# Application security & pentesting tools used by Technology & Connectivity companies

usedby lists 40 Technology & Connectivity companies using 4 Application security & pentesting tools. The most used is Endor Labs: 17 of the 40 Technology & Connectivity companies on usedby, every proof level counted. These are counts of the companies usedby tracks, not a market share. Data as of 2026-10-25.

## Largest and best-proven users

Two labelled views of the same companies. Neither is a score.

### Largest companies

By employee range. Size known for 31 of 40.

| Company | Proof | Employees | Tools | Last check |
|---|---|---|---|---|
| [Vmware](https://www.usedby.ai/companies/vmware.md) | Observed | 10,001+ | Endor Labs | 2026-10-25 |
| [Orange](https://www.usedby.ai/companies/orange.md) | Observed | 10,001+ | XBOW | 2026-10-22 |
| [MongoDB](https://www.usedby.ai/companies/mongodb.md) | Confirmed | 5,001–10,000 | Snyk | 2026-10-25 |

### Strongest proof

Confirmed or declared: 11 of 40. This view filters what you read, never what is counted.

| Company | Proof | Employees | Tools | Last check |
|---|---|---|---|---|
| [TechnologyOne](https://www.usedby.ai/companies/technologyone.md) | Confirmed | 1,001–5,000 | Snyk | 2026-10-25 |
| [Auth0](https://www.usedby.ai/companies/auth0.md) | Confirmed | 201–1,000 | Snyk | 2026-10-25 |
| [MongoDB](https://www.usedby.ai/companies/mongodb.md) | Confirmed | 5,001–10,000 | Snyk | 2026-10-25 |

## Ranking

Tools ranked by the companies of the 40 Technology & Connectivity companies on usedby that use them. Each company counts once per tool, at its strongest proof. Ties go to more confirmed, then declared, then observed companies.

| # | Tool | Companies | Confirmed | Declared | Observed | Job posts only | Last check |
|---|---|---|---|---|---|---|---|
| 1 | [Endor Labs](https://www.usedby.ai/tools/endor-labs.md) | 17 | 0 | 0 | 17 | 0 | 2026-10-25 |
| 2 | [Snyk](https://www.usedby.ai/tools/snyk.md) | 12 | 3 | 0 | 9 | 0 | 2026-10-25 |
| 3 | [XBOW](https://www.usedby.ai/tools/xbow.md) | 7 | 3 | 0 | 4 | 0 | 2026-10-22 |
| 4 | [Horizon3.ai NodeZero](https://www.usedby.ai/tools/horizon3-ai.md) | 5 | 5 | 0 | 0 | 0 | 2026-10-19 |

## Customers per tool

Every line is a customer, at one of three proof levels: confirmed (a case study, a named quote, a press release, or the company's own public account of using the tool (its own site, or a post by one of its executives, VP or above)), observed (the vendor shows the company on its own pages) or signal (a job post shows the company's employees use the tool, the weakest proof). A line the company declared to usedby itself, or that it lists as a sub-processor on its own legal page, is marked declared. A signal is never a case study or a vendor listing. Strongest proof first. "Last check" is the later of the line's re-verification and its latest capture.

| Tool | Company | Proof | Source | Last check |
|---|---|---|---|---|
| Endor Labs | [OpenAI](https://www.usedby.ai/companies/openai.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-16 | 2026-10-16 |
| Endor Labs | [Atlassian](https://www.usedby.ai/companies/atlassian.md) | Observed | [endorlabs.com](https://www.endorlabs.com/pricing), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Dropbox](https://www.usedby.ai/companies/dropbox.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Vmware](https://www.usedby.ai/companies/vmware.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Rubrik](https://www.usedby.ai/companies/rubrik.md) | Observed | [endorlabs.com](https://www.endorlabs.com/pricing), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Zapier](https://www.usedby.ai/companies/zapier.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Five9](https://www.usedby.ai/companies/five9.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Astronomer](https://www.usedby.ai/companies/astronomer.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Beyond Identity](https://www.usedby.ai/companies/beyond-identity.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-16 | 2026-10-16 |
| Endor Labs | [Cursor](https://www.usedby.ai/companies/cursor.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Cyera](https://www.usedby.ai/companies/cyera.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-16 | 2026-10-16 |
| Endor Labs | [Egnyte](https://www.usedby.ai/companies/egnyte.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Glean](https://www.usedby.ai/companies/glean.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Grip Security](https://www.usedby.ai/companies/grip-security.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Jellyfish](https://www.usedby.ai/companies/jellyfish.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Netskope](https://www.usedby.ai/companies/netskope.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Endor Labs | [Starburst](https://www.usedby.ai/companies/starburst.md) | Observed | [endorlabs.com](https://www.endorlabs.com/customers), captured 2026-10-25 | 2026-10-25 |
| Snyk | [MongoDB](https://www.usedby.ai/companies/mongodb.md) | Confirmed | [snyk.io](https://snyk.io/case-studies/mongodb/), captured 2026-10-07 | 2026-10-25 |
| Snyk | [Auth0](https://www.usedby.ai/companies/auth0.md) | Confirmed | [snyk.io](https://snyk.io/case-studies/auth0/), captured 2026-10-07 | 2026-10-25 |
| Snyk | [TechnologyOne](https://www.usedby.ai/companies/technologyone.md) | Confirmed | [snyk.io](https://snyk.io/case-studies/technologyone/), captured 2026-10-07 | 2026-10-25 |
| Snyk | [Atlassian](https://www.usedby.ai/companies/atlassian.md) | Observed | [snyk.io](https://snyk.io/case-studies/), captured 2026-10-18 | 2026-10-25 |
| Snyk | [Snowflake](https://www.usedby.ai/companies/snowflake.md) | Observed | [snyk.io](https://snyk.io/), captured 2026-10-25 | 2026-10-25 |
| Snyk | [Twilio](https://www.usedby.ai/companies/twilio.md) | Observed | [snyk.io](https://snyk.io/), captured 2026-10-25 | 2026-10-25 |
| Snyk | [Okta](https://www.usedby.ai/companies/okta.md) | Observed | [snyk.io](https://snyk.io/), captured 2026-10-25 | 2026-10-25 |
| Snyk | [Citrix](https://www.usedby.ai/companies/citrix.md) | Observed | [snyk.io](https://snyk.io/case-studies/), captured 2026-10-18 | 2026-10-25 |
| Snyk | [Coveo](https://www.usedby.ai/companies/coveo.md) | Observed | [snyk.io](https://snyk.io/case-studies/), captured 2026-10-18 | 2026-10-25 |
| Snyk | [Labelbox](https://www.usedby.ai/companies/labelbox.md) | Observed | [snyk.io](https://snyk.io/), captured 2026-10-25 | 2026-10-25 |
| Snyk | [Mercato Solutions](https://www.usedby.ai/companies/mercato-solutions.md) | Observed | [snyk.io](https://snyk.io/customers/), captured 2026-10-18 | 2026-10-25 |
| Snyk | [ReliaQuest](https://www.usedby.ai/companies/reliaquest.md) | Observed | [snyk.io](https://snyk.io/case-studies/), captured 2026-10-07 | 2026-10-25 |
| XBOW | [BloomPath](https://www.usedby.ai/companies/bloompath.md) | Confirmed | [xbow.com](https://xbow.com/customer-stories/bloompath), captured 2026-10-07 | 2026-10-22 |
| XBOW | [Rogo](https://www.usedby.ai/companies/rogo.md) | Confirmed | [xbow.com](https://xbow.com/customer-stories/rogo), captured 2026-10-07 | 2026-10-22 |
| XBOW | [Superhuman](https://www.usedby.ai/companies/superhuman.md) | Confirmed | [xbow.com](https://xbow.com/customer-stories/superhuman), captured 2026-10-07 | 2026-10-22 |
| XBOW | [Orange](https://www.usedby.ai/companies/orange.md) | Observed | [xbow.com](https://xbow.com/pricing), captured 2026-10-22 | 2026-10-22 |
| XBOW | [Ping Identity](https://www.usedby.ai/companies/ping-identity.md) | Observed | [xbow.com](https://xbow.com/pricing), captured 2026-10-22 | 2026-10-22 |
| XBOW | [PuppyGraph](https://www.usedby.ai/companies/puppygraph.md) | Observed | [xbow.com](https://xbow.com/customer-stories), captured 2026-10-22 | 2026-10-22 |
| XBOW | [Samsung SDS](https://www.usedby.ai/companies/samsung-sds.md) | Observed | [xbow.com](https://xbow.com/pricing), captured 2026-10-22 | 2026-10-22 |
| Horizon3.ai NodeZero | [Airiam](https://www.usedby.ai/companies/airiam.md) | Confirmed | [horizon3.ai](https://horizon3.ai/customer-story/airiam-turning-cyber-resilience-into-a-superpower/), captured 2026-10-19 | 2026-10-19 |
| Horizon3.ai NodeZero | [F12.net](https://www.usedby.ai/companies/f12-net.md) | Confirmed | [horizon3.ai](https://horizon3.ai/customer-story/revolutionizing-cybersecurity-f12-nets-journey-with-autonomous-penetration-testing/), captured 2026-10-19 | 2026-10-19 |
| Horizon3.ai NodeZero | [Intuitus](https://www.usedby.ai/companies/intuitus.md) | Confirmed | [horizon3.ai](https://horizon3.ai/customer-story/advancing-emergency-response-security-with-autonomous-pentesting/), captured 2026-10-19 | 2026-10-19 |
| Horizon3.ai NodeZero | [Kyocera AVX](https://www.usedby.ai/companies/kyocera-avx.md) | Confirmed | [horizon3.ai](https://horizon3.ai/customer-story/kyocera-avx-global-security-validation/), captured 2026-10-19 | 2026-10-19 |
| Horizon3.ai NodeZero | [Legion Cyberworks](https://www.usedby.ai/companies/legion-cyberworks.md) | Confirmed | [horizon3.ai](https://horizon3.ai/customer-story/redefining-cybersecurity-testing-for-a-real-time-world/), captured 2026-10-19 | 2026-10-19 |

## Method

Public customer lines of active Application security & pentesting tools at companies classified in Technology & Connectivity. No software vendor had to be left out. Company mix by strongest proof: 11 confirmed, 0 declared, 29 observed and 0 signals.

## Questions

### Which Application security & pentesting tools do Technology & Connectivity companies use most?

Endor Labs leads: 17 of the 40 Technology & Connectivity companies on usedby that use Application security & pentesting tools use it. Next: Snyk (12), XBOW (7), and Horizon3.ai NodeZero (5).

### How many Technology & Connectivity companies use Application security & pentesting tools?

40 Technology & Connectivity companies on usedby use at least one of 4 Application security & pentesting tools. It counts the companies usedby tracks.

### What proof backs these lines?

Of the 40 companies, each counted at its strongest proof: 11 confirmed, 0 declared, 29 observed and 0 known from a job post.

### How does usedby build this ranking?

usedby counts each Technology & Connectivity company once per tool, from public proof: case studies, press releases, the company's own site or its declaration to usedby, vendor customer pages and job posts. Every line shows its proof and the date usedby last checked it.

Industry page: https://www.usedby.ai/companies/industry/technology-connectivity.md · Category page: https://www.usedby.ai/tools/category/application-security.md

---
Source: https://www.usedby.ai/companies/industry/technology-connectivity/application-security · How we check: https://www.usedby.ai/methodology