threat-intelligence
(44)
DNSFilter has to block the bad stuff. And let the work through.
An early customer walked away because the filtering was not ready. His return explains the appeal of DNSFilter - and the balancing act behind its expansion into a broader security platform.
Restrata Wants the Headcount Before the Headlines
A crisis is a bad time to discover that HR, travel and security have three different versions of where everyone is. Restrata is building a business around getting them to agree before the alarm sounds.
Fortra Bought a Cybersecurity Arsenal. Now It Has to Make the Pieces Talk.
The company once helped operators run overnight jobs on IBM machines. Four decades and a long acquisition spree later, it is trying to turn a cabinet of famous security tools into one coherent defense - while learning what happens when one trusted product becomes the way in.
The Internet Can Invent a Crisis Before Lunch. Blackbird.AI Wants to Spot It Before Breakfast
The New York startup treats online perception like a security surface. Its bet: the dangerous part is not one false post, but the network that gives it reach, speed and consequences.
Cyabra Learned the Hard Way: Finding the Bots Is Only Half the Job
The disinformation company spent four years perfecting detection before customers taught it the more valuable trick: turning a suspicious spike into a decision. Now the newly public firm must prove that narrative intelligence can become durable infrastructure, not just crisis software.
Securonix Is Teaching the SOC to Stop Chasing Alerts and Start Doing the Work
The security industry sold companies more alerts than their analysts could handle. Securonix built its next act around a different unit of value: completed investigations, governed automation, and less time spent feeding the machine.
Rapid7 Built a Security Empire on Hacker Tools. Now It Has to Make the Whole Stack Feel Like One Product.
Rapid7 spent 25 years learning how attackers think, then assembled scanners, SIEM, cloud security and managed response around that knowledge. The hard part now is subtraction: turning a crowded toolbox into one coherent operating system for security teams.
The $48 Million Bet That Your Security Stack Already Missed Something
Lumu built a cybersecurity company around an unfashionable question: what if the intruder is already inside? Its answer is to read the trail in network metadata, confirm the compromise, and make the security stack respond.
GreyNoise Built a Business by Telling Security Teams What to Ignore
Most cyber vendors sell more alarms. GreyNoise built thousands of patient decoys, learned the rhythm of indiscriminate attacks, and made a business out of the far more useful answer: not this one.
Infoblox Turned the Internet’s Boring Plumbing Into a Security Alarm
The company made a business out of the chores nobody notices until the network breaks. Now it is betting that DNS can tell security teams what is about to go wrong - before another tool raises the alarm.
Hive Pro Wants Security Teams to Fix the 1% That Matters - Not Admire the Other 99%
Most security teams do not suffer from too little vulnerability data. They suffer from a queue that never ends. Hive Pro is selling a way to turn that backlog into a short, defensible list of fixes.
Halcyon Bet Your Security Stack Will Fail. Its Payoff Is a $1 Billion Ransomware Safety Net
Most security vendors promise to keep attackers out. Halcyon starts with the impolite assumption that every layer - including its own - can fail, then sells enterprises a second chance before ransomware turns downtime into leverage.
Babel Street Built an AI Analyst for People Who Can't Afford a Bad Guess
The Washington intelligence-software company spent years helping analysts search a noisy world. Now it is asking AI agents to do the legwork - while humans keep the last word.
RANE Bought a 20-Year Forecasting Machine - Then Built the Risk Desk Most Companies Cannot Afford
The New York risk-intelligence company turned Stratfor's forecasting discipline into a subscription platform for executives facing too many alerts and too little time. Its bet: the valuable product is not more information, but a defensible decision.
UpGuard Turned a Month-Long Vendor Security Review Into One Week
Its pitch to lean security teams is refreshingly practical: stop chasing questionnaires and disconnected alerts, then turn outside-in evidence into a decision someone can defend.
SpyCloud Built a Trillion-Record Warning System for the Identity Attacks Your Login Screen Never Sees
Passwords were only the opening act. SpyCloud built an enterprise security business around the messier evidence criminals leave behind - and the narrow window defenders have to use it.
Dragos Turned a Three-Person Side Project Into Security for the Machines Nobody Can Reboot
Dragos began with three practitioners, a packet-capture tool, and a founder who did not want to become a software vendor. A decade later, its field notes defend grids, factories and water systems - and explain why industrial security cannot be treated like office IT.
Coveware Built a Ransomware Business Around One Awkward Goal: Pay Nothing
The company built its edge by studying thousands of extortion cases, then turning the evidence into a blunt recommendation many victims do not expect: the best ransom payment is often no payment at all.
Recorded Future Spent Three Years Lost - Then Turned Internet Noise Into a $2.65 Billion Signal
The founders tried to organize the future, wandered for years, then found a sharper business: tell defenders which threats matter before the damage begins. The result is a useful lesson in focus, patient category-building and making expensive software earn its keep.
The Company Betting That Scanning Was Never the Hard Part
Every enterprise already owns a dozen scanners that find problems. Nucleus Security built a business on the boring, unglamorous job nobody else wanted: figuring out which of the millions of findings actually matter.
The Company That Assumes Every File Is Trying to Kill You
Benny Czarny bootstrapped OPSWAT for 19 years on a simple, paranoid idea: assume every file is malicious. Today that assumption guards 98% of US nuclear plants.
The Company That Turned Corporate Security Into a Single Screen
Corporate security teams drown in tabs, feeds and spreadsheets. Ontic bet that connecting all of it in one place - now with AI - is worth $287 million to investors and the attention of the Fortune 50.
Alice (Formerly ActiveFence)
Alice, formerly ActiveFence, is an Israeli-American AI safety and security company that acts as a protective layer for online platforms and AI systems. Founded in 2018, it uses a decade of real-world abuse intelligence to detect and stop harms such as fraud, deepfakes, child exploitation, disinformation, prompt-injection attacks, and jailbreaks. Its technology helps protect roughly 3 billion people and secures 7 of the 10 largest AI foundation models, serving customers including Amazon, TikTok, Nvidia, and Cohere.
Onapsis
Onapsis is a Boston-based cybersecurity company that secures business-critical applications - the SAP, Oracle and SaaS ERP systems that run the world's largest enterprises. Founded in 2009 by a team of ethical hackers, Onapsis combines a platform for assessing, defending and controlling ERP application-layer security with the threat research of Onapsis Research Labs, which regularly discovers SAP zero-day vulnerabilities and works directly with SAP and CISA. It is the only SAP security and compliance platform certified as a Premium Certified SAP Endorsed App.
Resilience
Resilience is a New York-based cyber insurance and risk-management company that pairs A-plus rated coverage with software that translates cyber risk into financial terms. Founded in 2016 by veterans of the U.S. military and intelligence communities (originally as Arceo.ai), it operates as a managing general agent for middle-market and large enterprises, combining risk quantification, a Risk Operations Center, and in-house claims and incident response to help organizations see, price, and reduce their most financially damaging cyber exposures.
watchTowr
watchTowr is a Singapore-based cybersecurity company that builds a real-time attacker's view of an organization's external attack surface, then continuously discovers and validates exploitable vulnerabilities before adversaries can use them. Founded in 2021 by offensive-security specialist Benjamin Harris, its platform blends external attack surface management, continuous automated red teaming, AI-driven rapid reaction to emerging threats, and autonomous edge mitigation. watchTowr is also known for watchTowr Labs, a research team whose public disclosures on Citrix, Fortinet, Ivanti, SonicWall and other enterprise software regularly make headlines. The company serves Fortune 500 firms and critical-infrastructure operators and has raised roughly $29-30 million, including a $19M Series A led by Peak XV.
Palo Alto Networks
Palo Alto Networks is a global cybersecurity company that helps organizations prevent, detect and respond to cyber threats across networks, clouds, endpoints and identities. Founded in 2005 by Nir Zuk, it pioneered the next-generation firewall and has since expanded into an integrated security platform spanning network security (Strata), cloud security (Prisma), and AI-driven security operations (Cortex). Serving roughly 70,000 organizations in more than 150 countries, including most of the Fortune 100, it is one of the largest pure-play cybersecurity vendors in the world.
CrowdStrike
CrowdStrike is a cloud-native cybersecurity company built around its Falcon platform, a single lightweight software agent that combines endpoint detection, cloud workload protection, identity security, threat intelligence and, increasingly, AI-driven detection and response. Founded in 2011 by George Kurtz, Dmitri Alperovitch and Gregg Marston, the company delivers security as a subscription service, collecting telemetry from millions of endpoints to spot attacks in real time. It serves large enterprises, governments and mid-market firms, trades on the Nasdaq as CRWD, and is a component of the S&P 500.
CyFlare
CyFlare is a U.S.-based Managed Security Service Provider that runs cybersecurity operations on behalf of MSPs, resellers and technology vendors. Through its CyFlare ONE platform and a 24/7 Open-XDR-enabled Security Operations Center, the company delivers managed detection and response, managed EDR, XDR, vulnerability management, managed email security and compliance support, letting channel partners offer enterprise-grade security to their clients without building an in-house SOC.
Hitachi Cyber
Hitachi Cyber is the global cybersecurity and performance analytics arm of the Hitachi Group, operating under Hitachi Systems Trusted Cyber Management Inc. With roots going back to 1999, it delivers 24/7 managed security services, threat intelligence, governance-risk-compliance advisory, and performance analytics to more than 350 private and government organizations across 50-plus countries. A network of Security Operations Centers spanning Canada, Switzerland, Japan, India and Poland - integrated with Google Security Operations, Microsoft Sentinel and Splunk - anchors its detection and response work across IT, OT and AI environments.