ITLoot home ITLoot

Find the right IT and security vendor

A vendor-neutral library for IT teams. Browse vendors by what they do, and read plain buyer guides on what to look for, what to avoid and what to ask before you buy.

104 vendors 21 categories 9 buyer guides

Buyer guides

Practical advice for the decisions that cost the most to get wrong, each with the vendors in that category.

Buyer guide Endpoint security

How to choose EDR, XDR or MDR for a small or mid-sized company: what each does, what to evaluate, what to ask vendors and what drives the cost.

9 vendors Read guide →
Buyer guide Identity and access

A practical guide to SSO, MFA, identity governance, privileged access and password managers for small and mid-sized IT teams choosing a solution.

13 vendors Read guide →
Buyer guide Email security

How small and mid-sized IT teams can choose email security: anti-phishing, business email compromise, Microsoft 365 and Workspace protection, DMARC.

5 vendors Read guide →
Buyer guide Compliance and GRC

How to evaluate compliance automation, GRC, vendor risk and trust center tools for SOC 2, ISO 27001 and HIPAA, and what the software cannot do for you.

6 vendors Read guide →
Buyer guide Security awareness

How to evaluate phishing simulation, security awareness training and human risk tools, and how to run a program that changes behavior.

4 vendors Read guide →
Buyer guide Backup and recovery

How to evaluate backup and recovery for servers, endpoints, cloud and SaaS, with a focus on immutable copies, ransomware recovery and tested restores.

4 vendors Read guide →
Buyer guide Security operations

How a small or mid-sized company should choose SIEM, SOAR, AI triage or a managed SOC: what each does, what to evaluate and what drives the cost.

18 vendors Read guide →
Buyer guide AI governance

How to govern employee AI use, prevent data loss to AI tools and secure AI agents: what to decide first, what to evaluate and what drives the cost.

11 vendors Read guide →
Buyer guide Workflow automation

How to choose iPaaS, job scheduling or IT and security workflow automation: what each does, what to evaluate, what to ask vendors and what drives the cost.

4 vendors Read guide →

More categories

Vendor lists without a guide yet.

All vendors 104

AegisAI

aegisai.com ↗

Email security for Microsoft 365 and Google Workspace that uses AI agents to stop phishing, BEC and vendor fraud.

Applitools

applitools.com ↗

Automated visual and functional testing platform for web and mobile apps, used by developers and QA teams.

C1 (formerly ConductorOne)

conductorone.com ↗

Identity governance for access requests, access reviews and joiner-mover-leaver workflows across workforce apps and AI agents.

Chronosphere

chronosphere.io ↗

Observability platform for metrics, traces and logs in Kubernetes and microservice environments, with data cost controls.

Conveyor

conveyor.com ↗

Automates answers to customer security questionnaires and vendor assessments, with a hosted trust center for security teams.

DataHub

datahub.com ↗

Data catalog with lineage, discovery and governance across a company's data estate, available open source or as a cloud service.

Data access control that enforces policies on who can query sensitive data in cloud data platforms.

Intezer

intezer.com ↗

AI SOC platform that triages and investigates security alerts from SIEM, endpoint, identity and cloud tools for enterprises.

LaunchDarkly

launchdarkly.com ↗

Feature flags, progressive delivery, experimentation and runtime controls for engineering teams shipping code and AI agents.

Identity governance platform automating access reviews, joiner-mover-leaver workflows and app access requests for human and machine identities.

Identity and access management platform automating access governance, lifecycle management and risky-access remediation.

Orca Security

orca.security ↗

Agentless cloud security platform (CNAPP) finding vulnerabilities, misconfigurations and exposed data across multi-cloud environments.

Software deployment, patching and inventory for Windows and macOS devices, on-premises or from the cloud.

Incident management for engineering teams covering on-call scheduling, incident response, retrospectives and status pages.

Sourcegraph

sourcegraph.com ↗

Code search and codebase context for engineering teams and AI coding agents working across large repositories.

Spot AI

spot.ai ↗

AI video camera system for security and operations monitoring in retail, manufacturing and warehouses.