ActiveState
Founded 1997
Platform for building secure open source language runtimes and managing dependency vulnerabilities.
Supply Chain & Secrets
Software supply chain security, SBOM, secrets detection, and package and firmware integrity.
17 vendors; newest added 2026-08-08. Ordered by name. No paid placement.
Binarly
Founded 2021
Firmware and binary analysis platform finding vulnerabilities in software after it is compiled.
Chainguard
Founded 2021
Minimal, continuously rebuilt container images and libraries shipped with few or no known CVEs.
Chainloop
Founded 2023
Supply chain attestation platform enforcing governance over how software, including AI-written code, is built.
Crash Override
Founded 2022
Embeds metadata into builds so teams can trace software from source to production.
Echo
Founded 2025
Container images and packages kept free of known vulnerabilities by AI-driven rebuilds.
GitGuardian
Founded 2017
Secrets detection platform finding leaked credentials in code and managing non-human identities.
HashiCorp
Founded 2012
Infrastructure automation company behind Terraform and Vault, now owned by IBM.
Infisical
Founded 2022
Open source platform for managing application secrets, certificates, and SSH access.
InvisiRisk
Founded 2024
Firewall for CI/CD pipelines that enforces security policy on builds in real time.
Minimus
Founded 2022
Minimal hardened container and VM images that cut vulnerability counts in cloud workloads.
NetRise
Founded 2020
Supply chain security platform analyzing firmware and binaries to reveal inherited software risk.
RapidFort
Founded 2020
Tool that strips unused components from containers, shrinking attack surface without code changes.
ReversingLabs
Founded 2009
Binary analysis platform verifying files and software packages are free of threats and tampering.
Sonatype
Founded 2008
Software supply chain management built on open source component analysis and repositories.
Truffle Security Co.
Founded 2019
Maker of TruffleHog, the open source tool for finding and verifying leaked secrets in code.
TuxCare
Founded 2009
Live kernel patching and extended support keeping Linux and open source software secure without reboots.