Documented Products & Services
Search and filter enterprise cybersecurity solutions by category, deployment architecture, supported operating systems, and verified pricing models. Default sorting is alphabetical. Position does not imply editorial ranking or performance superiority.
Cloudflare DDoS Protection
Cloudflare DDoS Protection from Cloudflare focuses on network and application attack mitigation. It is DDoS mitigation technology or service used for protecting availability during malicious traffic floods. Capabilities - DDoS attack detection: Identifies traffic associated with distributed denial-of-service activity. - Network-layer protection: Addresses the network-layer attack scope stated by the vendor. - Attack visibility and reporting: Provides information for assessing observed attack traffic and mitigation activity. - Mitigation orchestration: Supports applying the mitigation approach documented for the deployment. Use and operational context Cloudflare DDoS Protection is relevant to organizations safeguarding network or application availability when the requirement centers on protecting availability during malicious traffic floods. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review traffic routing, attack coverage, mitigation activation and communication arrangements during an attack. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare DDoS Protection focuses on protecting availability during malicious traffic floods. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare Email Security
Cloudflare Email Security from Cloudflare focuses on email phishing and impersonation protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. Use and operational context Cloudflare Email Security is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare Email Security focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare Gateway
Cloudflare Gateway from Cloudflare focuses on secure web gateway and DNS filtering. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. Use and operational context Cloudflare Gateway is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare Gateway focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare Magic Transit
BGP Anycast-routed DDoS protection and traffic acceleration for on-premise, cloud, and hybrid enterprise networks.
Cloudflare One SASE
Cloud-native SASE and SSE platform integrating ZTNA (Access), Secure Web Gateway (Gateway), Remote Browser Isolation (RBI), and Cloud Access Security Broker (CASB).
Cloudflare WAF
Cloudflare WAF from Cloudflare focuses on web application request inspection and attack filtering. It is web application protection technology used for applying security rules to application requests. Capabilities - Web request filtering: Applies protection rules to requests reaching the web applications covered by the deployment. - OWASP attack coverage: Targets application attack classes referenced in the product's protection documentation. - Bot traffic controls: Adds controls for automated traffic that can create application abuse or availability problems. - Rate limiting: Restricts request volume according to the limits defined by an administrator. - Attack signatures: Matches requests against the attack signatures or rule sets supplied for the product. - DDoS mitigation integration: Can be evaluated within the vendor's documented application availability and attack mitigation scope. - Virtual patching: Uses protective rules to reduce exposure while application remediation is being arranged. Use and operational context Cloudflare WAF is relevant to application owners and security teams protecting web services when the requirement centers on applying security rules to application requests. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review application onboarding, rule tuning, false-positive handling and behavior under representative legitimate traffic. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare WAF focuses on applying security rules to application requests. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Coalfire FedRAMP Advisory & 3PAO Assessment
End-to-end FedRAMP advisory, readiness assessment, and accredited 3PAO security assessment for cloud service providers.
Coalfire Technical Penetration Testing
Technical penetration testing evaluating web applications, APIs, cloud environments, internal/external networks, and mobile applications.
Cobalt Penetration Testing as a Service
Cobalt Penetration Testing as a Service is a professional security engagement offered by Cobalt. The service focuses on managed coordination of authorized security testing. Capabilities - Authorized security testing: Evaluates security weaknesses within an explicitly agreed and authorized test scope. - Exploitability validation: Assesses whether a weakness can be used in the documented testing workflow. - Attack path assessment: Examines routes that could connect an initial weakness to other assets. - Application security testing: Brings supported application targets into the authorized assessment scope. - Remediation reporting: Documents the assessed issues so the responsible team can plan corrections. - Retesting workflows: Supports reviewing whether a correction has addressed an identified weakness. - Adversary simulation: Exercises authorized attack scenarios to assess defensive visibility and response. Use and operational context Cobalt's service model provides a coordinated way to commission authorized penetration testing. Evaluate how a test is scoped and scheduled, how the testing team communicates with application owners and how findings progress through correction and retesting. Deployment and evaluation Deployment: Professional service delivered within an agreed engagement scope. Before adoption, review test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cobalt Penetration Testing as a Service focuses on assessing weaknesses and validating attack possibilities. - What should a proof of concept establish? Test the listed capabilities against representative service deliverables, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.