vulnerability-scanning
(4)
Blackpanda
Top-tier incident response, proactive readiness intelligence, and seamless access to cyber insurance - all in one platform. Delivered at less than 10% of the cost of traditional IR.
Casco
Casco is a San Francisco cybersecurity startup that runs autonomous, AI-driven penetration tests on web apps, APIs, cloud infrastructure, and AI systems. Founded in 2025 by ex-AWS engineers Rene Brandel and Ian Saultz, it pairs continuous machine-driven attack simulation with human security experts, delivering compliance-ready reports for standards like SOC 2, ISO 27001, and the EU AI Act. A Y Combinator (X25) company, Casco says it serves 300+ companies and secures AI systems used across a majority of the Fortune 500.
Aqua Security
Aqua Security is a cloud native security company founded in 2015 that helps enterprises protect containerized and cloud native applications from development to production. Its Aqua Platform is a Cloud Native Application Protection Platform (CNAPP) that combines agent and agentless technology to scan code and images, enforce policies, manage cloud posture, and stop attacks at runtime. Aqua is also the creator of Trivy, the widely adopted open source vulnerability and misconfiguration scanner. Headquartered in Boston and Ramat Gan, Israel, the company protects more than 500 large enterprises and has raised $325M in total funding at a valuation above $1 billion.
Cloudsmith
Cloudsmith is a Belfast-founded, cloud-native artifact management platform that gives engineering teams a single place to store, secure, and distribute software packages and containers across 30+ formats. It acts as a private, fully managed registry with built-in supply chain controls - vulnerability and malware scanning, policy enforcement, quarantine, and global distribution - increasingly positioned around governing the flood of code produced by AI coding agents.