Connect everything.
Secure anything.

Microsoft Sentinel

Cloud-native SIEM and SOAR platform

Splunk

Data platform for security monitoring

IBM QRadar

Enterprise SIEM with threat intelligence

Elastic Security

SIEM built on the Elastic Stack

Google Chronicle

Cloud-scale security analytics platform

Sumo Logic

Cloud SIEM for continuous intelligence

Securonix

Next-gen SIEM with UEBA capabilities

LogRhythm

Integrated SIEM for threat detection

CrowdStrike LogScale

High-scale log management and security analytics

Datadog Cloud SIEM

Cloud-native security monitoring and signal analysis

Panther

Detection-as-code and cloud security analytics

Rapid7 InsightIDR

Cloud SIEM and detection and response platform

ReliaQuest GreyMatter

Security operations and threat detection platform

Sophos Central

Centralized security monitoring and response platform

Wazuh

Open-source security monitoring and XDR platform

CrowdStrike Falcon

AI-native endpoint protection platform

SentinelOne

Autonomous AI-powered XDR platform

Microsoft Defender

Unified XDR and SIEM solution

Carbon Black

VMware endpoint and workload protection

Palo Alto Cortex

Extended detection and response platform

Trellix

XDR for threat detection and response

Trend Micro

Hybrid cloud and network security

Bitdefender GravityZone

Endpoint protection and threat response platform

Microsoft Defender for Endpoint

Enterprise endpoint detection and response

Jamf Pro

Apple device management and endpoint inventory

Iru (formerly Kandji)

Apple device management and endpoint security

AWS

Cloud infrastructure, telemetry, and response actions

AWS Security Hub

Unified security findings from AWS services

Azure Security

Cloud security posture management for Azure

Google Cloud SCC

Security Command Center for GCP workloads

Wiz

Cloud-native security platform

Orca Security

Agentless cloud security platform

Lacework

Data-driven cloud security platform

Claude Compliance

AI-assisted cloud security and compliance analysis

Microsoft Defender for Cloud

Cloud security posture and workload protection

Netskope DLP

Cloud data loss prevention and security controls

Okta

Identity and access management platform

Microsoft Entra

Cloud identity and access management

CyberArk

Privileged access management platform

Ping Identity

Intelligent identity platform

HashiCorp Vault

Secrets management and data protection

BeyondTrust

Privileged access & vulnerability management

1Password

Enterprise password and access management

Auth0

Identity platform for authentication and authorization

Cisco Duo

Multi-factor authentication and access security

JumpCloud

Cloud directory and identity management platform

Microsoft Defender for Identity

Identity threat detection and response

OneLogin

Cloud identity and access management

PingOne

Cloud identity orchestration and access management

Abnormal Security

Cloud email security and threat response

Microsoft Defender for Office 365

Email and collaboration threat protection

Splunk SOAR

Security orchestration and automated response

Palo Alto XSOAR

Comprehensive SOAR platform

ServiceNow SecOps

Security operations and response workflows

Tines

No-code security automation platform

Torq

Hyperautomation for security teams

Swimlane

Low-code security automation platform

ServiceNow

IT service management and workflows

Jira

Issue tracking and project management

PagerDuty

Digital operations management platform

Slack

Business messaging and collaboration

Microsoft Teams

Collaboration and communication platform

Opsgenie

Alert management and on-call scheduling

Atlassian Confluence

Knowledge base and collaboration platform

ManageEngine ServiceDesk Plus

IT service management and ticketing platform

SMTP Email

Standards-based email notifications and delivery

Webex

Team messaging and collaboration platform

Recorded Future

Real-time threat intelligence platform

MISP

Open-source threat intelligence platform

ThreatConnect

Threat intelligence and operations platform

Mandiant

Threat intelligence and incident response

VirusTotal

Malware analysis and threat intelligence

Anomali

Threat intelligence management platform

AbuseIPDB

IP reputation and abuse intelligence database

AlienVault OTX

Open threat intelligence community and IOC feeds

ANY.RUN Sandbox

Interactive malware analysis and threat intelligence

Malpedia

Malware intelligence and family reference database

Thinkst Canary

Deception technology and high-signal incident alerts

urlscan.io

Website scanning and threat intelligence service

Palo Alto NGFW

Next-generation firewall platform

Fortinet

Broad, integrated, automated security

Zscaler

Cloud-native zero trust security platform

Cisco SecureX

Integrated security platform from Cisco

Check Point

Consolidated cyber security platform

Darktrace

AI-powered cyber security platform

Azure Firewall

Cloud-native network firewall for Azure

Cisco Firepower

Network firewall and intrusion prevention platform

Cisco Umbrella

Cloud-delivered DNS and network security

Cloudflare

Edge, WAF, and Zero Trust security platform

Tenable

Exposure management and vulnerability scanning

Qualys

Cloud-based security and compliance platform

Rapid7

Vulnerability management and detection

Snyk

Developer-first security platform

GitHub Code Scanning

Code security analysis and vulnerability findings

ManageEngine Endpoint Central

Endpoint management, inventory, and vulnerability visibility

Mondoo

Cloud security posture and vulnerability management

National Vulnerability Database

NIST vulnerability and CVE intelligence

Project Discovery Cloud

Attack surface discovery and vulnerability scanning

Snowflake

Cloud data platform for security analytics

Databricks

Data lakehouse for security intelligence

AWS Security Lake

Centralised security data lake on AWS

Devo

Cloud-native data analytics for security