Cybersecurity Vendors & Providers
SecurifyA strictly separates corporate entities from specific software products and managed services. Search and filter verified security providers by specialization, headquarters, and geographic service delivery.
1Password
1Password offers a portfolio covering organizing access to shared or individual credentials and authentication, access policy or identity lifecycle administration. The entries in this catalog include 1Password Business and 1Password Extended Access Management. 1Password Business focuses on enterprise password management and secure credential sharing. 1Password Extended Access Management focuses on device-aware access and application access governance. When reviewing 1Password, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for vault permissions, account recovery, identity integration and a controlled onboarding and offboarding process. Portfolio detail - 1Password Business: the catalog lists Shared organizational vaults, Encrypted password vaults, Secure credential sharing. - 1Password Extended Access Management: the catalog lists Device health and access context, Single sign-on, Access certification. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
ANY.RUN
ANY.RUN offers a portfolio covering examining suspicious files or observed execution behavior and providing external threat context for analysis and decisions. The entries in this catalog include ANY.RUN Interactive Sandbox and ANY.RUN Threat Intelligence. ANY.RUN Interactive Sandbox focuses on interactive malware analysis and behavioral investigation. ANY.RUN Threat Intelligence focuses on malware-related threat intelligence and indicator research. When reviewing ANY.RUN, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported samples, analysis visibility, submission privacy and how findings are reviewed before operational decisions. Portfolio detail - ANY.RUN Interactive Sandbox: the catalog lists Behavioral malware analysis, Threat indicator extraction, Analysis reporting. - ANY.RUN Threat Intelligence: the catalog lists Threat intelligence collection, Threat indicator enrichment, Adversary and campaign context. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Abnormal AI
Abnormal AI's catalog is centered on Abnormal Inbound Email Security, email and messaging security technology addressing protecting or governing business messaging. The product profile covers behavioral email threat detection, account protection, behavioral business-email analysis, phishing detection and business email compromise detection. This scope makes the portfolio relevant to teams administering email protection and message investigation. When reviewing Abnormal AI, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Portfolio detail - Abnormal Inbound Email Security: the catalog lists Behavioral business-email analysis, Phishing detection, Business email compromise detection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Acronis
Acronis offers a portfolio covering endpoint protection and incident investigation and protecting recoverable data and organizing restoration. The entries in this catalog include Acronis Advanced Security, Acronis Cyber Protect and Acronis Cyber Protect Cloud. Acronis Advanced Security focuses on endpoint threat detection and response. Acronis Cyber Protect focuses on backup protection and endpoint security. Acronis Cyber Protect Cloud focuses on service-provider backup and cyber protection. When reviewing Acronis, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - Acronis Advanced Security: the catalog lists Endpoint detection and response, Malware prevention. - Acronis Cyber Protect: the catalog lists Backup and restore workflows, Ransomware recovery support, Immutable storage options. - Acronis Cyber Protect Cloud: the catalog lists Backup and restore workflows, Ransomware recovery support, Immutable storage options. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Action1
Action1's catalog is centered on Action1, endpoint administration and patching technology addressing keeping supported software and devices maintained. The product profile covers endpoint patching, vulnerability remediation, automated patch deployment, third-party application patching and endpoint inventory. This scope makes the portfolio relevant to IT teams managing software updates across a device fleet. When reviewing Action1, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for application coverage, deployment scheduling, restart behavior and a pilot group that represents production devices. Portfolio detail - Action1: the catalog lists Automated patch deployment, Third-party application patching, Endpoint inventory. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
AhnLab
AhnLab offers a portfolio covering endpoint protection and incident investigation. The entries in this catalog include AhnLab EDR and AhnLab V3. AhnLab EDR focuses on endpoint threat detection and investigation. AhnLab V3 focuses on endpoint malware prevention and protection. When reviewing AhnLab, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - AhnLab EDR: the catalog lists Behavioral threat detection, Endpoint detection and response, Threat hunting. - AhnLab V3: the catalog lists Malware prevention, Cloud workload protection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Akamai
Akamai offers a portfolio covering assessing suspicious login or account activity, understanding and protecting application interfaces, applying security rules to application requests, controlling communications and inspecting traffic and protecting availability during malicious traffic floods. The entries in this catalog include Account Protector, Akamai API Security, App & API Protector, Guardicore Segmentation and Prolexic. Account Protector focuses on account abuse detection and login risk assessment. Akamai API Security focuses on api discovery and behavioral threat detection. App & API Protector focuses on web application and api attack protection. When reviewing Akamai, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for signal collection, risk thresholds, response integration and the effect of decisions on legitimate account holders. Portfolio detail - Account Protector: the catalog lists Account risk analysis, Account takeover protection, Credential abuse detection. - Akamai API Security: the catalog lists API inventory and discovery, API behavior analysis, API posture assessment. - App & API Protector: the catalog lists Web request filtering, OWASP attack coverage, Bot traffic controls. - Guardicore Segmentation: the catalog lists Workload communication segmentation, Network segmentation, Lateral movement controls. - Prolexic: the catalog lists DDoS attack detection, Traffic scrubbing, Attack visibility and reporting. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Amazon Web Services
Amazon Web Services offers a portfolio covering assessing cloud exposure or protecting running workloads, identifying and prioritizing security weaknesses, understanding sensitive information and controlling its exposure, protecting availability during malicious traffic floods and applying security rules to application requests. The entries in this catalog include Amazon GuardDuty, Amazon Inspector, Amazon Macie, AWS Security Hub, AWS Shield and AWS WAF. Amazon GuardDuty focuses on cloud threat detection and suspicious activity monitoring. Amazon Inspector focuses on cloud workload vulnerability assessment. Amazon Macie focuses on cloud data discovery and sensitive data detection. When reviewing Amazon Web Services, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for enabled protection plans, permissions, finding triage and the downstream response workflow. Portfolio detail - Amazon GuardDuty: the catalog lists AWS account threat findings, Cloud security posture management, Vulnerability prioritization. - Amazon Inspector: the catalog lists EC2 workload assessment, ECR container image assessment, Lambda vulnerability assessment. - Amazon Macie: the catalog lists Amazon S3 sensitive-data assessment, S3 data protection findings, Sensitive data discovery. - AWS Security Hub: the catalog lists AWS security findings aggregation, Cloud security posture management, Vulnerability prioritization. - AWS Shield: the catalog lists AWS DDoS protection scope, DDoS attack detection, Network-layer protection. - AWS WAF: the catalog lists Web ACL administration, Managed rule groups, Web request filtering. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Anomali
Anomali's catalog is centered on Anomali ThreatStream, threat intelligence technology or service addressing providing external threat context for analysis and decisions. The product profile covers threat intelligence collection, enrichment, threat indicator enrichment, adversary and campaign context and threat intelligence integrations. This scope makes the portfolio relevant to analysts investigating adversaries, indicators or emerging exposures. When reviewing Anomali, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source relevance, freshness, integration methods and how intelligence changes a specific investigation or protection decision. Portfolio detail - Anomali ThreatStream: the catalog lists Threat intelligence collection, Threat indicator enrichment, Adversary and campaign context. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
AppOmni
AppOmni's catalog is centered on AppOmni, SaaS security technology addressing assessing application usage, configuration or identity risk. The product profile covers saas security posture assessment, risk monitoring, saas configuration assessment, saas identity risk analysis and third-party application visibility. This scope makes the portfolio relevant to teams overseeing business SaaS applications. When reviewing AppOmni, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported services, connector permissions, findings ownership and the response process for risky access or configurations. Portfolio detail - AppOmni: the catalog lists SaaS configuration assessment, SaaS identity risk analysis, Third-party application visibility. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
AppViewX
AppViewX offers a portfolio covering managing protected keys, certificates or signing operations. The entries in this catalog include AppViewX CERT+ and AppViewX PKI+. AppViewX CERT+ focuses on certificate lifecycle automation and inventory. AppViewX PKI+ focuses on public key infrastructure orchestration. When reviewing AppViewX, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Portfolio detail - AppViewX CERT+: the catalog lists Certificate lifecycle management, Certificate discovery, Cryptographic key protection. - AppViewX PKI+: the catalog lists Certificate lifecycle management, Certificate discovery, Cryptographic key protection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Aqua Security
Aqua Security offers a portfolio covering assessing cloud exposure or protecting running workloads. The entries in this catalog include Aqua Platform and Trivy. Aqua Platform focuses on cloud-native workload security and runtime protection. Trivy focuses on container vulnerability and configuration scanning. When reviewing Aqua Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Aqua Platform: the catalog lists Cloud security posture management, Cloud workload protection, Container security. - Trivy: the catalog lists Container image scanning, Kubernetes security. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Arctic Wolf
Arctic Wolf offers a portfolio covering adding expert monitoring and response to supported telemetry, identifying and prioritizing security weaknesses and improving how employees recognize and handle security risks. The entries in this catalog include Arctic Wolf Managed Detection and Response, Arctic Wolf Managed Risk and Arctic Wolf Managed Security Awareness. Arctic Wolf Managed Detection and Response focuses on managed security monitoring and incident response. Arctic Wolf Managed Risk focuses on managed vulnerability assessment and risk prioritization. Arctic Wolf Managed Security Awareness focuses on employee security training and phishing simulations. When reviewing Arctic Wolf, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Portfolio detail - Arctic Wolf Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Response and containment support. - Arctic Wolf Managed Risk: the catalog lists Vulnerability scanning, Risk-based prioritization, Configuration assessment. - Arctic Wolf Managed Security Awareness: the catalog lists Phishing simulations, Security training content, User risk insights. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Arkose Labs
Arkose Labs's catalog is centered on Arkose Bot Manager, automated traffic protection technology addressing distinguishing and controlling abusive automated requests. The product profile covers automated abuse prevention, challenge orchestration, automated traffic detection, challenge and verification workflows and account abuse protection. This scope makes the portfolio relevant to application teams dealing with bots and automated abuse. When reviewing Arkose Labs, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for integration paths, treatment of legitimate automation, challenge behavior and the effect on real users. Portfolio detail - Arkose Bot Manager: the catalog lists Automated traffic detection, Challenge and verification workflows, Account abuse protection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Armis
Armis's catalog is centered on Armis Centrix, security asset visibility technology addressing establishing an inventory and identifying security coverage gaps. The product profile covers connected asset visibility, exposure management, asset inventory consolidation, agentless asset discovery and security coverage assessment. This scope makes the portfolio relevant to teams reconciling assets across networking and security systems. When reviewing Armis, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for discovery scope, device identification, integration permissions and how conflicting asset records are handled. Portfolio detail - Armis Centrix: the catalog lists Asset inventory consolidation, Agentless asset discovery, Security coverage assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
AttackIQ
AttackIQ offers a portfolio covering exercising attack scenarios against defensive controls. The entries in this catalog include AttackIQ Flex and AttackIQ Ready. AttackIQ Flex focuses on security control testing and attack simulation. AttackIQ Ready focuses on continuous security control validation. When reviewing AttackIQ, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for approved test scope, scenario relevance, telemetry availability and the process for validating improvements after changes. Portfolio detail - AttackIQ Flex: the catalog lists Security control validation, Attack scenario simulation, ATT&CK-aligned testing. - AttackIQ Ready: the catalog lists Security control validation, Attack scenario simulation, Detection coverage assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
AuditBoard
AuditBoard offers a portfolio covering coordinating controls, evidence and risk decisions. The entries in this catalog include AuditBoard CrossComply and AuditBoard RiskOversight. AuditBoard CrossComply focuses on compliance controls management and evidence coordination. AuditBoard RiskOversight focuses on enterprise risk management and assessment workflows. When reviewing AuditBoard, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - AuditBoard CrossComply: the catalog lists Risk assessment workflows, Audit preparation, Framework mapping. - AuditBoard RiskOversight: the catalog lists Risk assessment workflows, Audit preparation, Framework mapping. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Automox
Automox's catalog is centered on Automox, endpoint administration and patching technology addressing keeping supported software and devices maintained. The product profile covers cloud-managed endpoint patching, configuration remediation, automated patch deployment, third-party application patching and policy-driven automation. This scope makes the portfolio relevant to IT teams managing software updates across a device fleet. When reviewing Automox, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for application coverage, deployment scheduling, restart behavior and a pilot group that represents production devices. Portfolio detail - Automox: the catalog lists Automated patch deployment, Third-party application patching, Policy-driven automation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Axonius
Axonius offers a portfolio covering establishing an inventory and identifying security coverage gaps and assessing application usage, configuration or identity risk. The entries in this catalog include Axonius Cybersecurity Asset Management and Axonius SaaS Management. Axonius Cybersecurity Asset Management focuses on security asset inventory and coverage analysis. Axonius SaaS Management focuses on saas inventory and application risk visibility. When reviewing Axonius, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for discovery scope, device identification, integration permissions and how conflicting asset records are handled. Portfolio detail - Axonius Cybersecurity Asset Management: the catalog lists Asset inventory consolidation, Exposure visibility, Data source integrations. - Axonius SaaS Management: the catalog lists SaaS application discovery, SaaS configuration assessment, SaaS identity risk analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Barracuda Networks
Barracuda Networks offers a portfolio covering protecting recoverable data and organizing restoration, controlling communications and inspecting traffic, protecting or governing business messaging and adding expert monitoring and response to supported telemetry. The entries in this catalog include Barracuda Cloud-to-Cloud Backup, Barracuda CloudGen Firewall, Barracuda Email Protection and Barracuda Managed XDR. Barracuda Cloud-to-Cloud Backup focuses on cloud productivity data backup and recovery. Barracuda CloudGen Firewall focuses on network firewall policy and traffic protection. Barracuda Email Protection focuses on email threat detection and message protection. When reviewing Barracuda Networks, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for protected workloads, retention settings, recovery location and a practical restore test using representative business data. Portfolio detail - Barracuda Cloud-to-Cloud Backup: the catalog lists Backup and restore workflows, Ransomware recovery support, Microsoft 365 backup. - Barracuda CloudGen Firewall: the catalog lists Application-aware policy, VPN connectivity, SD-WAN functions. - Barracuda Email Protection: the catalog lists Account takeover detection, Outbound data controls. - Barracuda Managed XDR: the catalog lists Managed threat monitoring, Threat hunting services, Response and containment support. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
BeyondTrust
BeyondTrust offers a portfolio covering controlling elevated credentials and privileged sessions and authentication, access policy or identity lifecycle administration. The entries in this catalog include Endpoint Privilege Management, Identity Security Insights, Password Safe and Privileged Remote Access. Endpoint Privilege Management focuses on endpoint least privilege and application control. Identity Security Insights focuses on identity exposure analysis and risk investigation. Password Safe focuses on privileged password management and session control. When reviewing BeyondTrust, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for credential onboarding, access approvals, session controls and the operational impact of least-privilege policies. Portfolio detail - Endpoint Privilege Management: the catalog lists Privileged credential vaulting, Just-in-time access, Least-privilege enforcement. - Identity Security Insights: the catalog lists Single sign-on, Identity threat detection, Directory integration. - Password Safe: the catalog lists Privileged credential vaulting, Credential rotation, Just-in-time access. - Privileged Remote Access: the catalog lists Privileged credential vaulting, Session recording, Just-in-time access. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
BigID
BigID's catalog is centered on BigID, data security technology addressing understanding sensitive information and controlling its exposure. The product profile covers data discovery, sensitive information classification, sensitive data discovery, data classification and data loss prevention. This scope makes the portfolio relevant to teams responsible for protecting business data. When reviewing BigID, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - BigID: the catalog lists Sensitive data discovery, Data classification, Data loss prevention. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Bishop Fox
Bishop Fox offers a portfolio covering discovering and assessing internet-facing assets and assessing weaknesses and validating attack possibilities. The entries in this catalog include Cosmos and Penetration Testing. Cosmos focuses on external attack surface assessment and exploit validation. Penetration Testing focuses on authorized application and network security testing. When reviewing Bishop Fox, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for asset ownership, discovery scope, validation of findings and handoff to remediation teams. Portfolio detail - Cosmos: the catalog lists External asset discovery, Attack surface inventory, Exposure assessment. - Penetration Testing: the catalog lists Authorized security testing, Exploitability validation, Attack path assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
BitSight
BitSight offers a portfolio covering reviewing security risk associated with organizations and suppliers and providing external threat context for analysis and decisions. The entries in this catalog include Bitsight Security Ratings and Cybersixgill Threat Intelligence. Bitsight Security Ratings focuses on external security performance assessment and third-party risk monitoring. Cybersixgill Threat Intelligence focuses on deep and dark web threat intelligence analysis. When reviewing BitSight, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Portfolio detail - Bitsight Security Ratings: the catalog lists External security assessment, Third-party risk monitoring, Risk scoring. - Cybersixgill Threat Intelligence: the catalog lists Threat intelligence collection, Threat indicator enrichment, Adversary and campaign context. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Bitdefender
Bitdefender offers a portfolio covering adding expert monitoring and response to supported telemetry, endpoint protection and incident investigation and assessing cloud exposure or protecting running workloads. The entries in this catalog include Bitdefender MDR, GravityZone Business Security, GravityZone Business Security Enterprise and GravityZone Security for Containers. Bitdefender MDR focuses on managed detection and response for business environments. GravityZone Business Security focuses on business endpoint protection and centralized management. GravityZone Business Security Enterprise focuses on endpoint protection and detection and response. When reviewing Bitdefender, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Portfolio detail - Bitdefender MDR: the catalog lists Managed threat monitoring, Human-led investigation, Threat hunting services. - GravityZone Business Security: the catalog lists Behavioral threat detection, Endpoint detection and response, Ransomware protection. - GravityZone Business Security Enterprise: the catalog lists Endpoint detection and response, Malware prevention, Managed detection support. - GravityZone Security for Containers: the catalog lists Cloud security posture management, Cloud workload protection, Container security. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Bitwarden
Bitwarden offers a portfolio covering organizing access to shared or individual credentials and controlling how software obtains and uses credentials. The entries in this catalog include Bitwarden Password Manager and Bitwarden Secrets Manager. Bitwarden Password Manager focuses on business password storage and secure credential sharing. Bitwarden Secrets Manager focuses on application secrets storage and developer access controls. When reviewing Bitwarden, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for vault permissions, account recovery, identity integration and a controlled onboarding and offboarding process. Portfolio detail - Bitwarden Password Manager: the catalog lists Encrypted password vaults, Secure credential sharing, Administrative policies. - Bitwarden Secrets Manager: the catalog lists Application secret storage, Secret rotation, Developer and pipeline integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Black Duck
Black Duck offers a portfolio covering finding or addressing weaknesses in software. The entries in this catalog include Black Duck SCA, Coverity and Polaris. Black Duck SCA focuses on open-source vulnerability and license analysis. Coverity focuses on static source code defect and vulnerability analysis. Polaris focuses on cloud application security testing orchestration. When reviewing Black Duck, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - Black Duck SCA: the catalog lists Software composition analysis, Dependency vulnerability analysis, Developer workflow integration. - Coverity: the catalog lists Source-code defect analysis, Static application security testing, Developer workflow integration. - Polaris: the catalog lists Static application security testing, Dynamic application security testing, Software composition analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Black Kite
Black Kite's catalog is centered on Black Kite, external cyber risk assessment technology addressing reviewing security risk associated with organizations and suppliers. The product profile covers third-party cyber risk assessment, monitoring, external security assessment, third-party risk monitoring and risk scoring. This scope makes the portfolio relevant to teams overseeing third-party security risk. When reviewing Black Kite, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Portfolio detail - Black Kite: the catalog lists External security assessment, Third-party risk monitoring, Risk scoring. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
BlackBerry
BlackBerry offers a portfolio covering managing protected keys, certificates or signing operations and authentication, access policy or identity lifecycle administration. The entries in this catalog include BlackBerry SecuSUITE and BlackBerry UEM. BlackBerry SecuSUITE focuses on secure voice communications and message protection. BlackBerry UEM focuses on enterprise device management and access policy. When reviewing BlackBerry, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for client availability, communication workflows, deployment control and how encryption keys are administered. Portfolio detail - BlackBerry SecuSUITE: the catalog lists Encrypted voice communications, Secure messaging, Secure file sharing. - BlackBerry UEM: the catalog lists Device enrollment and management, Application administration, Device policy enforcement. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Blackpoint Cyber
Blackpoint Cyber offers a portfolio covering connecting security signals across supported domains and adding expert monitoring and response to supported telemetry. The entries in this catalog include Blackpoint CompassOne and Blackpoint MDR. Blackpoint CompassOne focuses on security visibility and response operations. Blackpoint MDR focuses on managed threat detection and response. When reviewing Blackpoint Cyber, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for telemetry coverage, correlation quality, response permissions and integration with existing protection products. Portfolio detail - Blackpoint CompassOne: the catalog lists Third-party security integrations, Endpoint telemetry, Cloud security telemetry. - Blackpoint MDR: the catalog lists Managed threat monitoring, Human-led investigation, Response and containment support. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Blumira
Blumira offers a portfolio covering adding expert monitoring and response to supported telemetry and collecting and analyzing security-relevant events. The entries in this catalog include Blumira Managed Detection and Response and Blumira SIEM. Blumira Managed Detection and Response focuses on managed security monitoring and response. Blumira SIEM focuses on security log analytics and threat detection. When reviewing Blumira, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Portfolio detail - Blumira Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Threat hunting services. - Blumira SIEM: the catalog lists Event correlation, Detection rules and analytics, Threat hunting. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Bugcrowd
Bugcrowd offers a portfolio covering discovering and assessing internet-facing assets and assessing weaknesses and validating attack possibilities. The entries in this catalog include Bugcrowd Attack Surface Management, Bugcrowd Bug Bounty and Bugcrowd Penetration Testing. Bugcrowd Attack Surface Management focuses on external asset discovery and exposure assessment. Bugcrowd Bug Bounty focuses on coordinated researcher vulnerability discovery. Bugcrowd Penetration Testing focuses on authorized security testing and reporting. When reviewing Bugcrowd, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for asset ownership, discovery scope, validation of findings and handoff to remediation teams. Portfolio detail - Bugcrowd Attack Surface Management: the catalog lists External asset discovery, Attack surface inventory, Exposure assessment. - Bugcrowd Bug Bounty: the catalog lists Authorized security testing, Exploitability validation, Application security testing. - Bugcrowd Penetration Testing: the catalog lists Authorized security testing, Exploitability validation, Application security testing. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Cato Networks
Cato Networks offers a portfolio covering adding expert monitoring and response to supported telemetry, applying access policy to users, applications or traffic and connecting security signals across supported domains. The entries in this catalog include Cato MDR, Cato SASE Cloud and Cato XDR. Cato MDR focuses on managed threat detection and response. Cato SASE Cloud focuses on cloud network connectivity and converged security. Cato XDR focuses on cross-domain threat detection and investigation. When reviewing Cato Networks, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Portfolio detail - Cato MDR: the catalog lists Threat hunting services, Response and containment support. - Cato SASE Cloud: the catalog lists Zero trust network access, Private application access, WAN connectivity integration. - Cato XDR: the catalog lists Cross-domain detection, Incident correlation, Third-party security integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Cequence Security
Cequence Security's catalog is centered on Cequence Unified API Protection, API security technology addressing understanding and protecting application interfaces. The product profile covers api risk discovery, automated attack protection, api inventory and discovery and api posture assessment. This scope makes the portfolio relevant to security teams responsible for externally or internally exposed APIs. When reviewing Cequence Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for API discovery coverage, traffic collection, authentication context and the enforcement model for live applications. Portfolio detail - Cequence Unified API Protection: the catalog lists API inventory and discovery, API posture assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Check Point
Check Point offers a portfolio covering assessing cloud exposure or protecting running workloads, protecting or governing business messaging, endpoint protection and incident investigation, applying access policy to users, applications or traffic and controlling communications and inspecting traffic. The entries in this catalog include CloudGuard, Harmony Email and Collaboration, Harmony Endpoint, Harmony SASE and Quantum. CloudGuard focuses on cloud security posture and workload protection. Harmony Email and Collaboration focuses on email and collaboration threat protection. Harmony Endpoint focuses on endpoint prevention and threat response. When reviewing Check Point, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - CloudGuard: the catalog lists Runtime threat detection, Vulnerability prioritization. - Harmony Email and Collaboration: the catalog lists Phishing detection, Message remediation. - Harmony Endpoint: the catalog lists Application control, Threat hunting, Malware prevention. - Harmony SASE: the catalog lists Zero trust network access, Data loss prevention controls, Remote workforce access. - Quantum: the catalog lists VPN connectivity, SD-WAN functions, Web content filtering. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Checkmarx
Checkmarx offers a portfolio covering finding or addressing weaknesses in software. The entries in this catalog include Checkmarx One, Checkmarx SAST and Checkmarx SCA. Checkmarx One focuses on application security testing and vulnerability prioritization. Checkmarx SAST focuses on source code security testing. Checkmarx SCA focuses on dependency security and software composition analysis. When reviewing Checkmarx, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - Checkmarx One: the catalog lists Static application security testing, Dynamic application security testing, Software composition analysis. - Checkmarx SAST: the catalog lists Static application security testing, Developer workflow integration, CI/CD integration. - Checkmarx SCA: the catalog lists Software composition analysis, Dependency vulnerability analysis, Developer workflow integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Cisco
Cisco offers a portfolio covering authentication, access policy or identity lifecycle administration, applying access policy to users, applications or traffic, protecting or governing business messaging, endpoint protection and incident investigation, controlling communications and inspecting traffic and connecting security signals across supported domains. The entries in this catalog include Cisco Duo, Cisco Secure Access, Cisco Secure Email, Cisco Secure Endpoint, Cisco Secure Firewall and Cisco XDR. Cisco Duo focuses on multifactor authentication and device-aware access. Cisco Secure Access focuses on cloud-delivered access security and zero trust access. Cisco Secure Email focuses on email threat detection and message protection. When reviewing Cisco, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - Cisco Duo: the catalog lists Multifactor authentication service, Device trust assessment, Phishing-resistant authentication options. - Cisco Secure Access: the catalog lists Private application access, WAN connectivity integration. - Cisco Secure Email: the catalog lists Message threat filtering, Phishing detection, Business email compromise detection. - Cisco Secure Endpoint: the catalog lists Endpoint detection and response, Device control, Threat hunting. - Cisco Secure Firewall: the catalog lists Intrusion prevention, VPN connectivity, SD-WAN functions. - Cisco XDR: the catalog lists Cross-domain detection, Threat hunting, Third-party security integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Claroty
Claroty offers a portfolio covering understanding or protecting industrial and connected assets. The entries in this catalog include Claroty xDome, Continuous Threat Detection and Secure Remote Access. Claroty xDome focuses on cyber-physical asset visibility and exposure assessment. Continuous Threat Detection focuses on industrial network monitoring and threat detection. Secure Remote Access focuses on controlled remote access to operational environments. When reviewing Claroty, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Portfolio detail - Claroty xDome: the catalog lists Industrial threat monitoring, Operational exposure assessment, Controlled remote access. - Continuous Threat Detection: the catalog lists Operational asset discovery, Industrial threat monitoring, Operational exposure assessment. - Secure Remote Access: the catalog lists Industrial threat monitoring, Controlled remote access, Operational segmentation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Cloudflare
Cloudflare offers a portfolio covering applying access policy to users, applications or traffic, protecting availability during malicious traffic floods, protecting or governing business messaging and applying security rules to application requests. The entries in this catalog include Cloudflare Access, Cloudflare DDoS Protection, Cloudflare Email Security, Cloudflare Gateway and Cloudflare WAF. Cloudflare Access focuses on identity-aware access to private applications. Cloudflare DDoS Protection focuses on network and application attack mitigation. Cloudflare Email Security focuses on email phishing and impersonation protection. When reviewing Cloudflare, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for identity integration, application reachability, traffic routing and the user experience during a staged rollout. Portfolio detail - Cloudflare Access: the catalog lists Zero trust network access, Device posture checks, Private application access. - Cloudflare DDoS Protection: the catalog lists DDoS attack detection, Network-layer protection, Attack visibility and reporting. - Cloudflare Email Security: the catalog lists Phishing detection, Business email compromise detection, Attachment threat analysis. - Cloudflare Gateway: the catalog lists Zero trust network access, Secure web gateway, Cloud access security broker. - Cloudflare WAF: the catalog lists Web request filtering, OWASP attack coverage, Bot traffic controls. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Coalfire Systems, Inc.
Global cybersecurity advisory and compliance assessment leader, renowned for FedRAMP authorized third-party assessment (3PAO) and comprehensive technical penetration testing.
Cobalt
Cobalt's catalog is centered on Cobalt Penetration Testing as a Service, authorized security testing technology or service addressing assessing weaknesses and validating attack possibilities. The product profile covers managed coordination of authorized security testing, authorized security testing, exploitability validation, attack path assessment and application security testing. This scope makes the portfolio relevant to organizations defining an approved security assessment scope. When reviewing Cobalt, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Portfolio detail - Cobalt Penetration Testing as a Service: the catalog lists Authorized security testing, Exploitability validation, Attack path assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Cofense
Cofense offers a portfolio covering protecting or governing business messaging and improving how employees recognize and handle security risks. The entries in this catalog include Cofense Managed Phishing Detection and Response, Cofense PhishMe and Cofense Triage. Cofense Managed Phishing Detection and Response focuses on managed phishing investigation and response. Cofense PhishMe focuses on phishing simulation and user reporting training. Cofense Triage focuses on reported email investigation and phishing triage. When reviewing Cofense, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Portfolio detail - Cofense Managed Phishing Detection and Response: the catalog lists Phishing detection, Message remediation, User-reported email triage. - Cofense PhishMe: the catalog lists Phishing simulations, Security training content, Adaptive learning. - Cofense Triage: the catalog lists Phishing detection, Message remediation, User-reported email triage. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Cohesity
Cohesity offers a portfolio covering understanding sensitive information and controlling its exposure and protecting recoverable data and organizing restoration. The entries in this catalog include Cohesity DataHawk, Cohesity DataProtect and Cohesity FortKnox. Cohesity DataHawk focuses on data threat monitoring and sensitive data discovery. Cohesity DataProtect focuses on data backup and recovery management. Cohesity FortKnox focuses on isolated backup data protection and recovery. When reviewing Cohesity, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - Cohesity DataHawk: the catalog lists Sensitive data discovery, Data classification, Data security posture assessment. - Cohesity DataProtect: the catalog lists Backup and restore workflows, Ransomware recovery support, Immutable storage options. - Cohesity FortKnox: the catalog lists Backup and restore workflows, Ransomware recovery support, Immutable storage options. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Commvault
Commvault's catalog is centered on Commvault Cloud, backup and recovery technology addressing protecting recoverable data and organizing restoration. The product profile covers data protection, cyber recovery management, backup and restore workflows, ransomware recovery support and immutable storage options. This scope makes the portfolio relevant to IT teams accountable for data resilience. When reviewing Commvault, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for protected workloads, retention settings, recovery location and a practical restore test using representative business data. Portfolio detail - Commvault Cloud: the catalog lists Backup and restore workflows, Ransomware recovery support, Immutable storage options. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
ConnectWise
ConnectWise offers a portfolio covering adding expert monitoring and response to supported telemetry, keeping supported software and devices maintained and collecting and analyzing security-relevant events. The entries in this catalog include ConnectWise MDR, ConnectWise RMM and ConnectWise SIEM. ConnectWise MDR focuses on managed threat monitoring and response. ConnectWise RMM focuses on endpoint monitoring and patch administration. ConnectWise SIEM focuses on security event analytics and monitoring. When reviewing ConnectWise, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Portfolio detail - ConnectWise MDR: the catalog lists Security operations center support, Managed threat monitoring, Response and containment support. - ConnectWise RMM: the catalog lists Automated patch deployment, Third-party application patching, Remote endpoint management. - ConnectWise SIEM: the catalog lists Security log collection, Event correlation, Threat hunting. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Contrast Security
Contrast Security offers a portfolio covering finding or addressing weaknesses in software. The entries in this catalog include Contrast Assess, Contrast Protect and Contrast SCA. Contrast Assess focuses on interactive application security testing. Contrast Protect focuses on application runtime attack protection. Contrast SCA focuses on dependency vulnerability analysis. When reviewing Contrast Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - Contrast Assess: the catalog lists Static application security testing, Dynamic application security testing, Software composition analysis. - Contrast Protect: the catalog lists In-application runtime protection, Application attack detection, Runtime instrumentation. - Contrast SCA: the catalog lists Software composition analysis, Dependency vulnerability analysis, Developer workflow integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Corelight
Corelight's catalog is centered on Corelight Open NDR Platform, network detection and response technology addressing turning observed traffic into security evidence. The product profile covers network security telemetry, threat detection, zeek-based network evidence, suricata detection context and behavioral network detection. This scope makes the portfolio relevant to analysts investigating network activity and potential lateral movement. When reviewing Corelight, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for traffic visibility, sensor placement, encrypted-traffic limitations and the evidence available for incident investigation. Portfolio detail - Corelight Open NDR Platform: the catalog lists Zeek-based network evidence, Suricata detection context, Behavioral network detection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
CrowdStrike
CrowdStrike offers a portfolio covering assessing cloud exposure or protecting running workloads, adding expert monitoring and response to supported telemetry, endpoint protection and incident investigation and collecting and analyzing security-relevant events. The entries in this catalog include Falcon Cloud Security, Falcon Complete, Falcon Insight XDR, Falcon Next-Gen SIEM and Falcon Prevent. Falcon Cloud Security focuses on cloud workload and posture protection. Falcon Complete focuses on managed threat detection and incident response. Falcon Insight XDR focuses on endpoint detection and extended threat investigation. When reviewing CrowdStrike, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Falcon Cloud Security: the catalog lists Cloud security posture management, Cloud entitlement analysis, Runtime threat detection. - Falcon Complete: the catalog lists CrowdStrike analyst-led response, Managed threat monitoring, Human-led investigation. - Falcon Insight XDR: the catalog lists Falcon endpoint investigation, Endpoint detection and response. - Falcon Next-Gen SIEM: the catalog lists Falcon security data analysis, Security log collection, Threat hunting. - Falcon Prevent: the catalog lists Indicator-of-attack prevention, Behavioral threat detection, Endpoint detection and response. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
CyberArk
CyberArk offers a portfolio covering controlling elevated credentials and privileged sessions and controlling how software obtains and uses credentials. The entries in this catalog include Endpoint Privilege Manager, Privileged Access Manager and Secrets Manager. Endpoint Privilege Manager focuses on endpoint least privilege and application control. Privileged Access Manager focuses on privileged credential control and session protection. Secrets Manager focuses on application credential and secret management. When reviewing CyberArk, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for credential onboarding, access approvals, session controls and the operational impact of least-privilege policies. Portfolio detail - Endpoint Privilege Manager: the catalog lists Just-in-time access, Least-privilege enforcement. - Privileged Access Manager: the catalog lists Privileged credential vaulting, Least-privilege enforcement. - Secrets Manager: the catalog lists Application secret storage, Developer and pipeline integration, Fine-grained access policy. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Cyble
Cyble offers a portfolio covering providing external threat context for analysis and decisions. The entries in this catalog include Cyble Hawk and Cyble Vision. Cyble Hawk focuses on threat intelligence for government security teams. Cyble Vision focuses on threat intelligence and external exposure monitoring. When reviewing Cyble, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source relevance, freshness, integration methods and how intelligence changes a specific investigation or protection decision. Portfolio detail - Cyble Hawk: the catalog lists Threat intelligence collection, Adversary and campaign context, Dark web monitoring. - Cyble Vision: the catalog lists Threat intelligence collection, Adversary and campaign context, Dark web monitoring. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Cyera
Cyera's catalog is centered on Cyera, data security technology addressing understanding sensitive information and controlling its exposure. The product profile covers data security posture assessment, sensitive data discovery, data classification, data loss prevention and insider risk investigation. This scope makes the portfolio relevant to teams responsible for protecting business data. When reviewing Cyera, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - Cyera: the catalog lists Sensitive data discovery, Data classification, Data loss prevention. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Cymulate
Cymulate's catalog is centered on Cymulate Exposure Validation Platform, security control validation technology addressing exercising attack scenarios against defensive controls. The product profile covers security control validation, attack simulation, attack scenario simulation and repeatable security testing. This scope makes the portfolio relevant to security teams evaluating detection and prevention coverage. When reviewing Cymulate, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for approved test scope, scenario relevance, telemetry availability and the process for validating improvements after changes. Portfolio detail - Cymulate Exposure Validation Platform: the catalog lists Security control validation, Attack scenario simulation, Repeatable security testing. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
D3 Security
D3 Security's catalog is centered on D3 Smart SOAR, security workflow automation technology addressing coordinating repeatable security actions across tools. The product profile covers security orchestration, incident workflow automation, workflow orchestration, playbook automation and tool integrations. This scope makes the portfolio relevant to security operations teams standardizing investigation or response tasks. When reviewing D3 Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connector permissions, failure handling, approval checkpoints and a test workflow using the organization's own tools. Portfolio detail - D3 Smart SOAR: the catalog lists Workflow orchestration, Playbook automation, Tool integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
DNSFilter
DNSFilter's catalog is centered on DNSFilter, DNS-layer protection technology addressing using name-resolution traffic as a security control point. The product profile covers dns-based threat blocking, web content filtering, dns-based destination decisions, protective dns filtering and malicious domain blocking. This scope makes the portfolio relevant to organizations governing access to risky destinations. When reviewing DNSFilter, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for DNS routing, filtering policy, exceptions and the effect of protective decisions on legitimate applications. Portfolio detail - DNSFilter: the catalog lists DNS-based destination decisions, Protective DNS filtering, Malicious domain blocking. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Darktrace
Darktrace offers a portfolio covering assessing cloud exposure or protecting running workloads, protecting or governing business messaging and turning observed traffic into security evidence. The entries in this catalog include Darktrace / CLOUD, Darktrace / EMAIL and Darktrace / NETWORK. Darktrace / CLOUD focuses on cloud threat detection and investigation. Darktrace / EMAIL focuses on email threat detection and phishing protection. Darktrace / NETWORK focuses on network behavior analysis and threat detection. When reviewing Darktrace, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Darktrace / CLOUD: the catalog lists Cloud behavior modeling, Cloud threat investigation, Cloud account and workload context. - Darktrace / EMAIL: the catalog lists Phishing detection, Business email compromise detection, Account takeover detection. - Darktrace / NETWORK: the catalog lists Network traffic analysis, Behavioral network detection, Investigation telemetry. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Dashlane
Dashlane's catalog is centered on Dashlane Password Manager, business password management technology addressing organizing access to shared or individual credentials. The product profile covers business password management, credential protection, encrypted password vaults, secure credential sharing and administrative policies. This scope makes the portfolio relevant to organizations governing employee credential use. When reviewing Dashlane, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for vault permissions, account recovery, identity integration and a controlled onboarding and offboarding process. Portfolio detail - Dashlane Password Manager: the catalog lists Encrypted password vaults, Secure credential sharing, Administrative policies. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
DataDome
DataDome's catalog is centered on DataDome Bot Protection, automated traffic protection technology addressing distinguishing and controlling abusive automated requests. The product profile covers automated threat detection, bot mitigation, automated traffic detection, challenge and verification workflows and account abuse protection. This scope makes the portfolio relevant to application teams dealing with bots and automated abuse. When reviewing DataDome, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for integration paths, treatment of legitimate automation, challenge behavior and the effect on real users. Portfolio detail - DataDome Bot Protection: the catalog lists Automated traffic detection, Challenge and verification workflows, Account abuse protection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Datadog, Inc.
Unified observability and security platform for cloud applications, providing infrastructure monitoring, log management, APM, and Cloud Security Management.
Delinea
Delinea offers a portfolio covering controlling elevated credentials and privileged sessions. The entries in this catalog include Privilege Manager, Secret Server and Server PAM. Privilege Manager focuses on endpoint privilege reduction and application control. Secret Server focuses on privileged credential vaulting and access control. Server PAM focuses on privileged access controls for server environments. When reviewing Delinea, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for credential onboarding, access approvals, session controls and the operational impact of least-privilege policies. Portfolio detail - Privilege Manager: the catalog lists Privileged credential vaulting, Credential rotation, Just-in-time access. - Secret Server: the catalog lists Privileged secret vault administration, Privileged credential vaulting, Credential rotation. - Server PAM: the catalog lists Privileged credential vaulting, Credential rotation, Session recording. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
DigiCert
DigiCert offers a portfolio covering managing protected keys, certificates or signing operations. The entries in this catalog include DigiCert KeyLocker and DigiCert Trust Lifecycle Manager. DigiCert KeyLocker focuses on code signing key protection and signing workflows. DigiCert Trust Lifecycle Manager focuses on certificate inventory and lifecycle automation. When reviewing DigiCert, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for key custody, signing integrations, authorization policy and the audit trail for signed releases. Portfolio detail - DigiCert KeyLocker: the catalog lists Code signing workflows, Certificate automation. - DigiCert Trust Lifecycle Manager: the catalog lists Certificate lifecycle management, Certificate discovery, Public key infrastructure services. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Dragos
Dragos offers a portfolio covering investigating and managing cybersecurity incidents and understanding or protecting industrial and connected assets. The entries in this catalog include Dragos Incident Response and Dragos Platform. Dragos Incident Response focuses on industrial cyber incident investigation and response. Dragos Platform focuses on industrial asset visibility and threat detection. When reviewing Dragos, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for engagement scope, evidence handling, response authority and the responsibilities of internal and external responders. Portfolio detail - Dragos Incident Response: the catalog lists Incident investigation, Containment planning, Digital evidence analysis. - Dragos Platform: the catalog lists Operational asset discovery, Industrial threat monitoring, Operational exposure assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Drata
Drata's catalog is centered on Drata, security governance and compliance technology addressing coordinating controls, evidence and risk decisions. The product profile covers security compliance evidence collection, control monitoring, compliance evidence collection, risk assessment workflows and audit preparation. This scope makes the portfolio relevant to teams preparing audits or managing security governance. When reviewing Drata, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - Drata: the catalog lists Compliance evidence collection, Control monitoring, Risk assessment workflows. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Druva
Druva's catalog is centered on Druva Data Security Cloud, backup and recovery technology addressing protecting recoverable data and organizing restoration. The product profile covers cloud-managed data protection, recovery, ransomware recovery support and immutable storage options. This scope makes the portfolio relevant to IT teams accountable for data resilience. When reviewing Druva, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for protected workloads, retention settings, recovery location and a practical restore test using representative business data. Portfolio detail - Druva Data Security Cloud: the catalog lists Ransomware recovery support, Immutable storage options. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
ESET
ESET offers a portfolio covering protecting or governing business messaging, endpoint protection and incident investigation and adding expert monitoring and response to supported telemetry. The entries in this catalog include ESET Cloud Office Security, ESET Inspect, ESET MDR and ESET PROTECT. ESET Cloud Office Security focuses on cloud email and collaboration protection. ESET Inspect focuses on endpoint detection and threat investigation. ESET MDR focuses on managed endpoint threat detection and response. When reviewing ESET, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Portfolio detail - ESET Cloud Office Security: the catalog lists Phishing detection, Message remediation. - ESET Inspect: the catalog lists Endpoint activity investigation, Detection rule administration, Endpoint detection and response. - ESET MDR: the catalog lists Managed threat monitoring, Human-led investigation, Threat hunting services. - ESET PROTECT: the catalog lists Behavioral threat detection, Endpoint detection and response, Device control. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Egnyte
Egnyte's catalog is centered on Egnyte, data security technology addressing understanding sensitive information and controlling its exposure. The product profile covers secure content collaboration, data governance, sensitive data discovery and insider risk investigation. This scope makes the portfolio relevant to teams responsible for protecting business data. When reviewing Egnyte, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - Egnyte: the catalog lists Sensitive data discovery, Insider risk investigation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Elastic
Elastic's catalog is centered on Elastic Security, security analytics technology addressing collecting and analyzing security-relevant events. The product profile covers security event analytics, threat investigation, detection and endpoint context, event correlation and detection rules and analytics. This scope makes the portfolio relevant to security operations teams investigating alerts and incidents. When reviewing Elastic, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Elastic Security: the catalog lists Detection and endpoint context, Event correlation, Detection rules and analytics. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Endor Labs
Endor Labs's catalog is centered on Endor Labs, application security technology addressing finding or addressing weaknesses in software. The product profile covers software dependency risk analysis, application security, static application security testing, software composition analysis and dependency vulnerability analysis. This scope makes the portfolio relevant to development and application security teams. When reviewing Endor Labs, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - Endor Labs: the catalog lists Static application security testing, Software composition analysis, Dependency vulnerability analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Entrust
Entrust offers a portfolio covering authentication, access policy or identity lifecycle administration and managing protected keys, certificates or signing operations. The entries in this catalog include Entrust Identity as a Service and Entrust nShield HSM. Entrust Identity as a Service focuses on cloud authentication and access security. Entrust nShield HSM focuses on hardware-backed cryptographic key protection. When reviewing Entrust, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - Entrust Identity as a Service: the catalog lists Single sign-on, Multifactor authentication, Adaptive authentication. - Entrust nShield HSM: the catalog lists Cryptographic key protection, Code signing workflows, Hardware-backed key storage. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Exabeam
Exabeam offers a portfolio covering collecting and analyzing security-relevant events. The entries in this catalog include Exabeam Fusion and Exabeam New-Scale SIEM. Exabeam Fusion focuses on security analytics and incident investigation. Exabeam New-Scale SIEM focuses on security log analytics and behavior-based investigation. When reviewing Exabeam, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Exabeam Fusion: the catalog lists Security log collection, Behavior analytics, Response automation. - Exabeam New-Scale SIEM: the catalog lists Security log collection, Event correlation, Behavior analytics. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Expel
Expel's catalog is centered on Expel Managed Detection and Response, managed detection and response service addressing adding expert monitoring and response to supported telemetry. The product profile covers managed threat monitoring, investigation, human-led investigation, threat hunting services and response and containment support. This scope makes the portfolio relevant to organizations seeking external security operations support. When reviewing Expel, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Portfolio detail - Expel Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Threat hunting services. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
ExtraHop
ExtraHop's catalog is centered on RevealX, network detection and response technology addressing turning observed traffic into security evidence. The product profile covers network threat detection, investigation, network detection and investigation, investigation telemetry and threat hunting workflows. This scope makes the portfolio relevant to analysts investigating network activity and potential lateral movement. When reviewing ExtraHop, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for traffic visibility, sensor placement, encrypted-traffic limitations and the evidence available for incident investigation. Portfolio detail - RevealX: the catalog lists Network detection and investigation, Investigation telemetry, Threat hunting workflows. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
F5
F5 offers a portfolio covering applying security rules to application requests, understanding and protecting application interfaces and distinguishing and controlling abusive automated requests. The entries in this catalog include F5 BIG-IP Advanced WAF, F5 Distributed Cloud API Security, F5 Distributed Cloud Bot Defense and F5 Distributed Cloud Web Application Firewall. F5 BIG-IP Advanced WAF focuses on web application firewall and attack protection. F5 Distributed Cloud API Security focuses on api discovery and api attack protection. F5 Distributed Cloud Bot Defense focuses on automated abuse detection and bot mitigation. When reviewing F5, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for application onboarding, rule tuning, false-positive handling and behavior under representative legitimate traffic. Portfolio detail - F5 BIG-IP Advanced WAF: the catalog lists Web request filtering, Bot traffic controls, API traffic protection. - F5 Distributed Cloud API Security: the catalog lists API inventory and discovery, Sensitive data visibility, Runtime API attack protection. - F5 Distributed Cloud Bot Defense: the catalog lists Automated traffic detection, Application integration. - F5 Distributed Cloud Web Application Firewall: the catalog lists Web request filtering, OWASP attack coverage, API traffic protection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Flashpoint
Flashpoint's catalog is centered on Flashpoint Ignite, threat intelligence technology or service addressing providing external threat context for analysis and decisions. The product profile covers threat intelligence, external risk investigation, threat intelligence collection, threat indicator enrichment and adversary and campaign context. This scope makes the portfolio relevant to analysts investigating adversaries, indicators or emerging exposures. When reviewing Flashpoint, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source relevance, freshness, integration methods and how intelligence changes a specific investigation or protection decision. Portfolio detail - Flashpoint Ignite: the catalog lists Threat intelligence collection, Threat indicator enrichment, Adversary and campaign context. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Forcepoint
Forcepoint offers a portfolio covering understanding sensitive information and controlling its exposure and applying access policy to users, applications or traffic. The entries in this catalog include Forcepoint DLP, Forcepoint DSPM and Forcepoint ONE. Forcepoint DLP focuses on sensitive data movement controls and loss prevention. Forcepoint DSPM focuses on sensitive data discovery and posture assessment. Forcepoint ONE focuses on cloud-delivered access security and data protection. When reviewing Forcepoint, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - Forcepoint DLP: the catalog lists Sensitive data discovery, Data classification, Data access visibility. - Forcepoint DSPM: the catalog lists Sensitive data discovery, Data classification, Data access visibility. - Forcepoint ONE: the catalog lists Secure web gateway functions, Cloud application access controls, Zero trust application access. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Forescout
Forescout offers a portfolio covering controlling communications and inspecting traffic and establishing an inventory and identifying security coverage gaps. The entries in this catalog include Forescout eyeControl and Forescout eyeSight. Forescout eyeControl focuses on device access policy and network control. Forescout eyeSight focuses on connected device discovery and asset visibility. When reviewing Forescout, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for traffic throughput, network topology, policy administration and the effect of inspection on business applications. Portfolio detail - Forescout eyeControl: the catalog lists SD-WAN functions, Virtual firewall deployment. - Forescout eyeSight: the catalog lists Connected device discovery, Device classification and posture, Virtual and physical deployment options. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Fortinet
Fortinet offers a portfolio covering assessing cloud exposure or protecting running workloads, endpoint protection and incident investigation, controlling communications and inspecting traffic, protecting or governing business messaging, controlling elevated credentials and privileged sessions, applying access policy to users, applications or traffic, collecting and analyzing security-relevant events, coordinating repeatable security actions across tools and applying security rules to application requests. The entries in this catalog include FortiCNAPP, FortiEDR, FortiGate, FortiMail, FortiMail Workspace Security and FortiPAM, with 4 additional product or service profiles. FortiCNAPP focuses on cloud security posture assessment and runtime threat detection. FortiEDR focuses on endpoint threat prevention and response. FortiGate focuses on next-generation firewall policy and threat prevention. When reviewing Fortinet, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - FortiCNAPP: the catalog lists Lacework-derived cloud security, Cloud security posture management, Cloud workload protection. - FortiEDR: the catalog lists Malware prevention, Policy management. - FortiGate: the catalog lists Fortinet Security Fabric context, Intrusion prevention, Application-aware policy. - FortiMail: the catalog lists Phishing detection, Business email compromise detection, Account takeover detection. - FortiMail Workspace Security: the catalog lists Collaboration application protection, Phishing detection, Business email compromise detection. - FortiPAM: the catalog lists Privileged credential vaulting, Credential rotation, Session recording. - FortiSASE: the catalog lists Zero trust network access, Secure web gateway, Cloud access security broker. - FortiSIEM: the catalog lists Security log collection, Event correlation, Behavior analytics. - FortiSOAR: the catalog lists Workflow orchestration, Playbook automation, Tool integrations. - FortiWeb: the catalog lists Web request filtering, API traffic protection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Fortra
Fortra offers a portfolio covering assessing weaknesses and validating attack possibilities and understanding sensitive information and controlling its exposure. The entries in this catalog include Cobalt Strike, Core Impact, Digital Guardian and GoAnywhere MFT. Cobalt Strike focuses on adversary simulation and authorized security testing. Core Impact focuses on penetration testing and exploit validation. Digital Guardian focuses on endpoint data loss prevention and activity visibility. When reviewing Fortra, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Portfolio detail - Cobalt Strike: the catalog lists Authorized adversary emulation, Beacon-based test activity, Authorized security testing. - Core Impact: the catalog lists Authorized exploit validation, Authorized security testing, Exploitability validation. - Digital Guardian: the catalog lists Sensitive data discovery, Data loss prevention. - GoAnywhere MFT: the catalog lists Data access visibility, Data loss prevention. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
G DATA
G DATA offers a portfolio covering endpoint protection and incident investigation. The entries in this catalog include G DATA Endpoint Protection Business and G DATA Managed Endpoint Security. G DATA Endpoint Protection Business focuses on business endpoint malware prevention and protection. G DATA Managed Endpoint Security focuses on managed business endpoint security. When reviewing G DATA, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - G DATA Endpoint Protection Business: the catalog lists Business malware protection, Centralized endpoint administration, Malware prevention. - G DATA Managed Endpoint Security: the catalog lists Managed endpoint administration, Endpoint security configuration support, Exploit prevention. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
GitHub
GitHub offers a portfolio covering finding or addressing weaknesses in software and controlling how software obtains and uses credentials. The entries in this catalog include GitHub Advanced Security, GitHub Code Security and GitHub Secret Protection. GitHub Advanced Security focuses on repository security analysis and vulnerability management. GitHub Code Security focuses on code vulnerability and dependency security analysis. GitHub Secret Protection focuses on repository secret detection and push protection. When reviewing GitHub, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - GitHub Advanced Security: the catalog lists Repository security workflows, Static application security testing, Software composition analysis. - GitHub Code Security: the catalog lists CodeQL code analysis, Static application security testing, Software composition analysis. - GitHub Secret Protection: the catalog lists Secret push protection, Application secret storage, Secret rotation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
GitLab
GitLab's catalog is centered on GitLab Ultimate, application security technology addressing finding or addressing weaknesses in software. The product profile covers development security testing, compliance workflows, security and compliance pipeline checks, static application security testing and dynamic application security testing. This scope makes the portfolio relevant to development and application security teams. When reviewing GitLab, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - GitLab Ultimate: the catalog lists Security and compliance pipeline checks, Static application security testing, Dynamic application security testing. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Glasswall
Glasswall offers a portfolio covering inspecting or reconstructing files before they are used. The entries in this catalog include Glasswall Embedded Engine, Glasswall Genesis, Glasswall Halo and Glasswall Meteor. Glasswall Embedded Engine focuses on software development kit for integrating file content disarm and reconstruction. Glasswall Genesis focuses on file content disarm and reconstruction engine with policy controls. Glasswall Halo focuses on server-based file content disarm and reconstruction. When reviewing Glasswall, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported file types, SDK interfaces, policy behavior and preservation of legitimate document content. Portfolio detail - Glasswall Embedded Engine: the catalog lists Embedded file reconstruction SDK, Content disarm and reconstruction, File policy controls. - Glasswall Genesis: the catalog lists Policy-controlled file reconstruction, Content disarm and reconstruction, File policy controls. - Glasswall Halo: the catalog lists Server-based file reconstruction, Content disarm and reconstruction, File policy controls. - Glasswall Meteor: the catalog lists Desktop file reconstruction, Content disarm and reconstruction, File policy controls. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Google Cloud
Google Cloud offers a portfolio covering collecting and analyzing security-relevant events, providing external threat context for analysis and decisions, investigating and managing cybersecurity incidents and assessing cloud exposure or protecting running workloads. The entries in this catalog include Google Security Operations, Google Threat Intelligence, Mandiant Incident Response and Security Command Center. Google Security Operations focuses on cloud security analytics and threat investigation. Google Threat Intelligence focuses on threat intelligence and adversary research. Mandiant Incident Response focuses on incident investigation and recovery support. When reviewing Google Cloud, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for log onboarding, detection content, query workflows and integration with response tools. Portfolio detail - Google Security Operations: the catalog lists Google security analytics workflow, Threat hunting, Response automation. - Google Threat Intelligence: the catalog lists Mandiant intelligence context, VirusTotal analysis context, Threat intelligence collection. - Mandiant Incident Response: the catalog lists Incident investigation, Containment planning, Digital evidence analysis. - Security Command Center: the catalog lists Cloud entitlement analysis, Runtime threat detection, Cloud compliance checks. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Graylog
Graylog offers a portfolio covering collecting and analyzing security-relevant events. The entries in this catalog include Graylog Enterprise and Graylog Security. Graylog Enterprise focuses on log management and operational investigation. Graylog Security focuses on security event analytics and detection. When reviewing Graylog, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for log onboarding, search and retention requirements, access control and the functions included in the selected edition. Portfolio detail - Graylog Enterprise: the catalog lists Log search and retention, Enterprise log access controls, Security log collection. - Graylog Security: the catalog lists Security log collection, Event correlation, Behavior analytics. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Grip Security
Grip Security's catalog is centered on Grip SaaS Security Control Plane, SaaS security technology addressing assessing application usage, configuration or identity risk. The product profile covers saas discovery, identity risk assessment, saas application discovery, saas identity risk analysis and third-party application visibility. This scope makes the portfolio relevant to teams overseeing business SaaS applications. When reviewing Grip Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported services, connector permissions, findings ownership and the response process for risky access or configurations. Portfolio detail - Grip SaaS Security Control Plane: the catalog lists SaaS application discovery, SaaS identity risk analysis, Third-party application visibility. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
HCLSoftware
HCLSoftware's catalog is centered on HCL BigFix, endpoint administration and patching technology addressing keeping supported software and devices maintained. The product profile covers endpoint lifecycle management, patch remediation, fixlet-based endpoint actions, third-party application patching and endpoint inventory. This scope makes the portfolio relevant to IT teams managing software updates across a device fleet. When reviewing HCLSoftware, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for application coverage, deployment scheduling, restart behavior and a pilot group that represents production devices. Portfolio detail - HCL BigFix: the catalog lists Fixlet-based endpoint actions, Third-party application patching, Endpoint inventory. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
HUMAN Security
HUMAN Security offers a portfolio covering assessing suspicious login or account activity and distinguishing and controlling abusive automated requests. The entries in this catalog include HUMAN Account Defender and HUMAN Bot Defender. HUMAN Account Defender focuses on account abuse detection and risk assessment. HUMAN Bot Defender focuses on bot detection and automated abuse protection. When reviewing HUMAN Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for signal collection, risk thresholds, response integration and the effect of decisions on legitimate account holders. Portfolio detail - HUMAN Account Defender: the catalog lists Account risk analysis, Behavioral user signals, Application risk integration. - HUMAN Bot Defender: the catalog lists Automated traffic detection, Behavioral traffic analysis, Application integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
HackerOne
HackerOne offers a portfolio covering discovering and assessing internet-facing assets and assessing weaknesses and validating attack possibilities. The entries in this catalog include HackerOne Assets, HackerOne Bug Bounty and HackerOne Pentest. HackerOne Assets focuses on external asset inventory and attack surface visibility. HackerOne Bug Bounty focuses on coordinated researcher vulnerability discovery. HackerOne Pentest focuses on authorized application security testing. When reviewing HackerOne, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for asset ownership, discovery scope, validation of findings and handoff to remediation teams. Portfolio detail - HackerOne Assets: the catalog lists External asset discovery, Attack surface inventory, Exposure assessment. - HackerOne Bug Bounty: the catalog lists Authorized security testing, Exploitability validation, Application security testing. - HackerOne Pentest: the catalog lists Authorized security testing, Exploitability validation, Application security testing. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
HarfangLab
HarfangLab offers a portfolio covering endpoint protection and incident investigation. The entries in this catalog include HarfangLab EDR and HarfangLab Endpoint Protection Platform. HarfangLab EDR focuses on endpoint threat detection and investigation. HarfangLab Endpoint Protection Platform focuses on endpoint malware prevention and file threat analysis. When reviewing HarfangLab, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - HarfangLab EDR: the catalog lists Endpoint detection and response, Malware prevention. - HarfangLab Endpoint Protection Platform: the catalog lists Behavioral threat detection, Endpoint detection and response, Malware prevention. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
HashiCorp
HashiCorp's catalog is centered on Vault, application secrets management technology addressing controlling how software obtains and uses credentials. The product profile covers secret storage, credential lifecycle management, transit encryption services, application secret storage and secret rotation. This scope makes the portfolio relevant to development and infrastructure teams handling nonhuman access. When reviewing HashiCorp, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for secret retrieval, access policy, rotation behavior and the consequences of a service or network interruption. Portfolio detail - Vault: the catalog lists Transit encryption services, Application secret storage, Secret rotation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Heimdal
Heimdal offers a portfolio covering using name-resolution traffic as a security control point, keeping supported software and devices maintained and controlling elevated credentials and privileged sessions. The entries in this catalog include Heimdal DNS Security, Heimdal Patch and Asset Management and Heimdal Privileged Access Management. Heimdal DNS Security focuses on dns-layer threat blocking and traffic protection. Heimdal Patch and Asset Management focuses on endpoint patching and asset visibility. Heimdal Privileged Access Management focuses on endpoint privilege control and access administration. When reviewing Heimdal, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for DNS routing, filtering policy, exceptions and the effect of protective decisions on legitimate applications. Portfolio detail - Heimdal DNS Security: the catalog lists Protective DNS filtering, Malicious domain blocking, Content category filtering. - Heimdal Patch and Asset Management: the catalog lists Automated patch deployment, Third-party application patching, Remote endpoint management. - Heimdal Privileged Access Management: the catalog lists Privileged credential vaulting, Just-in-time access, Least-privilege enforcement. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Hillstone Networks
Hillstone Networks offers a portfolio covering assessing cloud exposure or protecting running workloads and controlling communications and inspecting traffic. The entries in this catalog include Hillstone CloudArmour and Hillstone CloudHive. Hillstone CloudArmour focuses on cloud workload protection and security visibility. Hillstone CloudHive focuses on virtual workload microsegmentation and policy enforcement. When reviewing Hillstone Networks, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Hillstone CloudArmour: the catalog lists Cloud security posture management, Cloud workload protection, Runtime threat detection. - Hillstone CloudHive: the catalog lists Network segmentation, Lateral movement controls. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Horizon3.ai
Horizon3.ai's catalog is centered on NodeZero, authorized security testing technology or service addressing assessing weaknesses and validating attack possibilities. The product profile covers autonomous penetration testing, attack path validation, autonomous attack-path validation, authorized security testing and exploitability validation. This scope makes the portfolio relevant to organizations defining an approved security assessment scope. When reviewing Horizon3.ai, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Portfolio detail - NodeZero: the catalog lists Autonomous attack-path validation, Authorized security testing, Exploitability validation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Hornetsecurity
Hornetsecurity offers a portfolio covering protecting or governing business messaging, improving how employees recognize and handle security risks and protecting recoverable data and organizing restoration. The entries in this catalog include 365 Total Protection, Security Awareness Service and VM Backup. 365 Total Protection focuses on cloud email protection and security management. Security Awareness Service focuses on employee security training and phishing simulations. VM Backup focuses on virtual machine backup and recovery. When reviewing Hornetsecurity, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Portfolio detail - 365 Total Protection: the catalog lists Phishing detection, Business email compromise detection, Attachment threat analysis. - Security Awareness Service: the catalog lists Phishing simulations, Security training content, Program reporting. - VM Backup: the catalog lists Backup and restore workflows, Microsoft 365 backup, Virtual machine protection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Hoxhunt
Hoxhunt's catalog is centered on Hoxhunt, security awareness technology or service addressing improving how employees recognize and handle security risks. The product profile covers adaptive phishing simulations, security behavior training, security training content, adaptive learning and user risk insights. This scope makes the portfolio relevant to organizations running employee awareness programs. When reviewing Hoxhunt, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for training relevance, simulation design, reporting methods and the treatment of employee information. Portfolio detail - Hoxhunt: the catalog lists Security training content, Adaptive learning, User risk insights. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Hunters
Hunters's catalog is centered on Hunters SOC Platform, security analytics technology addressing collecting and analyzing security-relevant events. The product profile covers security event investigation, detection workflows, event correlation, behavior analytics and detection rules and analytics. This scope makes the portfolio relevant to security operations teams investigating alerts and incidents. When reviewing Hunters, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Hunters SOC Platform: the catalog lists Event correlation, Behavior analytics, Detection rules and analytics. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Huntress
Huntress offers a portfolio covering adding expert monitoring and response to supported telemetry, authentication, access policy or identity lifecycle administration and improving how employees recognize and handle security risks. The entries in this catalog include Huntress Managed EDR, Huntress Managed ITDR and Huntress Security Awareness Training. Huntress Managed EDR focuses on managed endpoint detection and response. Huntress Managed ITDR focuses on managed identity threat detection and response. Huntress Security Awareness Training focuses on security education and phishing simulation. When reviewing Huntress, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Portfolio detail - Huntress Managed EDR: the catalog lists Huntress analyst investigation, Managed threat monitoring, Human-led investigation. - Huntress Managed ITDR: the catalog lists Cloud identity threat monitoring, Identity threat detection. - Huntress Security Awareness Training: the catalog lists Phishing simulations, Security training content, Adaptive learning. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Hyperproof
Hyperproof's catalog is centered on Hyperproof, security governance and compliance technology addressing coordinating controls, evidence and risk decisions. The product profile covers compliance operations, evidence management, compliance evidence collection, control monitoring and risk assessment workflows. This scope makes the portfolio relevant to teams preparing audits or managing security governance. When reviewing Hyperproof, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - Hyperproof: the catalog lists Compliance evidence collection, Control monitoring, Risk assessment workflows. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
IBM
IBM offers a portfolio covering understanding sensitive information and controlling its exposure, collecting and analyzing security-relevant events, authentication, access policy or identity lifecycle administration and investigating and managing cybersecurity incidents. The entries in this catalog include IBM Guardium, IBM QRadar SIEM, IBM Verify and IBM X-Force Incident Response. IBM Guardium focuses on data security monitoring and risk assessment. IBM QRadar SIEM focuses on security event correlation and threat investigation. IBM Verify focuses on identity authentication and access management. When reviewing IBM, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - IBM Guardium: the catalog lists Data classification, Database monitoring. - IBM QRadar SIEM: the catalog lists Incident investigation, Response automation, Third-party integrations. - IBM Verify: the catalog lists Single sign-on, Conditional access, Federated authentication. - IBM X-Force Incident Response: the catalog lists Incident investigation, Incident readiness services. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
IRONSCALES
IRONSCALES offers a portfolio covering protecting or governing business messaging and improving how employees recognize and handle security risks. The entries in this catalog include IRONSCALES Email Security and IRONSCALES Security Awareness Training. IRONSCALES Email Security focuses on mailbox threat detection and remediation. IRONSCALES Security Awareness Training focuses on phishing simulations and employee security training. When reviewing IRONSCALES, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Portfolio detail - IRONSCALES Email Security: the catalog lists Phishing detection, Business email compromise detection, Account takeover detection. - IRONSCALES Security Awareness Training: the catalog lists Phishing simulations, Security training content, Adaptive learning. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Imperva
Imperva offers a portfolio covering understanding and protecting application interfaces, understanding sensitive information and controlling its exposure, protecting availability during malicious traffic floods and applying security rules to application requests. The entries in this catalog include Imperva API Security, Imperva Data Security, Imperva DDoS Protection and Imperva Web Application Firewall. Imperva API Security focuses on api discovery and risk assessment. Imperva Data Security focuses on database monitoring and data risk protection. Imperva DDoS Protection focuses on network and application attack mitigation. When reviewing Imperva, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for API discovery coverage, traffic collection, authentication context and the enforcement model for live applications. Portfolio detail - Imperva API Security: the catalog lists API inventory and discovery, API behavior analysis, API posture assessment. - Imperva Data Security: the catalog lists Sensitive data discovery, Data classification, Data security posture assessment. - Imperva DDoS Protection: the catalog lists DDoS attack detection, Traffic scrubbing, Network-layer protection. - Imperva Web Application Firewall: the catalog lists Web request filtering, OWASP attack coverage, Bot traffic controls. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Infoblox
Infoblox offers a portfolio covering using name-resolution traffic as a security control point. The entries in this catalog include BloxOne Threat Defense and Threat Defense. BloxOne Threat Defense focuses on dns threat detection and protective dns controls. Threat Defense focuses on dns-layer threat prevention and investigation. When reviewing Infoblox, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for DNS routing, filtering policy, exceptions and the effect of protective decisions on legitimate applications. Portfolio detail - BloxOne Threat Defense: the catalog lists DNS-layer threat defense, Protective DNS filtering, Malicious domain blocking. - Threat Defense: the catalog lists Protective DNS intelligence, Protective DNS filtering, Malicious domain blocking. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
IntentWire
IntentWire is a global B2B market intelligence and data platform founded in 2021, designed to help sales teams, vendors, and tech companies discover and connect with verified company decision-makers. It serves as a specialized search engine and directory for finding corporate leads and business partnerships, covering high-growth technology sectors such as SaaS, AI, Cloud Consulting, Cybersecurity, and IT Staffing.
Intezer
Intezer's catalog is centered on Intezer, malware analysis technology addressing examining suspicious files or observed execution behavior. The product profile covers malware analysis, security alert investigation, threat indicator extraction, analysis reporting and analysis automation. This scope makes the portfolio relevant to analysts triaging samples and investigating threats. When reviewing Intezer, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported samples, analysis visibility, submission privacy and how findings are reviewed before operational decisions. Portfolio detail - Intezer: the catalog lists Threat indicator extraction, Analysis reporting, Analysis automation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Invicti
Invicti offers a portfolio covering finding or addressing weaknesses in software. The entries in this catalog include Acunetix and Invicti. Acunetix focuses on web application vulnerability scanning. Invicti focuses on dynamic application security testing and vulnerability validation. When reviewing Invicti, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - Acunetix: the catalog lists Dynamic application security testing, Developer workflow integration. - Invicti: the catalog lists Static application security testing, Dynamic application security testing, Software composition analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Island
Island's catalog is centered on Island Enterprise Browser, enterprise browser technology addressing administering browser-based work and application access. The product profile covers enterprise browser access controls, data protection, enterprise browsing policies, browser data protection and identity-aware application access. This scope makes the portfolio relevant to organizations governing business browsing and application sessions. When reviewing Island, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for browser deployment, application compatibility, access policies and the effect of data controls on legitimate workflows. Portfolio detail - Island Enterprise Browser: the catalog lists Enterprise browsing policies, Browser data protection, Identity-aware application access. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Ivanti
Ivanti offers a portfolio covering keeping supported software and devices maintained, identifying and prioritizing security weaknesses and applying access policy to users, applications or traffic. The entries in this catalog include Ivanti Neurons for Patch Management, Ivanti Neurons for Risk-Based Vulnerability Management and Ivanti Neurons for Zero Trust Access. Ivanti Neurons for Patch Management focuses on software patch deployment and remediation. Ivanti Neurons for Risk-Based Vulnerability Management focuses on vulnerability risk scoring and prioritization. Ivanti Neurons for Zero Trust Access focuses on identity-aware remote application access. When reviewing Ivanti, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for application coverage, deployment scheduling, restart behavior and a pilot group that represents production devices. Portfolio detail - Ivanti Neurons for Patch Management: the catalog lists Automated patch deployment, Third-party application patching, Endpoint inventory. - Ivanti Neurons for Risk-Based Vulnerability Management: the catalog lists Vulnerability scanning, Risk-based prioritization, Remediation tracking. - Ivanti Neurons for Zero Trust Access: the catalog lists Zero trust network access, Device posture checks, Private application access. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
JFrog
JFrog offers a portfolio covering finding or addressing weaknesses in software. The entries in this catalog include JFrog Advanced Security and JFrog Xray. JFrog Advanced Security focuses on software supply chain analysis and contextual security testing. JFrog Xray focuses on artifact vulnerability and license risk scanning. When reviewing JFrog, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - JFrog Advanced Security: the catalog lists Contextual artifact analysis, Software composition analysis, Dependency vulnerability analysis. - JFrog Xray: the catalog lists Artifact-focused component scanning, Software composition analysis, Developer workflow integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Joe Security
Joe Security's catalog is centered on Joe Sandbox, malware analysis technology addressing examining suspicious files or observed execution behavior. The product profile covers malware execution analysis, behavioral investigation, behavioral malware analysis, static file analysis and threat indicator extraction. This scope makes the portfolio relevant to analysts triaging samples and investigating threats. When reviewing Joe Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported samples, analysis visibility, submission privacy and how findings are reviewed before operational decisions. Portfolio detail - Joe Sandbox: the catalog lists Behavioral malware analysis, Static file analysis, Threat indicator extraction. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
JumpCloud
JumpCloud's catalog is centered on JumpCloud Directory Platform, identity and access management technology addressing authentication, access policy or identity lifecycle administration. The product profile covers cloud directory management, device identity controls, cloud directory administration, single sign-on and multifactor authentication. This scope makes the portfolio relevant to identity teams connecting users and applications. When reviewing JumpCloud, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - JumpCloud Directory Platform: the catalog lists Cloud directory administration, Single sign-on, Multifactor authentication. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
K7 Security
K7 Security's catalog is centered on K7 Endpoint Security, endpoint security software addressing endpoint protection and incident investigation. The product profile covers business endpoint malware prevention, protection, ransomware protection, device control and malware prevention. This scope makes the portfolio relevant to security teams administering employee devices or servers. When reviewing K7 Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - K7 Endpoint Security: the catalog lists Ransomware protection, Device control, Malware prevention. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Kaseya
Kaseya offers a portfolio covering improving how employees recognize and handle security risks, keeping supported software and devices maintained, protecting recoverable data and organizing restoration, protecting or governing business messaging, establishing an inventory and identifying security coverage gaps and adding expert monitoring and response to supported telemetry. The entries in this catalog include BullPhish ID, Datto RMM, Datto SIRIS, Graphus, IT Glue and RocketCyber. BullPhish ID focuses on security awareness training and phishing simulations. Datto RMM focuses on cloud-managed endpoint monitoring and patching. Datto SIRIS focuses on backup and disaster recovery. When reviewing Kaseya, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for training relevance, simulation design, reporting methods and the treatment of employee information. Portfolio detail - BullPhish ID: the catalog lists Phishing campaign management, Employee awareness training, Phishing simulations. - Datto RMM: the catalog lists Remote endpoint management, Policy-driven automation, Patch compliance reporting. - Datto SIRIS: the catalog lists Appliance and cloud recovery, Backup and restore workflows, Recovery orchestration. - Graphus: the catalog lists Phishing detection, Business email compromise detection, Account takeover detection. - IT Glue: the catalog lists Data source integrations, Device identification. - RocketCyber: the catalog lists Managed threat monitoring, Threat hunting services, Response and containment support. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Keeper Security
Keeper Security offers a portfolio covering organizing access to shared or individual credentials, controlling how software obtains and uses credentials and controlling elevated credentials and privileged sessions. The entries in this catalog include Keeper Enterprise, Keeper Secrets Manager and KeeperPAM. Keeper Enterprise focuses on business password management and credential sharing. Keeper Secrets Manager focuses on application secret storage and access control. KeeperPAM focuses on privileged access and session management. When reviewing Keeper Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for vault permissions, account recovery, identity integration and a controlled onboarding and offboarding process. Portfolio detail - Keeper Enterprise: the catalog lists Encrypted password vaults, Secure credential sharing, Administrative policies. - Keeper Secrets Manager: the catalog lists Application secret storage, Secret rotation, Developer and pipeline integration. - KeeperPAM: the catalog lists Privileged credential vaulting, Credential rotation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Keyfactor
Keyfactor offers a portfolio covering managing protected keys, certificates or signing operations. The entries in this catalog include EJBCA, Keyfactor Command and SignServer. EJBCA focuses on public key infrastructure and certificate issuance. Keyfactor Command focuses on certificate inventory and lifecycle management. SignServer focuses on digital signing services and signing policy. When reviewing Keyfactor, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Portfolio detail - EJBCA: the catalog lists Certificate lifecycle management, Certificate discovery, Cryptographic key protection. - Keyfactor Command: the catalog lists Certificate inventory governance, Certificate lifecycle management, Certificate discovery. - SignServer: the catalog lists Centralized signing services, Certificate lifecycle management, Certificate discovery. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
KnowBe4
KnowBe4 offers a portfolio covering improving how employees recognize and handle security risks and protecting or governing business messaging. The entries in this catalog include KnowBe4 Security Awareness Training, PhishER and SecurityCoach. KnowBe4 Security Awareness Training focuses on employee security education and phishing simulation. PhishER focuses on reported email triage and remediation. SecurityCoach focuses on risk-driven security coaching for employees. When reviewing KnowBe4, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for training relevance, simulation design, reporting methods and the treatment of employee information. Portfolio detail - KnowBe4 Security Awareness Training: the catalog lists Phishing simulations, Security training content, Adaptive learning. - PhishER: the catalog lists Phishing detection, Attachment threat analysis, Message remediation. - SecurityCoach: the catalog lists Phishing simulations, Security training content, Adaptive learning. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Kroll
Kroll offers a portfolio covering investigating and managing cybersecurity incidents, adding expert monitoring and response to supported telemetry and assessing weaknesses and validating attack possibilities. The entries in this catalog include Kroll Incident Response, Kroll Managed Detection and Response and Kroll Penetration Testing. Kroll Incident Response focuses on cyber incident investigation and containment. Kroll Managed Detection and Response focuses on managed threat monitoring and response. Kroll Penetration Testing focuses on application and infrastructure security testing. When reviewing Kroll, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for engagement scope, evidence handling, response authority and the responsibilities of internal and external responders. Portfolio detail - Kroll Incident Response: the catalog lists Incident investigation, Containment planning, Digital evidence analysis. - Kroll Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Response and containment support. - Kroll Penetration Testing: the catalog lists Authorized security testing, Exploitability validation, Application security testing. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
LevelBlue
LevelBlue offers a portfolio covering investigating and managing cybersecurity incidents and adding expert monitoring and response to supported telemetry. The entries in this catalog include LevelBlue Digital Forensics and Incident Response and LevelBlue Managed Detection and Response. LevelBlue Digital Forensics and Incident Response focuses on breach investigation and incident response. LevelBlue Managed Detection and Response focuses on managed threat detection and response. When reviewing LevelBlue, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for engagement scope, evidence handling, response authority and the responsibilities of internal and external responders. Portfolio detail - LevelBlue Digital Forensics and Incident Response: the catalog lists Incident investigation, Digital evidence analysis, Incident readiness services. - LevelBlue Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Threat hunting services. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
LogicGate
LogicGate's catalog is centered on Risk Cloud, security governance and compliance technology addressing coordinating controls, evidence and risk decisions. The product profile covers risk assessment, compliance workflow management, compliance evidence collection, risk assessment workflows and audit preparation. This scope makes the portfolio relevant to teams preparing audits or managing security governance. When reviewing LogicGate, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - Risk Cloud: the catalog lists Compliance evidence collection, Risk assessment workflows, Audit preparation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Logpoint
Logpoint offers a portfolio covering collecting and analyzing security-relevant events and coordinating repeatable security actions across tools. The entries in this catalog include Logpoint SIEM and Logpoint SOAR. Logpoint SIEM focuses on security event correlation and investigation. Logpoint SOAR focuses on security orchestration and response automation. When reviewing Logpoint, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Logpoint SIEM: the catalog lists Security log collection, Response automation, Third-party integrations. - Logpoint SOAR: the catalog lists Workflow orchestration, Tool integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Lookout
Lookout offers a portfolio covering assessing threats affecting employee or customer mobile devices. The entries in this catalog include Lookout Mobile Endpoint Security and Lookout Mobile Threat Defense. Lookout Mobile Endpoint Security focuses on mobile device threat detection and risk assessment. Lookout Mobile Threat Defense focuses on mobile threat protection and device risk detection. When reviewing Lookout, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for device support, privacy settings, enterprise mobility integration and the handling of detected risk. Portfolio detail - Lookout Mobile Endpoint Security: the catalog lists Mobile threat detection, Application risk assessment, Phishing protection. - Lookout Mobile Threat Defense: the catalog lists Mobile threat detection, Application risk assessment, Device posture visibility. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Malwarebytes
Malwarebytes offers a portfolio covering endpoint protection and incident investigation and adding expert monitoring and response to supported telemetry. The entries in this catalog include Malwarebytes ThreatDown and ThreatDown MDR. Malwarebytes ThreatDown focuses on business endpoint protection and threat response. ThreatDown MDR focuses on managed endpoint threat monitoring and response. When reviewing Malwarebytes, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - Malwarebytes ThreatDown: the catalog lists Endpoint detection and response, Threat hunting, Malware prevention. - ThreatDown MDR: the catalog lists Managed threat monitoring, Human-led investigation, Response and containment support. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
ManageEngine
ManageEngine offers a portfolio covering authentication, access policy or identity lifecycle administration, keeping supported software and devices maintained, collecting and analyzing security-relevant events and controlling elevated credentials and privileged sessions. The entries in this catalog include ADManager Plus, Endpoint Central, Log360 and PAM360. ADManager Plus focuses on directory administration and identity reporting. Endpoint Central focuses on endpoint administration and patch deployment. Log360 focuses on security log analysis and incident monitoring. When reviewing ManageEngine, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - ADManager Plus: the catalog lists Identity lifecycle management, Directory integration. - Endpoint Central: the catalog lists Policy-driven automation, Patch compliance reporting. - Log360: the catalog lists Security log collection, Behavior analytics, Response automation. - PAM360: the catalog lists Central privileged credential vault, Privileged session supervision, Privileged credential lifecycle. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Mandiant (Google Cloud)
The premier global incident response and threat intelligence firm, now part of Google Cloud, renowned for frontline investigations of major nation-state cyberattacks.
Mend.io
Mend.io offers a portfolio covering assessing cloud exposure or protecting running workloads and finding or addressing weaknesses in software. The entries in this catalog include Mend Container, Mend SAST and Mend SCA. Mend Container focuses on container vulnerability scanning. Mend SAST focuses on source code vulnerability detection. Mend SCA focuses on open-source dependency risk analysis. When reviewing Mend.io, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Mend Container: the catalog lists Container security, Kubernetes security, Vulnerability prioritization. - Mend SAST: the catalog lists Static application security testing, Developer workflow integration. - Mend SCA: the catalog lists Software composition analysis, Developer workflow integration, Reachability analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Menlo Security
Menlo Security's catalog is centered on Menlo Secure Enterprise Browser, enterprise browser security technology addressing applying policy to business browsing and application access. The product profile covers browser isolation, enterprise browsing protection, enterprise browsing policies, browser data protection and identity-aware application access. This scope makes the portfolio relevant to organizations governing browser-based work. When reviewing Menlo Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for application compatibility, browser deployment, data-handling policies and the experience on managed or personal devices. Portfolio detail - Menlo Secure Enterprise Browser: the catalog lists Enterprise browsing policies, Browser data protection, Identity-aware application access. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Microsoft
Microsoft offers a portfolio covering assessing cloud exposure or protecting running workloads, endpoint protection and incident investigation, authentication, access policy or identity lifecycle administration, understanding sensitive information and controlling its exposure and collecting and analyzing security-relevant events. The entries in this catalog include Microsoft Defender for Cloud, Microsoft Defender for Endpoint, Microsoft Entra ID, Microsoft Purview and Microsoft Sentinel. Microsoft Defender for Cloud focuses on cloud security posture and workload protection. Microsoft Defender for Endpoint focuses on endpoint protection and threat investigation. Microsoft Entra ID focuses on identity management and access control. When reviewing Microsoft, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Microsoft Defender for Cloud: the catalog lists Azure and multicloud posture, Cloud configuration findings, Defender workload protection plans. - Microsoft Defender for Endpoint: the catalog lists Automated investigation and remediation, Endpoint detection and response, Ransomware protection. - Microsoft Entra ID: the catalog lists Conditional-access policy, Single sign-on, Multifactor authentication. - Microsoft Purview: the catalog lists Data security and compliance portfolio, Sensitive data discovery, Data classification. - Microsoft Sentinel: the catalog lists Analytics and playbook workflows, Third-party integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Mimecast
Mimecast offers a portfolio covering improving how employees recognize and handle security risks and protecting or governing business messaging. The entries in this catalog include Mimecast Awareness Training, Mimecast Cloud Archive and Mimecast Email Security. Mimecast Awareness Training focuses on security behavior education and phishing simulation. Mimecast Cloud Archive focuses on email retention and archive search. Mimecast Email Security focuses on email threat detection and phishing protection. When reviewing Mimecast, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for training relevance, simulation design, reporting methods and the treatment of employee information. Portfolio detail - Mimecast Awareness Training: the catalog lists Security training content, Adaptive learning, User risk insights. - Mimecast Cloud Archive: the catalog lists Archived correspondence search, Retention and e-discovery workflows, Email retention and search. - Mimecast Email Security: the catalog lists Phishing detection, Business email compromise detection, Attachment threat analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
N-able
N-able offers a portfolio covering adding expert monitoring and response to supported telemetry, connecting security signals across supported domains, protecting recoverable data and organizing restoration, keeping supported software and devices maintained and organizing access to shared or individual credentials. The entries in this catalog include Adlumin MDR, Adlumin XDR, Cove Data Protection, N-able N-central, N-able N-sight and N-able Passportal. Adlumin MDR focuses on managed threat detection and response. Adlumin XDR focuses on cross-domain threat detection and security investigation. Cove Data Protection focuses on cloud-managed backup and recovery. When reviewing N-able, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Portfolio detail - Adlumin MDR: the catalog lists Managed threat monitoring, Response and containment support, Incident communication. - Adlumin XDR: the catalog lists Cross-domain detection, Automated response, Threat hunting. - Cove Data Protection: the catalog lists Backup and restore workflows, Ransomware recovery support, Immutable storage options. - N-able N-central: the catalog lists Automated patch deployment, Remote endpoint management, Policy-driven automation. - N-able N-sight: the catalog lists Automated patch deployment, Remote endpoint management, Policy-driven automation. - N-able Passportal: the catalog lists Encrypted password vaults, Administrative policies, Password generation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
NCC Group
NCC Group offers a portfolio covering investigating and managing cybersecurity incidents and assessing weaknesses and validating attack possibilities. The entries in this catalog include Incident Response and Penetration Testing. Incident Response focuses on incident investigation and containment assistance. Penetration Testing focuses on authorized application and infrastructure security testing. When reviewing NCC Group, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for engagement scope, evidence handling, response authority and the responsibilities of internal and external responders. Portfolio detail - Incident Response: the catalog lists Incident investigation, Containment planning, Recovery assistance. - Penetration Testing: the catalog lists Authorized security testing, Exploitability validation, Attack path assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
NETSCOUT
NETSCOUT offers a portfolio covering protecting availability during malicious traffic floods. The entries in this catalog include Arbor Edge Defense, Arbor Sightline and Arbor TMS. Arbor Edge Defense focuses on network edge attack filtering and ddos protection. Arbor Sightline focuses on network traffic analysis and ddos detection. Arbor TMS focuses on ddos traffic scrubbing and attack mitigation. When reviewing NETSCOUT, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for traffic routing, attack coverage, mitigation activation and communication arrangements during an attack. Portfolio detail - Arbor Edge Defense: the catalog lists DDoS attack detection, Mitigation orchestration. - Arbor Sightline: the catalog lists DDoS attack detection, Attack visibility and reporting, Mitigation orchestration. - Arbor TMS: the catalog lists DDoS attack detection, Attack visibility and reporting, Mitigation orchestration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
NSFOCUS
NSFOCUS offers a portfolio covering protecting availability during malicious traffic floods and applying security rules to application requests. The entries in this catalog include NSFOCUS ADS and NSFOCUS WAF. NSFOCUS ADS focuses on network ddos detection and mitigation. NSFOCUS WAF focuses on web application traffic inspection and attack filtering. When reviewing NSFOCUS, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for traffic routing, attack coverage, mitigation activation and communication arrangements during an attack. Portfolio detail - NSFOCUS ADS: the catalog lists DDoS attack detection, Network-layer protection, Attack visibility and reporting. - NSFOCUS WAF: the catalog lists Web request filtering, API traffic protection, DDoS mitigation integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
NTT DATA
NTT DATA offers a portfolio covering assessing priorities and planning security improvements and supporting ongoing protection and security operations. The entries in this catalog include Cybersecurity Consulting and Managed Security Services. Cybersecurity Consulting focuses on security strategy and risk assessment advisory. Managed Security Services focuses on security monitoring and managed protection operations. When reviewing NTT DATA, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for the engagement deliverables, access to relevant evidence, decision responsibilities and the criteria used to measure progress. Portfolio detail - Cybersecurity Consulting: the catalog lists Security strategy assessment, Security strategy advice. - Managed Security Services: the catalog lists Managed security monitoring, Security operations support, Threat detection and investigation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
NetSPI LLC
Enterprise security testing and attack surface management leader that pioneered Penetration Testing as a Service (PTaaS) delivered via the NetSPI Platform.
Netskope
Netskope offers a portfolio covering understanding sensitive information and controlling its exposure and applying access policy to users, applications or traffic. The entries in this catalog include Netskope Data Loss Prevention, Netskope One SSE and Netskope Private Access. Netskope Data Loss Prevention focuses on sensitive data discovery and movement controls. Netskope One SSE focuses on cloud access security and secure web gateway controls. Netskope Private Access focuses on zero trust access to private applications. When reviewing Netskope, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - Netskope Data Loss Prevention: the catalog lists Sensitive data discovery, Data classification, Data loss prevention. - Netskope One SSE: the catalog lists Zero trust network access, Secure web gateway, Cloud access security broker. - Netskope Private Access: the catalog lists Zero trust network access, Private application access, Remote workforce access. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Netwrix
Netwrix offers a portfolio covering understanding sensitive information and controlling its exposure and controlling elevated credentials and privileged sessions. The entries in this catalog include Netwrix Auditor, Netwrix Data Classification and Netwrix Privilege Secure. Netwrix Auditor focuses on change auditing and sensitive access visibility. Netwrix Data Classification focuses on sensitive data discovery and classification. Netwrix Privilege Secure focuses on privileged access control and session protection. When reviewing Netwrix, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - Netwrix Auditor: the catalog lists Configuration change auditing, Audit search and reporting, Data access visibility. - Netwrix Data Classification: the catalog lists Sensitive data discovery, Data classification, Data protection policy management. - Netwrix Privilege Secure: the catalog lists Privileged credential vaulting, Just-in-time access, Least-privilege enforcement. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
NinjaOne
NinjaOne offers a portfolio covering protecting recoverable data and organizing restoration and keeping supported software and devices maintained. The entries in this catalog include NinjaOne Backup and NinjaOne Endpoint Management. NinjaOne Backup focuses on endpoint backup and recovery management. NinjaOne Endpoint Management focuses on endpoint administration and software patching. When reviewing NinjaOne, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for protected workloads, retention settings, recovery location and a practical restore test using representative business data. Portfolio detail - NinjaOne Backup: the catalog lists Backup and restore workflows, Ransomware recovery support, Recovery orchestration. - NinjaOne Endpoint Management: the catalog lists Automated patch deployment, Remote endpoint management, Endpoint inventory. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Nord Security
Nord Security offers a portfolio covering applying access policy to users, applications or traffic and organizing access to shared or individual credentials. The entries in this catalog include NordLayer and NordPass. NordLayer focuses on business network access security. NordPass focuses on business password storage and credential sharing. When reviewing Nord Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for identity integration, application reachability, traffic routing and the user experience during a staged rollout. Portfolio detail - NordLayer: the catalog lists Business network access policy, Encrypted network connectivity, Gateway and network configuration. - NordPass: the catalog lists Encrypted password vaults, Secure credential sharing, Credential risk assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Nozomi Networks
Nozomi Networks offers a portfolio covering understanding or protecting industrial and connected assets. The entries in this catalog include Guardian and Vantage. Guardian focuses on operational network asset monitoring and threat detection. Vantage focuses on cloud-managed operational technology security visibility. When reviewing Nozomi Networks, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Portfolio detail - Guardian: the catalog lists Operational asset discovery, Industrial threat monitoring, Operational exposure assessment. - Vantage: the catalog lists Operational asset discovery, Industrial threat monitoring, Operational exposure assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Nudge Security
Nudge Security's catalog is centered on Nudge Security, SaaS security technology addressing assessing application usage, configuration or identity risk. The product profile covers saas discovery, application risk management, saas application discovery, saas configuration assessment and saas identity risk analysis. This scope makes the portfolio relevant to teams overseeing business SaaS applications. When reviewing Nudge Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported services, connector permissions, findings ownership and the response process for risky access or configurations. Portfolio detail - Nudge Security: the catalog lists SaaS application discovery, SaaS configuration assessment, SaaS identity risk analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
OPSWAT
OPSWAT offers a portfolio covering authentication, access policy or identity lifecycle administration and inspecting or reconstructing files before they are used. The entries in this catalog include MetaAccess, MetaDefender Core and MetaDefender Kiosk. MetaAccess focuses on device posture assessment and access controls. MetaDefender Core focuses on file threat scanning and content sanitization. MetaDefender Kiosk focuses on portable media inspection and threat prevention. When reviewing OPSWAT, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - MetaAccess: the catalog lists Device posture assessment, Endpoint compliance checks, Access policy integration. - MetaDefender Core: the catalog lists Multiengine file scanning, Content disarm and reconstruction, File inspection workflows. - MetaDefender Kiosk: the catalog lists Portable-media intake screening, Content disarm and reconstruction, File policy controls. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Obsidian Security
Obsidian Security's catalog is centered on Obsidian Security, SaaS security technology addressing assessing application usage, configuration or identity risk. The product profile covers saas identity risk monitoring, threat detection, saas application discovery, saas configuration assessment and saas identity risk analysis. This scope makes the portfolio relevant to teams overseeing business SaaS applications. When reviewing Obsidian Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported services, connector permissions, findings ownership and the response process for risky access or configurations. Portfolio detail - Obsidian Security: the catalog lists SaaS application discovery, SaaS configuration assessment, SaaS identity risk analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Okta
Okta offers a portfolio covering authentication, access policy or identity lifecycle administration. The entries in this catalog include Auth0, Okta Adaptive MFA, Okta Identity Governance and Okta Single Sign-On. Auth0 focuses on customer authentication and application identity management. Okta Adaptive MFA focuses on risk-aware multifactor authentication. Okta Identity Governance focuses on access requests and identity lifecycle governance. When reviewing Okta, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for authentication methods, application integration, tenant configuration and how account recovery and login failures are handled. Portfolio detail - Auth0: the catalog lists Application authentication workflows, Single sign-on, Adaptive authentication. - Okta Adaptive MFA: the catalog lists Single sign-on, Multifactor authentication, Adaptive authentication. - Okta Identity Governance: the catalog lists Identity lifecycle management, Access certification, Directory integration. - Okta Single Sign-On: the catalog lists Single sign-on, Adaptive authentication, Identity threat detection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Oligo Security
Oligo Security's catalog is centered on Oligo Cloud Application Detection and Response, application security technology addressing finding or addressing weaknesses in software. The product profile covers application runtime threat detection, exploit investigation, software composition analysis, dependency vulnerability analysis and developer workflow integration. This scope makes the portfolio relevant to development and application security teams. When reviewing Oligo Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - Oligo Cloud Application Detection and Response: the catalog lists Software composition analysis, Dependency vulnerability analysis, Developer workflow integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
One Identity
One Identity offers a portfolio covering authentication, access policy or identity lifecycle administration and controlling elevated credentials and privileged sessions. The entries in this catalog include Active Roles, Identity Manager and Safeguard. Active Roles focuses on directory administration and delegated identity management. Identity Manager focuses on identity lifecycle governance and access certification. Safeguard focuses on privileged credential and session management. When reviewing One Identity, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - Active Roles: the catalog lists Identity lifecycle management, Directory integration. - Identity Manager: the catalog lists Access governance reviews, Role and permission administration, Directory integration. - Safeguard: the catalog lists Privileged credential vaulting, Just-in-time access, Least-privilege enforcement. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
OneTrust
OneTrust offers a portfolio covering coordinating controls, evidence and risk decisions. The entries in this catalog include OneTrust Privacy Automation and OneTrust Third-Party Management. OneTrust Privacy Automation focuses on privacy operations and compliance workflow management. OneTrust Third-Party Management focuses on third-party risk assessment and governance. When reviewing OneTrust, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - OneTrust Privacy Automation: the catalog lists Risk assessment workflows, Framework mapping, Third-party assessments. - OneTrust Third-Party Management: the catalog lists Compliance evidence collection, Control monitoring, Risk assessment workflows. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
OpenText
OpenText offers a portfolio covering protecting recoverable data and organizing restoration and endpoint protection and incident investigation. The entries in this catalog include OpenText Carbonite Endpoint Backup and Webroot Business Endpoint Protection. OpenText Carbonite Endpoint Backup focuses on endpoint data backup and recovery. Webroot Business Endpoint Protection focuses on business endpoint malware prevention and protection. When reviewing OpenText, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for protected workloads, retention settings, recovery location and a practical restore test using representative business data. Portfolio detail - OpenText Carbonite Endpoint Backup: the catalog lists Backup and restore workflows, Endpoint backup. - Webroot Business Endpoint Protection: the catalog lists Business endpoint threat protection, Cloud-managed administration, Endpoint protection policy. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Orange Cyberdefense
Orange Cyberdefense offers a portfolio covering investigating and managing cybersecurity incidents, adding expert monitoring and response to supported telemetry and assessing weaknesses and validating attack possibilities. The entries in this catalog include Incident Response, Managed Detection and Response and Penetration Testing. Incident Response focuses on breach investigation and containment support. Managed Detection and Response focuses on managed threat detection and response. Penetration Testing focuses on authorized security testing and vulnerability validation. When reviewing Orange Cyberdefense, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for engagement scope, evidence handling, response authority and the responsibilities of internal and external responders. Portfolio detail - Incident Response: the catalog lists Incident investigation, Containment planning, Digital evidence analysis. - Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Response and containment support. - Penetration Testing: the catalog lists Authorized security testing, Exploitability validation, Application security testing. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Orca Security
Orca Security's catalog is centered on Orca Security Platform, cloud security technology addressing assessing cloud exposure or protecting running workloads. The product profile covers cloud asset visibility, risk prioritization, agentless cloud assessment, cloud security posture management and cloud entitlement analysis. This scope makes the portfolio relevant to cloud and security teams working across accounts and workloads. When reviewing Orca Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Orca Security Platform: the catalog lists Agentless cloud assessment, Cloud security posture management, Cloud entitlement analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
PDQ
PDQ offers a portfolio covering keeping supported software and devices maintained and establishing an inventory and identifying security coverage gaps. The entries in this catalog include PDQ Connect, PDQ Deploy and PDQ Inventory. PDQ Connect focuses on cloud-managed endpoint deployment and patching. PDQ Deploy focuses on software deployment and endpoint patching. PDQ Inventory focuses on endpoint inventory and software visibility. When reviewing PDQ, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for application coverage, deployment scheduling, restart behavior and a pilot group that represents production devices. Portfolio detail - PDQ Connect: the catalog lists Automated patch deployment, Third-party application patching, Endpoint inventory. - PDQ Deploy: the catalog lists Package-based software deployment, Automated patch deployment, Third-party application patching. - PDQ Inventory: the catalog lists Endpoint collections and queries, Asset inventory consolidation, Data source integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Palo Alto Networks
Palo Alto Networks offers a portfolio covering assessing cloud exposure or protecting running workloads, endpoint protection and incident investigation, collecting and analyzing security-relevant events, managing protected keys, certificates or signing operations, applying access policy to users, applications or traffic, assessing or protecting AI models, applications or agents, applying policy to business browsing and application access and investigating and managing cybersecurity incidents. The entries in this catalog include Cortex Cloud, Cortex XDR, Cortex XSIAM, Next-Generation Trust Security, Prisma Access and Prisma AIRS, with 2 additional product or service profiles. Cortex Cloud focuses on cloud posture management and runtime protection. Cortex XDR focuses on endpoint detection and cross-domain threat investigation. Cortex XSIAM focuses on security operations analytics and automation. When reviewing Palo Alto Networks, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Cortex Cloud: the catalog lists Cloud security posture management, Cloud workload protection, Cloud entitlement analysis. - Cortex XDR: the catalog lists Threat hunting, Attack timeline analysis, Malware prevention. - Cortex XSIAM: the catalog lists Event correlation, Detection rules and analytics, Threat hunting. - Next-Generation Trust Security: the catalog lists Certificate lifecycle management, Certificate discovery, Public key infrastructure services. - Prisma Access: the catalog lists Zero trust network access, Cloud access security broker, Data loss prevention controls. - Prisma AIRS: the catalog lists AI application protection, Model security assessment, Prompt-related threat assessment. - Prisma Browser: the catalog lists Enterprise browsing policies, Browser data protection, Identity-aware application access. - Unit 42 Incident Response: the catalog lists Incident investigation, Containment planning, Recovery assistance. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Panorays
Panorays's catalog is centered on Panorays, external cyber risk assessment technology addressing reviewing security risk associated with organizations and suppliers. The product profile covers third-party security assessment, supplier risk management, external security assessment, third-party risk monitoring and risk scoring. This scope makes the portfolio relevant to teams overseeing third-party security risk. When reviewing Panorays, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Portfolio detail - Panorays: the catalog lists External security assessment, Third-party risk monitoring, Risk scoring. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Panther
Panther's catalog is centered on Panther, security analytics technology addressing collecting and analyzing security-relevant events. The product profile covers cloud security analytics, detection engineering, detection rules and analytics and threat hunting. This scope makes the portfolio relevant to security operations teams investigating alerts and incidents. When reviewing Panther, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Panther: the catalog lists Detection rules and analytics, Threat hunting. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Pentera
Pentera's catalog is centered on Pentera Platform, authorized security testing technology or service addressing assessing weaknesses and validating attack possibilities. The product profile covers automated security testing, exposure validation, authorized security testing, exploitability validation and attack path assessment. This scope makes the portfolio relevant to organizations defining an approved security assessment scope. When reviewing Pentera, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Portfolio detail - Pentera Platform: the catalog lists Authorized security testing, Exploitability validation, Attack path assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Picus Security
Picus Security's catalog is centered on Picus Security Validation Platform, security control validation technology addressing exercising attack scenarios against defensive controls. The product profile covers attack simulation, security control assessment, security control validation, attack scenario simulation and att&ck-aligned testing. This scope makes the portfolio relevant to security teams evaluating detection and prevention coverage. When reviewing Picus Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for approved test scope, scenario relevance, telemetry availability and the process for validating improvements after changes. Portfolio detail - Picus Security Validation Platform: the catalog lists Security control validation, Attack scenario simulation, ATT&CK-aligned testing. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Ping Identity
Ping Identity offers a portfolio covering authentication, access policy or identity lifecycle administration. The entries in this catalog include PingAccess, PingFederate, PingID and PingOne. PingAccess focuses on application access control and policy enforcement. PingFederate focuses on federated authentication and single sign-on. PingID focuses on multifactor authentication and login protection. When reviewing Ping Identity, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - PingAccess: the catalog lists Single sign-on, Federated authentication, Directory integration. - PingFederate: the catalog lists Single sign-on, Adaptive authentication, Identity lifecycle management. - PingID: the catalog lists Multifactor authentication methods, Application authentication integration, Authentication policy administration. - PingOne: the catalog lists Identity lifecycle management, Directory integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
PortSwigger
PortSwigger offers a portfolio covering assessing weaknesses and validating attack possibilities and finding or addressing weaknesses in software. The entries in this catalog include Burp Suite Community Edition, Burp Suite DAST and Burp Suite Professional. Burp Suite Community Edition focuses on manual web application traffic inspection and testing. Burp Suite DAST focuses on automated dynamic application security testing. Burp Suite Professional focuses on web application security testing. When reviewing PortSwigger, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for test authorization, target coverage, operational safeguards and the quality of findings and remediation verification. Portfolio detail - Burp Suite Community Edition: the catalog lists Manual web proxy testing, Authorized security testing, Application security testing. - Burp Suite DAST: the catalog lists Scheduled application scanning, Dynamic application security testing, Developer workflow integration. - Burp Suite Professional: the catalog lists Intercepting web testing proxy, Automated web vulnerability scanning, Authorized security testing. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
ProcessUnity
ProcessUnity's catalog is centered on ProcessUnity Third-Party Risk Management, security governance and compliance technology addressing coordinating controls, evidence and risk decisions. The product profile covers supplier risk assessment, governance workflows, compliance evidence collection, risk assessment workflows and third-party assessments. This scope makes the portfolio relevant to teams preparing audits or managing security governance. When reviewing ProcessUnity, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - ProcessUnity Third-Party Risk Management: the catalog lists Compliance evidence collection, Risk assessment workflows, Third-party assessments. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Proofpoint
Proofpoint offers a portfolio covering protecting or governing business messaging, understanding sensitive information and controlling its exposure and improving how employees recognize and handle security risks. The entries in this catalog include Email Protection, Proofpoint Information Protection, Proofpoint Insider Threat Management and Proofpoint Security Awareness Training. Email Protection focuses on email filtering and targeted attack protection. Proofpoint Information Protection focuses on sensitive data monitoring and loss prevention. Proofpoint Insider Threat Management focuses on insider activity visibility and investigation. When reviewing Proofpoint, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Portfolio detail - Email Protection: the catalog lists Phishing detection, Business email compromise detection, Account takeover detection. - Proofpoint Information Protection: the catalog lists Data loss prevention, Insider risk investigation. - Proofpoint Insider Threat Management: the catalog lists Sensitive data discovery, Data classification, Data access visibility. - Proofpoint Security Awareness Training: the catalog lists Phishing simulations, Security training content, Adaptive learning. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Qualys
Qualys offers a portfolio covering coordinating controls, evidence and risk decisions, assessing cloud exposure or protecting running workloads, identifying and prioritizing security weaknesses and finding or addressing weaknesses in software. The entries in this catalog include Policy Compliance, TotalCloud, VMDR and Web Application Scanning. Policy Compliance focuses on configuration compliance assessment and reporting. TotalCloud focuses on cloud posture assessment and workload risk visibility. VMDR focuses on vulnerability management and remediation prioritization. When reviewing Qualys, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - Policy Compliance: the catalog lists Control monitoring, Audit preparation, Policy and task coordination. - TotalCloud: the catalog lists Cloud security posture management, Container security, Cloud compliance checks. - VMDR: the catalog lists Asset discovery, Vulnerability scanning, Risk-based prioritization. - Web Application Scanning: the catalog lists Dynamic application security testing, Developer workflow integration, CI/CD integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
RSA
RSA offers a portfolio covering authentication, access policy or identity lifecycle administration. The entries in this catalog include RSA Governance and Lifecycle, RSA ID Plus and RSA SecurID. RSA Governance and Lifecycle focuses on access governance and identity lifecycle control. RSA ID Plus focuses on identity authentication and access security. RSA SecurID focuses on multifactor authentication and credential protection. When reviewing RSA, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - RSA Governance and Lifecycle: the catalog lists Identity access certification, Identity lifecycle workflows, Role-based access governance. - RSA ID Plus: the catalog lists Multifactor authentication, Passwordless authentication, Directory integration. - RSA SecurID: the catalog lists Multifactor authentication, Passwordless authentication, Directory integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Radware
Radware offers a portfolio covering distinguishing and controlling abusive automated requests, applying security rules to application requests and protecting availability during malicious traffic floods. The entries in this catalog include Bot Manager, Cloud WAF and DefensePro. Bot Manager focuses on automated traffic classification and bot mitigation. Cloud WAF focuses on cloud-delivered web application attack protection. DefensePro focuses on network ddos detection and mitigation. When reviewing Radware, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for integration paths, treatment of legitimate automation, challenge behavior and the effect on real users. Portfolio detail - Bot Manager: the catalog lists Automated traffic detection, Account abuse protection, Scraping abuse controls. - Cloud WAF: the catalog lists Web application request protection, Application policy management, Web request filtering. - DefensePro: the catalog lists DDoS attack detection, Mitigation orchestration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Rapid7
Rapid7 offers a portfolio covering finding or addressing weaknesses in software, coordinating repeatable security actions across tools, collecting and analyzing security-relevant events, identifying and prioritizing security weaknesses and adding expert monitoring and response to supported telemetry. The entries in this catalog include InsightAppSec, InsightConnect, InsightIDR, InsightVM and Rapid7 Managed Detection and Response. InsightAppSec focuses on dynamic web application vulnerability testing. InsightConnect focuses on security workflow automation and integration. InsightIDR focuses on security detection and incident investigation. When reviewing Rapid7, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - InsightAppSec: the catalog lists Dynamic application security testing, Developer workflow integration, Finding triage and remediation. - InsightConnect: the catalog lists Workflow orchestration, Alert enrichment. - InsightIDR: the catalog lists Security log investigation, User and entity behavior analytics, Detection and response workflows. - InsightVM: the catalog lists Vulnerability scanning, Risk-based prioritization. - Rapid7 Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Response and containment support. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Recorded Future
Recorded Future's catalog is centered on Recorded Future Intelligence Cloud, threat intelligence technology or service addressing providing external threat context for analysis and decisions. The product profile covers threat intelligence, external risk analysis, linked intelligence modules, external threat context and threat intelligence collection. This scope makes the portfolio relevant to analysts investigating adversaries, indicators or emerging exposures. When reviewing Recorded Future, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source relevance, freshness, integration methods and how intelligence changes a specific investigation or protection decision. Portfolio detail - Recorded Future Intelligence Cloud: the catalog lists Linked intelligence modules, External threat context, Threat intelligence collection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Red Canary, Inc.
Pioneer of Managed Detection and Response (MDR) that integrates across endpoint, cloud, and identity telemetry with human confirmation of every threat.
ReversingLabs
ReversingLabs offers a portfolio covering examining suspicious files or observed execution behavior and assessing the trust and risk of software artifacts. The entries in this catalog include Spectra Analyze and Spectra Assure. Spectra Analyze focuses on file threat analysis and malware investigation. Spectra Assure focuses on software package risk analysis and supply chain protection. When reviewing ReversingLabs, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported samples, analysis visibility, submission privacy and how findings are reviewed before operational decisions. Portfolio detail - Spectra Analyze: the catalog lists Static file analysis, Threat indicator extraction, Analysis reporting. - Spectra Assure: the catalog lists Software package inspection, Malicious component detection, Release risk assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
RiskRecon
RiskRecon's catalog is centered on RiskRecon, external cyber risk assessment technology addressing reviewing security risk associated with organizations and suppliers. The product profile covers third-party security assessment, external risk monitoring, external security assessment, third-party risk monitoring and risk scoring. This scope makes the portfolio relevant to teams overseeing third-party security risk. When reviewing RiskRecon, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Portfolio detail - RiskRecon: the catalog lists External security assessment, Third-party risk monitoring, Risk scoring. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Rubrik
Rubrik's catalog is centered on Rubrik Security Cloud, backup and recovery technology addressing protecting recoverable data and organizing restoration. The product profile covers data protection, cyber recovery management, backup and restore workflows, ransomware recovery support and immutable storage options. This scope makes the portfolio relevant to IT teams accountable for data resilience. When reviewing Rubrik, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for protected workloads, retention settings, recovery location and a practical restore test using representative business data. Portfolio detail - Rubrik Security Cloud: the catalog lists Backup and restore workflows, Ransomware recovery support, Immutable storage options. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
SOCRadar
SOCRadar's catalog is centered on SOCRadar Extended Threat Intelligence, threat intelligence technology or service addressing providing external threat context for analysis and decisions. The product profile covers external threat intelligence, digital risk monitoring, threat intelligence collection, threat indicator enrichment and adversary and campaign context. This scope makes the portfolio relevant to analysts investigating adversaries, indicators or emerging exposures. When reviewing SOCRadar, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source relevance, freshness, integration methods and how intelligence changes a specific investigation or protection decision. Portfolio detail - SOCRadar Extended Threat Intelligence: the catalog lists Threat intelligence collection, Threat indicator enrichment, Adversary and campaign context. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
SafeBreach
SafeBreach's catalog is centered on SafeBreach, security control validation technology addressing exercising attack scenarios against defensive controls. The product profile covers breach, attack simulation, security control validation, attack scenario simulation and att&ck-aligned testing. This scope makes the portfolio relevant to security teams evaluating detection and prevention coverage. When reviewing SafeBreach, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for approved test scope, scenario relevance, telemetry availability and the process for validating improvements after changes. Portfolio detail - SafeBreach: the catalog lists Security control validation, Attack scenario simulation, ATT&CK-aligned testing. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
SailPoint
SailPoint offers a portfolio covering authentication, access policy or identity lifecycle administration. The entries in this catalog include Identity Security Cloud and IdentityIQ. Identity Security Cloud focuses on identity governance and access lifecycle management. IdentityIQ focuses on enterprise access governance and certification. When reviewing SailPoint, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - Identity Security Cloud: the catalog lists SailPoint identity governance, Access certification workflows, Identity lifecycle management. - IdentityIQ: the catalog lists Identity lifecycle management, Access certification. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Salt Security
Salt Security's catalog is centered on Salt Security API Protection Platform, API security technology addressing understanding and protecting application interfaces. The product profile covers api inventory, behavioral attack detection, api discovery and inventory, api posture and exposure assessment and behavioral api attack detection. This scope makes the portfolio relevant to security teams responsible for externally or internally exposed APIs. When reviewing Salt Security, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for API discovery coverage, traffic collection, authentication context and the enforcement model for live applications. Portfolio detail - Salt Security API Protection Platform: the catalog lists API discovery and inventory, API posture and exposure assessment, Behavioral API attack detection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Sample Cedar Security
Cloud infrastructure posture monitoring and entitlement analysis test fixture.
Sangfor Technologies
Sangfor Technologies offers a portfolio covering connecting security signals across supported domains, endpoint protection and incident investigation and controlling communications and inspecting traffic. The entries in this catalog include Sangfor Athena XDR, Sangfor Endpoint Secure and Sangfor Network Secure. Sangfor Athena XDR focuses on cross-domain threat detection and response. Sangfor Endpoint Secure focuses on endpoint prevention and threat response. Sangfor Network Secure focuses on network firewall controls and attack protection. When reviewing Sangfor Technologies, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for telemetry coverage, correlation quality, response permissions and integration with existing protection products. Portfolio detail - Sangfor Athena XDR: the catalog lists Cross-domain detection, Incident correlation, Endpoint telemetry. - Sangfor Endpoint Secure: the catalog lists Endpoint detection and response, Ransomware protection, Malware prevention. - Sangfor Network Secure: the catalog lists Intrusion prevention, Application-aware policy, SD-WAN functions. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Saviynt
Saviynt's catalog is centered on Saviynt Identity Cloud, identity and access management technology addressing authentication, access policy or identity lifecycle administration. The product profile covers identity governance, access risk management and converged identity governance. This scope makes the portfolio relevant to identity teams connecting users and applications. When reviewing Saviynt, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - Saviynt Identity Cloud: the catalog lists Converged identity governance. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Scrut Automation
Scrut Automation's catalog is centered on Scrut, security governance and compliance technology addressing coordinating controls, evidence and risk decisions. The product profile covers compliance evidence collection, risk management, control monitoring, audit preparation and framework mapping. This scope makes the portfolio relevant to teams preparing audits or managing security governance. When reviewing Scrut Automation, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - Scrut: the catalog lists Control monitoring, Audit preparation, Framework mapping. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Secureframe
Secureframe's catalog is centered on Secureframe, security governance and compliance technology addressing coordinating controls, evidence and risk decisions. The product profile covers compliance evidence management, security control tracking, compliance evidence collection, control monitoring and audit preparation. This scope makes the portfolio relevant to teams preparing audits or managing security governance. When reviewing Secureframe, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - Secureframe: the catalog lists Compliance evidence collection, Control monitoring, Audit preparation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Secureworks, Inc.
Cybersecurity leader powered by the Taegis platform, providing Taegis ManagedXDR, Counter Threat Unit (CTU) research, and Adversary Pursuit offensive testing.
Securiti
Securiti's catalog is centered on Securiti Data Command Center, data security technology addressing understanding sensitive information and controlling its exposure. The product profile covers data visibility, security governance, sensitive data discovery, data classification and data access visibility. This scope makes the portfolio relevant to teams responsible for protecting business data. When reviewing Securiti, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - Securiti Data Command Center: the catalog lists Sensitive data discovery, Data classification, Data access visibility. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
SecurityScorecard
SecurityScorecard's catalog is centered on SecurityScorecard Ratings, external cyber risk assessment technology addressing reviewing security risk associated with organizations and suppliers. The product profile covers external security posture ratings, third-party risk monitoring, external security assessment, risk scoring and security findings visibility. This scope makes the portfolio relevant to teams overseeing third-party security risk. When reviewing SecurityScorecard, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Portfolio detail - SecurityScorecard Ratings: the catalog lists External security assessment, Third-party risk monitoring, Risk scoring. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Securonix
Securonix's catalog is centered on Securonix Unified Defense SIEM, security analytics technology addressing collecting and analyzing security-relevant events. The product profile covers security event analytics, threat investigation, behavior analytics, threat hunting and response automation. This scope makes the portfolio relevant to security operations teams investigating alerts and incidents. When reviewing Securonix, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Securonix Unified Defense SIEM: the catalog lists Behavior analytics, Threat hunting, Response automation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Sekoia.io
Sekoia.io offers a portfolio covering connecting security signals across supported domains and providing external threat context for analysis and decisions. The entries in this catalog include Sekoia Defend and Sekoia Intelligence. Sekoia Defend focuses on security telemetry analysis and threat response. Sekoia Intelligence focuses on threat intelligence and adversary analysis. When reviewing Sekoia.io, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for telemetry coverage, correlation quality, response permissions and integration with existing protection products. Portfolio detail - Sekoia Defend: the catalog lists Cross-domain detection, Automated response. - Sekoia Intelligence: the catalog lists Threat intelligence collection, Threat intelligence integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Semgrep
Semgrep offers a portfolio covering finding or addressing weaknesses in software and controlling how software obtains and uses credentials. The entries in this catalog include Semgrep Code, Semgrep Secrets and Semgrep Supply Chain. Semgrep Code focuses on source code vulnerability detection. Semgrep Secrets focuses on code secret detection. Semgrep Supply Chain focuses on dependency vulnerability analysis. When reviewing Semgrep, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - Semgrep Code: the catalog lists Rule-based source analysis, Static application security testing, Developer workflow integration. - Semgrep Secrets: the catalog lists Secret validity assessment, Application secret storage, Developer and pipeline integration. - Semgrep Supply Chain: the catalog lists Reachable dependency assessment, Static application security testing, Software composition analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
SentinelOne
SentinelOne offers a portfolio covering collecting and analyzing security-relevant events, assessing cloud exposure or protecting running workloads, endpoint protection and incident investigation and authentication, access policy or identity lifecycle administration. The entries in this catalog include Purple AI, Singularity Cloud Security, Singularity Complete and Singularity Identity. Purple AI focuses on ai-assisted threat hunting and security investigation. Singularity Cloud Security focuses on cloud security posture and workload protection. Singularity Complete focuses on endpoint protection and detection and response. When reviewing SentinelOne, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Purple AI: the catalog lists AI-assisted security investigation, Event correlation, Threat hunting. - Singularity Cloud Security: the catalog lists Cloud security posture management, Cloud workload protection, Cloud entitlement analysis. - Singularity Complete: the catalog lists Storyline investigation context, Endpoint recovery controls, Device control. - Singularity Identity: the catalog lists Conditional access, Identity threat detection, Directory integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Seqrite
Seqrite offers a portfolio covering endpoint protection and incident investigation and connecting security signals across supported domains. The entries in this catalog include Seqrite Endpoint Security and Seqrite XDR. Seqrite Endpoint Security focuses on business endpoint protection and centralized administration. Seqrite XDR focuses on cross-domain threat detection and investigation. When reviewing Seqrite, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - Seqrite Endpoint Security: the catalog lists Device control, Threat hunting. - Seqrite XDR: the catalog lists Cross-domain detection, Incident correlation, Endpoint telemetry. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Snyk
Snyk offers a portfolio covering finding or addressing weaknesses in software and assessing cloud exposure or protecting running workloads. The entries in this catalog include Snyk Code, Snyk Container, Snyk Infrastructure as Code and Snyk Open Source. Snyk Code focuses on source code security analysis. Snyk Container focuses on container image vulnerability analysis. Snyk Infrastructure as Code focuses on infrastructure configuration security analysis. When reviewing Snyk, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - Snyk Code: the catalog lists Developer-oriented static analysis, Static application security testing, Developer workflow integration. - Snyk Container: the catalog lists Container-image assessment, Container security, Kubernetes security. - Snyk Infrastructure as Code: the catalog lists Infrastructure definition checks, Container security, Kubernetes security. - Snyk Open Source: the catalog lists Dependency remediation advice, Software composition analysis, Dependency vulnerability analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
SoSafe
SoSafe's catalog is centered on SoSafe Human Risk Management, security awareness technology or service addressing improving how employees recognize and handle security risks. The product profile covers security awareness training, phishing simulation, phishing simulations, security training content and adaptive learning. This scope makes the portfolio relevant to organizations running employee awareness programs. When reviewing SoSafe, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for training relevance, simulation design, reporting methods and the treatment of employee information. Portfolio detail - SoSafe Human Risk Management: the catalog lists Phishing simulations, Security training content, Adaptive learning. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Sonar
Sonar offers a portfolio covering finding or addressing weaknesses in software. The entries in this catalog include SonarQube Cloud and SonarQube Server. SonarQube Cloud focuses on cloud-managed code quality and vulnerability analysis. SonarQube Server focuses on source code quality and security analysis. When reviewing Sonar, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - SonarQube Cloud: the catalog lists Cloud-managed code analysis, Static application security testing, Software composition analysis. - SonarQube Server: the catalog lists Self-managed code analysis, Static application security testing, Software composition analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
SonicWall
SonicWall offers a portfolio covering endpoint protection and incident investigation, applying access policy to users, applications or traffic and controlling communications and inspecting traffic. The entries in this catalog include SonicWall Capture Client, SonicWall Cloud Secure Edge, SonicWall NSa Series and SonicWall TZ Series. SonicWall Capture Client focuses on endpoint protection and threat response. SonicWall Cloud Secure Edge focuses on zero trust access and secure internet connectivity. SonicWall NSa Series focuses on network firewall protection for larger environments. When reviewing SonicWall, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - SonicWall Capture Client: the catalog lists Endpoint threat prevention, Endpoint detection context, Centralized client administration. - SonicWall Cloud Secure Edge: the catalog lists Zero trust network access, Secure web gateway, Cloud access security broker. - SonicWall NSa Series: the catalog lists Intrusion prevention, VPN connectivity, Web content filtering. - SonicWall TZ Series: the catalog lists VPN connectivity, SD-WAN functions, Web content filtering. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Sophos
Sophos offers a portfolio covering protecting or governing business messaging, endpoint protection and incident investigation, controlling communications and inspecting traffic, investigating and managing cybersecurity incidents, adding expert monitoring and response to supported telemetry and connecting security signals across supported domains. The entries in this catalog include Sophos Email, Sophos Endpoint, Sophos Firewall, Sophos Incident Response, Sophos MDR and Sophos XDR. Sophos Email focuses on email threat protection and phishing defense. Sophos Endpoint focuses on endpoint protection and malware prevention. Sophos Firewall focuses on network traffic inspection and firewall policy. When reviewing Sophos, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Portfolio detail - Sophos Email: the catalog lists Phishing detection, Attachment threat analysis, Message remediation. - Sophos Endpoint: the catalog lists Endpoint detection and response, Threat hunting, Attack timeline analysis. - Sophos Firewall: the catalog lists Network threat inspection, Network access policies, VPN connectivity. - Sophos Incident Response: the catalog lists Incident investigation, Containment planning, Digital evidence analysis. - Sophos MDR: the catalog lists Managed threat monitoring, Human-led investigation, Threat hunting services. - Sophos XDR: the catalog lists Cross-domain detection, Automated response, Third-party security integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Splunk
Splunk offers a portfolio covering collecting and analyzing security-relevant events and coordinating repeatable security actions across tools. The entries in this catalog include Splunk Enterprise Security and Splunk SOAR. Splunk Enterprise Security focuses on security analytics and incident investigation. Splunk SOAR focuses on security workflow orchestration and automation. When reviewing Splunk, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Splunk Enterprise Security: the catalog lists Behavior analytics, Response automation. - Splunk SOAR: the catalog lists Splunk response playbooks, Workflow orchestration, Playbook automation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Sprinto
Sprinto's catalog is centered on Sprinto, security governance and compliance technology addressing coordinating controls, evidence and risk decisions. The product profile covers security compliance monitoring, evidence workflows, control monitoring, risk assessment workflows and audit preparation. This scope makes the portfolio relevant to teams preparing audits or managing security governance. When reviewing Sprinto, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - Sprinto: the catalog lists Control monitoring, Risk assessment workflows, Audit preparation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
StackHawk
StackHawk's catalog is centered on StackHawk, application security technology addressing finding or addressing weaknesses in software. The product profile covers application, api security testing in development workflows, developer workflow integration and finding triage and remediation. This scope makes the portfolio relevant to development and application security teams. When reviewing StackHawk, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - StackHawk: the catalog lists Developer workflow integration, Finding triage and remediation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Stellar Cyber
Stellar Cyber's catalog is centered on Stellar Cyber Open XDR, extended detection and response technology addressing connecting security signals across supported domains. The product profile covers cross-domain threat detection, investigation, cross-domain detection, incident correlation and automated response. This scope makes the portfolio relevant to security operations teams investigating activity that spans multiple systems. When reviewing Stellar Cyber, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for telemetry coverage, correlation quality, response permissions and integration with existing protection products. Portfolio detail - Stellar Cyber Open XDR: the catalog lists Cross-domain detection, Incident correlation, Automated response. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Sumo Logic
Sumo Logic offers a portfolio covering collecting and analyzing security-relevant events and coordinating repeatable security actions across tools. The entries in this catalog include Sumo Logic Cloud SIEM and Sumo Logic Cloud SOAR. Sumo Logic Cloud SIEM focuses on cloud security analytics and incident investigation. Sumo Logic Cloud SOAR focuses on incident workflow automation and security orchestration. When reviewing Sumo Logic, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Sumo Logic Cloud SIEM: the catalog lists Event correlation, Response automation, Third-party integrations. - Sumo Logic Cloud SOAR: the catalog lists Workflow orchestration, Playbook automation, Tool integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Swimlane
Swimlane's catalog is centered on Swimlane Turbine, security workflow automation technology addressing coordinating repeatable security actions across tools. The product profile covers low-code security workflow automation, workflow orchestration, playbook automation, tool integrations and incident case management. This scope makes the portfolio relevant to security operations teams standardizing investigation or response tasks. When reviewing Swimlane, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connector permissions, failure handling, approval checkpoints and a test workflow using the organization's own tools. Portfolio detail - Swimlane Turbine: the catalog lists Workflow orchestration, Playbook automation, Tool integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Sysdig
Sysdig's catalog is centered on Sysdig Secure, cloud security technology addressing assessing cloud exposure or protecting running workloads. The product profile covers cloud workload threat detection, posture assessment, cloud security posture management, cloud workload protection and cloud entitlement analysis. This scope makes the portfolio relevant to cloud and security teams working across accounts and workloads. When reviewing Sysdig, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Sysdig Secure: the catalog lists Cloud security posture management, Cloud workload protection, Cloud entitlement analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
TEHTRIS
TEHTRIS offers a portfolio covering endpoint protection and incident investigation and connecting security signals across supported domains. The entries in this catalog include TEHTRIS EDR and TEHTRIS XDR Platform. TEHTRIS EDR focuses on endpoint detection and response. TEHTRIS XDR Platform focuses on cross-domain threat detection and response. When reviewing TEHTRIS, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - TEHTRIS EDR: the catalog lists Endpoint detection and response, Endpoint isolation, Malware prevention. - TEHTRIS XDR Platform: the catalog lists Cross-domain detection, Incident correlation, Threat hunting. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
TXOne Networks
TXOne Networks offers a portfolio covering understanding or protecting industrial and connected assets. The entries in this catalog include Edge, Portable Inspector and Stellar. Edge focuses on industrial network threat prevention. Portable Inspector focuses on portable industrial endpoint security inspection. Stellar focuses on industrial endpoint security and application protection. When reviewing TXOne Networks, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Portfolio detail - Edge: the catalog lists Operational asset discovery, Industrial threat monitoring, Operational exposure assessment. - Portable Inspector: the catalog lists Portable endpoint threat inspection, Removable-media scanning workflow, Operational device assessment. - Stellar: the catalog lists Operational asset discovery, Industrial threat monitoring, Operational exposure assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Tailscale
Tailscale's catalog is centered on Tailscale, secure access and networking technology addressing applying access policy to users, applications or traffic. The product profile covers identity-aware private networking, access control, wireguard-based private networking and identity-aware network policy. This scope makes the portfolio relevant to teams supporting distributed users and application access. When reviewing Tailscale, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for identity integration, application reachability, traffic routing and the user experience during a staged rollout. Portfolio detail - Tailscale: the catalog lists WireGuard-based private networking, Identity-aware network policy. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Teleport
Teleport's catalog is centered on Teleport, privileged access management technology addressing controlling elevated credentials and privileged sessions. The product profile covers infrastructure access control, session auditing, infrastructure session auditing, privileged credential vaulting and just-in-time access. This scope makes the portfolio relevant to administrators governing access to sensitive systems. When reviewing Teleport, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for credential onboarding, access approvals, session controls and the operational impact of least-privilege policies. Portfolio detail - Teleport: the catalog lists Infrastructure session auditing, Privileged credential vaulting, Just-in-time access. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Tenable
Tenable offers a portfolio covering identifying and prioritizing security weaknesses, assessing cloud exposure or protecting running workloads and understanding or protecting industrial and connected assets. The entries in this catalog include Nessus, Tenable Cloud Security, Tenable One, Tenable OT Security and Tenable Vulnerability Management. Nessus focuses on vulnerability scanning and configuration assessment. Tenable Cloud Security focuses on cloud posture and entitlement risk assessment. Tenable One focuses on exposure assessment and risk prioritization. When reviewing Tenable, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for scan scope, credentialed assessment options, prioritization inputs and how remediation owners verify closure. Portfolio detail - Nessus: the catalog lists Plugin-based vulnerability assessment, Asset discovery, Vulnerability scanning. - Tenable Cloud Security: the catalog lists Cloud security posture management, Cloud workload protection, Cloud entitlement analysis. - Tenable One: the catalog lists Asset discovery, Vulnerability scanning, Risk-based prioritization. - Tenable OT Security: the catalog lists Operational asset discovery, Industrial threat monitoring, Operational exposure assessment. - Tenable Vulnerability Management: the catalog lists Asset discovery, Vulnerability scanning, Risk-based prioritization. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Thales
Thales offers a portfolio covering managing protected keys, certificates or signing operations and authentication, access policy or identity lifecycle administration. The entries in this catalog include CipherTrust Data Security Platform, Luna HSM and SafeNet Trusted Access. CipherTrust Data Security Platform focuses on data encryption and key lifecycle management. Luna HSM focuses on hardware-backed cryptographic key protection. SafeNet Trusted Access focuses on authentication and application access control. When reviewing Thales, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Portfolio detail - CipherTrust Data Security Platform: the catalog lists Certificate discovery, Cryptographic key protection, Public key infrastructure services. - Luna HSM: the catalog lists Cryptographic key protection, Public key infrastructure services, Code signing workflows. - SafeNet Trusted Access: the catalog lists Single sign-on, Multifactor authentication, Federated authentication. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
ThreatConnect
ThreatConnect's catalog is centered on ThreatConnect Threat Intelligence Platform, threat intelligence technology or service addressing providing external threat context for analysis and decisions. The product profile covers threat intelligence aggregation, analysis, threat intelligence collection, external exposure monitoring and intelligence prioritization. This scope makes the portfolio relevant to analysts investigating adversaries, indicators or emerging exposures. When reviewing ThreatConnect, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source relevance, freshness, integration methods and how intelligence changes a specific investigation or protection decision. Portfolio detail - ThreatConnect Threat Intelligence Platform: the catalog lists Threat intelligence collection, External exposure monitoring, Intelligence prioritization. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
ThreatLocker
ThreatLocker offers a portfolio covering endpoint protection and incident investigation and controlling elevated credentials and privileged sessions. The entries in this catalog include ThreatLocker Application Control, ThreatLocker Elevation Control and ThreatLocker Ringfencing. ThreatLocker Application Control focuses on application allowlisting and execution control. ThreatLocker Elevation Control focuses on endpoint privilege elevation approval and control. ThreatLocker Ringfencing focuses on application interaction and resource access restrictions. When reviewing ThreatLocker, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - ThreatLocker Application Control: the catalog lists Application execution approvals, Application control. - ThreatLocker Elevation Control: the catalog lists Least-privilege enforcement, Application privilege controls, Approval workflows. - ThreatLocker Ringfencing: the catalog lists Application resource restrictions. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Tines
Tines's catalog is centered on Tines, security workflow automation technology addressing coordinating repeatable security actions across tools. The product profile covers security workflow automation, integration, workflow orchestration and human approval steps. This scope makes the portfolio relevant to security operations teams standardizing investigation or response tasks. When reviewing Tines, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connector permissions, failure handling, approval checkpoints and a test workflow using the organization's own tools. Portfolio detail - Tines: the catalog lists Workflow orchestration, Human approval steps. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
TitanHQ
TitanHQ offers a portfolio covering protecting or governing business messaging, improving how employees recognize and handle security risks and using name-resolution traffic as a security control point. The entries in this catalog include ArcTitan, SafeTitan, SpamTitan and WebTitan. ArcTitan focuses on email archiving and message search. SafeTitan focuses on security awareness training and phishing simulation. SpamTitan focuses on email spam filtering and phishing protection. When reviewing TitanHQ, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Portfolio detail - ArcTitan: the catalog lists Archived message search, Email retention administration, Archive administration. - SafeTitan: the catalog lists Security training content, Program reporting. - SpamTitan: the catalog lists Phishing detection, Business email compromise detection, Attachment threat analysis. - WebTitan: the catalog lists Protective DNS filtering, Malicious domain blocking, Content category filtering. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Torq
Torq's catalog is centered on Torq Hyperautomation, security workflow automation technology addressing coordinating repeatable security actions across tools. The product profile covers security process automation, workflow orchestration, tool integrations, incident case management and alert enrichment. This scope makes the portfolio relevant to security operations teams standardizing investigation or response tasks. When reviewing Torq, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connector permissions, failure handling, approval checkpoints and a test workflow using the organization's own tools. Portfolio detail - Torq Hyperautomation: the catalog lists Workflow orchestration, Tool integrations, Incident case management. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Traceable
Traceable's catalog is centered on Traceable API Security, API security technology addressing understanding and protecting application interfaces. The product profile covers api discovery, threat detection, api inventory and discovery, api posture assessment and sensitive data visibility. This scope makes the portfolio relevant to security teams responsible for externally or internally exposed APIs. When reviewing Traceable, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for API discovery coverage, traffic collection, authentication context and the enforcement model for live applications. Portfolio detail - Traceable API Security: the catalog lists API inventory and discovery, API posture assessment, Sensitive data visibility. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Trend Micro
Trend Micro offers a portfolio covering assessing cloud exposure or protecting running workloads, endpoint protection and incident investigation and connecting security signals across supported domains. The entries in this catalog include Cloud One, Deep Security and Trend Vision One. Cloud One focuses on cloud workload and infrastructure protection. Deep Security focuses on server workload security and virtual patching. Trend Vision One focuses on security telemetry analysis and extended detection. When reviewing Trend Micro, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Cloud One: the catalog lists Cloud service protection modules, Workload security functions, Container security. - Deep Security: the catalog lists Application control, Device control, Malware prevention. - Trend Vision One: the catalog lists Cross-domain detection, Automated response, Cloud security telemetry. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Twingate
Twingate's catalog is centered on Twingate, secure access and networking technology addressing applying access policy to users, applications or traffic. The product profile covers zero trust access to private applications, networks, private application access controls, identity-based access decisions and client and connector architecture. This scope makes the portfolio relevant to teams supporting distributed users and application access. When reviewing Twingate, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for identity integration, application reachability, traffic routing and the user experience during a staged rollout. Portfolio detail - Twingate: the catalog lists Private application access controls, Identity-based access decisions, Client and connector architecture. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
UpGuard
UpGuard offers a portfolio covering reviewing security risk associated with organizations and suppliers. The entries in this catalog include UpGuard Breach Risk and UpGuard Vendor Risk. UpGuard Breach Risk focuses on external exposure monitoring and security posture assessment. UpGuard Vendor Risk focuses on third-party cyber risk assessment. When reviewing UpGuard, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for assessment scope, asset attribution, evidence behind ratings and the process for discussing findings with a supplier. Portfolio detail - UpGuard Breach Risk: the catalog lists External security assessment, Third-party risk monitoring, Risk scoring. - UpGuard Vendor Risk: the catalog lists External security assessment, Third-party risk monitoring, Risk scoring. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Uptycs
Uptycs's catalog is centered on Uptycs, cloud security technology addressing assessing cloud exposure or protecting running workloads. The product profile covers cloud, endpoint security analytics, cloud security posture management, cloud workload protection and runtime threat detection. This scope makes the portfolio relevant to cloud and security teams working across accounts and workloads. When reviewing Uptycs, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Uptycs: the catalog lists Cloud security posture management, Cloud workload protection, Runtime threat detection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Upwind
Upwind's catalog is centered on Upwind Cloud Security Platform, cloud security technology addressing assessing cloud exposure or protecting running workloads. The product profile covers runtime cloud visibility, threat detection, cloud workload protection and container security. This scope makes the portfolio relevant to cloud and security teams working across accounts and workloads. When reviewing Upwind, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Upwind Cloud Security Platform: the catalog lists Cloud workload protection, Container security. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
VMRay
VMRay offers a portfolio covering examining suspicious files or observed execution behavior. The entries in this catalog include VMRay DeepResponse and VMRay FinalVerdict. VMRay DeepResponse focuses on malware investigation and behavioral analysis. VMRay FinalVerdict focuses on automated malware analysis and threat classification. When reviewing VMRay, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported samples, analysis visibility, submission privacy and how findings are reviewed before operational decisions. Portfolio detail - VMRay DeepResponse: the catalog lists Behavioral malware analysis, Analysis reporting, Analysis automation. - VMRay FinalVerdict: the catalog lists Behavioral malware analysis, Analysis reporting, Analysis automation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Vanta
Vanta's catalog is centered on Vanta, security governance and compliance technology addressing coordinating controls, evidence and risk decisions. The product profile covers compliance evidence automation, security control monitoring, compliance evidence collection, control monitoring and risk assessment workflows. This scope makes the portfolio relevant to teams preparing audits or managing security governance. When reviewing Vanta, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported frameworks, evidence ownership, assessment workflows and how the system fits existing governance responsibilities. Portfolio detail - Vanta: the catalog lists Compliance evidence collection, Control monitoring, Risk assessment workflows. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Varonis
Varonis's catalog is centered on Varonis Data Security Platform, data security technology addressing understanding sensitive information and controlling its exposure. The product profile covers data discovery, sensitive access risk analysis, sensitive data discovery, data classification and data access visibility. This scope makes the portfolio relevant to teams responsible for protecting business data. When reviewing Varonis, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for connected repositories, classification accuracy, access findings and the handling of approved data movement. Portfolio detail - Varonis Data Security Platform: the catalog lists Sensitive data discovery, Data classification, Data access visibility. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Vectra AI
Vectra AI's catalog is centered on Vectra AI Platform, network detection and response technology addressing turning observed traffic into security evidence. The product profile covers network, identity attack detection, network traffic analysis and lateral movement detection. This scope makes the portfolio relevant to analysts investigating network activity and potential lateral movement. When reviewing Vectra AI, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for traffic visibility, sensor placement, encrypted-traffic limitations and the evidence available for incident investigation. Portfolio detail - Vectra AI Platform: the catalog lists Network traffic analysis, Lateral movement detection. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Veeam
Veeam offers a portfolio covering protecting recoverable data and organizing restoration. The entries in this catalog include Veeam Backup for Microsoft 365, Veeam Data Cloud and Veeam Data Platform. Veeam Backup for Microsoft 365 focuses on cloud productivity data backup and recovery. Veeam Data Cloud focuses on cloud-delivered backup and recovery services. Veeam Data Platform focuses on backup management and recovery orchestration. When reviewing Veeam, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for protected workloads, retention settings, recovery location and a practical restore test using representative business data. Portfolio detail - Veeam Backup for Microsoft 365: the catalog lists Microsoft 365 workload recovery, Backup and restore workflows, Microsoft 365 backup. - Veeam Data Cloud: the catalog lists Backup and restore workflows, Ransomware recovery support, Immutable storage options. - Veeam Data Platform: the catalog lists Veeam backup and recovery operations, Backup and restore workflows, Ransomware recovery support. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Veracode
Veracode offers a portfolio covering finding or addressing weaknesses in software. The entries in this catalog include Veracode Dynamic Analysis, Veracode Software Composition Analysis and Veracode Static Analysis. Veracode Dynamic Analysis focuses on runtime web application vulnerability testing. Veracode Software Composition Analysis focuses on open-source dependency vulnerability analysis. Veracode Static Analysis focuses on source code vulnerability identification. When reviewing Veracode, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported languages or targets, scan placement, finding quality and how developers validate proposed fixes. Portfolio detail - Veracode Dynamic Analysis: the catalog lists Dynamic application security testing, Developer workflow integration, CI/CD integration. - Veracode Software Composition Analysis: the catalog lists Software composition analysis, Dependency vulnerability analysis, Developer workflow integration. - Veracode Static Analysis: the catalog lists Static application security testing, Developer workflow integration, CI/CD integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Versa Networks
Versa Networks offers a portfolio covering applying access policy to users, applications or traffic and controlling communications and inspecting traffic. The entries in this catalog include Versa SASE, Versa Secure SD-WAN and Versa SSE. Versa SASE focuses on converged network and cloud-delivered security. Versa Secure SD-WAN focuses on wan connectivity and branch security. Versa SSE focuses on secure access and cloud-delivered traffic protection. When reviewing Versa Networks, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for identity integration, application reachability, traffic routing and the user experience during a staged rollout. Portfolio detail - Versa SASE: the catalog lists Zero trust network access, Secure web gateway, Cloud access security broker. - Versa Secure SD-WAN: the catalog lists Intrusion prevention, Application-aware policy, VPN connectivity. - Versa SSE: the catalog lists Zero trust network access, Secure web gateway, Cloud access security broker. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Wallarm
Wallarm's catalog is centered on Wallarm API Security, API security technology addressing understanding and protecting application interfaces. The product profile covers api discovery, attack protection, api inventory and discovery, api behavior analysis and api posture assessment. This scope makes the portfolio relevant to security teams responsible for externally or internally exposed APIs. When reviewing Wallarm, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for API discovery coverage, traffic collection, authentication context and the enforcement model for live applications. Portfolio detail - Wallarm API Security: the catalog lists API inventory and discovery, API behavior analysis, API posture assessment. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Wallix
Wallix offers a portfolio covering controlling elevated credentials and privileged sessions. The entries in this catalog include WALLIX Access Manager and WALLIX Bastion. WALLIX Access Manager focuses on secure remote access and privileged session coordination. WALLIX Bastion focuses on privileged credential control and session auditing. When reviewing Wallix, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for credential onboarding, access approvals, session controls and the operational impact of least-privilege policies. Portfolio detail - WALLIX Access Manager: the catalog lists Privileged credential vaulting, Remote session brokering. - WALLIX Bastion: the catalog lists Privileged credential vaulting, Credential rotation, Remote session brokering. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
WatchGuard
WatchGuard offers a portfolio covering authentication, access policy or identity lifecycle administration, controlling communications and inspecting traffic, endpoint protection and incident investigation and adding expert monitoring and response to supported telemetry. The entries in this catalog include AuthPoint, Firebox, WatchGuard EPDR and WatchGuard MDR. AuthPoint focuses on multifactor authentication and access protection. Firebox focuses on network firewall controls and threat inspection. WatchGuard EPDR focuses on endpoint protection and detection and response. When reviewing WatchGuard, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported identity providers, application connectors, access-policy design and the account lifecycle workflow. Portfolio detail - AuthPoint: the catalog lists Single sign-on, Multifactor authentication, Passwordless authentication. - Firebox: the catalog lists Intrusion prevention, VPN connectivity. - WatchGuard EPDR: the catalog lists Device control, Threat hunting, Malware prevention. - WatchGuard MDR: the catalog lists Managed threat monitoring, Human-led investigation, Threat hunting services. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Wazuh
Wazuh's catalog is centered on Wazuh, security analytics technology addressing collecting and analyzing security-relevant events. The product profile covers endpoint monitoring, security event analysis, host-based security telemetry, file integrity monitoring and event correlation. This scope makes the portfolio relevant to security operations teams investigating alerts and incidents. When reviewing Wazuh, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Wazuh: the catalog lists Host-based security telemetry, File integrity monitoring, Event correlation. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
WithSecure
WithSecure offers a portfolio covering endpoint protection and incident investigation, identifying and prioritizing security weaknesses and adding expert monitoring and response to supported telemetry. The entries in this catalog include Elements Endpoint Detection and Response, Elements Endpoint Protection, Elements Exposure Management and WithSecure MDR. Elements Endpoint Detection and Response focuses on endpoint investigation and incident response. Elements Endpoint Protection focuses on endpoint malware prevention and management. Elements Exposure Management focuses on exposure discovery and risk prioritization. When reviewing WithSecure, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for agent compatibility, policy tuning, alert investigation and the response actions available in the selected edition. Portfolio detail - Elements Endpoint Detection and Response: the catalog lists Endpoint detection and response, Malware prevention. - Elements Endpoint Protection: the catalog lists Business endpoint protection, Elements cloud administration, Security policy administration. - Elements Exposure Management: the catalog lists Vulnerability scanning, Risk-based prioritization, Configuration assessment. - WithSecure MDR: the catalog lists Managed threat monitoring, Human-led investigation, Response and containment support. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Wiz
Wiz offers a portfolio covering assessing cloud exposure or protecting running workloads and finding or addressing weaknesses in software. The entries in this catalog include Wiz Cloud, Wiz Code and Wiz Defend. Wiz Cloud focuses on cloud security posture assessment and attack path analysis. Wiz Code focuses on code-to-cloud security analysis. Wiz Defend focuses on cloud threat detection and response. When reviewing Wiz, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for cloud permissions required for onboarding, the assets assessed, runtime coverage and how findings reach remediation owners. Portfolio detail - Wiz Cloud: the catalog lists Cloud security graph context, Container security, Kubernetes security. - Wiz Code: the catalog lists Code-to-cloud context, Static application security testing, Dynamic application security testing. - Wiz Defend: the catalog lists Cloud runtime investigation, Kubernetes security, Attack path analysis. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Yubico
Yubico offers a portfolio covering managing protected keys, certificates or signing operations and authentication, access policy or identity lifecycle administration. The entries in this catalog include YubiHSM 2, YubiKey 5 Series and YubiKey Bio Series. YubiHSM 2 focuses on hardware-backed cryptographic key protection. YubiKey 5 Series focuses on hardware-backed authentication and login protection. YubiKey Bio Series focuses on biometric hardware authentication. When reviewing Yubico, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported algorithms, integration interfaces, key lifecycle administration and backup and recovery procedures. Portfolio detail - YubiHSM 2: the catalog lists Hardware-protected cryptographic operations, Cryptographic key protection, Public key infrastructure services. - YubiKey 5 Series: the catalog lists FIDO2 and WebAuthn authentication, Smart-card authentication functions, Passwordless authentication. - YubiKey Bio Series: the catalog lists Biometric security-key authentication, FIDO2 and WebAuthn authentication, Biometric enrollment workflow. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Zscaler
Zscaler offers a portfolio covering adding expert monitoring and response to supported telemetry and applying access policy to users, applications or traffic. The entries in this catalog include Red Canary Managed Detection and Response, Zscaler Digital Experience, Zscaler Internet Access and Zscaler Private Access. Red Canary Managed Detection and Response focuses on managed threat detection and response across security telemetry. Zscaler Digital Experience focuses on user experience monitoring and connectivity diagnostics. Zscaler Internet Access focuses on secure internet access and cloud-delivered inspection. When reviewing Zscaler, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for supported data sources, response authority, escalation responsibilities and the actions included in the service agreement. Portfolio detail - Red Canary Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Threat hunting services. - Zscaler Digital Experience: the catalog lists Application experience diagnostics, Zero trust network access, Data loss prevention controls. - Zscaler Internet Access: the catalog lists Internet-bound access security, Zero trust network access, Secure web gateway. - Zscaler Private Access: the catalog lists Application-specific private access, Zero trust network access, Private application access. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
eSentire
eSentire offers a portfolio covering investigating and managing cybersecurity incidents and adding expert monitoring and response to supported telemetry. The entries in this catalog include eSentire Incident Response and eSentire Managed Detection and Response. eSentire Incident Response focuses on breach investigation and incident response. eSentire Managed Detection and Response focuses on managed security monitoring and incident response. When reviewing eSentire, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for engagement scope, evidence handling, response authority and the responsibilities of internal and external responders. Portfolio detail - eSentire Incident Response: the catalog lists Incident investigation, Containment planning, Digital evidence analysis. - eSentire Managed Detection and Response: the catalog lists Managed threat monitoring, Human-led investigation, Threat hunting services. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
iboss
iboss's catalog is centered on iboss Zero Trust SASE, secure access and networking technology addressing applying access policy to users, applications or traffic. The product profile covers cloud-delivered zero trust access, traffic protection, zero trust network access, cloud access security broker and data loss prevention controls. This scope makes the portfolio relevant to teams supporting distributed users and application access. When reviewing iboss, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for identity integration, application reachability, traffic routing and the user experience during a staged rollout. Portfolio detail - iboss Zero Trust SASE: the catalog lists Zero trust network access, Cloud access security broker, Data loss prevention controls. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
runZero
runZero's catalog is centered on runZero, security asset visibility technology addressing establishing an inventory and identifying security coverage gaps. The product profile covers network asset discovery, exposure assessment, security coverage assessment, exposure visibility and data source integrations. This scope makes the portfolio relevant to teams reconciling assets across networking and security systems. When reviewing runZero, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for discovery scope, device identification, integration permissions and how conflicting asset records are handled. Portfolio detail - runZero: the catalog lists Security coverage assessment, Exposure visibility, Data source integrations. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.