Skip to content
CyberReviewed

All Cybersecurity Company Reviews by Category

Every company CyberReviewed has reviewed, grouped by security area and listed alphabetically with its score and a one-line summary.

Cloud security

Cloud security reviews
CompanyScoreIn brief
Oligo Security6.8/10Runtime visibility and exploit blocking for applications, cloud workloads, and AI systems, built on eBPF.
Orca Security7.5/10Agentless cloud security platform built on its patented SideScanning approach.
Prowler8.3/10Open-source cloud security checks across AWS, Azure, Google Cloud, Kubernetes, and SaaS apps, with a hosted version priced per cloud account.
Sweet Security7.3/10Runtime cloud protection that watches workloads, identities, and AI agents as they run and turns alerts into a short list of real attacks.
Upwind6.2/10Runtime-first cloud security from the team that built and sold Spot.io.

Email security

Email security reviews
CompanyScoreIn brief
Abnormal AI8.0/10Behavioral AI email security that connects to Microsoft 365 and Google Workspace by API.
IRONSCALES7.7/10API-based email security with built-in phishing simulation, sold heavily through MSPs.
Material Security8.1/10Email, file, and account security for Google Workspace and Microsoft 365, sold at published per-user prices.
Sublime Security7.6/10Email security with detection rules customers can read and edit, AI agents that triage and write new detections, and a free tier.

Identity security

Identity security reviews
CompanyScoreIn brief
Aembit7.6/10Identity and access management for AI agents and workloads, with short-lived credentials in place of stored secrets.
JumpCloud8.1/10Cloud directory, SSO, and device management for mixed Mac, Windows, and Linux fleets.
Nudge Security7.8/10Nudge Security is a SaaS and AI security governance company founded in 2021 and based in Austin, Texas.
Portnox7.5/10Cloud-native network access control, RADIUS, zero trust remote access, and TACACS+ in one subscription priced per device.
Push Security7.5/10Push Security is a browser security company that launched in 2022 and is based in Boston, Massachusetts.
Silverfort6.9/10Identity protection that extends MFA and threat detection to legacy systems and service accounts.
Teleport7.5/10Identity-based access to servers, Kubernetes, databases, and desktops for engineers, machines, and AI agents, without shared keys or VPNs.
Token Security6.3/10Discovery and governance of AI agents, service accounts, and other machine identities, with owners and least-privilege fixes.
Twingate7.8/10Twingate is a zero trust remote access service founded in 2019 and based in Redwood City, California. Its free plan covers 5 users.

MDR and SOC services

MDR and SOC services reviews
CompanyScoreIn brief
Blackpoint Cyber6.4/10Managed detection and response sold through IT service providers, with a 24/7 SOC that acts on threats itself.
Blumira7.8/10Cloud SIEM, endpoint response, and automated containment for lean IT teams, priced per employee with unlimited log data.
Expel6.3/10Managed detection and response that works on top of the security tools a company owns.
Field Effect7.8/10Managed detection and response for small and medium businesses, built in-house by former Canadian intelligence engineers and priced per user.
Huntress8.9/10Managed EDR, identity, SIEM, and training with a 24/7 SOC, priced per unit and sold mostly through MSPs.
Todyl6.7/10SASE, endpoint security, SIEM, and a 24/7 MXDR team in one agent, sold through managed service providers.

Penetration testing

Penetration testing reviews
CompanyScoreIn brief
Cobalt6.5/10Pentest as a service: vetted human testers booked through a platform with credits, plus an AI-assisted autonomous option.
Hadrian7.1/10AI agents that map a company's internet-facing assets, validate which exposures are exploitable, and run pentests on demand.
Horizon3.ai7.8/10NodeZero autonomous pentesting that runs real attack paths against production networks on demand.
Picus Security7.2/10Breach and attack simulation that tests whether firewalls, endpoint tools, and SIEM rules stop and detect real attacks.
XBOW6.5/10Autonomous penetration testing of web applications by AI agents that find and prove exploitable vulnerabilities, from the creator of GitHub Copilot.

Security awareness

Security awareness reviews
CompanyScoreIn brief
Adaptive Security7.3/10Security awareness training and deepfake phishing simulations for the AI era, with email security and AI governance in the same platform.
Doppel7.0/10Impersonation takedowns, brand and executive protection, email security, and AI social engineering simulations in one platform.
Hook Security7.2/10Security awareness training built on short, funny videos and automatic phishing tests, sold mostly through managed service providers.
Hoxhunt6.3/10Adaptive, gamified phishing training that adjusts to each employee and tracks how often staff report suspicious email.
Living Security6.4/10Human risk scoring with targeted training, phishing and voice simulations, and board reporting.

Vulnerability management

Vulnerability management reviews
CompanyScoreIn brief
Aikido Security8.4/10Aikido Security is a code and cloud security platform for software companies, with a free plan and published prices.
Detectify7.5/10External attack surface discovery and application scanning, with tests built from an ethical hacker community and published platform fees.
Intruder7.7/10Vulnerability scanning and exposure management for lean teams, with a free tier and posted prices.
Nucleus Security6.9/10A vulnerability management platform that pulls findings from more than 200 security tools into one prioritized, automated view, with FedRAMP authorization for federal agencies.
Socket8.7/10Open source supply chain protection that detects and blocks malicious packages, with published per-developer prices.
Vicarius7.4/10Vulnerability remediation that finds flaws on Windows, macOS, and Linux endpoints and fixes them with patches, scripts, or in-memory shielding.