Documented Products & Services
Search and filter enterprise cybersecurity solutions by category, deployment architecture, supported operating systems, and verified pricing models. Default sorting is alphabetical.
Official leaderboards evaluated by technical benchmarks & scope...
Panther
Panther from Panther focuses on cloud security analytics and detection engineering. It is security analytics technology used for collecting and analyzing security-relevant events. Capabilities - Detection rules and analytics: Supports defining or maintaining the logic used to identify suspicious activity. - Threat hunting: Lets analysts investigate hypotheses across the security data available in the platform. Use and operational context Panther is relevant to security operations teams investigating alerts and incidents when the requirement centers on collecting and analyzing security-relevant events. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review source onboarding, detection content, query performance, data retention and the cost implications of event volume. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Panther focuses on collecting and analyzing security-relevant events. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Password Safe
Password Safe from BeyondTrust focuses on privileged password management and session control. It is privileged access management technology used for controlling elevated credentials and privileged sessions. Capabilities - Privileged credential vaulting: Stores privileged credentials under centrally administered access controls. - Credential rotation: Supports changing privileged credentials to reduce the exposure associated with long-lived passwords. - Just-in-time access: Limits privileged access to the period or approval conditions defined for a task. - Least-privilege enforcement: Restricts routine access so users and applications do not retain unnecessary elevated permissions. - Remote session brokering: Provides controlled access paths for administrators or external support providers. - Approval workflows: Routes access requests through the authorization process configured by the organization. - Service account management: Addresses access and credential administration for nonhuman accounts used by applications and services. Use and operational context Password Safe is relevant to administrators governing access to sensitive systems when the requirement centers on controlling elevated credentials and privileged sessions. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Operating systems listed in the available documentation: Windows, macOS, Linux. Supported versions and feature coverage depend on the vendor support matrix.. Check version requirements and feature differences before rollout. Before adoption, review credential onboarding, access approvals, session controls and the operational impact of least-privilege policies. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Password Safe focuses on controlling elevated credentials and privileged sessions. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Penetration Testing
Penetration Testing is a professional security engagement offered by NCC Group. The service focuses on authorized application and infrastructure security testing. Capabilities - Authorized security testing: Evaluates security weaknesses within an explicitly agreed and authorized test scope. - Exploitability validation: Assesses whether a weakness can be used in the documented testing workflow. - Attack path assessment: Examines routes that could connect an initial weakness to other assets. - Application security testing: Brings supported application targets into the authorized assessment scope. - Remediation reporting: Documents the assessed issues so the responsible team can plan corrections. - Retesting workflows: Supports reviewing whether a correction has addressed an identified weakness. - Researcher-led testing: Uses the coordinated researcher model described by the service provider. - Adversary simulation: Exercises authorized attack scenarios to assess defensive visibility and response. Use and operational context A penetration testing engagement starts with an agreed target and authorization boundary. Assess the proposed test methods, communication with system owners and the reporting deliverable, then establish how the organization validates and retests a corrected finding. Deployment and evaluation Deployment: Professional service delivered within an agreed engagement scope. Before adoption, review test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Penetration Testing focuses on assessing weaknesses and validating attack possibilities. - What should a proof of concept establish? Test the listed capabilities against representative service deliverables, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Penetration Testing
Penetration Testing is a professional security engagement offered by Bishop Fox. The service focuses on authorized application and network security testing. Capabilities - Authorized security testing: Evaluates security weaknesses within an explicitly agreed and authorized test scope. - Exploitability validation: Assesses whether a weakness can be used in the documented testing workflow. - Attack path assessment: Examines routes that could connect an initial weakness to other assets. - Application security testing: Brings supported application targets into the authorized assessment scope. - Remediation reporting: Documents the assessed issues so the responsible team can plan corrections. - Retesting workflows: Supports reviewing whether a correction has addressed an identified weakness. - Adversary simulation: Exercises authorized attack scenarios to assess defensive visibility and response. Use and operational context A penetration testing engagement starts with an agreed target and authorization boundary. Assess the proposed test methods, communication with system owners and the reporting deliverable, then establish how the organization validates and retests a corrected finding. Deployment and evaluation Deployment: Professional service delivered within an agreed engagement scope. Before adoption, review test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Penetration Testing focuses on assessing weaknesses and validating attack possibilities. - What should a proof of concept establish? Test the listed capabilities against representative service deliverables, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Penetration Testing
Penetration Testing is a professional security engagement offered by Orange Cyberdefense. The service focuses on authorized security testing and vulnerability validation. Capabilities - Authorized security testing: Evaluates security weaknesses within an explicitly agreed and authorized test scope. - Exploitability validation: Assesses whether a weakness can be used in the documented testing workflow. - Application security testing: Brings supported application targets into the authorized assessment scope. - Remediation reporting: Documents the assessed issues so the responsible team can plan corrections. - Retesting workflows: Supports reviewing whether a correction has addressed an identified weakness. - Adversary simulation: Exercises authorized attack scenarios to assess defensive visibility and response. Use and operational context A penetration testing engagement starts with an agreed target and authorization boundary. Assess the proposed test methods, communication with system owners and the reporting deliverable, then establish how the organization validates and retests a corrected finding. Deployment and evaluation Deployment: Professional service delivered within an agreed engagement scope. Before adoption, review test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Penetration Testing focuses on assessing weaknesses and validating attack possibilities. - What should a proof of concept establish? Test the listed capabilities against representative service deliverables, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Pentera Platform
Pentera Platform from Pentera focuses on automated security testing and exposure validation. It is authorized security testing technology or service used for assessing weaknesses and validating attack possibilities. Capabilities - Authorized security testing: Evaluates security weaknesses within an explicitly agreed and authorized test scope. - Exploitability validation: Assesses whether a weakness can be used in the documented testing workflow. - Attack path assessment: Examines routes that could connect an initial weakness to other assets. - Remediation reporting: Documents the assessed issues so the responsible team can plan corrections. - Retesting workflows: Supports reviewing whether a correction has addressed an identified weakness. Use and operational context Pentera Platform is relevant to organizations defining an approved security assessment scope when the requirement centers on assessing weaknesses and validating attack possibilities. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Pentera Platform focuses on assessing weaknesses and validating attack possibilities. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
PhishER
PhishER from KnowBe4 focuses on reported email triage and remediation. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Message remediation: Supports handling messages identified as suspicious or malicious. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. - User-reported email triage: Helps security teams assess messages escalated by employees. Use and operational context PhishER is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? PhishER focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Picus Security Validation Platform
Picus Security Validation Platform from Picus Security focuses on attack simulation and security control assessment. It is security control validation technology used for exercising attack scenarios against defensive controls. Capabilities - Security control validation: Checks whether selected defensive controls detect or handle the tested attack behavior. - Attack scenario simulation: Exercises the attack scenarios supported by the product in an authorized environment. - ATT&CK-aligned testing: Relates the documented testing content to adversary techniques in the ATT&CK framework. - Detection coverage assessment: Helps security teams understand which tested behaviors are visible to their deployed controls. - Remediation prioritization: Connects validation results with the improvement actions supported by the workflow. - Repeatable security testing: Supports revisiting selected tests as the environment or defenses change. Use and operational context Picus addresses validation of defensive controls using documented attack scenarios. Select a relevant technique, identify the controls expected to detect or stop it and examine the resulting evidence, so the team can validate a specific improvement after remediation. Deployment and evaluation Before adoption, review approved test scope, scenario relevance, telemetry availability and the process for validating improvements after changes. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Picus Security Validation Platform focuses on exercising attack scenarios against defensive controls. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
PingAccess
PingAccess from Ping Identity focuses on application access control and policy enforcement. It is identity and access management technology used for authentication, access policy or identity lifecycle administration. Capabilities - Single sign-on: Centralizes application authentication so users can access assigned services through a consistent sign-in process. - Federated authentication: Supports connecting application authentication to external identity providers or federation protocols. - Directory integration: Connects identity administration or authentication with directory systems named in the documentation. - Device posture assessment: Brings device condition into identity or access decisions. Use and operational context PingAccess is relevant to identity teams connecting users and applications when the requirement centers on authentication, access policy or identity lifecycle administration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? PingAccess focuses on authentication, access policy or identity lifecycle administration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.