Application Cybersecurity Companies
Tools that scan software for flaws before and after it ships.
Orca Security
United States
Agentless-first CNAPP that secures multi-cloud and AI workloads from code to runtime, using patented SideScanning and a unified data model.
Fortinet, Inc.
United States
Global cybersecurity leader delivering integrated networking and security solutions, including next-gen firewalls, SD-WAN, EDR, and SASE.
Imperva
United States
Application and data security: cloud WAF, API security, bot protection, DDoS mitigation and database security, now part of Thales Cyber Security Products.
Cloudflare
United States
A global connectivity cloud that provides CDN, DDoS protection, web application firewall, Zero Trust security, and developer platform services.
Aqua Security
Israel
Cloud native application protection platform (CNAPP) securing containers, Kubernetes, serverless and AI workloads from code to runtime; creator of Trivy.
Outpost24
Sweden
Swedish exposure management vendor: vulnerability scanning, attack surface management, threat intelligence, pen testing and Specops identity security.
F5
United States
Application delivery and security company: BIG-IP, NGINX and Distributed Cloud for WAF, API, bot and DDoS protection, plus AI runtime security.
Veracode
United States
Application risk management platform: SAST, DAST, SCA, container and supply chain security, ASPM and AI-powered code remediation, delivered as SaaS.
Brinqa
United States
Unified exposure management platform aggregating 260+ security tools to prioritize, assign, remediate and validate vulnerabilities, powered by AI agents.
Checkmarx
United States
Agentic AI application security platform (Checkmarx One): SAST, SCA, supply chain, IaC, container, API, DAST and ASPM for code written by humans and AI.
Wiz
United States
Agentless cloud-native application protection platform connecting code, cloud and runtime in one security graph, with AI agents; now part of Google Cloud.
HiddenLayer
United States
AI security platform protecting models, agents and AI apps with AI discovery, attack simulation (red teaming), supply chain security and runtime defense.