Straightforward descriptions of cybersecurity products. You're welcome.
Sublime Security is an email security platform built on a programmable detection engine. Instead of a black box ML model shared across every customer, Sublime deploys a detection engine per customer environment.
Agentic AI that stops email attacks at adversary speed
BloodHound Enterprise is an attack path management tool for Active Directory and Entra ID (formerly Azure AD) environments. It ingests data from your directory services, builds a graph of all identities, permissions, group memberships, GPO applications, and trust relationships, then computes every attack path from any user or computer to your most critical assets (domain controllers, tier zero servers, global admin roles, tenant objects).
Attack Path Management Solution
Authentik is an open source identity provider. It supports SAML, OAuth, SCIM, LDAP, and RADIUS.
Take control of your identity needs with a secure, flexible solution.
Prowler is an open-source cloud security scanner supporting AWS, Azure, GCP, and Kubernetes. It executes security checks across all regions and services using provided credentials, producing pass/fail results for each check.
Opensource cloud security tool
Dropzone AI is an autonomous alert investigation system for security operations centers. It receives alerts from detection systems (SIEM, EDR, cloud security, email security), investigates each alert by querying available log sources and security tools, and produces a disposition: dismiss as false positive or escalate for human review.
AI SOC Analysts that never sleep. So you can.
Nebulock is an autonomous threat hunting platform that uses AI agents to continuously test for malicious activity hiding in your environment. It pulls raw telemetry via API from EDR and identity platforms, runs behavioral hunts across that data, surfaces findings to human analysts, and can translate successful hunts into detections for your CICD pipeline.
Agentic Threat Hunting for Everyone
Knocknoc is a just-in-time network access control platform that ties SSO authentication to firewall rules. Users authenticate via a web-based SSO flow, and Knocknoc dynamically adds their IP address to firewall allow lists for a configured duration.
Knocknoc removes the attack surface of your assets.
Push Security is a browser extension for identity security. It operates in two areas: detection/response for identity-based attacks, and visibility into the organization’s identity attack surface.
Browser-based detection and response
Airlock Digital is an application allowlisting platform for Windows and macOS. It enforces execution control by permitting only approved binaries to run.
Allowlisting Software - Allowlist Made Simple