise AI and Enterprise Network enable people, devices and agents to use AI productively, everywhere. Millions of users inside the world’s leading enterprises trust Island to accelerate AI innovation, while keeping work fundamentally secure.
The Island Enterprise Browser embeds security, visibility, data protection, policy enforcement and productivity controls directly where employees and contractors do the majority of their work, in the browser itself. Island enables organizations to securely support SaaS, AI, BYOD, contractors and distributed work across any device.
Website: https://island.io/
Jazz
Founded: 2024
Headquarters: Boston
Top Executive: Ido Livneh, Co-Founder, CEO
Jazz is an AI DLP that understandsa company’s business. By combining complete endpoint visibility with an agentic investigator, Melody, that autonomously understands context and intent, Jazz delivers pre-investigated answers instead of noisy alerts without rules, tuning or browser extensions.
Jazz, powered by Melody, is an agentic AI investigator that autonomously analyzes context and intent across endpoints, SaaS and AI tools—delivering pre-investigated incidents instead of alerts. It is built for midmarket and enterprise security teams.
Website: https://jazz.security
JetStream Security
Founded: 2025
Headquarters: Santa Clara, Calif.
Top Executive: Raj Rajamani, Co-Founder, CEO
JetStream Security is a security-first AI governance company building the control plane for enterprise AI. The platform makes every AI agent, model, workflow and identity visible, attributed and governed continuously, with real-time visibility, enforceable controls, and financial accountability built in. JetStream helps enterprises adopt AI at speed without surrendering control.
The JetStream SAIG Platform (Security-first AI Governance) makes every AI agent, model, workflow and identity visible, attributed and governed at runtime. It closes five AI trust gaps: AI visibility, design control with JetStream AI Blueprints, runtime governance, agentic identity and financial accountability. The product’s target market is enterprises deploying AI in production.
Website: jetstream.security
KIPIO
Founded: 2025
Headquarters: Austin, Texas
Top Executive: Emily Hock, Co-Founder, CEO
KIPIO is an AI operations and security platform purpose-built for MSPs. It gives partners visibility and real-time protection across every AI surface their clients touch (applications and agents), combining intent-aware data protection, governance and policy enforcement. KIPIO turns MSPs into the trusted AI adviser for small and midsize businesses.
KIPIO delivers full visibility and real-time protection across every AI surface, browser, desktop and MCP, with intent-aware data protection, governance and policy enforcement, so small and midsize businesses can adopt AI securely at scale.
Website: https://www.kipio.com/
Kipling Secure
Founded: 2024
Headquarters: San Jose, Calif.
Top Executive: Saurabh Sandhir, CEO
Kipling Secure is an MSP-first cybersecurity company delivering AI detection and response (AIDR) for SMB and midmarket customers. Its platform gives businesses visibility and control across AI applications, prompts, data, identities and autonomous agents, helping MSPs reduce AI risk, enforce policy, support compliance and create recurring managed security services for SMB and midmarket customers.
Kipling AIDR discovers shadow AI, analyzes prompts and file activity, enforces acceptable-use policies, protects sensitive data, monitors identities and autonomous agents, and gives MSPs centralized multi-tenant visibility, response and compliance reporting.
Website: https://kiplingsecure.ai/
Lineaje
Founded: 2022
Headquarters: Santa Clara, Calif.
Top Executive: Javed Hasan, Co-Founder, CEO
Lineaje is a software supply chain and AI security company helping organizations secure software, open-source technology, containers and AI-generated applications. Its products provide visibility, governance, automated remediation and compliance.
Trusted by enterprise and public-sector organizations, Lineaje reduces risk, secures AI applications, advances continuous vulnerability elimination and confidently accelerates innovation.
Lineaje’s unified software supply chain security product suite includes Gold Open Source, Continuous Vulnerability Elimination Factory (CVEF) with Frontier Model Find & Fix, xBOM Manager and UnifAI. They deliver trusted open-source software, continuous vulnerability elimination, software governance and AI security for enterprises and public-sector organizations building and securing modern software.
Website: lineaje.com
Linx Security
Founded: 2023
Headquarters: New York
Top Executive: Israel Duanis, Co-Founder, CEO
Linx is an AI-native identity security platform that’s enabling enterprises to automate governance, detect anomalies and enforce least privilege across human, non-human and AI agent identities. It is trusted by leading enterprises to streamline access management and strengthen security posture through intelligent, context-aware automation.
Linx Platform: An AI-native identity security and governance solution offering modern IGA, identity security posture management, just-in-time access and identity life-cycle management. Key features: identity graph, automated remediation, risk-scoring, non-human identity governance. The company’s target market is enterprises with 500-plus employees managing complex identity ecosystems across cloud and on-premises.
Website: https://www.linx.security/
Loom Security
Founded: 2024
Headquarters: Lawrence, Kan.
Top Executive: Charles (Chuck) Crawford, Founder, CEO
Loom Security, originally a cybersecurity services firm, launched CINQUE in March 2026: an AI-native platform correlating risk across five security control points: identity, device, network, application and data. In its first months, CINQUE secured six customers, a $2.6 million pipeline, and $1.87 million in combined revenue, backed by $600,000 in pre-seed funding.
CINQUE, Loom Security’s AI-native unified observability platform for risk correlation and zero trust context, correlates identity, device, network, application and data into actionable business intelligence. Organizations gain interactive persona intelligence, contextual risk visibility and actionable security insight in approximately 90 minutes.
Website: https://www.loomsecurity.io/
Lumu Technologies
Founded: 2020
Headquarters: Doral, Fla.
Top Executive: Ricardo Villadiego, Founder, CEO
Lumu Technologies is the NDR provider that empowers organizations to unify threat detection and real-time response across networks, identities and endpoints.
The Lumu SecOps Platform leverages AI-powered analysis to close breach detection gaps, offering scalable, cloud-native solutions that help finance, healthcare, government, education and service providers manage threats with automation.
Lumu Defender delivers real-time network detection and response (NDR) using AI to analyze network metadata across networks, identities and workloads. Key features include deep threat correlation, automated response orchestration and MITRE ATT&CK mapping. It’s built for SecOps teams and organizations seeking continuous, automated security operations.
Website: lumu.io
Mate Security
Founded: 2025
Headquarters: Tel Aviv, Israel
Top Executive: Asaf Wiener, Co-Founder, CEO
Mate offers an open foundation for AI security operations. Its Security Context Graph powers autonomous agents that investigate, hunt, detect and respond. Built for Fortune 2000 enterprises and their MSSPs, Mate’s orchestrator directs its own, vendor, and customer agents on shared governed context, with evaluation-gated quality and safe agent-to-agent coordination.
The Mate Security Context Graph maps an organization’s security and IT stack, architecture, ownership and policies, powering autonomous agents across the SOC lifecycle: triage, investigation, threat hunting, detection engineering and response. Agents earn autonomy as verdicts are validated.
Website: https://mate.security/
MIND
Founded: 2023
Headquarters: Seattle
Top Executive: Eran Barak, Co-Founder, CEO
Security leaders need DLP built for the AI era. MIND is an award-winning, AI-native platform that puts DLP on autopilot, protecting data at rest and in motion. Customers have reduced DLP effort by up to 80 percent, enabling AI innovation with confidence and truly stress-free DLP.
The MIND data security platform discovers, detects and prevents data loss across SaaS, GenAI apps, on-premises file shares, endpoints and email from a single console. Classification is so accurate that customers report near-zero false positives and triage time cut from days to minutes.
Website: https://mind.io
Mondoo
Founded: 2020
Headquarters: San Francisco
Top Executive: Soo Choi-Andrews, Co-Founder, CEO
Mondoo offers the world’s first agentic vulnerability management platform serving enterprises through security teams, MSPs, MSSPs and channel partners. Its AI-driven CTEM platform continuously monitors infrastructure and software, prioritizes issues by business impact and exploitability, delivering pretested automated remediations.
Mondoo’s Agentic Managed Vulnerability Service and platform help midmarket and enterprise organizations eliminate vulnerabilities, not just identify them. Combining AI-driven prioritization, context-aware risk analysis, automated remediation workflows and expert-managed services, the platform continuously monitors, verifies and prevents vulnerabilities across cloud, on-premises, endpoints, SaaS, AI tools and software development environments.
Website: https://mondoo.com/
Noma Security
Founded: 2023
Headquarters: New York
Top Executive: Niv Braun, Co-Founder, CEO
Noma Security delivers a unified platform for securing enterprise AI systems and autonomous agents through continuous discovery, posture management, red teaming and runtime protection. Founded in 2023 and backed by Evolution Equity Partners and Ballistic Ventures, Noma Security serves Fortune 500 clients across finance, life sciences and retail.
The Noma Security product is a purpose-built AI security platform built for enterprise security teams and CISOs. Key capabilities include the Agentic Risk Map for full visibility across an AI agent landscape and Agentic Access Control, which discovers, governs and provides runtime protection for AI agents, MCP servers and tools.
Website: https://noma.security/
Nudge Security
Founded: 2021
Headquarters: Autin, Texas
Top Executive: Russell Spitler, Co-Founder, CEO
Nudge Security helps IT and security teams take control of shadow AI, SaaS sprawl and third-party risk. Through day one discovery of shadow identities, AI-driven risk insight and policy-driven guardrails, Nudge makes security a natural part of how work gets done rather than an obstacle to innovation.
The Nudge Security platform provides visibility for shadow AI and SaaS apps, AI-driven risk insight, automated risk remediation workflows and policy-based guardrails to guide the workforce toward secure practices. Over 200 customers across financial services, healthcare, technology and other industries trust Nudge Security.
Website: https://www.nudgesecurity.com
Onyx Security
Founded: 2024
Headquarters: Tel Aviv, Israel
Top Executive: Maxim Bar Kogan, Co-Founder, CEO
Onyx Security provides a secure AI control plane for the enterprise, helping organizations discover, govern and control AI models and agents. Powered by proprietary models and agentic technology, Onyx enables Fortune 500 companies to deploy AI securely, maintain compliance and maximize business value.
The Onyx Secure AI Control Plane gives enterprise security, governance and infrastructure teams a platform to oversee AI agent use, ensure compliance and measure effectiveness in real time. It evaluates prompts, responses and tool calls, helping identify prompt injection, data exposure, unsafe MCP activity and agent behavior without slowing adoption.
Website: https://www.onyx.security/
Orchid Security
Founded: 2024
Headquarters: New York
Top Executive: Roy Katmor, Co-Founder, CEO
Orchid Security is an identity security company that has developed an identity control plane, an independent layer between enterprise applications and IAM tooling. By exposing and remediating identity dark matter across modern environments, Orchid gives enterprises comprehensive visibility, insight and control across human, non-human and agent-AI identities.
Orchid’s identity-first Security Orchestration platform delivers the Identity Control Plane capabilities, bridging enterprise applications and IAM tools. It continuously discovers applications, analyzes native identity flows, surfaces identity utilization and exposes identity dark matter.
Website: https://orchid.security
Pi Security
Founded: 2025
Headquarters: San Francisco
Top Executive: Guy Arazi, Co-Founder, CEO
Pi Security develops an agentic AI application security platform that transforms an organization’s security knowledge into institutional memory. By understanding code, architecture, past incidents and developer workflows, Pi helps security and engineer teams fix vulnerabilities once, prevent them from recurring and securely accelerate software development.
The Pi Security agentic AI application security platform secures the entire SDLC, from design through production, with architecture reviews, AI coding agent security, intelligent code review, root cause analysis, automated remediation, and institutional security memory that prevents vulnerabilities from recurring.
Website: pi.security
PsyberCog Labs
Founded: 2025
Headquarters: Katy, Texas
Top Executive: Dustin Sachs, CEO
PsyberCog Labs helps cybersecurity and risk leaders quantify how human decision-making affects control performance and enterprise cyber risk. Its PATH Platform applies behavioral science, diagnostic analytics and governance-focused scoring to uncover execution gaps, prioritize remediation and deliver board-relevant risk insight for regulated organizations.
The PATH Platform is PsyberCog Labs’ behavioral cyber risk diagnostic solution. It combines structured assessments, control-effectiveness gap analysis, behavioral risk scoring and governance-ready reporting to show where human decisions weaken cybersecurity execution. Target users include CISOs, GRC leaders, risk executives and channel partners serving regulated organizations.
Website: https://www.psybercog.com
RapidFort
Founded: 2020
Headquarters: Sunnyvale, Calif.
Top Executive: Mehran Farimani, Founder, CEO
RapidFort is a leader in the software supply chain security market with its distribution of curated, genuinely open-source software. Its platform enables organizations to eliminate risk at scale through hardened, near-zero CVE container images, runtime profiling, attack surface management and independently malware-scanned open-source images—cutting 99 percent of CVE exposure.
RapidFort offers a large distribution of curated, genuinely open-source software. Its platform enables organizations to eliminate risk at scale through hardened near-zero CVE container images, runtime profiling, attack surface management and independently malware-scanned open-source images.
Website: https://www.rapidfort.com/
Reach Security
Founded: 2021
Headquarters: San Francisco
Top Executive: Garrett Hamilton, Co-Founder, CEO
Reach Security says it is defining AI-native exposure management by bridging the gap between identifying security risks and taking action to fix them. The company’s platform uncovers misconfigurations, control weaknesses and exposures, then drives prioritized, guided remediation at scale.
Integrating with existing security tools, Reach says it delivers clarity, automation and operational value in minutes.
Reach Security’s AI-native security assurance platform helps enterprise IT and security teams continuously validate and strengthen security controls across complex environments. The platform identifies hidden exposures, configuration drift, firewall and network security weaknesses, then prioritizes remediation to reduce risk and improve cyber resilience.
Website: https://www.reach.security/
Reco
Founded: 2020
Headquarters: Altamonte Springs, Fla.
Top Executive: Ofer Klein, CEO
Reco secures AI agents and applications across enterprise environments. Built on the Reco Graph, the company’s platform discovers agent, identity, permission and workflow exposure, prioritizes risk based on business context, and enables remediation before unmanaged AI access leads to data exposure, compliance risk or operational disruption.
The Reco Platform with Agent Security helps enterprise security teams discover AI agents, copilots, service accounts and related non-human identities; map ownership, permissions, OAuth grants, activity and blast radius; prioritize risk; and remediate exposure through existing ticketing, security and partner-delivered service workflows.
Website: https://www.reco.ai/
RegScale
Founded: 2021
Headquarters: Tysons, Va.
Top Executive: Travis Howerton, CEO
RegScale is a continuous controls monitoring (CCM) platform designed to be the operational risk tool for the CISO. Built on a compliance-as-code foundation, RegScale enables extreme automation with API-first strategy, self-updating paperwork, and powerful AI agents that all but eliminate manual labor and make an organization’s program more proactive.
The RegScale platform supports the most heavily regulated enterprises and organizations in the world. RegScale enables extreme automation with an API-first strategy, self-updating paperwork and powerful RegML AI agents that all but eliminate manual labor.
Website: https://regscale.com/
Seemplicity
Founded: 2020
Headquarters: Tel Aviv, Israel
Top Executive: Yoran Sirkis, Co-Founder, CEO
Seemplicity develops an Exposure Action Platform that helps enterprises reduce cyber risk by turning security findings into remediation outcomes. Designed for organizations managing complex cloud, identity, application and infrastructure environments, Seemplicity applies AI-driven analysis, prioritization and workflow automation to validate exposures, identify owners, guide remediation and verify resolution.
Seemplicity describes its offering as the agentic exposure action platform for enterprise security teams. Fighting AI with AI at the remediation layer, the system’s autonomous AI analysts validate exposures, prioritize risk, guide remediation and verify resolution end-to-end. Seemplicity transforms overwhelming security signals into accountable action that accelerates risk reduction.
Website: https://seemplicity.ai/
Sentra
Founded: 2021
Headquarters: New York
Top Executive: Yoav Regev, Co-Founder, CEO
Sentra offers its AI data readiness platform that helps enterprises discover, classify, govern and protect sensitive data across cloud, SaaS, data warehouse and AI environments. The technology’s patented in-environment architecture scans data where it lives, helping customers reduce exposure, govern AI access, improve compliance and scale AI safely.
Sentra’s Platform for Continuous AI Data Readiness and Governance discovers, classifies, governs and protects sensitive data across cloud, SaaS, on-premises, hybrid and AI environments. Combining DSPM, access governance, threat response, data hygiene and automated remediation, Sentra helps enterprises understand what AI can access and securely scale AI adoption.
Website: https://www.sentra.io/
Simbian
Founded: 2023
Headquarters: Mountain View, Calif.
Top Executive: Ambuj Kumar, Co-Founder, CEO
Simbian’s security operations platform enables enterprises to outsmart AI-driven threats that existing automation and playbooks don’t catch. Simbian AI SOC, AI Penetration Testing and AI Threat Hunting agents, connected by a shared architecture and Context Lake, combine offensive and defensive security to transform SecOps into a dynamic, self-improving system.
Simbian provides enterprises with defensive and offensive security capabilities in one platform. Simbian AI SOC automates triage, investigation and response of security alerts, achieving 90-plus percent automated resolution. Simbian AI Penetration Testing runs on demand to uncover exploitable vulnerabilities in any web application in just a few hours.
Website: https://simbian.ai/
Skyhawk Security
Founded: 2022
Headquarters: Dover, Del.
Top Executive: Chen Burshan, CEO
Skyhawk Security, a pioneer in AI-based red team cloud security, helps partners protect customers from AI-enabled attacks. Its AI Red Team autonomously simulates AI-driven threat activity in the cloud, using a digital twin to identify true weaponized risks, including those hidden in legitimate configurations and assets, before they become breaches.
Skyhawk Security’s AI Red Team continuously executes autonomous adversarial attack simulations against a digital model of an organization’s cloud. It dynamically chains legitimate permissions to expose exploitable attack paths before threat actors do, delivering autonomous remediation at machine speed. It is built for enterprise security teams defending cloud environments (AWS, Azure, Google Cloud).
Website: https://skyhawk.security/
SolCyber
Founded: 2021
Headquarters: Dallas
Top Executive: Scott McCrady, CEO
SolCyber delivers managed security as-a-program for midmarket organizations including a curated technology stack with 24×7 human-led SOC support, full on-boarding in 30 days, and built-in access to preapproved, discounted cyber insurance.
SolCyber provides comprehensive protection, without the complexity. SolCyber Foundational Coverage is an all-in-one managed security program for midmarket organizations, delivering end-to-end protection across the full kill chain including MDR, advanced email, endpoint detection, SIEM, DNS protection and phishing simulation. Customers are fully on-boarded in 30 days, with 24×7 human SOC support and predictable per-user pricing.
Website: https://solcyber.com/
Spektrum Labs
Founded: 2021
Headquarters: Carmel, Ind.
Top Executive: J.J. Thompson, Founder, CEO
Spektrum is the data layer for provable, trusted cyber resilience. Enterprises, boards, auditors and insurers use Spektrum to continuously validate that an organization’s technical and financial safeguards are effective. The resulting trail of machine-verified, time-stamped proof of resilience reduces audit friction, accelerates insurability and eliminates manual evidence-gathering for security teams.
The Spektrum Fusion platform delivers immutable proof of an organization’s cyber resilience, unifying cybersecurity, backups and insurance coverage safeguards. Live evidence is collected and validated daily from deployed systems for defensible board reporting, compliance and insurability, reducing time spent collecting proof and minimizing the cost of third-party assessments.
Website: https://spektrum.ai
Surf AI
Founded: 2024
Headquarters: Mountain View, Calif.
Top Executive: Yair Grindlinger, Co-Founder, CEO
Surf AI is an agentic operations platform that helps enterprises operationalize proactive security hygiene across identity, cloud, SaaS and IT environments. Surf connects context across enterprise systems, building a continuously updated understanding of assets, ownership, permissions, dependencies and business impact. Specialized agents execute remediation with human oversight with every step.
Surf AI is powered by a proprietary Context Graph and specialized AI agents, automating remediation with human oversight and helping large enterprises continuously reduce security exposures before they become breaches.
Website: https://www.surf.ai/
Sweet Security
Founded: 2023
Headquarters: Wilmington, Del.
Top Executive: Dror Kashti, Co-Founder, CEO
Sweet Security is an AI-powered runtime security platform, helping enterprises identify, validate and stop real-world attack paths across cloud and AI environments. By leveraging deep runtime telemetry, behavioral analytics and autonomous red-team capabilities, Sweet enables security teams to move beyond vulnerability management and proactively prevent breaches before attackers exploit them.
The Sweet Security system is a proactive runtime enforcement solution for cloud and AI. While other solutions detect and alert, Sweet blocks bad behavior as it happens. Its Learning Loop attacks, fixes and defends continuously, driving every app and AI agent toward 100 percent immunity where they run: in runtime.
Website: https://www.sweet.security/
Tenzai
Founded: 2025
Headquarters: Boston
Top Executive: Pavel Gurvich, Co-Founder, CEO
Tenzai is an AI cybersecurity company building autonomous AI hackers that continuously identify, exploit and mitigate vulnerabilities across enterprise environments. The company’s offering enables organizations to emulate sophisticated attackers at machine speed, proactively uncovering critical risks before adversaries exploit them. It is built for enterprise security teams facing AI-powered threats.
Tenzai’s AI Hacker is an autonomous offensive security attacker that continuously identifies, exploits and mitigates vulnerabilities across enterprise environments. It emulates sophisticated attackers using AI to help security teams proactively uncover critical risks before adversaries do. Its target market is large enterprises and security teams.
Website: https://www.tenzai.com/
Terra Security
Founded: 2024
Headquarters: Boston
Top Executive: Shahar Peled, Co-Founder, CEO
Terra Security provides an agentic offensive security platform that continuously validates multiple attack surfaces simultaneously. Terra Platform pairs 150-plus AI agents with human-on-the-loop oversight to deliver change-based, production-safe, compliance-approved penetration testing.
Fortune 500 companies across finance, healthcare, insurance, technology and more use Terra to gain a clearer view of their risk picture.
Terra Platform combines 150-plus AI agents with human-in-the-loop oversight for continuous penetration testing across web apps, AI systems, APIs and networks. Terra TORCH is the agentic desktop app where offensive security professionals perform their work, collaborating with AI agents in live testing. Its target market is Fortune 500 companies and security service providers.
Website: https://terra.security
Token Security
Founded: 2023
Headquarters: Brooklyn, N.Y.
Top Executive: Itamar Apelblat, Co-Founder, CEO
Token Security accelerates the secure adoption of agentic AI by discovering agents, understanding their access and intent, and enforcing security policies. The platform provides continuous visibility into AI agents, including ownership and permissions, and enforces least-privilege access. This eliminates blind spots, reduces risk and ensures compliance as AI agents scale.
The Token Security Platform gives organizations control over AI agents and non-human identities. It discovers agents, maps ownership and access, and enforces intent-based least privilege so autonomous systems operate within defined boundaries and enables continuous governance to ensure safe, compliant AI innovation.
Website: https://www.token.security/
VulnCheck
Founded: 2021
Headquarters: Lexington, Mass.
Top Executive: Anthony Bettini, CEO
VulnCheck, “The Exploit Intelligence Company,” delivers structured exploit intelligence on what is actively weaponized in the wild, purpose-built for the data lakes, ETL pipelines, automation, and AI and LLM workflows an organization’s infrastructure already runs on, raising the capability of everything it powers.
VulnCheck’s Exploit and Vulnerability Intelligence, Initial Access Intelligence, Canary Intelligence, and Target Intelligence capabilities deliver exploit intelligence covering PoC tracking, detection artifacts, attacker behavior and verified vulnerable-host data, built for the workflows that security vendors, enterprise security teams and government agencies run on, enabling the shift to exploit prevention.
Website: https://www.vulncheck.com/
Zafran
Founded: 2022
Headquarters: New York
Top Executive: Sanaz Yashar, Co-Founder, CEO
Zafran develops an AI-native threat exposure management platform that helps organizations prioritize the vulnerabilities attackers can actually exploit, enabling security teams to focus on the critical risks that matter most.
Zafran Threat Exposure Management identifies exploitable vulnerabilities using runtime context, threat intelligence, internet exposure and compensating controls to eliminate false priorities. It integrates with existing security tools to prioritize and remediate real risk for large and midsize enterprises with hybrid environments.
Website: https://www.zafran.io/
