Retool
Retool is a modern AI-native application development platform designed to help teams build internal software quickly and efficiently. It enables users to create agents, workflows, dashboards, and full-stack apps using natural language prompts and visual tools. Retool connects directly to databases, APIs, vector stores, and AI models to ensure applications work seamlessly with existing systems. The platform allows teams to transform raw data into actionable tools such as dashboards, admin panels, and monitoring systems. With drag-and-drop UI building, code-level customization, and AI-assisted generation, Retool supports multiple development styles. Built-in workflows automate complex processes while maintaining auditability and security. Retool fits naturally into standard engineering stacks with support for CI/CD and version control. Enterprise-grade permissions and hosting options ensure sensitive data stays protected. Used by thousands of companies worldwide, Retool helps teams ship AI-powered software faster. It bridges the gap between idea and production with speed and control.
Learn more
SOCRadar Extended Threat Intelligence
SOCRadar Extended Threat Intelligence is a holistic platform designed from the ground up to proactively detect and assess cyber threats, providing actionable insights with contextual relevance. Organizations increasingly require enhanced visibility into their publicly accessible assets and the vulnerabilities associated with them. Relying solely on External Attack Surface Management (EASM) solutions is inadequate for mitigating cyber risks; instead, these technologies should form part of a comprehensive enterprise vulnerability management framework. Companies are actively pursuing protection for their digital assets in every potential exposure area. The conventional focus on social media and the dark web no longer suffices, as threat actors continuously expand their methods of attack. Therefore, effective monitoring across diverse environments, including cloud storage and the dark web, is essential for empowering security teams. Additionally, for a thorough approach to Digital Risk Protection, it is crucial to incorporate services such as site takedown and automated remediation. This multifaceted strategy ensures that organizations remain resilient against the evolving landscape of cyber threats.
Learn more
WebOrion Protector Plus
WebOrion Protector Plus is an advanced firewall powered by GPU technology, specifically designed to safeguard generative AI applications with essential mission-critical protection. It delivers real-time defenses against emerging threats, including prompt injection attacks, sensitive data leaks, and content hallucinations. Among its notable features are defenses against prompt injection, protection of intellectual property and personally identifiable information (PII) from unauthorized access, and content moderation to ensure that responses from large language models (LLMs) are both accurate and relevant. Additionally, it implements user input rate limiting to reduce the risk of security vulnerabilities and excessive resource consumption. Central to its robust capabilities is ShieldPrompt, an intricate defense mechanism that incorporates context evaluation through LLM analysis of user prompts, employs canary checks by integrating deceptive prompts to identify possible data breaches, and prevents jailbreak attempts by utilizing Byte Pair Encoding (BPE) tokenization combined with adaptive dropout techniques. This comprehensive approach not only fortifies security but also enhances the overall reliability and integrity of generative AI systems.
Learn more
ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives.
Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities.
Our comprehensive security suite covers the application security lifecycle:
1. AI-powered SAST
2. Software Composition Analysis with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code scanning
5. Automated PR reviews
6. Automated patch generation
and more...
ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more.
Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more