Mapping a security stack against frameworks like MITRE ATT&CK or NIST CSF is still a manual exercise in most organizations, repeated each audit cycle and rarely complete by the time it ships.
Today we are releasing Capability Exchange, an independent registry of security vendors, products, and their underlying capabilities.
Capability Exchange draws on the market data ESProfiler has been collecting and processing for years to support enterprise stack mapping and cost rationalization work for major organizations. We are now making that data publicly accessible.
What's in the registry
At launch, Capability Exchange indexes more than 13,000 vendors and over 27,000 products, with coverage expanding over time.
Each vendor page covers the company itself (size, headquarters, basic profile) and a structured view of its products. Products are classified by type, security domain, and broader market category. Individual product features are documented as discrete entries, which is what allows the Collider Engine to correlate them against control frameworks.
The platform also maintains a current registry of major cybersecurity frameworks, including MITRE ATT&CK®, NIST CSF, ISO 42001, and MITRE ATLAS, among others.
Mapping your own stack
Registered users can take a defined set of products from their current stack and test how those products map across selected frameworks. The mapping runs automatically through the Collider Engine and is free to use.
For teams currently rebuilding this view in spreadsheets every time an auditor or the board asks, this is the part worth trying first.
Market signal, not just inventory
The third element is market insights. ESProfiler tracks vendor growth trajectory and digital momentum by analyzing organic surges in brand awareness and market engagement.
Results are presented as a leaderboard, filterable by company size and country of origin. The aim is to give security and architecture leaders a defensible read on which vendors are gaining ground.
Available Now
Capability Exchange is available starting today. Use it to pressure-test your existing inventory, validate framework coverage, or scan the market before your next vendor review. Reach back to us if you have any questions or feedback.
Fill the Gaps in Your Security Stack