Acunetix
Application & API Security
Acunetix was founded to combat the alarming rise in web attacks.
acunetix.comopens in a new tabEstablishedApplication Security TestingApp Security
Security category
Application & API Security
Secure code, pipelines, and APIs from development through production runtime.
What this category includes
- Discovery and inventory of the assets, identities, or data in scope
- Policy and control enforcement aligned to your risk appetite
- Detection, prioritization, and response workflows
- Reporting and evidence for audit and executive stakeholders
- Integration with your existing security and IT stack
Why it matters now
Buying pressure in this category is rising as environments change faster than control coverage. Teams that define requirements before engaging vendors move faster and negotiate from a stronger position.
Common buyer triggers
- An audit finding or regulatory deadline
- A security incident or near miss
- Tool consolidation or renewal pressure
- A major platform, cloud, or AI adoption program
- Headcount constraints driving automation or managed coverage
Key capabilities to evaluate
- Coverage breadth across your actual environment, not the demo environment
- Accuracy and tuning effort in the first 90 days
- Workflow fit with your ticketing and ownership model
- Deployment effort and time to first measurable value
- Commercial model that scales predictably with growth
Questions to ask vendors
- What does a realistic 90-day rollout look like for an organization our size?
- Which of these capabilities are generally available today versus on the roadmap?
- How is pricing metered, and what causes it to increase?
- What do we lose if we leave — and how portable is our data and configuration?
Featured vendors
Capital Security and Risk Group
Application & API Security
We operate as a true attacker whose goal would be to disrupt your business operations.
csr.groupopens in a new tabEstablishedPenetration Testing - Pen TestingPenetration Testing
ExtraHop
Application & API Security
We could use all the traditional buzzwords to tell you why we’re the best security company ever.
extrahop.comopens in a new tabEstablishedNetwork Detection & ResponseIT Management
Lares
Application & API Security
Lares is a security consulting firm that helps companies secure electronic, physical, intellectual, and financial assets through a unique blend of assessment, testing and coaching.
lares.comopens in a new tabEstablishedPenetration Testing - Pen TestingPenetration Testing
Netsparker (Is now Invicti)
Application & API Security
Netsparker develops a leading-edge web application vulnerability scanning solution.
netsparker.comopens in a new tabEstablishedApplication Security TestingApp Security
Noname Security
Application & API Security
The Noname API Security Platform is the only solution to proactively secure your environment from API security vulnerabilities, misconfigurations, design flaws, and provides API attack protection with automated detection…
nonamesecurity.comopens in a new tabEstablishedAPI Security
Rapid7
Application & API Security
Organizations around the globe rely on Rapid7 technology, services, and research to securely advance.
rapid7.comopens in a new tabEstablishedSecurity Information and Event Management (SIEM)Information Security
Silent Breach
Application & API Security
Silent Breach specializes in network security and digital asset protection.
silentbreach.comopens in a new tabEstablishedPenetration Testing - Pen TestingPenetration Testing
TrustedSec
Application & API Security
TrustedSec is an information security consulting team at the forefront of attack simulations with a focus on strategic risk-management.
trustedsec.comopens in a new tabEstablishedPenetration Testing - Pen TestingIT Security Consulting
White Oak Security
Application & API Security
White Oak Security is your security partner - acting as a trusted advisor and helping your organization understand your risks and vulnerabilities; whether in software, infrastructure, people, or process.
whiteoaksecurity.comopens in a new tabEstablishedPenetration Testing - Pen TestingPenetration Assessment
42Crunch
Application & API Security
42Crunch provides continuous API security to protect the digital business.
42crunch.comopens in a new tabEstablishedAPI SecurityOWASP API Security
Neosec
Application & API Security
Neosec is reinventing application security and is the intelligent way to protect your APIs from business abuse and data theft.
neosec.comopens in a new tabEstablishedAPI Security
Salt Security
Application & API Security
Salt Security delivers an API Threat Protection solution focused on securing the ubiquitous APIs connecting everything from web and mobile applications to microservices and IoT devices.
salt.securityopens in a new tabEstablishedAPI Security
Bishop Fox
Application & API Security
Bishop Fox is recognized as the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application secu…
bishopfox.comopens in a new tabEstablishedPentestPentest - Penetration Testing
Searchlight Cyber
Application & API Security
We provide organizations with relevant and actionable dark web threat intelligence to help them identify and prevent criminal activity.
slcyber.ioopens in a new tabEstablishedDark Web MonitoringDark Web Investigation
Infinite Blue
Application & API Security
Infinite Blue empowers organizations to rapidly build ready and resilient operations and engage personnel across the enterprise.
infiniteblue.comopens in a new tabEstablishedDisaster RecoveryBusiness Continuity
Miggo
Application & API Security
Miggo — Application Detection and Response.
EstablishedApplication Detection and ResponseApp Detection and Response
Vercara
Application & API Security
With Vercara's purpose-built, global cloud security platform, businesses can safeguard their online presence from any attack, regardless of where it comes from.
vercara.comopens in a new tabEstablishedDDoS Attack ProtectionDNS Security
OX Security
Application & API Security
OX Security is unifying AppSec practices with its pioneering Active ASPM platform, enabling users to prevent risks by providing visibility and traceability, contextualized prioritization, and automated response throughou…
ox.securityopens in a new tabEstablishedApplication SecurityAppSec Posture Management - ASPM
Traceable
Application & API Security
Traceable is the industry’s leading API Security company that helps organizations achieve API visibility and attack protection in a cloud-first, API-driven world.
traceable.aiopens in a new tabEstablishedAPI Security
Prompt Security
Application & API Security
The Complete Platform for Generative AI Security Prompt Security enables enterprises to benefit from the adoption of Generative AI while protecting from the full range of risks to their applications, employees and custom…
prompt.securityopens in a new tabEstablishedA.I. SecurityGenAI Security
Dazz
Application & API Security
Dazz delivers unified security remediation for fast-moving security and development teams.
dazz.ioopens in a new tabEstablishedApplication Security Posture Management - ASPMApplication Security - AppSec
ActiveState
Application & API Security
ActiveState enables DevOps, InfoSec, and Development teams to improve their security posture while simultaneously increasing productivity and innovation to deliver secure applications faster.
activestate.comopens in a new tabEstablishedApplication Security - AppSecOpen Source Security
Cribl
Application & API Security
Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy.
cribl.ioopens in a new tabEstablishedObservability ManagementSIEM Cost Reduction
Wallarm
Application & API Security
APIs – the driving force behind AI-based innovation, modern applications, and cloud infrastructure – are the #1 attack vector for cybercriminals.
wallarm.comopens in a new tabEstablishedAPI SecurityWeb Application and API Protection - WAAP
Emerging vendors from Breach Tank
Early-stage companies surfaced through Breach Tank pitch sessions. Inclusion is for discovery, not endorsement.
Featured Breach Tank startups will appear here soon. Visit breachtank.com to see the latest pitches.
Related categories
Related research
Get a Application & API Security buying roadmap.
We will map the category, shortlist vendors matched to your environment, and coordinate evaluations.