Documented Products & Services
Search and filter enterprise cybersecurity solutions by category, deployment architecture, supported operating systems, and verified pricing models. Default sorting is alphabetical.
Official leaderboards evaluated by technical benchmarks & scope...
Twingate
Twingate from Twingate focuses on zero trust access to private applications and networks. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Private application access controls: Connects approved users to the private resources covered by the deployment. - Identity-based access decisions: Uses the supported identity context to apply access policy. - Client and connector architecture: Uses the documented client and connector components to establish private resource access. Use and operational context Twingate is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Twingate focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Unit 42 Incident Response
Unit 42 Incident Response is a professional security engagement offered by Palo Alto Networks. The service focuses on breach investigation and incident containment. Capabilities - Incident investigation: Establishes what happened by examining relevant evidence and the scope of the incident. - Containment planning: Helps define steps intended to reduce an incident's immediate spread or effect. - Recovery assistance: Assists with the recovery tasks included in the engagement and agreed response plan. Use and operational context Unit 42 Incident Response is relevant to organizations responding to a breach or improving incident readiness when the requirement centers on investigating and managing cybersecurity incidents. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Professional service delivered within an agreed engagement scope. Before adoption, review engagement scope, evidence handling, response authority and the responsibilities of internal and external responders. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Unit 42 Incident Response focuses on investigating and managing cybersecurity incidents. - What should a proof of concept establish? Test the listed capabilities against representative service deliverables, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
UpGuard Breach Risk
UpGuard Breach Risk from UpGuard focuses on external exposure monitoring and security posture assessment. It is external cyber risk assessment technology used for reviewing security risk associated with organizations and suppliers. Capabilities - External security assessment: Assesses observable indicators associated with an organization's external security posture. - Third-party risk monitoring: Supports reviewing and monitoring the security risk associated with suppliers or business partners. - Risk scoring: Summarizes assessed signals in the scoring or rating model documented by the provider. - Security findings visibility: Provides supporting observations that help teams understand an assessed risk result. - Supplier assessment workflows: Coordinates the assessment activities used to review third-party security risk. - Portfolio reporting: Shows the risk state of the organizations included in a monitored portfolio. - Remediation collaboration: Helps organize discussion and follow-up around identified third-party security issues. Use and operational context Breach Risk addresses assessment of the organization's own externally visible security exposure. Review discovered assets, the supporting observations and the assignment of remediation work, with verification that a corrected issue changes the assessed exposure as expected. Deployment and evaluation Before adoption, review assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? UpGuard Breach Risk focuses on reviewing security risk associated with organizations and suppliers. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
UpGuard Vendor Risk
UpGuard Vendor Risk from UpGuard focuses on third-party cyber risk assessment. It is external cyber risk assessment technology used for reviewing security risk associated with organizations and suppliers. Capabilities - External security assessment: Assesses observable indicators associated with an organization's external security posture. - Third-party risk monitoring: Supports reviewing and monitoring the security risk associated with suppliers or business partners. - Risk scoring: Summarizes assessed signals in the scoring or rating model documented by the provider. - Security findings visibility: Provides supporting observations that help teams understand an assessed risk result. - Supplier assessment workflows: Coordinates the assessment activities used to review third-party security risk. - Portfolio reporting: Shows the risk state of the organizations included in a monitored portfolio. - Remediation collaboration: Helps organize discussion and follow-up around identified third-party security issues. Use and operational context Vendor Risk addresses assessment and monitoring of suppliers or other external organizations. Review portfolio scope, assessment evidence and supplier communications, including how the organization records a decision about a vendor's security posture and follows up on identified issues. Deployment and evaluation Before adoption, review assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? UpGuard Vendor Risk focuses on reviewing security risk associated with organizations and suppliers. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Uptycs
Uptycs from Uptycs focuses on cloud and endpoint security analytics. It is cloud security technology used for assessing cloud exposure or protecting running workloads. Capabilities - Cloud security posture management: Finds cloud configuration risks so teams can prioritize corrections across connected environments. - Cloud workload protection: Focuses on protecting workloads running in the cloud rather than only inspecting account configuration. - Runtime threat detection: Uses activity from running workloads to identify or respond to active threats. - Vulnerability prioritization: Helps order remediation work using the risk context available in the platform. Use and operational context Uptycs is relevant to cloud and security teams working across accounts and workloads when the requirement centers on assessing cloud exposure or protecting running workloads. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Uptycs focuses on assessing cloud exposure or protecting running workloads. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Upwind Cloud Security Platform
Upwind Cloud Security Platform from Upwind focuses on runtime cloud visibility and threat detection. It is cloud security technology used for assessing cloud exposure or protecting running workloads. Capabilities - Cloud workload protection: Focuses on protecting workloads running in the cloud rather than only inspecting account configuration. - Container security: Addresses security issues in container images or running containerized applications within the documented scope. Use and operational context Upwind Cloud Security Platform is relevant to cloud and security teams working across accounts and workloads when the requirement centers on assessing cloud exposure or protecting running workloads. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Upwind Cloud Security Platform focuses on assessing cloud exposure or protecting running workloads. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
VM Backup
VM Backup from Hornetsecurity focuses on virtual machine backup and recovery. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. - Virtual machine protection: Protects the supported virtualized workloads using the vendor's backup workflow. - Recovery verification: Provides a way to assess whether protected data can be recovered as intended. Use and operational context VM Backup is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? VM Backup focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
VMDR
VMDR from Qualys focuses on vulnerability management and remediation prioritization. It is vulnerability and exposure management technology used for identifying and prioritizing security weaknesses. Capabilities - Asset discovery: Establishes visibility into the systems that are included in the vulnerability assessment scope. - Vulnerability scanning: Finds potential weaknesses that can be reviewed and prioritized for remediation. - Risk-based prioritization: Uses the available risk context to help order remediation work. - Configuration assessment: Identifies configuration issues as a separate source of security exposure. - Exposure reporting: Provides views for communicating the assessed exposure and progress of remediation work. Use and operational context VMDR is relevant to teams planning vulnerability remediation across assets when the requirement centers on identifying and prioritizing security weaknesses. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review scan scope, credentialed assessment options, prioritization inputs and how remediation owners verify closure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? VMDR focuses on identifying and prioritizing security weaknesses. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
VMRay DeepResponse
VMRay DeepResponse from VMRay focuses on malware investigation and behavioral analysis. It is malware analysis technology used for examining suspicious files or observed execution behavior. Capabilities - Behavioral malware analysis: Observes how a suspicious file or sample behaves during the documented analysis process. - Analysis reporting: Organizes analysis results so analysts can review the observed behavior and threat assessment. - Analysis automation: Connects analysis with the automation or integration mechanisms supplied by the vendor. Use and operational context DeepResponse addresses analyst investigation of suspicious files or behavior. Assess the depth of evidence provided for a representative sample, how analysts follow the observed activity and how an investigation result is shared with the team making the security decision. Deployment and evaluation Before adoption, review supported samples, analysis visibility, submission privacy and how findings are reviewed before operational decisions. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? VMRay DeepResponse focuses on examining suspicious files or observed execution behavior. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.