The Largest Platform to Find Cybersecurity Tools

Detecting, investigating and responding to attacks: SIEM, SOAR, XDR, MDR and managed SOC, incident response, digital forensics, malware analysis, threat hunting, detection engineering, deception and honeypots, AI SOC analysts, security data pipelines and data lakes.

Securing software the company builds or runs: code scanning, open-source and supply-chain risk, API security, web application firewalls and WAAP, bot, fraud and account-takeover protection, Web3 and smart-contract security, mobile app security, developer security training.

Identity and access: authentication and MFA, access management, identity governance, privileged access, identity threat detection, identity verification, password and secrets management, non-human and machine identity (certificates, PKI, workload identity), cloud entitlements (CIEM).

Finding, prioritising and reducing the weaknesses an attacker could use: external attack surface management, cyber asset inventory (CAASM), vulnerability assessment and scanning, exposure assessment / CTEM platforms, shadow IT discovery. Vulnerability management lives here. NOT attack simulation or pentesting (Offensive Security) and NOT threat intelligence about attackers (Threat Intelligence).

Protecting the data itself: encryption and key management, data loss prevention, data security posture, classification, backup and recovery, secure file sharing, confidential computing, post-quantum cryptography.

Securing the network: firewalls and firewall policy management, IDS/IPS, network detection and response, ZTNA, VPN, SSE and SASE, microsegmentation, DDoS protection, network access control.

Governance, risk and compliance: compliance automation and audit readiness, GRC platforms, third-party / vendor risk, cyber risk quantification, security ratings and cyber insurance, policy management, business continuity, privacy programme management.

Testing defences the way an attacker would: penetration testing (services or platforms, incl. AI/autonomous pentesting), red teaming and adversary emulation, breach and attack simulation / security control validation, bug bounty and crowdsourced testing.