Eleven categories. One neutral map of who can actually help.
The solution landscape for AI-era vulnerability risk splits into two families: securing your software against a world where AI finds the flaws (Find, Fix, Verify) and securing the AI you deploy — eight AI-specific asset classes, from AI-Workload Platforms to AI Agent Identities, following the AI Defense Matrix taxonomy. Every listing is mapped to the compliance requirements and CISO problem statements it addresses. Basic listings are free — the full landscape should be visible, not just the vendors with the largest marketing budgets.
Tell us where your biggest gaps are instead of browsing eleven categories, and we'll connect you with a vetted partner.
Asset discovery, exposure assessment, attack surface management, KEV correlation, threat intelligence. The BOD 26-04 four-variable model starts here.
Risk-based prioritization, patch automation, remediation workflow, compensating controls, compliance documentation. Only 26% of KEV vulnerabilities were fully remediated in 2025 — this category exists to change that.
Forensic triage, compromise assessment, continuous monitoring, evidence collection. BOD 26-04's most underserved requirement.
Inference servers, training platforms, vector DB platforms, and the model-loading supply chain.
Agentic orchestration tools, plugins, skills, system prompts, and MCP clients.
AI-assisted and vibe-coded development risk — new category.
MCP proxies, LLM routers, outbound AI traffic, shadow AI egress — new category.
Model weights, fine-tuning checkpoints, model cards, AIBOM, and consumed third-party models.
Datasets used for training, fine-tuning, and continued learning.
Prompts, inference inputs, RAG content, vector DB content, persistent agent memory.
AI agents as non-human principals, credentials, permission scopes, delegation chains.
Solution providers: your buyers are already here.
Basic listings are free. Founding partners in each category receive featured placement, a founding-partner badge, and category prominence during the launch window. Enhanced listings add extended profiles, compliance documentation links, priority placement, and inclusion in the weekly Intelligence Brief.