2022 SC Awards Finalists: Most Promising Early-Stage Startup

Deepfence’s ThreatMapper launched as an open-source product in October 2021 with features for application topology discovery, vulnerability scanning, and vulnerability ranking based on risk of exploitation. Since then, ThreatMapper has seen two major releases that introduced new enterprise features, including attack path visualizations that show an organization’s most exploitable direct and indirect attack paths, runtime SBOMs, secret scanning, enhanced vulnerability scanning, and a more sophisticated and representative calculation of the most exploitable vulnerabilities. By making these capabilities accessible via a straightforward API, the broader community can easily build, extend, and integrate ThreatMapper into their tools of choice across cloud providers, security tools, notification tools, and more.

NodeZero is an autonomous penetration testing platform that continuously assesses an enterprise’s attack surface, identifying ways an attacker could chain together harvested credentials, misconfigurations, dangerous product defaults, and exploitable vulnerabilities to compromise systems and data. Horizon3’s NodeZero helps organizations focus on fixing problems that can actually be exploited, saving time and resources spent chasing false positives. Without requiring an agent, customers can assess their entire organization in a matter of hours, versus waiting weeks or months for consultants to manually run scans and produce reports; and the platform helps clients focus on fixing problems that can actually be exploited, saving them time and resources.

Perygee uniquely combines network and real-world IOT/OT data with a suite of no-code tools to enable enterprises to connect security and operations. With every deployment of Perygee, the software passively monitors the network, integrates with IT and OT tools, and most importantly, unlocks the tribal domain knowledge that lives across security and operations teams and is missing from IoT/OT solutions. Due to the platforms’ flexible data layer and no code suite of tools, it seamlessly integrates with legacy and new systems without consulting fees, it can be configured to exactly match the company’s use cases without engineering support, and a drag-and-drop workflow builder conforms to existing security workflows or builds new ones without complex tuning over time.

Shift5 protects the undersecured OT layer of transportation and weapon systems, providing complete visibility, detection, and defense for OT networks on planes, trains, and tanks. Integrating directly onto existing vehicle platforms as hardware or software, Shift5 collects and enriches data from serial databuses including MIL-STD 1553, J1939, CAN 2.0, and RS-232. These serial databuses leverage protocols bespoke to the asset on which they reside and feature requirements for assurance and resilience that go beyond requirements of internet protocols like TCP/IP or TLS/SSL. Shift5 continuously monitors data streams for security and operational anomalies, detects, and alerts teams to anomalies, enabling them to take action to maintain resilience of OT systems and mitigate cybersecurity risks.

SOC Prime supercharges SOC operations by creating real-time detection content that enables finite threat hunting resources to identify and mitigate threats faster and more efficiently. As the world’s largest and most advanced collaborative cyber defense platform, SOC Prime makes threat detection more practical by reducing cost, increasing speed, and improving quality. With the growing talent shortage, SOC Prime offers organizations access to a global threat hunting community that accelerates cyber defense and delivers capabilities beyond even the most advanced security teams.

Symmetry Systems’ flagship solution, DataGuard, provides unified visibility into data objects across all data stores, answering data security and compliance questions that traditional cloud security tools cannot. Symmetry provides visibility into data risks from excessive permissions and anomalous data flows while giving organizations the evidence required to demonstrate compliance best practices DataGuard is the first multi-cloud hybrid data security platform that safeguards data in AWS, GCP, Azure services, and on-premise databases while supporting a zero trust model. Symmetry coined the term “Zero Trust for Data,” incorporating zero trust principles into modern data-store security, ensuring no one point of failure when systems are breached.