To add to it:
Most orgs need to pay their people what they're worth, send them to training that will build their resume and the company's defenses, and leverage open source tooling that people can learn fast and iterate on quickly.
Iโd venture to make an educated guess that most orgs donโt need more security tools, they need to learn their existing tools better to get more out of themโฆ