Phylum

Phylum defends applications at the perimeter of the open-source ecosystem and the tools used to build software. In practice that means assessing, monitoring and responding to security threats on your behalf.

Who is it for? Mostly companies without a full security team. Related areas on their profile: Cyber Security and Developer Tools. As a small company team themselves (11 to 50 people), they tend to serve customers of a similar scale best. Small vendors mean quick answers and real influence on the roadmap, but check who covers support when someone is out.

Phylum is based in Evergreen, Colorado. You can read more at phylum.io.

Things worth asking about: response times, what is included in monitoring, and reporting. A short pilot with your real data tells you more than any demo.

If you have worked with Phylum, tell the next buyer what you paid and what surprised you. That is the part of this page we cannot write.