Documented Products & Services
Search and filter enterprise cybersecurity solutions by category, deployment architecture, supported operating systems, and verified pricing models. Default sorting is alphabetical. Position does not imply editorial ranking or performance superiority.
Bugcrowd Penetration Testing
Bugcrowd Penetration Testing is a professional security engagement offered by Bugcrowd. The service focuses on authorized security testing and reporting. Capabilities - Authorized security testing: Evaluates security weaknesses within an explicitly agreed and authorized test scope. - Exploitability validation: Assesses whether a weakness can be used in the documented testing workflow. - Application security testing: Brings supported application targets into the authorized assessment scope. - Remediation reporting: Documents the assessed issues so the responsible team can plan corrections. - Retesting workflows: Supports reviewing whether a correction has addressed an identified weakness. - Researcher-led testing: Uses the coordinated researcher model described by the service provider. - Adversary simulation: Exercises authorized attack scenarios to assess defensive visibility and response. Use and operational context Bugcrowd's penetration testing service organizes an authorized assessment against agreed targets. Define the required applications or infrastructure, test restrictions and reporting expectations, then review how findings and remediation verification are coordinated through the engagement. Deployment and evaluation Deployment: Professional service delivered within an agreed engagement scope. Before adoption, review test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Bugcrowd Penetration Testing focuses on assessing weaknesses and validating attack possibilities. - What should a proof of concept establish? Test the listed capabilities against representative service deliverables, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
BullPhish ID
BullPhish ID from Kaseya focuses on security awareness training and phishing simulations. It is security awareness technology or service used for improving how employees recognize and handle security risks. Capabilities - Phishing campaign management: Organizes controlled phishing exercises used to assess employee response. - Employee awareness training: Provides the documented learning content for employee security awareness programs. - Phishing simulations: Creates controlled exercises to assess how users handle realistic phishing scenarios. - Security training content: Provides learning material intended to improve security knowledge and decision-making. Use and operational context BullPhish ID is relevant to organizations running employee awareness programs when the requirement centers on improving how employees recognize and handle security risks. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review training relevance, simulation design, reporting methods and the treatment of employee information. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? BullPhish ID focuses on improving how employees recognize and handle security risks. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Burp Suite Community Edition
Burp Suite Community Edition from PortSwigger focuses on manual web application traffic inspection and testing. It is authorized security testing technology or service used for assessing weaknesses and validating attack possibilities. Capabilities - Manual web proxy testing: Provides an entry point for examining application traffic during authorized manual testing. - Authorized security testing: Evaluates security weaknesses within an explicitly agreed and authorized test scope. - Application security testing: Brings supported application targets into the authorized assessment scope. - Remediation reporting: Documents the assessed issues so the responsible team can plan corrections. - Researcher-led testing: Uses the coordinated researcher model described by the service provider. Use and operational context Burp Suite Community Edition is relevant to organizations defining an approved security assessment scope when the requirement centers on assessing weaknesses and validating attack possibilities. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Burp Suite Community Edition focuses on assessing weaknesses and validating attack possibilities. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Burp Suite DAST
Burp Suite DAST from PortSwigger focuses on automated dynamic application security testing. It is application security technology used for finding or addressing weaknesses in software. Capabilities - Scheduled application scanning: Organizes automated testing of running applications using the deployment and scan model documented by PortSwigger. - Dynamic application security testing: Tests a running application to find exposed security weaknesses. - Developer workflow integration: Places security findings into the development processes documented by the vendor. - CI/CD integration: Supports running security checks as part of a software delivery pipeline. - Finding triage and remediation: Helps developers translate a security finding into a reviewable remediation task. Use and operational context Burp Suite DAST is relevant to development and application security teams when the requirement centers on finding or addressing weaknesses in software. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Self-managed / on-premises option documented by the vendor. Before adoption, review supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Burp Suite DAST focuses on finding or addressing weaknesses in software. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Burp Suite Professional
Burp Suite Professional from PortSwigger focuses on web application security testing. It is authorized security testing technology or service used for assessing weaknesses and validating attack possibilities. Capabilities - Intercepting web testing proxy: Allows an authorized tester to inspect and modify web traffic while evaluating an application. - Automated web vulnerability scanning: Adds the scanner functionality documented for the Professional edition to the tester's workflow. - Authorized security testing: Evaluates security weaknesses within an explicitly agreed and authorized test scope. - Exploitability validation: Assesses whether a weakness can be used in the documented testing workflow. - Application security testing: Brings supported application targets into the authorized assessment scope. - Remediation reporting: Documents the assessed issues so the responsible team can plan corrections. - Retesting workflows: Supports reviewing whether a correction has addressed an identified weakness. - Researcher-led testing: Uses the coordinated researcher model described by the service provider. Use and operational context Burp Suite Professional is relevant to organizations defining an approved security assessment scope when the requirement centers on assessing weaknesses and validating attack possibilities. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Burp Suite Professional focuses on assessing weaknesses and validating attack possibilities. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cato MDR
Cato MDR is a managed security service offered by Cato Networks. Its documented scope centers on managed threat detection and response. Capabilities - Threat hunting services: Adds a proactive search for suspicious activity to the managed service scope described by the vendor. - Response and containment support: Assists with the response steps included in the service agreement and technical deployment. Use and operational context Cato MDR is relevant to organizations seeking external security operations support when the requirement centers on adding expert monitoring and response to supported telemetry. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Managed service with provider-led monitoring and response within the agreed service scope. Before adoption, review supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cato MDR focuses on adding expert monitoring and response to supported telemetry. - What should a proof of concept establish? Test the listed capabilities against representative service deliverables, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cato SASE Cloud
Cato SASE Cloud from Cato Networks focuses on cloud network connectivity and converged security. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Private application access: Connects authorized users to private applications according to access policy. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. Use and operational context Cato SASE Cloud is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cato SASE Cloud focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cato XDR
Cato XDR from Cato Networks focuses on cross-domain threat detection and investigation. It is extended detection and response technology used for connecting security signals across supported domains. Capabilities - Cross-domain detection: Connects observations from supported security domains rather than treating every alert as an isolated event. - Incident correlation: Groups related activity to support understanding the scope of an incident. - Third-party security integrations: Uses the documented connections to bring external security products into the analysis workflow. - Endpoint telemetry: Adds endpoint context to the security domains covered by the product. - Cloud security telemetry: Adds cloud environment context where the platform's documented integrations include it. Use and operational context Cato XDR is relevant to security operations teams investigating activity that spans multiple systems when the requirement centers on connecting security signals across supported domains. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review telemetry coverage, correlation quality, response permissions and integration with existing protection products. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cato XDR focuses on connecting security signals across supported domains. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cequence Unified API Protection
Cequence Unified API Protection from Cequence Security focuses on API risk discovery and automated attack protection. It is API security technology used for understanding and protecting application interfaces. Capabilities - API inventory and discovery: Identifies APIs so teams can establish which interfaces are included in their security review. - API posture assessment: Highlights API configuration or exposure issues for further assessment. Use and operational context Cequence Unified API Protection is relevant to security teams responsible for externally or internally exposed APIs when the requirement centers on understanding and protecting application interfaces. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review API discovery coverage, traffic collection, authentication context and the enforcement model for live applications. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cequence Unified API Protection focuses on understanding and protecting application interfaces. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.