Where to find reliable vendors?

Hi there folks, Here is the context: I am pretty much the only appsec lead at the company at the moment. Have done it for few years but was relying on the decisions made by the earlier members of the team for the selection of tools. Now I have a clean slate and I am building the program from scra