Alongside the winners of the 2026 Cybersecurity Awards, the Tech Ascension Awards is recognizing this year’s honorable mentions, a distinguished group of Cybersecurity Innovation Leaders whose products demonstrated notable technical advancement, market relevance, competitive differentiation, and the potential to deliver meaningful security outcomes.
These companies reflect the extraordinary breadth of the modern cybersecurity industry. Companies are applying artificial intelligence, automation, hardware-based security, identity intelligence, post-quantum cryptography, exposure validation, and continuous governance to address threats across applications, cloud environments, critical infrastructure, enterprise data, endpoints, and security operations.
The following organizations stood out for developing products that address significant and emerging cybersecurity challenges.
2026 Cybersecurity Innovation Leaders
Excellence in Autonomous Endpoint Remediation
Adaptiva, OneSite Patch
Adaptiva was recognized for OneSite Patch, an autonomous endpoint management platform that discovers, prioritizes, validates, deploys, and rolls back patches across complex enterprise environments. The platform supports Windows, macOS, Linux, BIOS, drivers, and more than 20,000 third-party applications. Adaptiva’s serverless peer-to-peer architecture distributes updates across remote locations, bandwidth-constrained networks, and air-gapped environments without requiring traditional distribution infrastructure. Administrators define policies, deployment stages, and operational guardrails, allowing the platform to automate routine patching while maintaining organizational control. OneSite Patch also includes AIDA Enterprise, an AI advisor that helps administrators troubleshoot deployments and interpret patching activity using natural language. Adaptiva reports that its technology protects more than 10 million endpoints. Automotive retailer Vertu Motors reported saving more than 10 hours per engineer each week while reducing operational disruption and improving vulnerability management across 5,500 endpoints and 190 locations.
Excellence in Continuous Threat Exposure Management
AttackIQ, AttackIQ CTEM Platform
AttackIQ was recognized for transforming Continuous Threat Exposure Management from a conceptual framework into a measurable security operations program. The AttackIQ CTEM Platform connects threat intelligence, attack-path analysis, adversary emulation, security-control validation, remediation, and executive reporting. AttackIQ Watchtower uses artificial intelligence to continuously evaluate global threat activity against each organization’s environment, identify the adversaries and tactics most relevant to that organization, and create tailored, ready-to-run security tests. The company has also introduced the concept of threat debt and the Threat Debt Index, which measure the viable attack paths available to adversaries rather than focusing only on vulnerability counts or completed remediation tickets. The platform stood out for helping security teams demonstrate whether attacker opportunity is actually declining. AttackIQ’s Enterprise, Ready, Flex, and Command Center offerings support both mature security organizations and resource-constrained teams seeking repeatable, evidence-based validation.
Excellence in Hardware-Rooted AI Security
Axiado, Trusted Control/Compute Unit
Axiado was recognized for its Trusted Control/Compute Unit, an AI-powered cybersecurity processor designed to establish trust at the hardware foundation of enterprise and data center infrastructure. The processor consolidates baseboard management, hardware root of trust, trusted platform functionality, secure networking, platform telemetry, and machine-learning-based behavioral analysis within a single component. By embedding AI directly into silicon, Axiado enables infrastructure to continuously assess firmware integrity, privileged administrative activity, hardware behavior, and thermal conditions from boot through runtime. The technology stood out for protecting the infrastructure management plane, a highly privileged environment that software-based security controls may not fully address. Axiado also uses AI-powered dynamic thermal management to improve data center efficiency. The company reports that the technology can reduce cooling energy consumption by up to 50% and potentially produce more than $7 million in annual operating savings across a deployment of 100,000 servers.
Excellence in Enterprise Incident Response Management
BreachRx, The Rex Platform
BreachRx was recognized for The Rex Platform, an agentic AI-powered incident response management platform built to coordinate the organizational response that begins when a technical security event becomes a broader business crisis. The platform connects security, legal, privacy, IT, communications, governance, executives, outside counsel, and response partners within a shared operating environment. Rex AI converts static response plans into dynamic workflows based on incident type, business impact, affected systems, regulatory jurisdiction, contractual obligations, and evolving facts. The platform also provides executive mobile access, protected collaboration, regulatory tracking, decision records, and audit-ready documentation. BreachRx stood out for addressing the governance and coordination challenges that conventional detection and containment tools do not solve. The company reports that its platform serves dozens of Fortune 500 organizations, can reduce the cost of a security incident by more than $2.5 million, and can produce a return exceeding 22 times the organization’s annual investment.
Excellence in Quantum-Resilient Authentication
CypherGenics, FASTKAT
CypherGenics was recognized for FASTKAT, a quantum-resistant authentication and key predistribution technique designed for critical infrastructure, industrial IoT, aerospace, satellite systems, and other resource-constrained environments. FASTKAT uses symmetric cryptographic operations and pre-provisioned secrets to enable devices to authenticate without depending on runtime certificate authorities, network handshakes, or continuously available key servers. This infrastructure-independent approach is particularly relevant to air-gapped and low-power systems where conventional post-quantum public-key infrastructure may introduce excessive computational, memory, and operational overhead. CypherGenics reports that FASTKAT completed a full pairwise key derivation in 0.77 milliseconds on a low-cost ESP32-S3 microcontroller, supporting more than 1,300 quantum-resistant keys per second. The company also reported performance approximately 18 times faster than a comparable ML-DSA-44 signature-verification operation on the same hardware, demonstrating the potential to bring post-quantum protection to systems that cannot support conventional certificate-based approaches.
Excellence in Agentic Security Operations
Exaforce, Exaforce Agentic SOC Platform
Exaforce was recognized for developing an agentic security operations platform that automates detection, alert triage, investigation, and response across cloud, SaaS, identity, endpoint, and code environments. Instead of automating only one stage of the SOC workflow, Exaforce uses coordinated agents to move security events from detection through resolution while preserving context and producing an auditable record of each decision. The platform stood out for combining full-lifecycle SOC automation with a unified data layer that correlates logs, identities, configurations, files, and code. Exaforce reports that its technology can reduce false positives by more than 80% and allow security teams to process significantly higher alert volumes without proportional headcount growth. Customer results included a 94% reduction in mean time to investigate at Fuze, investigation times reduced from hours to minutes at Commonwealth Fusion Systems, and approximately 50% less investigation effort at Automation Anywhere.
Excellence in Software Lifecycle Risk Intelligence
HeroDevs, End-of-Life Dataset
HeroDevs was recognized for its End-of-Life Dataset, a software supply chain intelligence resource designed to identify open-source packages that are unsupported, approaching abandonment, or no longer receiving security updates. Traditional software composition analysis tools generally focus on known vulnerabilities. HeroDevs adds another dimension by determining whether the underlying software is still actively maintained and capable of receiving future fixes. The dataset combines official end-of-life announcements with machine-learning analysis of project health signals, including release cadence, commit activity, and maintainer participation. It covers more than 12 million package versions across major open-source ecosystems and includes CVE mappings, support status, and migration guidance. The solution stood out for helping organizations distinguish vulnerabilities that can be resolved through routine patching from dependencies that require modernization, replacement, or commercial support. This enables security and engineering teams to create controlled modernization plans rather than responding to unsupported software through emergency rewrites.
Excellence in Deepfake and Synthetic Identity Defense
Incode Technologies, Deepsight
Incode Technologies was recognized as a Cybersecurity Innovation Leader for Deepsight, an AI-powered system designed to detect deepfakes, synthetic identities, injected virtual cameras, and other advanced impersonation techniques. Deepsight uses a session-based approach that evaluates the complete identity journey, including authentication, identity verification, device integrity, user behavior, motion, depth, audio, and video signals. Its three-layer architecture combines perception, behavioral analysis, and device integrity monitoring within a single real-time decision engine. The solution stood out for applying multimodal intelligence to indicators that conventional, single-frame detection systems may miss. Incode also cited independent testing from Purdue University in which Deepsight outperformed 24 government, academic, and commercial systems. The platform was also reported as the first to pass iBeta Level 3 Presentation Attack Detection testing on both iOS and Android with no errors across 900 attack attempts.
Excellence in Digital Trust Infrastructure
Keyfactor, Trust Control Plane
Keyfactor was recognized for its Trust Control Plane, a unified operating model for managing the machine identities and cryptographic infrastructure supporting modern digital interactions. The platform continuously discovers certificates, cryptographic assets, and machine identities across cloud, on-premises, endpoint, code, and application environments. It then adds ownership and dependency context, provisions trusted identities, automates lifecycle operations, and enforces governance policies. Keyfactor organizes these functions into a continuous five-stage cycle: Observe, Analyze, Provision, Orchestrate, and Govern. The platform stood out for addressing digital trust as an ongoing operational discipline rather than a collection of isolated certificate, public-key infrastructure, or cryptographic-management tasks. It was also designed for emerging challenges including AI-driven identity growth, shrinking certificate lifespans, cloud-native infrastructure, evolving regulatory requirements, and the transition to post-quantum cryptography. This unified approach helps enterprises prepare for cryptographic change without rebuilding their security architecture around each new requirement.
Excellence in AI-Powered Operational Technology Security
Nozomi Networks, Vantage
Nozomi Networks was recognized for Vantage, an AI-powered cybersecurity platform designed specifically for operational technology, IoT, and critical infrastructure environments. Vantage uses a private, organization-specific language model to interpret asset inventories, vulnerabilities, communication patterns, operational risks, and threat data. The platform provides intelligent alert prioritization, contextual remediation guidance, plain-language security analysis, and executive-ready reporting. Vantage IQ Personas further adapts responses to the responsibilities of individual users, allowing analysts, compliance professionals, and security executives to receive information aligned with their roles. The platform stood out for addressing the specialized regulatory, air-gap, and operational requirements of environments where cyber incidents can result in physical disruption. Nozomi Networks reports that its technology protects more than 105 million OT, IoT, and IT devices across more than 11,000 installations on six continents, supported by a reported customer retention rate of 97%.
Excellence in Vision AI Security Operations
ROC, ROC Watch
ROC was recognized for ROC Watch, an AI-powered video analytics and security operations platform that converts existing camera feeds into real-time operational intelligence. The platform uses facial recognition, object detection, optical character recognition, vehicle analysis, license plate identification, and weapon detection to help security teams identify and investigate potential threats. ROC Watch connects live detection, biometric identification, historical investigation, and operational response within one workflow. Its ability to cluster identities across multiple encounters also enables organizations to establish patterns of activity and understand behavior over time. The technology supports cloud, on-premises, mobile, vehicle-based, and drone deployments, including disconnected and denied environments. ROC reports that its technology is used by 10 U.S. Department of Defense agencies and more than 20 law enforcement agencies, has processed more than one billion identity verifications, and is powered by algorithms that have ranked highly in National Institute of Standards and Technology evaluations.
Excellence in AI-Native Application Security
Semgrep, Semgrep AppSec Platform
Semgrep was recognized for an application security platform built to protect software increasingly produced by developers, AI assistants, and autonomous coding agents. The Semgrep AppSec Platform combines static application security testing, software composition analysis, secrets detection, reachability analysis, AI-assisted reasoning, and developer-focused remediation. Semgrep Guardian moves security controls directly into AI coding environments, analyzing files as agents generate them and helping resolve vulnerabilities before code reaches version control or creates downstream remediation work. Semgrep Multimodal combines deterministic code analysis with AI reasoning to identify complex vulnerabilities involving authorization, application context, and business logic. The platform stood out for addressing the speed and scale of AI-generated software without relying solely on conventional pull-request and CI scanning. Semgrep reports that its Autotriage capability can reduce initial static-analysis backlogs by approximately 60%, with users agreeing with its decisions more than 95% of the time across millions of findings.
Excellence in Data-Aware Cloud Security
Skyhigh Security, Skyhigh SSE
Skyhigh Security was recognized for Skyhigh SSE, a cloud-native Security Service Edge platform focused on protecting sensitive data as it moves across websites, cloud applications, private systems, devices, and distributed workforces. The platform brings together Secure Web Gateway, Cloud Access Security Broker, Zero Trust Network Access, Data Loss Prevention, Remote Browser Isolation, and Data Security Posture Management capabilities. Its integrated architecture allows organizations to apply consistent data classifications and security policies across multiple control points without relying on a collection of disconnected products. Skyhigh SSE also includes AI-focused controls that help organizations manage access to generative AI tools and prevent sensitive information from being shared with unauthorized services. The platform’s measurable customer impact helped distinguish the submission. Brazilian financial institution Sicredi reported a 50% reduction in costs, faster incident response, streamlined policy administration, and improved protection against malware, zero-day attacks, and unauthorized AI usage after deploying Skyhigh Security’s technology.
Excellence in Identity-Based Cybercrime Investigation
SpyCloud, SpyCloud Investigations
SpyCloud was recognized for SpyCloud Investigations, an identity intelligence platform designed to expose the relationships between credentials, devices, session cookies, malware records, aliases, phone numbers, and other data circulating within criminal ecosystems. Its proprietary IDLink technology correlates fragmented information into more complete digital identities, helping analysts uncover compromised users and investigative paths that may be missed by conventional threat intelligence searches. The platform combines more than one trillion recaptured identity assets with AI Insights and Research Agent, an agentic capability that plans investigations, identifies valuable pivots, and produces evidence-supported findings. SpyCloud stood out for grounding its AI capabilities in identity correlation and investigative tradecraft rather than generating unsupported conclusions. The company reports that the platform can uncover up to eight times more related identity records from a single starting point and reduce investigation time by more than 70%.
Excellence in AI Agent Data Governance
TrustLogix, TrustAI
TrustLogix was recognized for TrustAI, a runtime policy control plane designed to govern how AI agents, copilots, and Model Context Protocol-connected tools access enterprise data. The platform evaluates each data request before information is returned, applying policies based on identity, context, intent, and the permissions of the human user behind the agent. TrustAI includes just-in-time access, identity propagation, dynamic data masking, request-level auditing, and an MCP Data Gateway that inspects tool calls before execution. Its AI Kill Switch allows security teams to immediately suspend an agent’s access to enterprise data without shutting down the underlying application or data platform. TrustAI stood out for enforcing policy directly at the data source rather than depending entirely on controls at the application, model, or network layer. TrustLogix reports that customers have reduced access provisioning from weeks to minutes and shortened remediation time by as much as 90%.
Excellence in Secure Enterprise Cloud Infrastructure
VAI Cloud LLC, VAI Cloud
VAI Cloud was recognized for providing a secure, private cloud environment purpose-built for enterprise resource planning operations across distribution, manufacturing, specialty retail, pharmaceutical, and other operationally demanding industries. The platform combines high availability, disaster recovery, proactive monitoring, Zero Trust Network Access, advanced web application firewall protections, ransomware detection, and quantum-safe storage encryption. Unlike generic infrastructure platforms, VAI Cloud integrates cloud hosting, ERP software, implementation, and support through a single provider. This approach helps customers reduce vendor complexity while receiving support directly from teams familiar with both the application and its underlying infrastructure. The platform also supports AI-powered analytics through technologies such as IBM watsonx. VAI Cloud stood out for combining cybersecurity, regulatory alignment, predictable pricing, and operational resilience within an environment designed for mission-critical business applications. High availability and disaster recovery are included as standard capabilities, helping customers reduce infrastructure costs and business continuity risks.
Excellence in Critical Infrastructure Access Security
Xona Systems, Xona Platform
Xona Systems was recognized for developing a secure access platform specifically for operational technology and critical infrastructure. Instead of extending the network to remote users through conventional VPN tunnels, Xona uses isolated, browser-based session brokering. Remote devices do not directly join or route into the protected operational network, reducing opportunities for lateral movement, credential exposure, ransomware, and malware propagation. The platform records remote sessions and produces searchable, audit-ready evidence while supporting identity-based, time-limited access. Xona also provides centralized governance across distributed facilities and maintains connectivity in low-bandwidth or unstable network conditions. The platform is deployed across more than 40 countries in industries including energy, utilities, manufacturing, and maritime operations. Its alignment with frameworks such as NERC CIP, IEC 62443, and TSA security directives, combined with rapid, agentless deployment, demonstrated its ability to improve security and regulatory readiness without disrupting critical operations.
Recognizing the Full Breadth of Cybersecurity Innovation
These companies are protecting organizations against deepfakes, AI agent misuse, quantum-era threats, identity compromise, vulnerable software dependencies, insecure remote access, operational technology attacks, application vulnerabilities, and increasingly complex enterprise incidents.
From security embedded directly into silicon to agentic platforms capable of investigating threats and coordinating response, these organizations are expanding what cybersecurity technology can accomplish.
