Skip to content
CISO Spotlights

Browse · 28 profiles

Security leaders at vendors

Who runs security at the companies that sell security? 28 profiled leaders work at 27 vendors in the CISO Tribune vendor directory, grouped here by what each company sells.

A profile is listed when the person’s current organization is a vendor in the directory; former employers do not count. Each company name links to its one page on cisotribune.com, which records what it sells and who owns it. CISO Spotlights keeps no company pages. No vendor pays to be listed. Directory data as of 27 September 2026.

3 profiles

Endpoint security

Products that protect laptops, servers, phones and the firmware underneath them.

4 profiles

Identity security

Products that establish who or what is requesting access and govern what each identity may do.

3 profiles

Application security

Products that find and fix weaknesses in software an organization builds, and protect that software in production.

2 profiles

Data security and privacy

Products that find, classify, protect and govern sensitive data, and manage privacy obligations about it.

1 profile

Email and collaboration security

Products that protect email and workplace messaging from phishing, impersonation and malicious content.

5 profiles

Security operations

Products and services that collect security telemetry, detect threats, and run investigation and response.

3 profiles

Governance, risk and compliance

Products that document controls, measure risk and prove compliance to auditors, regulators and customers.

3 profiles

Security awareness and human risk

Products that train people and measure and reduce the risk that comes from human behaviour.

1 profile

AI security

Products that secure AI models, applications and agents, and govern how an organization uses AI.

2 profiles

Backup and cyber resilience

Products that preserve data and systems so an organization can recover after an attack.

1 profile

Consultancies and managed services

Firms that sell security expertise and operations as a service rather than as software.