Top California Cybersecurity Startups (166)

Secureframe is the leading, all-in-one compliance automation platform that helps companies achieve and maintain compliance with the most rigorous frameworks including CMMC, FedRAMP 20x, SOC 2, ISO 27001, and HIPAA.

At Framework Security, we take a proactive approach to cybersecurity, working with organizations to identify potential vulnerabilities and implementing measures to prevent attacks before they happen. In the event of a security incident, we offer rapid response services to minimize damage and get businesses back up and running as quickly as possible. Our services include cybersecurity framework assessments, penetration testing, virtual...

Industry’s first Real-time Attack Interception and Defense Platform built to deterministically detect and stop attackers navigating your infrastructure.

The Spec platform empowers businesses to secure their customer journeys, overtake bad actors, and reward every good customer with a trusted online experience. Spec collects rich user session data in real time, enabling continuous and secure threat monitoring without reliance on tamper-prone JavaScript tracking tags. When attacks are detected, workflows are automatically triggered to remediate the issue before the user...

Galvanick helps companies secure their industrial operations and minimize cyber risk. Our platform collects telemetry from across our clients' industrial environments to analyze, correlate, and detect malicious behavior. Concerned about cyber threats to your industrial infrastructure and operations? Contact us at [email protected]

Open Source has become the critical supplier for modern software companies, changing everything about how people think about their code. FOSSA builds the infrastructure for modern teams to be successful with open source. FOSSA's flagship product helps teams track the open source used in their code and automate license scanning and compliance. Since then, over 7,000 open source projects (Kubernetes, Webpack,...

Cyolo is redefining SRA for OT with a hybrid Remote Privileged Access Solution (RPAM) solution that provides safe and secure remote access and operations, even in the most sensitive environments. The Cyolo PRO (Privileged Remote Operations) solution seamlessly integrates secure access, connectivity and supervision through features such as VPN-less zero-trust access, MFA identity authentication (even for legacy apps), credentials vault,...

BlueRock delivers the first Compute Firewall, revolutionizing runtime security in an era of AI-speed cyberattacks and escalating third-party software risks. Traditional security tools and agents can't keep pace, leaving enforcement gaps exposed. Attackers now exploit vulnerabilities within minutes of disclosure, outpacing reactive detection methods. BlueRock solves this by embedding real-time, preemptive enforcement directly into the compute layer, halting exploits precisely...

No more legacy SIEM. Time for a Modern approach. Democratize security across your hybrid, multi-cloud, and other data lakes. Anvilogic is an AI-Driven SOC platform for threat detection and incident response that helps to unify and automate security operations across people, processes, and technology enabling security teams to reduce the time, manual effort, complexity, and expertise needed for building detections and...

Red Cup IT is an enterprise-grade IT firm that provides MSP, MSSP, Project Delivery, and Skill Augmentation solutions. We have been in business for twelve years and support clients across the United States. Our hallmark is the delivery of skillsets in more than 100 IT solutions and SaaS applications. Red Cup IT’s technical staff constantly cross-train across their specializations. Our...

U.S. Venture Partners (USVP) is a leading Silicon valley-based venture capital firm, helping entrepreneurs build world-class companies since 1981. U.S. Venture Partners (USVP), is a venture capital investment firm headquartered in Menlo Park, California in the heart of Silicon Valley focusing on investments in an array of segments including enterprise software, cyber security, consumer, e-commerce, healthcare, and IT-enabled healthcare services. Since...

We believe cyber risk management has evolved from an IT problem into a business problem. Because of this shift, security executives must adapt how they communicate risk to the board. But since risk is hard to frame in the context of a business initiative, security executives need help putting risk into business terms that the board can use to make...

Horizon3.ai's mission is to help you find and fix attack vectors before attackers can exploit them. NodeZero, our autonomous penetration testing solution, enables organizations to continuously assess the security posture of their enterprise, including external, identity, on-prem, IoT, and cloud attack surfaces. Like APTs, ransomware, and other threat actors, our algorithms discover and fingerprint your attack surface, identifying the ways...

Stytch is the most powerful identity platform built for developers. By powerful, we mean: **Comprehensive:** Stytch has everything you need to identify, authenticate, and manage your users, including fraud prevention tools like device fingerprinting. **Adaptable:** Stytch is the only auth provider that enables you to build directly with our APIs or our suite of SDKs, so you can deliver the ideal experience...

Did you know that global cyberattacks have increased upto 32% year over year and enterprises now deploy 75+ cybersecurity related tools on their networks just to keep pace with the increasing complexity and frequency of attacks. But even with the huge investment in security tools, 61% of organizations have difficulty prioritizing cyber risk-reduction efforts due to a shortage of talent...

Harmonic Security lets your teams adopt AI tools safely by protecting sensitive data in real time with minimal effort. It gives you full control and stops leaks so your teams can innovate confidently. Recognized as an RSA Innovation Sandbox finalist in 2024, Harmonic Security redefines data protection for the GenAI era.

Kivu combines technical and legal expertise to deliver investigative, discovery and forensic solutions worldwide. Kivu’s digital forensic investigators are experienced in protecting organizations against compromise of data, theft of trade secrets and unauthorized access to data. Our qualifications include forensic certifications (Encase Certified EnCE, SANS GCIH Incident Handlers, Certified Ethical Hackers, and reverse malware experts); IT certifications (Certified Information Systems...

With our feet firmly planted on San Francisco bedrock — we’ve got our eyes set on our North Star: Ushering in a new era of where enterprises are free to embrace data safely with clarity, control, and confidence. Powered by the industry’s only AI Reasoning (AIR) Engine, Bedrock automatically understands what is most material to enterprises to protect their most...

G2 Ops is a preferred provider of analytical and innovative solutions in the following areas: - Model-Based Systems Engineering - Cybersecurity Requirements, Analysis, and Threat Assessment - Cybersecurity Consulting Strategic vision: G2 Ops helps companies stay ahead of cyber crime and IT threats by identifying and measuring weaknesses before incidents occur, then providing remediation priorities based on individual business and financial risk thresholds.

Tempest is an online privacy company which seeks to increase privacy and data security for all Internet users. Founded in 2019 by entrepreneurs Michael Levit and Sean Murphy, Tempest has built a portfolio of privacy products including a Tempest Search and Tempest Browser. It also plans to expand its product range, ensuring user safety across every touchpoint online. With operations...