Find, Compare, and Choose the Best Vendors

Peakhour, founded in Sydney, Australia, is a WAAP vendor specializing in DNS-based cloud-native web application and API protection. The service provides integrated WAF, bot and DDoS mitigation, API…

ThreatX, founded in 2014 and based in Louisville, Colorado, is focused on WAAP for cloud and on-premises deployments. The platform uses behavioral analytics, risk-based policies, and multiple threat…

United Security Providers (USP) is a Switzerland-based cybersecurity company providing advanced web access management solutions and managed security services. Focused on protecting web applications…

Nevatech is a software vendor focused on API management and governance, particularly for Microsoft-centric and cross-platform environments. Its flagship product, Sentinet, provides full API lifecycle…

Pynt is a young cybersecurity vendor specializing in automated, AI-powered API security testing. The company focuses on shift-left security by integrating discovery, context-aware vulnerability…

Apache APISIX is an open-source API gateway and microservices management project by the Apache Software Foundation. Renowned for high performance, extensibility, and cloud-native features, it is…

Apiiro provides an application security platform focused on risk visibility and remediation across applications and software delivery pipelines, combining posture management and inventory with…

Boomi is a cloud integration platform provider specializing in application, data, and API integration. With recent acquisitions including Mashery and APIIDA, Boomi has relaunched its API management…

Cerbos is a dynamic authorization management platform with an open-source core. It applies fine-grained, contextual and continuous authorization across applications, APIs, gateways, workloads, and AI…

HAProxy Technologies is a provider of open-source and commercial proxy/load balancing solutions. HAProxy Enterprise extends the open-source project with modular API gateway, deep inspection, and…

Spherical Defence is a London-based security startup developing autonomous, unsupervised analysis for API and machine-to-machine communications, with a focus on anomaly, attack, and adversarial…

SmartBear is a software company specializing in quality assurance and development tools for APIs, including Swagger, SoapUI, and TestComplete. The platform provides full lifecycle design, testing,…

StackHawk is a cybersecurity company focused on developer-centric API security testing, integrating dynamic application and API scanning into DevOps pipelines with actionable feedback for secure code…

Tyk Technologies is the company behind the Tyk Open Source API Gateway and Tyk Enterprise platform. It offers multi-cloud, performance-optimized API management with rich DevOps and developer-oriented…

Centraya is a CASB/gateway security solution produced by Swiss company e3 AG, focused on protecting sensitive organizational data in cloud applications through policy-based encryption and decryption.…

FireMon is a network security policy management vendor that expanded into cloud infrastructure security brokering through the acquisition of FortyCloud. In the paper’s context, FireMon offers 40Cloud…

Dynatrace, established in 2005 in Waltham, Massachusetts, offers a unified observability, automation, and security intelligence platform for hybrid and multi-cloud environments. Dynatrace’s platform…

Avoco Secure is a UK-based software provider specializing in identity services and federated identity solutions. It offers secure, standards-based IAM capabilities with a focus on interoperability,…

Wiz is a fast-growing cloud security company focused on modernizing cloud infrastructure protection. Renowned for its innovative, agentless security platform, Wiz helps organizations of all sizes…

VeriClouds is a cybersecurity company focused on identity threat protection through compromised-credential intelligence and verification. It builds and maintains a large proprietary repository of…