Documented Products & Services
Search and filter enterprise cybersecurity solutions by category, deployment architecture, supported operating systems, and verified pricing models. Default sorting is alphabetical. Position does not imply editorial ranking or performance superiority.
BigID
BigID from BigID focuses on data discovery and sensitive information classification. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. - Permission risk assessment: Helps identify data access that is broader than the documented business requirement. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context BigID's data discovery and classification scope helps an organization establish where sensitive information resides. Evaluate representative repositories and data types, then review how discovery findings are assigned to the teams responsible for access, governance or protection changes. Deployment and evaluation Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? BigID focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Bishop Fox Red Teaming
Full-scope adversarial simulation designed to test people, process, and technology defenses against objective-based cyber operations.
Bitdefender MDR
Bitdefender MDR is a managed security service offered by Bitdefender. Its documented scope centers on managed detection and response for business environments. Capabilities - Managed threat monitoring: Adds a service team to the monitoring and assessment of supported security signals. - Human-led investigation: Provides analyst involvement in reviewing activity and deciding how a threat should be handled. - Threat hunting services: Adds a proactive search for suspicious activity to the managed service scope described by the vendor. - Response and containment support: Assists with the response steps included in the service agreement and technical deployment. - Security tool integration: Uses supported security tools or telemetry as part of the managed detection workflow. - Incident communication: Provides a channel for communicating findings and the actions required from the customer. Use and operational context Bitdefender MDR should be evaluated as an analyst-led service alongside the endpoint protection environment it will support. Establish how relevant endpoint information reaches analysts, which response actions are authorized and how internal teams receive the investigation outcome. Deployment and evaluation Deployment: Managed service with provider-led monitoring and response within the agreed service scope. Before adoption, review supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Bitdefender MDR focuses on adding expert monitoring and response to supported telemetry. - What should a proof of concept establish? Test the listed capabilities against representative service deliverables, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Bitsight Security Ratings
Bitsight Security Ratings from BitSight focuses on external security performance assessment and third-party risk monitoring. It is external cyber risk assessment technology used for reviewing security risk associated with organizations and suppliers. Capabilities - External security assessment: Assesses observable indicators associated with an organization's external security posture. - Third-party risk monitoring: Supports reviewing and monitoring the security risk associated with suppliers or business partners. - Risk scoring: Summarizes assessed signals in the scoring or rating model documented by the provider. - Security findings visibility: Provides supporting observations that help teams understand an assessed risk result. - Portfolio reporting: Shows the risk state of the organizations included in a monitored portfolio. - Remediation collaboration: Helps organize discussion and follow-up around identified third-party security issues. Use and operational context Bitsight Security Ratings is relevant to teams overseeing third-party security risk when the requirement centers on reviewing security risk associated with organizations and suppliers. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Bitsight Security Ratings focuses on reviewing security risk associated with organizations and suppliers. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Bitwarden Password Manager
Bitwarden Password Manager from Bitwarden focuses on business password storage and secure credential sharing. It is business password management technology used for organizing access to shared or individual credentials. Capabilities - Encrypted password vaults: Stores credentials within the protected vault model described by the vendor. - Secure credential sharing: Lets authorized users collaborate on credentials through the product's access controls. - Administrative policies: Gives organizations controls for governing how the password manager is used. - Password generation: Helps users create passwords without relying on manually chosen patterns. - Access reporting: Provides visibility into the administrative or credential activity included in the product. - Directory or identity integration: Connects organizational identity processes with password manager deployment or account administration. - Credential risk assessment: Highlights credential exposures or hygiene issues documented by the vendor. Use and operational context Bitwarden Password Manager provides a vault-based workflow for employee credentials and approved sharing. Assess how users organize items, how administrators govern organizational access and how credentials are transferred or withdrawn when an employee's responsibilities change. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review vault permissions, account recovery, identity integration and a controlled onboarding and offboarding process. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Bitwarden Password Manager focuses on organizing access to shared or individual credentials. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Bitwarden Secrets Manager
Bitwarden Secrets Manager from Bitwarden focuses on application secrets storage and developer access controls. It is application secrets management technology used for controlling how software obtains and uses credentials. Capabilities - Application secret storage: Provides a controlled storage and access workflow for application credentials and other secrets. - Secret rotation: Supports changing secrets according to the credential lifecycle controls described by the vendor. - Developer and pipeline integration: Connects secrets access with the development or delivery tools supported by the product. - Fine-grained access policy: Controls which identities or workloads can access a given secret. - Secrets auditing: Provides records for reviewing access to protected secrets. Use and operational context Bitwarden Secrets Manager addresses credentials used by applications and development workflows. Trace a secret from creation through authorized retrieval by a workload, including how project access is administered and how a rotation or access change is applied. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review secret retrieval, access policy, rotation behavior and the consequences of a service or network interruption. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Bitwarden Secrets Manager focuses on controlling how software obtains and uses credentials. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Black Duck SCA
Black Duck SCA from Black Duck focuses on open-source vulnerability and license analysis. It is application security technology used for finding or addressing weaknesses in software. Capabilities - Software composition analysis: Examines third-party components and dependencies for the risks covered by the scanner. - Dependency vulnerability analysis: Brings third-party software components into the vulnerability review process. - Developer workflow integration: Places security findings into the development processes documented by the vendor. - CI/CD integration: Supports running security checks as part of a software delivery pipeline. - License risk analysis: Helps teams review licensing obligations associated with third-party components. - Reachability analysis: Adds information about whether a vulnerable component or code path can be reached in the application. - Finding triage and remediation: Helps developers translate a security finding into a reviewable remediation task. Use and operational context Black Duck SCA focuses on the third-party components included in software. Evaluate dependency identification, vulnerability and licensing findings together, then establish which findings block a release and which require a documented remediation or exception decision. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Black Duck SCA focuses on finding or addressing weaknesses in software. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Black Kite
Black Kite from Black Kite focuses on third-party cyber risk assessment and monitoring. It is external cyber risk assessment technology used for reviewing security risk associated with organizations and suppliers. Capabilities - External security assessment: Assesses observable indicators associated with an organization's external security posture. - Third-party risk monitoring: Supports reviewing and monitoring the security risk associated with suppliers or business partners. - Risk scoring: Summarizes assessed signals in the scoring or rating model documented by the provider. - Security findings visibility: Provides supporting observations that help teams understand an assessed risk result. - Supplier assessment workflows: Coordinates the assessment activities used to review third-party security risk. - Portfolio reporting: Shows the risk state of the organizations included in a monitored portfolio. Use and operational context Black Kite is relevant to teams overseeing third-party security risk when the requirement centers on reviewing security risk associated with organizations and suppliers. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Black Kite focuses on reviewing security risk associated with organizations and suppliers. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
BlackBerry SecuSUITE
BlackBerry SecuSUITE from BlackBerry focuses on secure voice communications and message protection. It is secure communications technology used for protecting voice calls, messages and supported file exchange. Capabilities - Encrypted voice communications: Protects the voice communications included in the SecuSUITE deployment through the deployment's secure communications workflow. - Secure messaging: Adds the secure messaging workflow described for approved SecuSUITE clients. - Secure file sharing: Includes the controlled file-sharing capability documented in the secure communications offering. - End-to-end communication encryption: Uses the documented end-to-end protection model for the communications covered by the selected deployment. Use and operational context BlackBerry SecuSUITE is relevant to organizations requiring protected business communications when the requirement centers on protecting voice calls, messages and supported file exchange. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: On-premises, sovereign cloud or hybrid deployment options documented by BlackBerry. Before adoption, review client availability, communication workflows, deployment control and how encryption keys are administered. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? BlackBerry SecuSUITE focuses on protecting voice calls, messages and supported file exchange. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.