Category research
Security & Privacy
Software for protecting systems, identities, data, applications, networks, and privacy obligations against risk and misuse.
Endpoint Detection and Response (EDR) Software
Software for detecting, investigating, and responding to suspicious activity on business endpoints through behavioral telemetry, threat hunting, isolation, and remediation. Excludes prevention-first endpoint protection platforms.
Open subcategory10 toolsSecurity Information and Event Management (SIEM) Software
Software for collecting security logs, correlating events, detecting threats, supporting investigations, and producing security reports. Includes security analytics and log-based threat detection; excludes infrastructure monitoring, observability tools, and standalone incident response automation.
Open subcategory10 toolsVulnerability Management Software
Software for discovering, scanning, scoring, prioritizing, and tracking remediation of security vulnerabilities across assets and environments. Includes vulnerability scanners and risk-based prioritization; excludes patch deployment, penetration testing services, and general IT asset management.
Open subcategory10 toolsCloud Security Posture Management (CSPM) Software
Software for identifying misconfigurations, compliance gaps, and security risks across public cloud environments. Includes cloud posture assessment, policy monitoring, and cloud compliance checks; excludes cloud management platforms, infrastructure monitoring, and cloud cost management.
Open subcategory10 toolsApplication Security Testing Software
Software for finding security vulnerabilities in application code, open source dependencies, APIs, and running web applications. Includes SAST, DAST, SCA, IAST, and API security testing; excludes general software testing, CI/CD platforms, and developer IDEs.
Open subcategory10 toolsWeb Application Firewall (WAF) Software
Software for protecting web applications and APIs by filtering, monitoring, and blocking malicious HTTP traffic. Includes cloud and appliance-based WAF capabilities; excludes general CDN services, load balancing, and application performance monitoring.
Open subcategory10 toolsData Loss Prevention (DLP) Software
Software for discovering, classifying, monitoring, and preventing unauthorized movement or exposure of sensitive data. Includes endpoint, email, network, and cloud DLP controls; excludes backup software, document management, and broad data governance platforms.
Open subcategory10 toolsEmail Security Software
Software for protecting business email from phishing, malware, spam, business email compromise, and malicious attachments or links. Includes secure email gateways and cloud email protection; excludes email marketing, inbox productivity tools, and team messaging software.
Open subcategory10 toolsZero Trust Network Access (ZTNA) Software
Software for granting secure, identity-aware access to private applications without relying on traditional network perimeter access. Includes VPN replacement and least-privilege application access; excludes network monitoring, endpoint management, and general firewall hardware.
Open subcategory10 toolsSecurity Orchestration, Automation, and Response (SOAR) Software
Software for automating security investigations, incident response playbooks, alert triage, enrichment, and remediation workflows across security tools. Includes case management and response automation; excludes SIEM log correlation, IT service management, and general workflow automation platforms.
Open subcategory10 toolsAttack Surface Management (ASM) Software
Software for continuously discovering, inventorying, and assessing externally exposed assets, services, domains, and weaknesses that attackers could target. Includes external attack surface management and exposure monitoring; excludes traditional vulnerability scanners, IT asset management, and penetration testing services.
Open subcategory10 toolsBusiness Password Management Software
Software that helps organizations store, share, generate, and govern employee passwords and credentials in encrypted vaults. Includes team and enterprise password managers with administrative controls; excludes PAM, IAM, and developer-focused secrets management platforms.
Open subcategory