1,766 catalog entries · Latest additions dated 2026-10-30 · Fetched 2026-10-31 03:54 UTC
Scope & source ↗SOURCE-BACKED SECURITY RESEARCH
Explore 26 security platforms by the problems they solve. Compare documented capabilities, telemetry needs, pricing context and the evidence still needed for a trial.
26 of 26 platforms · Tags overlap; category counts are not additive.
Also known as Abnormal Security
Behavioral security for email, account compromise and identity-related threats, with broader platform offerings.
Cloud-native security spanning code, container images, configuration and running workloads.
Asset intelligence combining inventory and exposure context to support security operations and action.
Endpoint protection and behavioral investigation through the Carbon Black Cloud service.
Endpoint protection, investigation and response with optional identity, cloud and SOC modules.
Behavioral security across network, cloud, email and other modules.
Security analytics, endpoint detection and response, investigation and automation on the Elastic platform.
Also known as Reveal(x)
Network visibility, threat detection and investigation using observed traffic.
Also known as Lacework, Lacework FortiCNAPP
Cloud-native application protection for posture, workload and runtime-risk investigation, formerly Lacework.
Also known as Mandiant Advantage, Mandiant Threat Intelligence
Threat intelligence combining Google security visibility and Mandiant expertise for investigations and defense.
Correlates incidents and response across licensed Microsoft security products.
Cloud SIEM and security operations capabilities with consumption-based data processing.
Converged cloud security and networking across web, SaaS, data and private access use cases.
Cloud security posture, workload risk, code and runtime security in a CNAPP platform.
Extended detection and response that connects endpoint and other security telemetry for investigation.
Also known as CyberArk, CyberArk Identity Security
Identity-security platform built on CyberArk capabilities for human, machine and agentic identities.
Vulnerability management with asset discovery, assessment, prioritization and remediation workflows.
Vulnerability assessment and prioritization within Rapid7’s exposure-management offering.
Threat intelligence and investigation context for security and risk teams.
Endpoint and workload security with investigation, response and broader Singularity modules.
Security analytics, detection, investigation and response on collected security data.
Exposure management combining asset and risk context across multiple security domains.
Also known as ThreatConnect
ThreatConnect capabilities now form part of Dataminr for Cyber Defense’s intelligence and operations offering.
Detection and response for attacker behavior across hybrid-network and identity environments.
Cloud security connecting code, cloud configuration and runtime risk through a security graph.
Cloud-delivered internet and SaaS security controls for users and workloads.
EDR, NDR, SIEM, email security and asset intelligence have different jobs. Use the tags to shortlist relevant capabilities; then compare the same data, endpoint, scenario, configuration, analyst effort and observation period. Automated containment should be tested with approval and recovery controls.
MITRE ATT&CK Evaluations do not rank vendors or declare winners. Results describe specific tested scenarios and configurations. MITRE’s explanation ↗
