Cybersecurity companies, products & suppliers
Cybersecurity products protect systems, identities and data using conventional and increasingly ML-based controls. In this directory the category is general security tooling, not LLM-specific application security. Buyers comparing 'AI security' should use that category instead.
What is Cybersecurity?
Cybersecurity products protect systems, identities and data using conventional and increasingly ML-based controls. In this directory the category is general security tooling, not LLM-specific application security. Buyers comparing 'AI security' should use that category instead.
What problems does it solve?
Attack surface grows while security operations still triage noisy alerts.
Typical business use cases
- Detection
- Response
- Identity
- Cloud security
Important capabilities
- Telemetry
- Detection content
- SOAR
- Admin
What buyers should evaluate
- Coverage
- Data processing of telemetry
- False positives
- Integration
Risks and governance considerations
Telemetry sent to a vendor cloud without a data map.
Procurement checklist
- Data map
- Residency
- Admin access
- Detection content rights
Relevant AI Trustmark assurance
General cybersecurity certification is not an AI Trustmark, and vice versa.
Products and providers
Open a product profile for its catalogue details, or use the provider link for the company profile. Claimed listings appear first, then by name. Payment never changes the order.
Abnormal AI (formerly Abnormal Security) is a behavioral AI security platform focused on email, identity, and AI-related threats. It is designed to detect business email compromise
Amazon GuardDuty is an AWS threat detection service that continuously monitors for malicious activity and anomalous behaviour. It analyses sources such as account activity, network
By CrowdStrike
CrowdStrike is a global cybersecurity leader with an advanced cloud-native platform for protecting endpoints, cloud workloads, identities and data. CrowdStrike Falcon is CrowdStrik
By CybSafe
CybSafe is a London cyber-security company selling behaviour-based security awareness software. Public marketing covers measuring and changing employee security behaviour rather th
By Darktrace
Darktrace sells AI cyber-security products that learn a customer's environment to detect and respond to threats. Public marketing covers threat detection, autonomous response and r
By Google
Google Security Operations, formerly known as Chronicle, is Google Cloud's security operations platform. It brings SIEM, SOAR and threat intelligence into one experience so securit
Immersive Labs is a UK cyber-skills company selling hands-on technical training and crisis-exercise software. Public marketing covers measuring and developing security capability a
Material Security provides phishing protection, account-takeover prevention, and email DLP for Google Workspace and Microsoft 365. Public marketing also emphasises posture + remedi
By Microsoft
Microsoft Defender XDR is Microsoft's extended detection and response suite, coordinating prevention, detection, investigation and response across endpoints, identities, email, col
Implement Zero Trust, Secure your Network, Cloud workloads, Hybrid Workforce, Leverage Threat Intelligence & Security Consulting. Cybersecurity Services & Education for CISO’
By Snyk
Every AI-building team faces one question: can you trust what you're shipping? Snyk secures the code AI writes, the agents it runs, and the apps it builds. Get started for fre
By Wiz
Wiz connects code, cloud, and runtime into one agentic cybersecurity platform. Prevent risk, detect threats, and start secure – across every cloud and AI layer. Wiz Cloud Security
Products
Claimed products appear first. Ranking packs and payment do not change this list.
- Abnormal Security· Abnormal Security
- Amazon GuardDuty· Amazon Web Services
- Cortex XDR· Palo Alto Networks
- CrowdStrike Falcon· CrowdStrike
- CybSafe· CybSafe
- Darktrace· Darktrace
- Google Security Operations· Google
- Immersive Labs· Immersive Labs
- Material Security· Material Security
- Microsoft Defender XDR· Microsoft
- Snyk AppSec Platform· Snyk
- Wiz Cloud Security Platform· Wiz
Related categories
Relevant procurement and assurance guides
Frequently asked questions
Is this the same as AI security?
No. AI security is controls for AI systems. Cybersecurity is broader enterprise security.
What is Cybersecurity?
Cybersecurity products protect systems, identities and data using conventional and increasingly ML-based controls. In this directory the category is general security tooling, not LLM-specific application security. Buyers comparing 'AI security' should use that category instead.
What security testing evidence should buyers request for an AI product?
Ask what was tested, against which version, whether prompt-injection, data-exfiltration and tenant isolation were in scope, and where failed prompts were stored. A generic ISO certificate or a vendor scanner screenshot is not by itself an AI TrustMark assessment.
How should prompt injection and tool-output attacks be controlled?
Agents that read untrusted content or tool output can be instructed to exfiltrate data or take writes. Buyers should ask what is treated as untrusted, whether tool output can change the plan, and what tests were run. Scanner marketing is not the same as independent testing.
What model or provider changes should a buyer insist on being told about?
Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.
How should buyers verify where AI customer data is processed?
Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.
Does a TrustMark on one product cover the rest of the company?
No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.
What incident-handling evidence is useful for AI suppliers?
Buyers should see how AI-specific failures are detected, contained and notified — including unsafe outputs, data leakage and unauthorised agent actions. An incident policy that never mentions models, prompts or tools is incomplete for this class of product.