Patrick Heim

Rock your SOC with the first universal, low-code, high-speed Security Automation Platform with Case Management built in. Integrate Anything. Automate Everything.

Phylum is a security-as-code platform that gives security and risk teams more visibility into the code development lifecycle, and the ability to enforce security policy without disrupting innovation. Phylum analyzes open-source software packages as they are published and contextualizes the risks, protecting developers and applications at the perimeter of the open-source ecosystem and the tools used to build source code. The platform can be deployed on endpoints or plug directly into CI/CD pipelines so organizations experience seamless, always-on defense at the earliest stages of a build. In 2022, Phylums analysis of open-source packages identified thousands of new malicious packages, malicious authors, and supply chain risks that culminated in a massive improvement to open-source software and the first inaugural Black Hat Innovation Spotlight award. Download the Phylum GitHub App: https://github.com/marketplace/phylum-io

RevealSecurity is an application and identity threat detection company that delivers accurate behavior-based user analytics without rules. This allows organizations to cost effectively detect, alert and quickly respond to the abuse and misuse of trusted identities operating inside and across the mission-critical applications that drive their business.

The center of security gravity has shifted to the cloud; your on-premises and cloud security needs to be cloud-native. Netography Fusion® is a cloud-native Network Defense Platform (NDP) that accelerates your response to anomalies and threats across your hybrid, multi-cloud, and on-prem networks from a single console. Your security, network, and cloud operations teams will become more effective with unmatched traffic monitoring, detection, compromise detection and response, and governance without deploying sensors, agents, or taps. Based in Annapolis, MD, Netography® is backed by some of the world’s leading venture firms, including Bessemer Venture Partners, SYN Ventures, A16Z, and more. For more information, visit netography.com.

Query is a federated search platform delivering a single search bar to access all your security-relevant data, wherever it is stored. The Query Federated Search Platform unlocks access to and value from cybersecurity data wherever it is stored (in the cloud, third-party SaaS, or on-prem), regardless of vendor or technology, and without requiring centralization. This leads to massive cost savings, more efficient security operations across real-time and historical data sources, and reduced security analyst ramp-up time.

SynSaber is the industrial asset and network monitoring solution that provides continuous insight into status, vulnerabilities, and threats, enabling operators to more effectively see, know, and take action to defend industrial systems and protect critical infrastructure. Overcome industrial threats. Defend with laser precision. Navigate your security quest with confidence.

Founded by Incident Responders, for Incident Responders. Mitiga is the next thing in Cloud Security. Mitiga is the first and only company to deliver real-time detection, response and remediation across ALL 3 Cloud components - Cloud Infrastructure, SaaS Applications and Identities -- moving your SecOps beyond prevention to real-time detection and response. Mitiga is easy to use, quick to deploy, and delivers compelling savings with payback <6 mos. Mitiga is used by many Fortune 500 companies to enhance their SOCs and defeat attackers.

Data Governance for AI. With self-serve data usage intelligence, non-technical, authorized employees can see who is accessing sensitive data, how, and when - ensuring your AI use cases follow the least privilege access principles.

At Accurics™, we envision a world where organizations can innovate in the cloud with confidence. Our mission is to enable cyber resilience through self-healing as organizations embrace cloud native infrastructure. The Accurics platform self-heals cloud native infrastructure by codifying security throughout the development lifecycle. It programmatically detects and resolves risks across Infrastructure as Code before infrastructure is provisioned, and maintains the secure posture in runtime by programmatically mitigating risks from changes. We provide free SaaS and open source tools such as Terrascan™ to enable organizations of all sizes to innovate with confidence.

AppOmni pioneered the SSPM category in 2018 and now leads the next frontier: securing AI in SaaS. Our SaaS and AI security platform gives security teams unified visibility into posture, access, third-party connections, and AI-related activity — applying the same SSPM principles to AI security. With continuous monitoring, real-time threat detection, and autonomous correlation of security signals, AppOmni helps enterprises identify, respond to, and block threats across their entire SaaS environment. Recognized as a Frost Radar™ 2025 Leader and Great Place To Work®, AppOmni continues to set the standard for innovation and customer value in SaaS security. The largest and fastest-growing global enterprises across industries trust AppOmni to secure their SaaS applications.

ZeroNorth brings security, DevOps and the business together to improve application security performance and reduce organizational risk. The company’s DevSecOps platform enables organizations to automate and orchestrate key components of their application security program, and to rapidly identify, prioritize and remove the vulnerabilities standing in the way of software excellence. In an age where the security of applications needs to be everyone’s responsibility, ZeroNorth is where organizations come together for the good of software.

BigID Next connects the dots in Data & AI. Its the modern platform for data security, privacy, compliance, and governance: built cloud-native, AI-ready, and made for what’s next. With BigID, organizations can see and secure their entire data landscape across multicloud, hybrid, SaaS, and on-prem. Customers use BigID to reduce risk, automate security and privacy controls, stay ahead of compliance, and turn data into an advantage and AI risk into innovation - all in one platform.

Preempt secures all workforce identities to accelerate digital transformation. Since 80% of all breaches involve compromised credentials, Preempt unifies security visibility and control for on-premises and cloud identities. Threats are preempted and IT policy enforced in real-time using identity, behavioral, and risk analytics. Preempt protects 4M+ workforce identities across 400+ enterprises. Customers have reduced the cost required to stop advanced threats and accelerate Zero Trust and Conditional Access initiatives. Founded in 2014, Preempt is headquartered in Silicon Valley, with R&D in Israel and sales offices worldwide.

Solebit provides the fastest, most accurate and cost-effective approach for the identification and prevention of zero-day malware and unknown threats. SoleGATE is the disruptive cyber protection software platform by Solebit, challenging the norms of currently available technologies that rely on slow, costly and mostly outdated, ineffective methods of sandboxing, signatures and behavioral inspection. The solution is powered by DvC™ (data vs. code), a patented, real-time, signature-less engine. DvC assumes that there is no legitimate reason for executable code to be present in any data file. As such, it does not rely on heuristics or behaviors (which are core limitations of competing technologies), and definitively identifies and terminates any instance of malicious code such as hidden CPU instructions, encrypted and polymorphic payloads, shellcodes and other commands typically buried in data file. DvC also accurately identifies an blocks malicious active content using advanced flow analysis, de-obfuscation techniques and deep content evaluation, to reveal threat intent within any inbound data file covering machine, operating system and application levels, thereby rendering such sandbox evading attacks harmless to the enterprise. Solebit was founded in 2014 by a team of world-class cybersecurity experts, all graduates of the elite technology units in the Israel Defense Forces with years of experience in offensive and defensive security. It counts a variety of leading global financial organizations, tech, defense contractors, security vendors, cloud and telecom service providers as active customers. For more information, please visit solebit.io

Eclypsium establishes trust in every endpoint, server and network appliance in enterprise infrastructure (IT, cloud, data centers, network) by identifying, verifying and fortifying 3rd-party software, firmware and hardware in every device. Eclypsium’s platform continuously monitors firmware, hardware and software within each critical asset for threats, backdoors, implants and vulnerabilities, and mitigates supply chain risks throughout the asset lifecycle. Powered by world-class research team, Eclypsium was named as Gartner Cool Vendor, and a winner of Fast Company’s most innovative security companies, CNBC Upstart 100, Cyber Defense Magazine’s Most Innovative Supply Chain Security, and CRN’s Stellar Startups awards.

Rock your SOC with the first universal, low-code, high-speed Security Automation Platform with Case Management built in. Integrate Anything. Automate Everything.

Phylum is a security-as-code platform that gives security and risk teams more visibility into the code development lifecycle, and the ability to enforce security policy without disrupting innovation. Phylum analyzes open-source software packages as they are published and contextualizes the risks, protecting developers and applications at the perimeter of the open-source ecosystem and the tools used to build source code. The platform can be deployed on endpoints or plug directly into CI/CD pipelines so organizations experience seamless, always-on defense at the earliest stages of a build. In 2022, Phylums analysis of open-source packages identified thousands of new malicious packages, malicious authors, and supply chain risks that culminated in a massive improvement to open-source software and the first inaugural Black Hat Innovation Spotlight award. Download the Phylum GitHub App: https://github.com/marketplace/phylum-io

RevealSecurity is an application and identity threat detection company that delivers accurate behavior-based user analytics without rules. This allows organizations to cost effectively detect, alert and quickly respond to the abuse and misuse of trusted identities operating inside and across the mission-critical applications that drive their business.

The center of security gravity has shifted to the cloud; your on-premises and cloud security needs to be cloud-native. Netography Fusion® is a cloud-native Network Defense Platform (NDP) that accelerates your response to anomalies and threats across your hybrid, multi-cloud, and on-prem networks from a single console. Your security, network, and cloud operations teams will become more effective with unmatched traffic monitoring, detection, compromise detection and response, and governance without deploying sensors, agents, or taps. Based in Annapolis, MD, Netography® is backed by some of the world’s leading venture firms, including Bessemer Venture Partners, SYN Ventures, A16Z, and more. For more information, visit netography.com.

Query is a federated search platform delivering a single search bar to access all your security-relevant data, wherever it is stored. The Query Federated Search Platform unlocks access to and value from cybersecurity data wherever it is stored (in the cloud, third-party SaaS, or on-prem), regardless of vendor or technology, and without requiring centralization. This leads to massive cost savings, more efficient security operations across real-time and historical data sources, and reduced security analyst ramp-up time.