threat-intelligence
(22)
Alice (Formerly ActiveFence)
Alice, formerly ActiveFence, is an Israeli-American AI safety and security company that acts as a protective layer for online platforms and AI systems. Founded in 2018, it uses a decade of real-world abuse intelligence to detect and stop harms such as fraud, deepfakes, child exploitation, disinformation, prompt-injection attacks, and jailbreaks. Its technology helps protect roughly 3 billion people and secures 7 of the 10 largest AI foundation models, serving customers including Amazon, TikTok, Nvidia, and Cohere.
Onapsis
Onapsis is a Boston-based cybersecurity company that secures business-critical applications - the SAP, Oracle and SaaS ERP systems that run the world's largest enterprises. Founded in 2009 by a team of ethical hackers, Onapsis combines a platform for assessing, defending and controlling ERP application-layer security with the threat research of Onapsis Research Labs, which regularly discovers SAP zero-day vulnerabilities and works directly with SAP and CISA. It is the only SAP security and compliance platform certified as a Premium Certified SAP Endorsed App.
Resilience
Resilience is a New York-based cyber insurance and risk-management company that pairs A-plus rated coverage with software that translates cyber risk into financial terms. Founded in 2016 by veterans of the U.S. military and intelligence communities (originally as Arceo.ai), it operates as a managing general agent for middle-market and large enterprises, combining risk quantification, a Risk Operations Center, and in-house claims and incident response to help organizations see, price, and reduce their most financially damaging cyber exposures.
watchTowr
watchTowr is a Singapore-based cybersecurity company that builds a real-time attacker's view of an organization's external attack surface, then continuously discovers and validates exploitable vulnerabilities before adversaries can use them. Founded in 2021 by offensive-security specialist Benjamin Harris, its platform blends external attack surface management, continuous automated red teaming, AI-driven rapid reaction to emerging threats, and autonomous edge mitigation. watchTowr is also known for watchTowr Labs, a research team whose public disclosures on Citrix, Fortinet, Ivanti, SonicWall and other enterprise software regularly make headlines. The company serves Fortune 500 firms and critical-infrastructure operators and has raised roughly $29-30 million, including a $19M Series A led by Peak XV.
Palo Alto Networks
Palo Alto Networks is a global cybersecurity company that helps organizations prevent, detect and respond to cyber threats across networks, clouds, endpoints and identities. Founded in 2005 by Nir Zuk, it pioneered the next-generation firewall and has since expanded into an integrated security platform spanning network security (Strata), cloud security (Prisma), and AI-driven security operations (Cortex). Serving roughly 70,000 organizations in more than 150 countries, including most of the Fortune 100, it is one of the largest pure-play cybersecurity vendors in the world.
CrowdStrike
CrowdStrike is a cloud-native cybersecurity company built around its Falcon platform, a single lightweight software agent that combines endpoint detection, cloud workload protection, identity security, threat intelligence and, increasingly, AI-driven detection and response. Founded in 2011 by George Kurtz, Dmitri Alperovitch and Gregg Marston, the company delivers security as a subscription service, collecting telemetry from millions of endpoints to spot attacks in real time. It serves large enterprises, governments and mid-market firms, trades on the Nasdaq as CRWD, and is a component of the S&P 500.
CyFlare
CyFlare is a U.S.-based Managed Security Service Provider that runs cybersecurity operations on behalf of MSPs, resellers and technology vendors. Through its CyFlare ONE platform and a 24/7 Open-XDR-enabled Security Operations Center, the company delivers managed detection and response, managed EDR, XDR, vulnerability management, managed email security and compliance support, letting channel partners offer enterprise-grade security to their clients without building an in-house SOC.
Hitachi Cyber
Hitachi Cyber is the global cybersecurity and performance analytics arm of the Hitachi Group, operating under Hitachi Systems Trusted Cyber Management Inc. With roots going back to 1999, it delivers 24/7 managed security services, threat intelligence, governance-risk-compliance advisory, and performance analytics to more than 350 private and government organizations across 50-plus countries. A network of Security Operations Centers spanning Canada, Switzerland, Japan, India and Poland - integrated with Google Security Operations, Microsoft Sentinel and Splunk - anchors its detection and response work across IT, OT and AI environments.
Lookout
Lookout is a San Francisco-founded cybersecurity company focused on mobile endpoint security and threat intelligence for enterprises and government agencies. Built on one of the world's largest mobile security datasets - hundreds of millions of devices and apps - Lookout detects phishing, smishing, malicious apps, device compromise and social-engineering attacks that target the smartphones people use for work. After divesting its consumer business in 2023 and its cloud SSE business to Fortra in 2025, Lookout is now a pure-play enterprise mobile security vendor led by CEO and Chairman Jim Dolce.
Censys
Censys is a cybersecurity company that runs one of the most comprehensive real-time maps of the public internet. Born from the ZMap internet-scanning project at the University of Michigan, its Internet Intelligence Platform scans billions of IP addresses and certificates to power attack surface management, threat hunting, and exposure management. Trusted by more than half of the Fortune 500 and by U.S. intelligence agencies, Censys helps defenders see what attackers can see - unknown assets, exposed services, and adversary infrastructure - so they can find and fix risk before it is exploited.
CyCognito
CyCognito is a cybersecurity company that builds an external exposure management platform. It maps an organization's internet-facing attack surface the way an attacker would - discovering unknown, unmanaged, and forgotten assets across cloud, web, and APIs, then testing and prioritizing the risks that actually matter. Founded in 2017 by former Israeli intelligence (Unit 8200) operators, CyCognito counts large enterprises like Tesco, Colgate-Palmolive, Panasonic and Hitachi among its customers, and raised a $100M Series C in 2021 at an $800M valuation.
SecLogic
SecLogic is a Boston-based cybersecurity company building an AI-driven cyber risk orchestration platform for the cloud era. Its two flagship products - CyberQ Shield, an agentless Cloud Native Application Protection Platform (CNAPP) that finds and auto-remediates misconfigurations and vulnerabilities across AWS, Azure, GCP and beyond, and CyberQ ORO, an Organization Risk Orchestration tool that quantifies human risk through multi-vector phishing simulation and awareness training - aim to give security leaders a single pane of glass across both their machines and their people. Founded in 2021 and backed by pre-seed funding, SecLogic operates across the US, Europe and India.
Netenrich
Netenrich is a San Jose-based security and digital operations company that helps enterprises run modern security operations on Google SecOps. Its Resolution Intelligence Cloud platform combines agentic AI, big-data analytics, and human expertise to power Adaptive MDR, Cyber Risk Operations, and threat detection - shifting security teams from chasing alerts toward what the company calls autonomic security operations.
Moonshot
Moonshot is a London-founded technology and intelligence company that maps and disrupts online harms - from violent extremism and disinformation to gender-based violence, human trafficking, and harassment of public figures. Founded in 2015 by Vidhya Ramalingam and Ross Frenett, the firm pairs data science, OSINT, and behavioral research with field interventions like its pioneering Redirect Method, which steers people searching for extremist content toward safer alternatives. It works for governments, technology platforms (Google, Facebook, Spotify), and, more recently, sports organizations protecting athletes from online abuse.
Outtake
Outtake is an AI cybersecurity company that deploys autonomous agents to detect, investigate, and dismantle digital threats - impersonation, phishing, fake domains, cloned apps, malicious ads, and deepfakes - across the open web, social platforms, app stores, and the dark web. Founded in 2023 by ex-Palantir engineer Alex Dhillon, the New York company turns threat detection-to-takedown into a single automated workflow, averaging takedowns in about 14 hours, and protects brands including OpenAI, NVIDIA, and Anthropic.
Surefire Cyber Inc.
Surefire Cyber is a purpose-built cyber incident response firm that helps insurers, brokers, law firms, and the organizations they cover move from response to resilience. Founded in 2022 by incident response veteran Billy Gouveia and incubated at Forgepoint Capital, the company pairs expert-led responders with an AI-enabled platform that unifies the insurance-driven response lifecycle - from forensic investigation and threat-actor negotiation through restoration, claims coordination, and cyber intelligence - to deliver faster outcomes with consistent quality and transparent, claims-ready reporting.
Doppel
Doppel is an AI-native security platform for social engineering defense. It protects brands, executives, and employees from AI-powered impersonation, phishing, and fraud by detecting threats across social media, domains, marketplaces, and the dark web, correlating attack signals into a unified Threat Graph, and automating takedowns of attacker infrastructure. Founded in 2022 by Kevin Tian and Rahul Madduluri, the company analyzes over a billion indicators daily and protects dozens of Fortune 500 brands.
iVerify
iVerify is a New York-based mobile security company that brings endpoint detection and response (EDR) and threat hunting to smartphones. Spun out of security firm Trail of Bits in 2023, its privacy-respecting platform detects spyware like Pegasus and Predator, OS vulnerabilities, and zero-click exploits on iOS and Android. iVerify pairs malware signatures, behavioral heuristics, and machine learning with a five-minute on-device threat scan, serving consumers, security teams, and high-risk individuals such as executives, journalists, and government targets.
BlueVoyant
BlueVoyant is a New York-based cyber defense company that combines a cloud-native technology platform with a 24x7 global security operations team to protect organizations from threats inside and outside their network. Its full-spectrum platform spans managed detection and response (MDR/MXDR), digital risk protection, and supply chain (third-party) cyber risk defense, drawing on global telemetry, dark web intelligence, and a deep partnership with Microsoft and Splunk. Founded in 2017 by James Rosenthal and Thomas Glocer, the company serves enterprises and governments worldwide and has raised roughly $695M to date.
Blackpoint Cyber
Blackpoint Cyber is a Denver-based managed detection and response (MDR) company built by former NSA cyber operations experts who decided the best way to defend businesses was to think like the attackers they used to be. Founded in 2014, the company serves managed service providers (MSPs) with a 24/7 security operations center, proprietary threat detection technology, and its unified CompassOne platform - combining endpoint, identity, cloud, and compliance tools into a single dashboard. With $210M in total funding and 23 G2 badges in Spring 2025, Blackpoint has become one of the most recognized MDR providers in the MSP channel, locking compromised Microsoft 365 accounts roughly every 30 minutes.
Corelight
Corelight is a San Francisco-based cybersecurity company that pioneered the commercial Open NDR (Network Detection and Response) platform, built on Zeek - the gold-standard open-source network security monitor created by co-founder Dr. Vern Paxson at Lawrence Berkeley National Lab. By transforming raw network traffic into high-fidelity, structured logs and pairing them with AI-powered analytics, Corelight gives enterprise security teams and government agencies the evidence they need to detect, investigate, and respond to threats faster. With $309M in total funding, 40%+ ARR growth, and recognition as a Gartner Magic Quadrant Leader for NDR, Corelight is widely regarded as the most trusted platform for network-based threat detection.
DataWalk
DataWalk is a graph- and AI-enabled analysis and investigation platform that unifies disparate data sources so analysts at banks, insurers, and government agencies can spot hidden relationships, run no-code queries, and pursue fraud, money laundering, and threat investigations at scale.