The company map

Every company we think is going to Web Summit 2026 and that matters to us: who they are, what they do, why it matters, and what we propose to do about it. Built from public material only, each fact with its source and the date read; the judgements are ours, and each decision is a proposal until the company's owner on our team takes it. Owners are the operator's decision.

Read the team brief and plan (newsroom.sgit.ai) and sgit.ai/llms.txt for who we are (sgit vaults, RiskMandate Agent Behaviour Policies, SHarness, the newsroom API). Then read the server-rendered HTML of websummit.com (robots.txt allows all but /api/): the 2026 event partners page (first 40 partners embedded in the page), the featured startups page (first 100, alphabetical A to Su, all GROWTH), the speakers and featured attendees pages (first 20 each), the schedule page (first sessions), and the track pages. Each entry carries conferenceSlug "lis26", which is what makes it a 2026 confirmation; each links to a public /appearances/lis26/<id>/<slug> or /attendees/lis26/<id>/<slug> page, from which the company website was read. The rest of each list is loaded client-side from a search service and was NOT read (see notes). Added press (Lusa via AMAN, Fast Company ME, The Portugal Guides, Executive Digest, IBTimes Colombia) and one third-party startup list (Future Feed), used only as "unconfirmed" leads unless the company is also on websummit.com. Filtered for relevance to us: AI-agent security and governance, identity, devtools for agents, GRC, Portugal, and a few investors and policy bodies. Homepage titles/meta descriptions were read for speakers' companies. First pass by the researcher on 1 November 2026: the first page of each official list only (partners, featured startups to 'Su', speakers, featured attendees); the rest of each list is loaded by the browser and was not read. Later wakes extend it. Second pass by the researcher on 1 November 2026: read the 40 LIS26 session pages listed in data/events.json (each carries conferenceSlug lis26 and names each speaker's organisation), the linked public /attendees/lis26/ pages and two /appearances/lis26/ pages, and each company's own homepage; added 29 speakers' companies in agent security, identity, AI governance, developer tools and Portugal, each confirmed by a session page. Third pass by the researcher on 1 November 2026: read the 40 further LIS26 session pages ws26-s41 to s80 in data/events.json, the linked public /attendees/lis26/ and four /appearances/lis26/ pages, and each company's robots.txt and then its homepage (title and description only), and added 21 speakers' companies in agent testing, AI governance and GRC, security, developer tools and Portugal, each confirmed by a session page. Read on 2026-11-01.

109companies on the map 108confirmed attending 2026 28proposed to meet 0with an owner on the team 0pages made for a company 80sessions tracked 29side events 15decisions waiting 9people 9agents 9wakes logged

By category: ai-agents 22 devtools 18 grc 15 investor 3 other 5 platform 8 portugal-startup 8 security 30

Company	What they do	Why it matters	Decision	Priority	Attending	Owner
1Password security, Canada	Secures every identity, from people to AI agents: passwords, passkeys and secrets for over 150,000 businesses, and a security layer for how agents authenticate and connect to the internet.	partner/story: building "the security layer for how agents authenticate and connect"; agent identity and secrets sit next to sgit vaults and agent policies	meet	P1	confirmed	to decide
Airia grc, United States	AI security and governance platform: one control layer for agents, models, tools, data access, runtime policy, red teaming and audit-ready evidence.	competitor/partner: runtime policy and audit evidence for every AI agent is the same ground as RiskMandate Agent Behaviour Policies; meet to compare and to find where an insurable, enforced policy adds to a governance layer	meet	P1	confirmed	to decide
Cisco (Outshift by Cisco) ai-agents, United States	Networking and security; at Web Summit it presents Outshift by Cisco (incubation of emerging tech) and Cisco DevNet (developer platform for agentic AI), with open-source projects in agentic AI, quantum and next-gen infrastructure.	partner/story: Outshift by Cisco and DevNet position themselves as the developer platform for agentic AI with open-source projects; a route to the agent-infrastructure community	meet	P1	confirmed	to decide
Cloudflare security, United States	Connectivity cloud and security platform; its homepage now leads with "Build for the agent era".	partner/story: co-founder and CEO is a featured 2026 speaker and the site now says "build for the agent era"; edge platform for agents	meet	P1	confirmed	to decide
Conscium ai-agents, United Kingdom	AI safety lab and agent verification platform: simulation testing and verification so AI agents can be deployed with more confidence, plus research on conscious AI.	meet: agent testing and verification is the evidence side of RiskMandate Agent Behaviour Policies and SHarness; a policy says what an agent may do, verification shows whether it did	meet	P1	confirmed	to decide
CrowdStrike security, United States	Global cybersecurity company with a cloud-native, AI-native platform protecting endpoints, cloud workloads, identities and data.	story: co-founder and CEO is a featured 2026 speaker; AI-native endpoint, identity and cloud security, the reference point for any agent-security story	write-about	P1	confirmed	to decide
Delinea security, United States	Identity security platform that governs what humans, machines and AI agents do once they have access, extending privileged access management into continuous, just-in-time authorization across on-premises, multi-cloud and ephemeral infrastructure.	partner/story: governs what humans, machines and AI agents do once they have access; just-in-time authorization is the identity-side twin of RiskMandate/SHarness policy enforcement	meet	P1	confirmed	to decide
Descope security, United States	Customer and agentic identity platform: passwordless login, MFA, SSO and multi-tenancy, and it secures AI agents and MCP servers with standards-based authorisation, scoped access and token management, so human and machine identities live in one place.	partner/story: agent and MCP authorisation (scoped, short-lived credentials, no shared keys) is the identity half of what RiskMandate Agent Behaviour Policies and SHarness govern; a natural integration and interview	meet	P1	confirmed	to decide
Emergence ai-agents, United States	Builds agentic infrastructure for enterprise: verified, governed AI agents that plan, reason and act across complex systems.	story/partner: its 2026 session is 'When AI agents go rogue'; verified and governed agents is the problem RiskMandate policies and SHarness answer	meet	P1	confirmed	to decide
Feedzai security, Portugal	AI-native fraud and financial crime prevention platform; founded in Portugal (its CTO, the first employee, is listed by Web Summit from Portugal).	story/partner: Portugal's best-known security scale-up, speaking on 'Who let the agent in?' (agents in SaaS and fraud); a local anchor for the agent-authorisation story	meet	P1	confirmed	to decide
Hexamind ai-agents, France	French AI company ("L'IA utile et maîtrisée"); publishes Hexgate, an open-source (MIT) authorization layer for AI agents that gates every tool call through allow/deny/approval decisions by role, with signed policy bundles and an audit trail.	partner/competitor: Hexgate enforces company policy on each agent tool call, the nearest open-source neighbour to RiskMandate and SHarness; compare designs, possible joint demo	meet	P1	unconfirmed	to decide
KPMG grc, Portugal	Global network of professional services firms providing audit, tax and advisory services; listed for Web Summit 2026 as KPMG Portugal.	customer/partner: KPMG Portugal is an event partner and runs the Global Tech Innovator final in Lisbon; audit and advisory firms are the buyers and validators of AI governance and board-level cyber advice	meet	P1	confirmed	to decide
Linux Foundation (Agentic AI Foundation) ai-agents, United States	The Linux Foundation hosts open-source projects; the speaker is Executive Director of its Agentic AI Foundation (AAIF), a neutral foundation for open standards in agentic AI.	partner/story: open standards for agents are where agent identity and behaviour policies should land; ask how a policy format could become an open spec	meet	P1	confirmed	to decide
Mastra devtools, United States	Open-source TypeScript framework and enterprise platform for building, iterating and managing production-grade agents.	partner/customer: leading open-source TypeScript agent framework; agents built on it need behaviour policies and shared encrypted state (RiskMandate, sgit)	meet	P1	confirmed	to decide
Polygraf AI security, United States	AI security and governance for mission-critical operations: its AI Behavioral Control Plane gives real-time visibility, governance and inline enforcement across human and agentic AI interactions, to stop data exposure, unauthorised AI actions and compliance violations.	customer/partner: an AI Behavioral Control Plane enforcing inline governance on human and agentic AI interactions is the closest commercial neighbour to RiskMandate Agent Behaviour Policies; compare notes, possible integration	meet	P1	confirmed	to decide
Primitive ai-agents, United States	Email built for agents: gives AI agents their own email address and the tools to act on it over standard email protocols; backed by Y Combinator.	partner/story: "email built for agents" gives each agent its own address; directly relevant to our email-agent brief (one official email agent per person, signed mail)	meet	P1	confirmed	to decide
Qase devtools, United States	Test management platform used by 2,000+ engineering teams; launching Tiden, which records what was asked and checks every change made by coding agents against it.	partner/story: its new product Tiden keeps a record of what you asked for and checks every agent-written change against it, the same idea as our gate and briefs	meet	P1	confirmed	to decide
Replit devtools, United States	Agentic software creation platform that lets anyone build applications in natural language; millions of users and 500,000+ business users.	story/partner: agentic software creation for non-developers, and a featured speaker (Michele Catasta); the "everyone codes with agents" audience for SHarness and RiskMandate	meet	P1	confirmed	to decide
Scrut Automation grc, United States	AI compliance automation (GRC) platform: evidence collection, risk assessment and vendor risk management with AI agents, for SOC 2, ISO 27001 and 60+ frameworks.	meet: a GRC platform that runs AI agents and whose CISO leads AI governance; agent behaviour policies and The Cyber Boardroom speak to the same buyer, and its agents themselves need policies	meet	P1	confirmed	to decide
Startup Portugal portugal-startup, Portugal	Portugal's national startup agency; with Web Summit runs Road 2 Web Summit, selecting up to 125 Portuguese startups for the 2026 edition with a bootcamp in Porto and Lisbon and a Portugal stand.	partner/story: the door to the Portuguese startups going, and to the Portuguese-language site the plan mentions; ask for the 2026 selected list	meet	P1	confirmed	to decide
AICEP - Portugal Trade & Invest portugal-startup, Portugal	Portugal's public trade and investment agency: attracts inward investment and helps Portuguese companies expand abroad; offices in about 50 countries.	partner: the public route for Portuguese startups going international, and for a foreign company setting up in Portugal or the Algarve	meet	P2	confirmed	to decide
Air Apps portugal-startup, United States	Portuguese-rooted full-cycle product studio with 30+ AI-powered consumer apps and 100M+ downloads, with a San Francisco hub; says it is on track for $100M revenue in 2026.	story: one of Portugal's top app developers (30+ apps, 100M+ downloads, roots in Portugal); a Portuguese success story to write about	write-about	P2	confirmed	to decide
AISLE security, Czechia	AI-native vulnerability management: autonomous systems that find, fix and verify vulnerabilities, including in heavily audited open-source code; deployable in cloud, on-prem or air-gapped.	story: autonomous agents fixing security bugs in critical software are exactly the agents whose permitted actions need a policy and a harness (SHarness); good AI Summit interview	interview	P2	confirmed	to decide
Atlassian platform, Australia	Team collaboration software; its AI platform, anchored by Rovo and the Teamwork Graph, connects work across Jira, Confluence and Jira Service Management for 350,000+ customers.	story/customer: Rovo agents across Jira and Confluence; co-founder and CEO Mike Cannon-Brookes is a featured speaker	describe	P2	confirmed	to decide
ChatPlace portugal-startup, Portugal	Platform for creators and small businesses: AI content studio, an AI manager that answers DMs and comments 24/7, chatbot funnels and gamification on Instagram, TikTok, Telegram and WhatsApp.	customer/story: Portuguese AI manager that answers DMs and comments 24/7 for creators; an agent acting in someone's name, a RiskMandate use case	meet	P2	confirmed	to decide
Cnext ai-agents, Belgium	Builds agentic AI solutions for European businesses on its own Kairos platform: secure, compliant agents grounded in business context and plugged into existing systems; 400+ solutions over almost 20 years.	customer: builds secure, compliant agents for European businesses on its Kairos platform; a services firm that could adopt agent behaviour policies	meet	P2	confirmed	to decide
Cognizant platform, United States	Global IT services company positioning itself as an AI builder for enterprises.	describe: its Chief AI Officer runs 'help build the first pages of the agentic web' in the Developer Lounge; a hands-on chance to show agent-run SGit sites with llms.txt	describe	P2	confirmed	to decide
Datadog devtools, United States	AI-powered observability and security platform that unifies telemetry, secures applications from code to cloud and resolves incidents with AI-driven workflows.	partner/story: AI-powered observability and security; observability of agent runs is a theme of our website workflow	describe	P2	confirmed	to decide
European Commission other, Belgium (EU)	EU executive; Executive Vice-President Henna Virkkunen (Tech Sovereignty, Security and Democracy) is an announced 2026 speaker.	story: EU AI Act and digital sovereignty are the regulatory backdrop for agent behaviour policies and EU-held encrypted vaults	write-about	P2	confirmed	to decide
Exa ai-agents, United States	Search API for AI agents: real-time web data, deep research and structured content from one endpoint.	write-about: 'Search built for AI agents' is the agent-readable web; our sites publish llms.txt and markdown twins for exactly these readers, and what an agent may fetch is a policy question	write-about	P2	confirmed	to decide
Exein security, Italy	Runtime security for physical AI, data systems, AI agents, cloud workloads, Linux and Kubernetes.	write-about: runtime security that now names AI agents; runtime enforcement is where an agent behaviour policy bites, and SHarness is a harness at the same layer	write-about	P2	confirmed	to decide
Firefox Enterprise by Mozilla security, Netherlands	Mozilla's customer-controlled, on-premises enterprise browser platform for European organisations reassessing data control and technology dependencies, giving IT and security teams control over data and browser environment.	partner/story: customer-controlled browser for European digital sovereignty; same audience (EU orgs reassessing data control) as client-side-encrypted sgit vaults	meet	P2	confirmed	to decide
GetVocal AI ai-agents, France	Platform for enterprise contact centres that models how a business works and orchestrates an AI fleet across channels with a human-AI flywheel; customers include Deutsche Telekom and Glovo.	customer/story: contact-centre AI fleet sold on "full control" and trust; policy enforcement is their selling point too	write-about	P2	confirmed	to decide
JetBrains devtools, Czechia	Developer tools vendor (IntelliJ IDEA and other IDEs, the Kotlin language) with AI coding agents in its tools.	story: 'Taming the agent swarm' on many coding agents at once; where a harness and policy per agent (SHarness, RiskMandate) matter to developers	write-about	P2	confirmed	to decide
Keewano ai-agents, Israel	Building KeewanoDB, a database for AI agents and machine reasoning that stores every event across users, devices and agents as an ordered history with context.	story: a database built for AI agents (ordered event history with context); interview on agent memory and audit	write-about	P2	confirmed	to decide
Kiggu security, Colombia	Colombian offensive-cybersecurity startup; Kiggu Pro orchestrates automated security, agentic AI and expert human talent in one environment, acting as the security team for companies that lack one.	story/partner: AI-plus-human offensive security for companies without a security team; KPMG Global Tech Innovator finalist in Lisbon, a natural interview	interview	P2	confirmed	to decide
LaunchDarkly devtools, United States	Runtime control platform: feature flags, progressive delivery, automated rollback and runtime control for code and AI agents in production.	story: 'Who holds the kill switch?' is the runtime-control side of agent behaviour policies; a kill switch is one enforcement point a policy can name	write-about	P2	confirmed	to decide
LawVu grc, New Zealand	AI-powered legal operating system for in-house legal teams: matters, contracts, spend and legal operations.	story: 'Who takes the fall for autonomous AI?' is liability for agent actions, the question RiskMandate's insurable policies answer	write-about	P2	confirmed	to decide
Ledger security, France	Hardware crypto wallets and security for digital assets; its Chief Human Agency Officer leads AI initiatives so humans stay in control as AI agents act.	story/partner: keeping humans in control of agents that move money; hardware keys are a model for agent signing keys	write-about	P2	confirmed	to decide
LEGALFLY grc, Belgium	Legal operating system for in-house teams: secure AI-native workflows for intake, contract review, drafting, due diligence and research.	customer/story: secure AI-native legal workflows for in-house teams; legal teams are the ones who write the policies agents must follow	write-about	P2	confirmed	to decide
Make ai-agents, Czechia	Visual no-code platform to build, scale and automate AI and agentic workflows.	describe: hosts 'Make AI agents work beyond the demo'; agents built by non-developers are where behaviour policies and a safe harness matter most	describe	P2	confirmed	to decide
Manus AI ai-agents, China	Action engine that executes tasks and automates workflows on a user's behalf.	story: general-purpose action agent ("goes beyond answers to execute tasks"); co-founder speaking; the archetype of an agent that needs a behaviour policy	write-about	P2	confirmed	to decide
Melious AI GmbH platform, Germany	Sovereign European AI infrastructure and inference, serving frontier open-weight models through OpenAI- and Anthropic-compatible APIs without US Cloud Act exposure.	partner: sovereign European inference with an Anthropic- and OpenAI-compatible API; a possible EU-hosted backend for agents that must avoid the US Cloud Act	meet	P2	confirmed	to decide
National Cyber Security Centre (UK) other, United Kingdom	Part of GCHQ; the UK's national technical authority for cyber security, helping businesses, the public sector and individuals.	story: public-private security ('It takes two to trust', with Cisco); NCSC guidance is a reference for The Cyber Boardroom	write-about	P2	confirmed	to decide
Open VSX (Eclipse Foundation) devtools, Canada	Open VSX Registry: the vendor-neutral open-source registry of editor extensions run under the Eclipse Foundation, used by VS Code-compatible editors.	write-about: extension registries are the supply chain of AI coding tools; which extensions an agent's editor may load is an agent behaviour policy, and SHarness is a harness for that kind of tool	write-about	P2	confirmed	to decide
Persona security, United States	Identity platform that helps businesses verify people and organisations, assess risk and build trust online (from its CEO's Web Summit bio; the company site refused an automated read).	story: two 2026 sessions on identity and AI-powered fraud ('Beyond the front door' and 'In bots we trust'); verifying who is behind an agent is the root of agent identity	write-about	P2	confirmed	to decide
Proton security, France (the speaker's Web Summit listing; headquarters not sourced)	Privacy-by-default online services, used by over 100 million people per its own site.	write-about: 'Big Tech detox' on European encrypted alternatives; SGit's encrypted vaults make the same privacy-by-default argument for files and agent-run sites	write-about	P2	confirmed	to decide
Risiq GmbH grc, Germany	Helps banks meet regulatory requirements and build risk management; advisory plus Ribeca, a SaaS platform for integrated ESG and risk management and reporting.	customer/partner: advises banks on risk, governance and regulatory processes; a GRC buyer for agent-policy evidence	meet	P2	confirmed	to decide
ROOST (Robust Open Online Safety Tools) security, United States	Independent nonprofit building open-source online safety tools as a public good.	story: 'The attackers are open source. The defences aren't.' matches our open, git-based approach; possible partner for open safety tooling	write-about	P2	confirmed	to decide
RWS Group ai-agents, United Kingdom	Language and content technology company; its Group CEO speaks on 'Your AI agent just got a passport' (the company site did not return a page to an automated read, so 'what' rests on the session and bio).	story: the session title is agent identity ('a passport' for agents); worth hearing for the agent-identity theme	write-about	P2	confirmed	to decide
SpaceComputer security, Singapore	Cybersecurity company building confidential computing, key management, attestation and zero-trust services for cloud and AI workloads, extended to satellites and space systems.	partner/story: confidential computing, key management and attestation for AI workloads; shares sgit's verifiable-trust and key-management concerns	meet	P2	confirmed	to decide
Strawberry ai-agents, Sweden	The AI-native browser.	story: AI-native browser whose companions act inside signed-in accounts, exactly the case where an agent behaviour policy matters	write-about	P2	confirmed	to decide
Temporal devtools, United States	Open-source durable execution platform for building reliable applications and long-running workflows.	partner/story: durable execution is the runtime under long-running agents; a talk on foundations over frameworks fits our "primitives first" story	interview	P2	confirmed	to decide
Trent AI security, United Kingdom	Agentic AI security platform that works like an AI security engineer: finds the real risk in code, cloud and AI agents and verifies every fix.	partner/story: agent security tooling with a safety and judgement angle ('Viable systems, judgement, and AI safety'); overlaps with SHarness	meet	P2	confirmed	to decide
TrustScale grc, United States	Configures and measures AI against a customer's own criteria (AI training, evaluation and assurance).	partner/story: AI assurance against your own criteria is close to measuring an agent against its behaviour policy (RiskMandate); Policy Summit panel	meet	P2	confirmed	to decide
Whitespace grc, United Kingdom	UK sovereign AI company helping government and regulated sectors deploy trusted, governed AI (from its CEO's Web Summit bio; the company's own site was not identified).	describe: governed AI for regulated sectors, on 'Securing the AI frontline'; governance a buyer can check is what Agent Behaviour Policies and encrypted SGit vaults offer	describe	P2	confirmed	to decide
You.com (Recursive & You.com) ai-agents, United States	You.com provides search and inference infrastructure for AI ("the core AI infrastructure you need to maximize accuracy while reducing latency and costs").	story: Richard Socher (You.com) is a featured speaker; search and inference infrastructure for AI agents	write-about	P2	confirmed	to decide
0xbow grc, United States	Plug-and-play on-chain privacy with built-in compliance.	story: on-chain privacy with built-in compliance; privacy-plus-compliance parallels encrypted vaults	describe	P3	confirmed	to decide
Akamai security, United States	Cloud company that powers and protects AI applications: cloud computing from core to edge plus multi-layered security against cyber threats.	story: cloud and security platform "that powers and protects an AI-driven world"; context for agent-traffic security	describe	P3	confirmed	to decide
Altegio ai-agents, Hungary	Vertical system of record (SoR) positioned as the layer AI agents are built on.	story: pitches a vertical system of record as "the layer AI agents are built on"	describe	P3	confirmed	to decide
Andreessen Horowitz (a16z) investor, United States	Venture capital firm; Lusa reports partner Marcus Segal among the announced 2026 speakers.	investor: a top AI/infra investor present; a story about agent security as a category is a reason to talk	describe	P3	confirmed	to decide
Arima grc, Canada	Builds bespoke, privacy-first synthetic datasets that model real populations.	story: privacy-first synthetic datasets; describe	describe	P3	confirmed	to decide
AustriaCard security, Austria	Austrian card, secure identity and digital solutions group; its GaiaB offer helps organisations deploy secure, governed AI while keeping control of data and infrastructure (per its speaker's Web Summit bio).	describe: hosts 'AI sovereignty: Data control, governance and predictable AI costs'; data control is the SGit vault argument	describe	P3	confirmed	to decide
Centre for AI Leadership (C4AIL) grc, Singapore	AI leadership education organisation ('awareness before competency').	story: AI leadership for executives fits The Cyber Boardroom's audience; panel 'Beyond the AI agent hype'	describe	P3	confirmed	to decide
Cerebras platform, United States	Builds AI infrastructure (wafer-scale systems), on premises and in the cloud, for corporations, research institutes and governments.	none: fast AI inference hardware and cloud; describe only	describe	P3	confirmed	to decide
Contents grc, Italy	SaaS platform to manage and govern the content lifecycle with AI, LLM-agnostic, ensuring quality and compliance across teams and channels.	story: AI content lifecycle with governance and compliance, LLM-agnostic; close to the newsroom's own evidence-tied publishing	describe	P3	confirmed	to decide
Crystal Intelligence grc, Netherlands	Decision intelligence and compliance software for digital assets, turning blockchain data and AI into evidence, including for agentic payments.	describe: compliance evidence for agentic payments; adjacent to policies for agents that move money	describe	P3	confirmed	to decide
Data Protection Commission (Ireland) grc, Ireland	Ireland's national independent data protection authority, lead EU regulator for many large tech companies.	story: 'Regulating big tech' on Centre Stage; GDPR enforcement is the backdrop for encrypted vaults and agents handling personal data	describe	P3	confirmed	to decide
Defined.ai other, United States	Enterprise AI training data platform: multilingual, multimodal datasets with human-in-the-loop quality and compliance.	describe: on 'Give me a brake: Coding without crashing' with LaunchDarkly; data provenance and compliance for AI	describe	P3	confirmed	to decide
Delta Labs ai-agents, Switzerland	Elaiia gives teams the voice of the customer in hours using AI Twins, synthetic customer profiles grounded in behavioural data.	story: synthetic customer "AI Twins"; relates to our synthetic-users studies	describe	P3	confirmed	to decide
Deque Systems devtools, United States	Web and mobile accessibility software, services and training.	describe: hosts 'Can you trust your AI agent's accessibility?'; agent-generated sites (ours included) need checking against accessibility rules	describe	P3	confirmed	to decide
DIG-IN portugal-startup, Portugal	Maps the physical hospitality economy: a data engine tracking millions of verified outlets across Europe and Brazil with menus, pricing and location over time.	story: Portuguese data engine mapping the hospitality economy; describe	describe	P3	confirmed	to decide
Directus devtools, United States	Collaborative backend and self-hostable headless CMS over any database, with REST, GraphQL and MCP for AI assistants.	describe: MCP access to content backends ('Don't feed shit to agents'); relevant to agent-run websites	describe	P3	confirmed	to decide
EasyDMARC security, Armenia	Email trust platform: DMARC, email authentication, DNS, sender insights, threat intelligence and deliverability.	describe: 'The perimeter is dead. So what happens to trust?'; sender authentication is the email form of signed provenance	describe	P3	confirmed	to decide
Elastic devtools, United States	The Search AI Company: search, observability and security solutions built on the Elastic Search AI Platform, used by more than half of the Fortune 500.	story: search, observability and security on one AI platform; describe for the map	describe	P3	confirmed	to decide
Eversec Technology security, China	Chinese company presented at Web Summit through its co-founder and CEO, described as an expert in AI governance and cybersecurity; the company's own site was not confirmed, so 'what' is not yet sourced beyond that.	describe: 'Building security for the human-machine era' (Policy Summit); part of the Chinese delegation's security story	describe	P3	confirmed	to decide
Factorial other, Spain	Business software connecting HR, finance and IT into one system, marketed as 'the AI for business'.	story: 'Double agents' on employees' own AI agents in the business; shadow agents need a behaviour policy	describe	P3	confirmed	to decide
Gcore security, Luxembourg	Edge AI, cloud computing, CDN, cybersecurity and low-latency network services across six continents, with 210+ points of presence.	partner: European (Luxembourg) edge AI, cloud and cybersecurity infrastructure; possible hosting/sovereignty conversation	describe	P3	confirmed	to decide
Genspark ai-agents, United States	All-in-one AI workspace aiming to autopilot busywork for knowledge workers; says it reached $250M ARR in 12 months.	story: fast-growing agent workspace ("$250M ARR in 12 months"); a headline for an article on agents at the summit	write-about	P3	confirmed	to decide
Google Cloud platform, United States	Optimised AI stack (infrastructure, Gemini models, data, multi-cloud security, developer tools, agents and applications) for organisations in the agentic era.	partner: AI stack including agents and security; the Agent Development Kit ecosystem (which Hexgate also supports) is where agent policies plug in	describe	P3	confirmed	to decide
IBM platform, United States	AI solutions including watsonx, IBM Research and consulting to scale responsible AI across the enterprise.	story: official AI Summit partner; watsonx and "responsible AI" governance messaging overlaps GRC	describe	P3	confirmed	to decide
iTRecruiter portugal-startup, Portugal	Portuguese tech recruitment ecosystem ("where technology meets people").	none: Portuguese tech recruitment ecosystem; describe	describe	P3	confirmed	to decide
Legora ai-agents, Sweden	Collaborative AI for lawyers: review, research, drafting and advice.	describe: 'Scaling AI agents for professional work'; agents in regulated professional work need auditable behaviour policies	describe	P3	confirmed	to decide
ManageEngine security, India	Division of Zoho Corporation providing an AI-powered digital enterprise management platform for IT management worldwide.	customer/story: IT management (Zoho) for mid-market IT teams who will govern agents on endpoints, a SHarness audience	describe	P3	confirmed	to decide
MEO platform, Portugal	Portuguese telecom operator: fibre, TV, 5G mobile and security services.	describe: Portugal's ecosystem; its CTO on 'The autonomous enterprise: Networks, cloud and AI agents'	describe	P3	confirmed	to decide
Mobbeel security, Spain	Spanish digital identity company (Cáceres, founded 2009): identity verification, KYC/AML, biometric authentication and electronic signature.	partner/story: verified identity for people is the counterpart of signed identity for agents (our email-agent keys)	describe	P3	confirmed	to decide
Neo investor, United States	Startup residency, recruiting platform and mentorship community for the next generation of tech leaders.	investor: Ali Partovi (Founding Partner) is a featured attendee; early-stage residency and investor for technical founders	describe	P3	confirmed	to decide
Neo4j devtools, United States	Graph data and intelligence platform used for knowledge graphs behind AI systems and agents.	describe: knowledge graphs as agent context (Developer Summit); background only	describe	P3	confirmed	to decide
Nisos security, United States	Open source intelligence company that unmasks digital threats and the real people behind them (from its CEO's Web Summit bio; its site refused an automated read of robots.txt, so nothing from it was read).	describe: 'Is there a foreign operative on your payroll?' (insider threat); identity of the human behind an account, a board-level risk for The Cyber Boardroom	describe	P3	confirmed	to decide
NordVPN security, Lithuania	VPN service for online privacy, growing into a broader cybersecurity offering (per its CTO's Web Summit bio).	describe: 'Zombie data: How your data comes back to haunt you'; data that persists after deletion is a case for encrypted, versioned vaults with keys the owner holds	describe	P3	confirmed	to decide
Orb devtools, United States	Usage-based billing for AI companies, now part of Adyen: pricing, billing and revenue intelligence.	none: usage-based billing for AI companies (now part of Adyen); relevant to how we charge for the newsroom API	describe	P3	confirmed	to decide
PitchBook investor, United States	Financial data and software on venture capital, private equity, M&A and emerging technology.	investor-intel: capital-markets data; useful to research investors on the map	describe	P3	confirmed	to decide
PolyAI ai-agents, United Kingdom	Enterprise voice AI: agentic dialog platform for customer service.	describe: 'Coaching an AI agent like human talent'; coaching is a behaviour policy written in prose	describe	P3	confirmed	to decide
Prelude devtools, France	Paris-based B2B developer infrastructure: APIs for phone verification, authentication, fraud prevention and messaging.	partner/story: developer APIs for verification, authentication and fraud prevention; identity verification for agent-sent messages	describe	P3	confirmed	to decide
Prisma devtools, United States	Agent infrastructure for TypeScript: Prisma ORM, Prisma Postgres and Prisma Compute (app hosting next to the database).	describe: 'Rebuilding open source with AI: Lessons learned'; hosting for apps agents build, next to SGit's agent-run sites	describe	P3	confirmed	to decide
Proofpoint security, United States	Enterprise cybersecurity and compliance (email, web, cloud, data); its CEO describes the mission as human- and agent-centric security.	story: a large security vendor framing 'agent-centric security' (Cybersecurity Summit, 'Outsmarting AI'); a reference point for the market	describe	P3	confirmed	to decide
Qualcomm platform, United States	Semiconductor and computing company (AI, low-power computing, connectivity, edge and data centre).	describe: 'The AI agent economy' (AI Summit); on-device agents are background for where agents run	describe	P3	confirmed	to decide
Runpod devtools, United States	AI developer cloud for building, training, fine-tuning and deploying AI workloads on GPUs.	none/partner: GPU developer cloud; describe only	describe	P3	confirmed	to decide
SageOx ai-agents, United States	Collaboration platform that turns humans and AI agents into teams by giving them one shared context.	story: shared context for agents ('Agents don't need prompts, they need context'); compares with git-held context in SGit vaults	describe	P3	confirmed	to decide
Sensay ai-agents, Singapore	Uses AI to capture expertise inside a team into living knowledge bases that stay accessible after people leave.	story: captures departing employees' knowledge into living knowledge bases; describe	describe	P3	confirmed	to decide
Shakers other, Spain	Marketplace of senior tech, product and data talent that builds with AI; says 4% pass its certification.	partner: marketplace of certified European AI builders; possible channel for implementers	describe	P3	confirmed	to decide
sheerME portugal-startup, Portugal	Beauty and wellness super app to discover, book and pay for services.	none: Portuguese beauty and wellness super app; describe	describe	P3	confirmed	to decide
Sphere grc, United States	AI-native platform automating revenue-based (tax) compliance across 130+ regions: registrations, filings and remittance.	none/story: AI-native tax compliance across 130+ regions; describe	describe	P3	confirmed	to decide
Sumsub security, United Kingdom	Identity verification and trust platform: verifies users, businesses and transactions, with fraud prevention and compliance.	story: 'An AI identity crisis' on identity when AI can fake people; context for agent identity and who an agent acts for	describe	P3	confirmed	to decide
TestMu AI devtools, United States	Agentic QA for web, mobile, chat, voice and IVR, and 'agent assurance' for enterprises; founded as LambdaTest (2017).	story: 'When AI verifies AI'; agent assurance testing is evidence an insurer of agent behaviour (RiskMandate) would want	describe	P3	confirmed	to decide
The Hacking Games security, United Kingdom	Turns gamers' and hackers' talent into cybersecurity careers.	describe: 'The real threat isn't a nation-state, it's a teenager'; a talent and threat story for the newsroom	describe	P3	confirmed	to decide
Topsec Cloud Solutions security, Ireland	Fully managed email security service against phishing, malware and ransomware.	describe: same 'perimeter is dead' session; a managed-security voice for The Cyber Boardroom audience	describe	P3	confirmed	to decide
Twilio devtools, United States	Customer engagement platform providing communications and data APIs across the customer journey.	story: customer engagement APIs; describe only	describe	P3	confirmed	to decide
VTEX portugal-startup, Portugal	Global AI-native commerce platform connecting commerce, data and operations for enterprises.	none/story: commerce platform listed for 2026 with Portugal as country; describe for the Portuguese view of the map	describe	P3	confirmed	to decide

First meetings to propose

The cartographer's proposal: the strongest candidates and where we could meet them. Owners decide.

Delinea: agent access in production is the case ABP writes policies for; two sessions
Where: Trust issues: Letting AI agents into production safely [Hosted by Delinea] 2026-11-10 (10 Nov 12:30-13:15, Masterclass 3, they host); fallback Beyond the front door: Identity, access, and user trust 2026-11-12 (12 Nov 15:15-15:35, Stage 8, overlaps Airia ws26-s38)
Descope: agent and MCP authorisation is the identity half of a behaviour policy; a hands-on session
Where: (A)Identity: Auth tips to secure AI agents and MCP servers 2026-11-12 (12 Nov 14:00-14:45, Developer Lounge, they run it)
Airia: runtime policy and audit evidence for agents: the nearest competitor or partner to ABP
Where: AI sprawl is exploding. Get ahead of governance and security challenges before it’s boo late 2026-11-12 (12 Nov 15:25-15:36, Stage 9)
Primitive: email built for agents meets our email agent and signed vaults
Where: Connecting the bots: Building secure infrastructure for inter-agent communication 2026-11-12 (12 Nov 10:50-11:00, Stage 9)
Emergence: verified, governed enterprise agents; the talk is when agents go rogue
Where: When AI agents go rogue 2026-11-12 (12 Nov 10:15-10:35, Stage 13)
Feedzai: Portugal's best-known security scale-up on agents letting themselves in; a local anchor
Where: Who let the agent in? 2026-11-12 (12 Nov 12:00-12:20, Stage 7)
Linux Foundation (Agentic AI Foundation): open standards for agents: where a behaviour-policy format could become a spec
Where: Why AI agents stall at the production line 2026-11-11 (11 Nov 11:10-11:30, Stage 13)
Conscium: agent verification is the evidence side of ABP and SHarness: a policy says what an agent may do, verification shows whether it did
Where: The biological bottleneck 2026-11-12 (12 Nov 10:45-11:10, Stage 8, with Scrut Automation); meet the speakers as they come off at 11:10, after Primitive ws26-s29 (Stage 9) ends at 11:00
Scrut Automation: a GRC platform that runs agents and whose CISO leads AI governance: the same buyer as ABP and The Cyber Boardroom
Where: The biological bottleneck 2026-11-12 (12 Nov 10:45-11:10, Stage 8, with Conscium); meet the speakers as they come off at 11:10, after Primitive ws26-s29 (Stage 9) ends at 11:00
Cisco (Outshift by Cisco): open-source agentic AI platform; a route to agent builders; three places
Where: From Automation to Autonomy: How AI is changing the way we run technology (Cisco showcase) 2026-11-11, 17:30-18:30 (11 Nov 17:30-18:30, PTW Palace, Cisco showcase); fallback Democratising AI platform engineering with open-source [Hosted by Cisco Systems] 2026-11-12 (12 Nov 13:00-13:45, Masterclass 1, they host; overlaps ws26-s40) or It takes two to trust: Operationalizing public-private security 2026-11-12 (12 Nov 12:10-12:30, Stage 8; overlaps ws26-s32)
Replit: agentic software creation: agents writing code need a harness; a featured speaker with a talk of its own
Where: What does a self-driving company look like? 2026-11-10 (10 Nov 16:00-16:20, Stage 13)
Startup Portugal: the door to Portuguese startups and our Algarve work
Where: 🧳 Founders building in Portugal meetup 2026-11-12 (founders in Portugal meetup, 12 Nov 13:30-13:55, Meetup 6); fallback A guide to Portugal's startup scene [Hosted by Startup Portugal] 2026-11-10 (10 Nov 12:00-12:45, Masterclass 1, they host; overlaps ws26-s06 and ws26-s78)