Buyers of early-stage security products know the product is immature. They get comfortable with the people instead. A missing team page is a hole in the buying journey.
Phill Keaney-Bolland
These are not favorites. For the Cult Products Awards we scored all 77 startups exhibiting at RSA 2025 across proposition, brand and marketing, using the same rubric for every company. This list ranks on one dimension of that score, brand differentiation, rather than on the overall total. That is why the order here is not the order of the overall table in the report.
Two things worth stating before the list. Scores are relative to a single cohort at a single moment, so a company that has since rebranded may deserve a different one. And a high brand score is not a verdict on the product. It measures whether the story is legible and distinct, which is a different question from whether the technology is good.
The highest brand differentiation score in the cohort, and the clearest evidence that plain language is a competitive weapon. Prelude writes at a reading grade of 12.2 against a cohort median of 16.2, which is the difference between a site a security engineer skims comfortably and one that reads like an academic paper. Pink as the primary color in a field where almost 70% lead with blue is the other half of it.
Token took the overall Cult Products Award, and the brand is why. Green in a blue category, a wordmark that does not hedge, and a proposition about hardware-backed identity that survives being said out loud. Token also offers something of value before asking for contact details, which only 42% of the cohort does.
The best argument in the cohort that you can stay blue and still be distinct, which matters because most companies will not change color. Seal wins on register instead: an authoritative tone where almost everyone else is merely informative, and copy that states a position rather than listing capabilities.
Orange, and confident about it. Aim was one of the three brands that scored highest overall in the report, and it is the clearest case of a company using color to signal that it is not another entrant in a crowded AI security field. The site also gives value before the form, which is rarer than it should be.
Green, authoritative, and unusually specific about what it detects. Deepfake detection is a category where hype is the default register, and Reality Defender writes as though it expects to be checked. In a market this skeptical, sounding checkable is a differentiator.
The most committed brand idea in the cohort. The swarm metaphor runs through the name, the identity and the service model rather than sitting on the homepage as decoration, which is what separates a brand idea from a tagline.
Blue, but doing more with it than most. Authoritative tone, restrained typography, and a homepage that answers what the company does before it explains why the category matters. That ordering is more unusual than it sounds.
Five of the seven use a primary color other than blue, against a cohort where almost 70% lead with blue. Four write below the cohort median reading grade. Five give something of value before asking for contact details. None of those is a design decision in isolation; together they describe a company that has decided who it is for and is willing to be less appealing to everyone else.
The pattern in the bottom half is the inverse and it is remarkably consistent: blue, informative, post-graduate reading level, demo form as the only call to action. Every individual choice there is defensible. The sum is a category where buyers cannot tell anyone apart and default to comparing on price.

Phill Keaney-Bolland
Co-founder and Designer, Yaya
Co-founder and designer at Yaya, and host of the Cult Products podcast. Fifteen years designing products, brands and UX across multiple industries before narrowing to cybersecurity, and lectures on design at Imperial. Works with cybersecurity founders on positioning, strategy and the website that has to carry a launch, across identity, cloud security, AI agents and software supply chain, including Twine out of stealth and Geordie AI, which won the RSA Innovation Sandbox in 2026.
The latest news, technologies, and resources from our team.
Buyers of early-stage security products know the product is immature. They get comfortable with the people instead. A missing team page is a hole in the buying journey.
Phill Keaney-Bolland
AI for security, security for AI is now the default pitch. Differentiation in the most crowded corner of the market lives one level down, in philosophy, refusal, and story.
Phill Keaney-Bolland
Justin Woody planned 100 buyer conversations for Twine and did 250. Nearly all of them pointed at a different problem, and the company pivoted before writing code. Here is how validation actually works.
Phill Keaney-Bolland
Cybersecurity founders want to stand out and fear standing out. Both instincts are right. There is a working test for where the line sits, and it involves your champion's CFO.
Phill Keaney-Bolland
Founders debate launch timing endlessly: before or after the raise, before or after the product feels ready. There is no perfect moment. There is a market calendar, and it should set your date.
Phill Keaney-Bolland
Buyers describe a use case to an LLM and get a shortlist of three to five names. How security startups earn a place on it, and why the answer runs through a website you own.
Phill Keaney-Bolland