Documented Products & Services
Search and filter enterprise cybersecurity solutions by category, deployment architecture, supported operating systems, and verified pricing models. Default sorting is alphabetical.
Official leaderboards evaluated by technical benchmarks & scope...
Semgrep Secrets
Semgrep Secrets from Semgrep focuses on code secret detection. It is application secrets management technology used for controlling how software obtains and uses credentials. Capabilities - Secret validity assessment: Includes the validation approach documented for assessing detected credential exposures. - Application secret storage: Provides a controlled storage and access workflow for application credentials and other secrets. - Developer and pipeline integration: Connects secrets access with the development or delivery tools supported by the product. - Fine-grained access policy: Controls which identities or workloads can access a given secret. Use and operational context Semgrep Secrets is relevant to development and infrastructure teams handling nonhuman access when the requirement centers on controlling how software obtains and uses credentials. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review secret retrieval, access policy, rotation behavior and the consequences of a service or network interruption. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Semgrep Secrets focuses on controlling how software obtains and uses credentials. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Semgrep Supply Chain
Semgrep Supply Chain from Semgrep focuses on dependency vulnerability analysis. It is application security technology used for finding or addressing weaknesses in software. Capabilities - Reachable dependency assessment: Adds the documented reachability context to open-source dependency findings. - Static application security testing: Analyzes application code without requiring the complete application to be exercised at runtime. - Software composition analysis: Examines third-party components and dependencies for the risks covered by the scanner. - Dependency vulnerability analysis: Brings third-party software components into the vulnerability review process. - Developer workflow integration: Places security findings into the development processes documented by the vendor. - CI/CD integration: Supports running security checks as part of a software delivery pipeline. - Secrets detection: Looks for exposed credentials or secrets within the supported development assets. - Reachability analysis: Adds information about whether a vulnerable component or code path can be reached in the application. Use and operational context Semgrep Supply Chain is relevant to development and application security teams when the requirement centers on finding or addressing weaknesses in software. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Semgrep Supply Chain focuses on finding or addressing weaknesses in software. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
SentinelOne Singularity Cloud
Cloud workload security solution offering real-time runtime detection and response for Kubernetes clusters, containers, and Linux/Windows VMs.
SentinelOne Singularity Platform
Autonomous endpoint protection and EDR platform delivering machine-speed prevention, detection, and automated 1-Click ransomware rollback.
SentinelOne Vigilance Respond
24/7/365 managed detection, response, and threat hunting service augmentative to the Singularity Platform.
Seqrite Endpoint Security
Seqrite Endpoint Security from Seqrite focuses on business endpoint protection and centralized administration. It is endpoint security software used for endpoint protection and incident investigation. Capabilities - Device control: Provides policy controls for peripheral devices and removable media. - Threat hunting: Supports searching endpoint activity for suspicious patterns that warrant deeper investigation. Use and operational context Seqrite Endpoint Security is relevant to security teams administering employee devices or servers when the requirement centers on endpoint protection and incident investigation. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Seqrite Endpoint Security focuses on endpoint protection and incident investigation. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Seqrite XDR
Seqrite XDR from Seqrite focuses on cross-domain threat detection and investigation. It is extended detection and response technology used for connecting security signals across supported domains. Capabilities - Cross-domain detection: Connects observations from supported security domains rather than treating every alert as an isolated event. - Incident correlation: Groups related activity to support understanding the scope of an incident. - Endpoint telemetry: Adds endpoint context to the security domains covered by the product. Use and operational context Seqrite XDR is relevant to security operations teams investigating activity that spans multiple systems when the requirement centers on connecting security signals across supported domains. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review telemetry coverage, correlation quality, response permissions and integration with existing protection products. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Seqrite XDR focuses on connecting security signals across supported domains. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Server PAM
Server PAM from Delinea focuses on privileged access controls for server environments. It is privileged access management technology used for controlling elevated credentials and privileged sessions. Capabilities - Privileged credential vaulting: Stores privileged credentials under centrally administered access controls. - Credential rotation: Supports changing privileged credentials to reduce the exposure associated with long-lived passwords. - Session recording: Provides a record of privileged activity to support investigation and accountability. - Just-in-time access: Limits privileged access to the period or approval conditions defined for a task. - Least-privilege enforcement: Restricts routine access so users and applications do not retain unnecessary elevated permissions. - Application privilege controls: Applies privilege decisions to application execution rather than granting unrestricted administrative rights. - Remote session brokering: Provides controlled access paths for administrators or external support providers. - Approval workflows: Routes access requests through the authorization process configured by the organization. Use and operational context Server PAM is relevant to administrators governing access to sensitive systems when the requirement centers on controlling elevated credentials and privileged sessions. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review credential onboarding, access approvals, session controls and the operational impact of least-privilege policies. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Server PAM focuses on controlling elevated credentials and privileged sessions. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
SignServer
SignServer from Keyfactor focuses on digital signing services and signing policy. It is cryptographic key or certificate technology used for managing protected keys, certificates or signing operations. Capabilities - Centralized signing services: Provides the documented signing-service workflow for applications or organizations that need controlled digital signing. - Certificate lifecycle management: Coordinates certificate discovery, issuance, renewal or retirement within the documented management scope. - Certificate discovery: Builds visibility into certificates or cryptographic assets before lifecycle policies are applied. - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Code signing workflows: Supports signing software or artifacts using the product's documented key access and policy model. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. - Signing policy controls: Applies controls to how signing operations or protected keys can be used. Use and operational context SignServer is relevant to teams operating cryptographic trust services when the requirement centers on managing protected keys, certificates or signing operations. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? SignServer focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.