All Cybersecurity Company Reviews by Category
Every company CyberReviewed has reviewed, grouped by security area and listed alphabetically with its score and a one-line summary.
Cloud security
| Company | Score | In brief |
|---|---|---|
| Oligo Security | 6.8/10 | Runtime visibility and exploit blocking for applications, cloud workloads, and AI systems, built on eBPF. |
| Orca Security | 7.5/10 | Agentless cloud security platform built on its patented SideScanning approach. |
| Prowler | 8.3/10 | Open-source cloud security checks across AWS, Azure, Google Cloud, Kubernetes, and SaaS apps, with a hosted version priced per cloud account. |
| Sweet Security | 7.3/10 | Runtime cloud protection that watches workloads, identities, and AI agents as they run and turns alerts into a short list of real attacks. |
| Upwind | 6.2/10 | Runtime-first cloud security from the team that built and sold Spot.io. |
Email security
| Company | Score | In brief |
|---|---|---|
| Abnormal AI | 8.0/10 | Behavioral AI email security that connects to Microsoft 365 and Google Workspace by API. |
| IRONSCALES | 7.7/10 | API-based email security with built-in phishing simulation, sold heavily through MSPs. |
| Material Security | 8.1/10 | Email, file, and account security for Google Workspace and Microsoft 365, sold at published per-user prices. |
| Sublime Security | 7.6/10 | Email security with detection rules customers can read and edit, AI agents that triage and write new detections, and a free tier. |
Identity security
| Company | Score | In brief |
|---|---|---|
| Aembit | 7.6/10 | Identity and access management for AI agents and workloads, with short-lived credentials in place of stored secrets. |
| JumpCloud | 8.1/10 | Cloud directory, SSO, and device management for mixed Mac, Windows, and Linux fleets. |
| Nudge Security | 7.8/10 | Nudge Security is a SaaS and AI security governance company founded in 2021 and based in Austin, Texas. |
| Portnox | 7.5/10 | Cloud-native network access control, RADIUS, zero trust remote access, and TACACS+ in one subscription priced per device. |
| Push Security | 7.5/10 | Push Security is a browser security company that launched in 2022 and is based in Boston, Massachusetts. |
| Silverfort | 6.9/10 | Identity protection that extends MFA and threat detection to legacy systems and service accounts. |
| Teleport | 7.5/10 | Identity-based access to servers, Kubernetes, databases, and desktops for engineers, machines, and AI agents, without shared keys or VPNs. |
| Token Security | 6.3/10 | Discovery and governance of AI agents, service accounts, and other machine identities, with owners and least-privilege fixes. |
| Twingate | 7.8/10 | Twingate is a zero trust remote access service founded in 2019 and based in Redwood City, California. Its free plan covers 5 users. |
MDR and SOC services
| Company | Score | In brief |
|---|---|---|
| Blackpoint Cyber | 6.4/10 | Managed detection and response sold through IT service providers, with a 24/7 SOC that acts on threats itself. |
| Blumira | 7.8/10 | Cloud SIEM, endpoint response, and automated containment for lean IT teams, priced per employee with unlimited log data. |
| Expel | 6.3/10 | Managed detection and response that works on top of the security tools a company owns. |
| Field Effect | 7.8/10 | Managed detection and response for small and medium businesses, built in-house by former Canadian intelligence engineers and priced per user. |
| Huntress | 8.9/10 | Managed EDR, identity, SIEM, and training with a 24/7 SOC, priced per unit and sold mostly through MSPs. |
| Todyl | 6.7/10 | SASE, endpoint security, SIEM, and a 24/7 MXDR team in one agent, sold through managed service providers. |
Penetration testing
| Company | Score | In brief |
|---|---|---|
| Cobalt | 6.5/10 | Pentest as a service: vetted human testers booked through a platform with credits, plus an AI-assisted autonomous option. |
| Hadrian | 7.1/10 | AI agents that map a company's internet-facing assets, validate which exposures are exploitable, and run pentests on demand. |
| Horizon3.ai | 7.8/10 | NodeZero autonomous pentesting that runs real attack paths against production networks on demand. |
| Picus Security | 7.2/10 | Breach and attack simulation that tests whether firewalls, endpoint tools, and SIEM rules stop and detect real attacks. |
| XBOW | 6.5/10 | Autonomous penetration testing of web applications by AI agents that find and prove exploitable vulnerabilities, from the creator of GitHub Copilot. |
Security awareness
| Company | Score | In brief |
|---|---|---|
| Adaptive Security | 7.3/10 | Security awareness training and deepfake phishing simulations for the AI era, with email security and AI governance in the same platform. |
| Doppel | 7.0/10 | Impersonation takedowns, brand and executive protection, email security, and AI social engineering simulations in one platform. |
| Hook Security | 7.2/10 | Security awareness training built on short, funny videos and automatic phishing tests, sold mostly through managed service providers. |
| Hoxhunt | 6.3/10 | Adaptive, gamified phishing training that adjusts to each employee and tracks how often staff report suspicious email. |
| Living Security | 6.4/10 | Human risk scoring with targeted training, phishing and voice simulations, and board reporting. |
Vulnerability management
| Company | Score | In brief |
|---|---|---|
| Aikido Security | 8.4/10 | Aikido Security is a code and cloud security platform for software companies, with a free plan and published prices. |
| Detectify | 7.5/10 | External attack surface discovery and application scanning, with tests built from an ethical hacker community and published platform fees. |
| Intruder | 7.7/10 | Vulnerability scanning and exposure management for lean teams, with a free tier and posted prices. |
| Nucleus Security | 6.9/10 | A vulnerability management platform that pulls findings from more than 200 security tools into one prioritized, automated view, with FedRAMP authorization for federal agencies. |
| Socket | 8.7/10 | Open source supply chain protection that detects and blocks malicious packages, with published per-developer prices. |
| Vicarius | 7.4/10 | Vulnerability remediation that finds flaws on Windows, macOS, and Linux endpoints and fixes them with patches, scripts, or in-memory shielding. |