Shortlist

Company finder

Pick a country, a city, a product feature, or a certification. Each pick narrows the list. Organic order is not for sale.

Application security Clear

Matches12

Aqua Security500–999
Cloud-native application protection from code to runtime.
United States Boston Cloud security Application security CWPP CNAPP SOC 2 ISO 27001
Atlant Security1–49 people
Founder-led pentest, vCISO, and compliance consulting.
Bulgaria Sofia GRC Application security OSCP GPEN CISSP
Bishop Fox250–499
Offensive security consultancy and Cosmos continuous pentest.
United States Phoenix Application security Security operations DFIR CREST OSCP GPEN
Cloudflare1,000+
CDN, WAF, Zero Trust, and bot management on a global edge.
United States San Francisco Network security Application security ZTNA SOC 2 ISO 27001 FedRAMP
GitGuardian50–249
Secrets detection in git, tickets, and production.
France Paris Application security Data protection SAST SOC 2 ISO 27001
Lakera50–249
Guardrails for LLM applications in production.
Switzerland Zurich AI security Application security LLM security SOC 2 ISO 27001
NCC Group1,000+
Global pentest, research, and cyber resilience consultancy.
United Kingdom Manchester Application security Security operations ISO 27001 ISO 9001 CREST
Offensive Security250–499
OSCP, Kali Linux, and hands-on offensive training.
United States New York Human risk Application security Awareness training OSCP OSWE
Semgrep50–249
Open-source SAST and a commercial code security platform.
United States Detroit Application security SAST SCA SOC 2 ISO 27001
Snyk1,000+
Developer-first SCA, SAST, and container security.
United States Boston Application security Cloud security SCA SAST SOC 2 ISO 27001
Trail of Bits50–249
High-assurance security engineering, audits, and research.
United States New York Application security AI security OSCP
Wiz1,000+
Cloud security graph for code-to-cloud risk.
United States New York Cloud security Application security CNAPP CSPM SOC 2 ISO 27001