Vendor evidence index
The evidence behind enterprise technology decisions, published
nexalign collects evidence on the vendors that turn up in security, identity, cloud and governance decisions: government vulnerability registers, EU and German authorities, practitioner discussions, analyst and neutral press coverage, and the vendors' own documentation. This is that pool, opened up. 4,345 items across 131 vendors, each one linked to the source it came from. What a plain web search returns about a company, its directory profiles and lead-generation listings, is not in here.
Vendors
131
with a published record
Evidence items
4,345
source and date on each
From authorities
3,145
NVD, ENISA, CISA, BSI
Last checked
Jul 31, 2026
sources re-queried
What this index is, and what it is not
It is a record, not a ranking. There are no stars, no quadrants and no "leaders", because a leader only exists relative to a buyer's criteria, and those live in the decision, not in the vendor.
No vendor pays to be in here
There is no sponsored placement, no premium profile and no way to buy a change. A vendor is listed because a decision in its category came up, not because it asked.
Every item names its source
A finding without a source is not a finding. Each entry links back to the register, thread or document it came from, and carries the date that source states. Where a source states none, the entry says so instead of inventing one.
Gaps are shown as gaps
Where nothing was found, the page says nothing was found. Silence is never rendered as a clean bill of health, and no missing fact is filled in by a language model.
How sources are classified
A vendor can rewrite its own site overnight. It cannot edit a government register or a years-old thread. Every item is classified by how much the vendor could influence it, and each profile reports the resulting mix.
Government and regulatory registers: NVD, the European Vulnerability Database, the CISA catalogue of known exploited vulnerabilities, CERT-Bund advisories from the BSI, EUR-Lex.
Third parties the vendor does not control: practitioner threads, plus a fixed list of recognised analysts, review marketplaces and neutral technology press. Social networks, press-release wires and company directories are excluded, because placement there is trivial.
The vendor's own material: documentation, whitepapers, submissions. Kept in the record and labelled, never counted as independent confirmation.
Vendors in the index
Grouped by the kind of decision they show up in. The counts are the size of each record, not a quality signal: a large record can mean a widely deployed product or a busy year of advisories.
Endpoint security (EDR and XDR)18
Trend Micro
91 items · 6 sources · latest Jul 31, 2026
ESET
64 items · 6 sources · latest Jul 31, 2026
Elastic Security
64 items · 7 sources · latest Jul 18, 2026
Trellix
60 items · 5 sources · latest Jul 14, 2026
Sophos
58 items · 7 sources · latest Jul 16, 2026
WithSecure
58 items · 3 sources · latest Jul 17, 2026
G DATA
57 items · 5 sources · latest Jul 17, 2026
Kaspersky
53 items · 5 sources · latest Jul 17, 2026
CrowdStrike
42 items · 6 sources · latest Jul 17, 2026
Bitdefender
41 items · 4 sources · latest Jul 15, 2026
Malwarebytes
40 items · 4 sources · latest Jul 17, 2026
Symantec Endpoint Security
38 items · 3 sources · latest Jul 17, 2026
Microsoft Defender for Endpoint
34 items · 8 sources · latest Jul 16, 2026
SentinelOne
30 items · 4 sources · latest Jul 17, 2026
Panda Security
29 items · 3 sources · latest Jul 17, 2026
Carbon Black
18 items · 5 sources · latest Jul 17, 2026
Cylance
9 items · 2 sources · latest Jul 17, 2026
Cybereason
5 items · 3 sources · latest Jul 17, 2026
Identity and access management14
Okta
83 items · 6 sources · latest Jul 24, 2026
Microsoft Entra ID
41 items · 6 sources · latest Jul 17, 2026
Auth0
36 items · 3 sources · latest Jul 17, 2026
Ping Identity
34 items · 5 sources · latest Jul 27, 2026
Omada Identity
28 items · 3 sources · latest Jul 17, 2026
ForgeRock
26 items · 4 sources · latest Jul 22, 2026
OneLogin
22 items · 5 sources · latest Jul 17, 2026
RSA SecurID
22 items · 2 sources · latest Jul 03, 2026
SailPoint
19 items · 2 sources · latest Jul 17, 2026
Thales SafeNet
14 items · 4 sources · latest Jul 17, 2026
EmpowerID
9 items · 2 sources · latest Jul 17, 2026
Saviynt
8 items · 2 sources · latest Jul 17, 2026
Duo Security
6 items · 3 sources · latest Jul 03, 2026
SecureAuth
2 items · 2 sources · latest Jun 04, 2026
Privileged access management6
HashiCorp Vault
70 items · 4 sources · latest Jul 06, 2026
BeyondTrust
52 items · 5 sources · latest Jul 28, 2026
CyberArk
48 items · 4 sources · latest Jul 27, 2026
ARCON
32 items · 4 sources · latest Jul 17, 2026
Delinea
30 items · 4 sources · latest Jul 17, 2026
WALLIX
6 items · 2 sources · latest Jul 17, 2026
SIEM and log analytics12
Splunk
86 items · 5 sources · latest Jul 17, 2026
IBM QRadar
55 items · 3 sources · latest Jun 11, 2026
Microsoft Sentinel
38 items · 5 sources · latest Jul 26, 2026
ArcSight
37 items · 3 sources · latest Jul 17, 2026
Elastic SIEM
28 items · 2 sources · latest Jul 17, 2026
Google Chronicle
28 items · 2 sources · latest Jul 17, 2026
Palo Alto XSIAM
28 items · 2 sources · latest Jul 17, 2026
LogRhythm
11 items · 2 sources · latest Jul 17, 2026
Rapid7 InsightIDR
11 items · 2 sources · latest Jul 17, 2026
Sumo Logic
10 items · 2 sources · latest Jul 17, 2026
Securonix
6 items · 2 sources · latest Jul 17, 2026
Datadog Security
5 items · 3 sources · latest Jul 17, 2026
Managed detection and response6
Secureworks
10 items · 2 sources · latest Jul 18, 2026
Rapid7 MDR
6 items · 2 sources · latest Jul 18, 2026
NTT Security
6 items · 2 sources · latest Jul 18, 2026
Atos Managed Security
5 items · 2 sources · latest Jul 18, 2026
Optiv
4 items · 2 sources · latest Jul 18, 2026
Orange Cyberdefense
3 items · 2 sources · latest Jul 18, 2026
Network security16
Check Point
137 items · 5 sources · latest Jul 17, 2026
Fortinet
130 items · 5 sources · latest Jul 24, 2026
Palo Alto Networks
116 items · 5 sources · latest Jul 17, 2026
Cisco Security
93 items · 5 sources · latest Jul 17, 2026
Juniper Networks
86 items · 6 sources · latest Jul 17, 2026
SonicWall
73 items · 6 sources · latest Jul 18, 2026
WatchGuard
66 items · 5 sources · latest Jul 18, 2026
Akamai
48 items · 4 sources · latest Jul 03, 2026
Zscaler
45 items · 4 sources · latest Jul 17, 2026
Infoblox
44 items · 5 sources · latest Jul 18, 2026
Netskope
40 items · 5 sources · latest Jul 03, 2026
Cato Networks
34 items · 6 sources · latest Jul 18, 2026
F5 Networks
21 items · 3 sources · latest Jul 18, 2026
Radware
20 items · 3 sources · latest Jul 18, 2026
Barracuda Networks
16 items · 5 sources · latest Jul 17, 2026
Illumio
8 items · 3 sources · latest Jul 18, 2026
Email security8
Proofpoint
37 items · 5 sources · latest Jul 18, 2026
Cisco Email Security
36 items · 4 sources · latest Jul 18, 2026
Microsoft Defender for Office 365
35 items · 4 sources · latest Jul 18, 2026
Vade
15 items · 4 sources · latest Jul 03, 2026
Barracuda Email Security
11 items · 4 sources · latest Jul 18, 2026
Mimecast
9 items · 4 sources · latest Jul 18, 2026
Hornetsecurity
6 items · 3 sources · latest Jul 01, 2026
Topsec
6 items · 2 sources · latest Apr 07, 2026
Cloud and sovereign cloud10
Microsoft Azure
86 items · 5 sources · latest Jul 17, 2026
Cloudflare
58 items · 3 sources · latest Jul 17, 2026
Google Cloud Platform
55 items · 5 sources · latest Jul 14, 2026
Amazon Web Services
48 items · 5 sources · latest Jul 28, 2026
STACKIT
27 items · 4 sources · latest Jul 17, 2026
Hetzner Cloud
20 items · 2 sources · latest Jul 03, 2026
Deutsche Telekom
17 items · 4 sources · latest Jul 17, 2026
OVHcloud
15 items · 2 sources · latest Jul 17, 2026
Vultr
9 items · 2 sources · latest Jul 17, 2026
Gridscale
4 items · 2 sources · latest Dec 09, 2025
Backup and recovery10
Acronis
102 items · 6 sources · latest Jul 24, 2026
Dell EMC Data Protection
57 items · 3 sources · latest Jul 17, 2026
Veritas NetBackup
56 items · 3 sources · latest Jul 17, 2026
Veeam
54 items · 4 sources · latest Jul 27, 2026
Commvault
38 items · 6 sources · latest Jul 17, 2026
Arcserve
35 items · 4 sources · latest Jul 17, 2026
MSP360
17 items · 3 sources · latest Jul 17, 2026
Cohesity
16 items · 3 sources · latest Jul 14, 2026
Rubrik
15 items · 3 sources · latest Jul 03, 2026
Druva
12 items · 2 sources · latest Jul 17, 2026
Data security7
Imperva
28 items · 3 sources · latest Jul 18, 2026
Symantec DLP
25 items · 3 sources · latest Jul 04, 2026
Forcepoint DLP
11 items · 4 sources · latest Jul 18, 2026
Digital Guardian
10 items · 2 sources · latest Jul 18, 2026
BigID
10 items · 3 sources · latest Jul 04, 2026
Varonis
8 items · 2 sources · latest Jul 18, 2026
Vera Security
7 items · 3 sources · latest Jul 18, 2026
DevSecOps and application security14
Wiz
62 items · 5 sources · latest Jul 12, 2026
Prisma Cloud
50 items · 5 sources · latest Jul 18, 2026
Burp Suite Pro
43 items · 5 sources · latest Jul 04, 2026
Snyk
41 items · 4 sources · latest Jul 18, 2026
SonarQube
32 items · 5 sources · latest Jul 18, 2026
Semgrep
24 items · 3 sources · latest Jul 18, 2026
JFrog Security
21 items · 3 sources · latest Jul 18, 2026
Aqua Security
20 items · 5 sources · latest Jul 18, 2026
Checkmarx
15 items · 4 sources · latest Jul 18, 2026
Synopsys Coverity
13 items · 3 sources · latest Jul 18, 2026
Veracode
9 items · 3 sources · latest Jul 18, 2026
Orca Security
9 items · 3 sources · latest Jul 18, 2026
GitGuardian
9 items · 2 sources · latest Jul 18, 2026
Invicti
5 items · 2 sources · latest Jul 04, 2026
Governance, risk and compliance10
Tenable
70 items · 5 sources · latest Jul 18, 2026
Vanta
50 items · 5 sources · latest Jul 18, 2026
IBM OpenPages
35 items · 2 sources · latest Jul 18, 2026
RSA Archer
33 items · 2 sources · latest Jul 03, 2026
Rapid7 InsightVM
21 items · 4 sources · latest Jul 03, 2026
ServiceNow GRC
19 items · 3 sources · latest Jul 18, 2026
SAP GRC
11 items · 3 sources · latest Jul 18, 2026
Qualys VMDR
11 items · 2 sources · latest Jul 18, 2026
OneTrust
9 items · 3 sources · latest Jul 03, 2026
Drata
5 items · 3 sources · latest Jun 19, 2026
Citing and reusing this record
The record is published to be quoted. These are the terms, stated here because the structured data on every page points at this section.
Quoting from these pages and linking to them is welcome, with attribution to nexalign and a link to the page the figures came from. Please quote a number together with the date it was checked, because the record moves as the sources do.
The underlying entries are not nexalign's to license. They belong to the bodies that publish them: NIST, ENISA, CISA, the BSI, and the platforms and outlets each item links to. What nexalign compiled is the selection, the attribution and the counting, and that is what the attribution request covers.
For bulk or automated reuse, write to [email protected] first, so the load stays predictable and corrections can reach you.
The index answers what is true. DecisionOS answers what to do.
Reading a vendor record is the easy half. The hard half is weighing five of them against criteria your CISO, your CFO and your auditor all have to live with. That is what DecisionOS is for: same evidence pool, your criteria, one memo that holds up afterwards.