Cybersecurity Companies

segment

Open source

Companies whose core product is open source, or who commercialize an OSS project.

FAQ
What is a open source cybersecurity company?

A firm whose primary offering sits in open source. This index lists companies, not SKUs — products live on the company profile.

Is the order paid?

No. Organic order is recency. Promoted shelves are labeled and separate. That is the opposite of buying a rank.

How do I get listed in Open source?

Submit a company. We review before anything is public. Paid plans buy a labeled shelf, not a silent bump in this list.

Why is this a segment rather than a tool category?

Buyers shortlist firms. Tools change names; the company is the contract.

Companies 3

Semgrep

Detroit, US · Product vendor

Open-source SAST and a commercial code security platform.

Application security

Aqua Security

Boston, US · Product vendor

Cloud-native application protection from code to runtime.

Cloud security · Application security

HashiCorp

San Francisco, US · Product vendor

Vault secrets, Terraform, and identity-based security for infrastructure.

Identity · Cloud security