The best cybersecurity websites, scored

Phill Keaney-BollandPhill Keaney-Bolland· Co-founder and Designer, Yaya3 min read

Key takeaways

  • Five of the seven highest-scoring brands lead with a colour other than blue, in a cohort where more than 70% do not.
  • The top brand in the cohort writes at reading grade 12.2 against a median of 16.2.
  • Five of the seven give something of value before asking for contact details; only 42% of the full cohort does.
  • A high brand score measures whether the story is legible and distinct, not whether the product is good.
  • The bottom half is consistently blue, informative, post-graduate reading level, with a demo form as the only call to action.

How these were chosen#

These are not favorites. For the Cult Products Awards we scored all 77 startups exhibiting at RSA 2025 across proposition, brand and marketing, using the same rubric for every company. This list ranks on one dimension of that score, brand differentiation, rather than on the overall total. That is why the order here is not the order of the overall table in the report.

Two things worth stating before the list. Scores are relative to a single cohort at a single moment, so a company that has since rebranded may deserve a different one. And a high brand score is not a verdict on the product. It measures whether the story is legible and distinct, which is a different question from whether the technology is good.

The list#

1. Prelude Research#

The highest brand differentiation score in the cohort, and the clearest evidence that plain language is a competitive weapon. Prelude writes at a reading grade of 12.2 against a cohort median of 16.2, which is the difference between a site a security engineer skims comfortably and one that reads like an academic paper. Pink as the primary color in a field where almost 70% lead with blue is the other half of it.

2. Token, 89#

Token took the overall Cult Products Award, and the brand is why. Green in a blue category, a wordmark that does not hedge, and a proposition about hardware-backed identity that survives being said out loud. Token also offers something of value before asking for contact details, which only 42% of the cohort does.

3. Seal Security, 82#

The best argument in the cohort that you can stay blue and still be distinct, which matters because most companies will not change color. Seal wins on register instead: an authoritative tone where almost everyone else is merely informative, and copy that states a position rather than listing capabilities.

4. Aim Security, 80#

Orange, and confident about it. Aim was one of the three brands that scored highest overall in the report, and it is the clearest case of a company using color to signal that it is not another entrant in a crowded AI security field. The site also gives value before the form, which is rarer than it should be.

5. Reality Defender, 78#

Green, authoritative, and unusually specific about what it detects. Deepfake detection is a category where hype is the default register, and Reality Defender writes as though it expects to be checked. In a market this skeptical, sounding checkable is a differentiator.

6. CovertSwarm, 76#

The most committed brand idea in the cohort. The swarm metaphor runs through the name, the identity and the service model rather than sitting on the homepage as decoration, which is what separates a brand idea from a tagline.

7. Cygence, 73#

Blue, but doing more with it than most. Authoritative tone, restrained typography, and a homepage that answers what the company does before it explains why the category matters. That ordering is more unusual than it sounds.

What the top of the list has in common#

Five of the seven use a primary color other than blue, against a cohort where almost 70% lead with blue. Four write below the cohort median reading grade. Five give something of value before asking for contact details. None of those is a design decision in isolation; together they describe a company that has decided who it is for and is willing to be less appealing to everyone else.

The pattern in the bottom half is the inverse and it is remarkably consistent: blue, informative, post-graduate reading level, demo form as the only call to action. Every individual choice there is defensible. The sum is a category where buyers cannot tell anyone apart and default to comparing on price.

Phill Keaney-Bolland

Phill Keaney-Bolland

Co-founder and Designer, Yaya

Co-founder and designer at Yaya, and host of the Cult Products podcast. Fifteen years designing products, brands and UX across multiple industries before narrowing to cybersecurity, and lectures on design at Imperial. Works with cybersecurity founders on positioning, strategy and the website that has to carry a launch, across identity, cloud security, AI agents and software supply chain, including Twine out of stealth and Geordie AI, which won the RSA Innovation Sandbox in 2026.

Frequently asked questions

Related content

The latest news, technologies, and resources from our team.

  • Website

    Buyers of early-stage security products know the product is immature. They get comfortable with the people instead. A missing team page is a hole in the buying journey.

    Phill Keaney-Bolland

    Phill Keaney-Bolland

  • CISOs and buyers

    Justin Woody planned 100 buyer conversations for Twine and did 250. Nearly all of them pointed at a different problem, and the company pivoted before writing code. Here is how validation actually works.

    Phill Keaney-Bolland

    Phill Keaney-Bolland

  • Brand

    Cybersecurity founders want to stand out and fear standing out. Both instincts are right. There is a working test for where the line sits, and it involves your champion's CFO.

    Phill Keaney-Bolland

    Phill Keaney-Bolland

  • Brand

    Founders debate launch timing endlessly: before or after the raise, before or after the product feels ready. There is no perfect moment. There is a market calendar, and it should set your date.

    Phill Keaney-Bolland

    Phill Keaney-Bolland

  • Website

    Buyers describe a use case to an LLM and get a shortlist of three to five names. How security startups earn a place on it, and why the answer runs through a website you own.

    Phill Keaney-Bolland

    Phill Keaney-Bolland