Integration ecosystemUI-25 — integration network graphEvery Detection Engineering vendor with a detected integration, plus the vendors they integrate with (any category) — integrations are mostly cross-category in practice, so this shows the real neighborhood, not just same-category edges. Detection Engineering vendors are highlighted; connected vendors from other categories are dimmer. Circle size = how many integrations that vendor has. Sourced from each vendor's own published integration/partner pages (see UI-12).
311 edges
CVE exposure in Detection EngineeringUI-71 — vendor/CVE treemapEvery Detection Engineering vendor with at least one tracked CVE, sized by count — same data and coloring as the full-catalog version on the Browse page, scoped to just this category.
1 vendor with at least one tracked CVE, sized by how many. Color = relative volume.About CVE trackingSourced from the public NVD database, matched by vendor name (same data as each vendor's own CVE list). Tracking is capped at 100 CVEs per vendor as a scan guard — no vendor has hit that cap yet. Vendor-level only, not per-product/version — always check the linked NVD record before drawing conclusions about a specific product.
Security posture in Detection EngineeringUI-108 — category security rollupA category-level rollup of the same per-vendor signals shown on each vendor's own page (UI-90/99/102): security-header checks against each vendor's own homepage, and keyword-matched compliance certifications. Coverage is partial — only vendors checked so far are counted, not the whole category — so this describes what's known, not a claim about every vendor in Detection Engineering.
4/6
checked vendors have a strong security-header posture (3+/5)
1
vendor with a disclosed certification
6/21
vendors in this category checked so far
Vendors (21)
⚖ Compare vendors side-by-side
Pick 2–4 vendors, then compare their products and neutral strengths/gaps.
0/4 selected
1stProtect.ai1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Runtime enforcement platform with 22 modules on one SIGMA engine, offline-capable.
1stProtect.ai
aDolus Technology6 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
SaaS platform for software supply chain monitoring across IT, IoT, and OT.
aDolus FACT - Malware Detection
Anvilogic1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
AI-powered SOC platform for detection engineering across SIEMs & data lakes
Anvilogic AI SOC
Atomicorp2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
ModSecurity-based WAF ruleset for detecting and blocking web app attacks.
Atomicorp Atomic ModSecurity Rules & WAF
Axur9 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
CardinalOps1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
AI-powered platform that automates detection engineering to expand SIEM & EDR coverage.
CardinalOps Threat-Informed Detection Engineering
Cotool1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
AI agent platform for SecOps automation, detection tuning, and threat hunting
Cotool
Cythereal3 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Analyzes stopped attacks to auto-generate YARA rules and IoCs against APTs.
Cythereal MAGIC EWSCythereal MAGIC™
DefenderLens1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Turn Any Threat into a Detection Rule
Defender Lens
detections.ai1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Community platform for sharing and creating detection rules with AI
detections.ai Detections
Fig Security1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
SOC resilience platform detecting & repairing drift in detection rules and pipelines.
Fig Security Operations Resilience
Google8 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Google's zero trust implementation for secure access without VPN
Google Security Operations
Hunters2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Next-gen SIEM with AI-powered triage, automated investigation & detection
Hunters Next-Gen SIEM
LogCraft1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Detection-as-code platform for managing detection rules across SIEM/EDR/XDR
LogCraft Detection Engineering
Pathlock9 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Identifies and manages SoD and sensitive access risks across business apps
Pathlock Role Management
Query.AI4 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Runs security detections across distributed data sources without SIEM ingestion.
Query.AI Federated Detections
Rilevera1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
AI platform for continuous detection rule validation, optimization & governance.
Rilevera
Sesame IT (Jizô AI)5 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
AI-powered NDR platform for IT/OT threat detection across encrypted traffic.
Sesame IT HOSHI
SOC Prime2 productsAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Threat detection marketplace with Sigma rules for SIEM and shift-left detection
SOC Prime Threat Detection MarketplaceSOC Prime Uncoder AI
Spectrum Security1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Tenzir1 productAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Unclaimed
Security data pipeline platform with a query language for log normalization and
