Kubescape
Kubescape is a free open-source Kubernetes security platform used to scan clusters, manifests, and Helm charts for risky settings for DevOps and security teams.
Cybersecurity tools, platforms and training
A curated directory of cybersecurity tools, platforms and training for practitioners, researchers and learners.
Top voted
capa
capa is a free open-source tool from Mandiant's FLARE team used to identify what an executable can do, such as persistence or injection, for malware analysts.
Falco
Falco is a free open-source runtime security tool used to detect suspicious behavior in hosts, containers, and Kubernetes in real time for cloud security teams.
PingCastle
PingCastle is a freemium Active Directory audit tool used to score domain risk and find weak settings in AD and Entra ID for IT and security teams.
Keycloak
Keycloak is a free open-source identity and access management server used to add single sign-on and user login to apps and services for developers and IT teams.
Dependency-Track
Dependency-Track is a free platform used to analyze SBOMs and track component and vulnerability risk in the software supply chain for AppSec teams.
pwntools
pwntools is a free open-source Python framework used to build and test exploits for binary CTF challenges and lab targets for CTF players and researchers.
Arkime
Arkime is a free open-source packet capture and session search tool used to record, index, and investigate network traffic at scale for security teams.
Security Onion
Security Onion is a freemium Linux platform used to run network security monitoring, threat hunting, and log management in one stack for SOC teams.
Network Security & MonitoringFreemium
radare2
radare2 is a free open-source command-line reverse engineering framework used to disassemble, debug, and patch binaries for malware analysts and CTF players.
Binary Ninja
Binary Ninja is a freemium reverse engineering platform used to disassemble, decompile, and debug compiled programs for malware analysts and researchers.
x64dbg
x64dbg is a free open-source Windows debugger used to step through executables and DLLs without source code for malware analysts and reverse engineers.
mitmproxy
mitmproxy is a free open-source interactive HTTPS proxy used to intercept, inspect, modify, and replay web and app traffic for testers and developers.
enum4linux-ng
enum4linux-ng is a free open-source Python enumeration tool used to gather users, shares, and policy data from Windows and Samba hosts for pentesters.
DVWA (Damn Vulnerable Web Application)
DVWA is a free open-source intentionally vulnerable PHP web app used to practice common web attacks at set difficulty levels for students and new testers.
KeePassXC
KeePassXC is a free open-source offline password manager used to store passwords, keys, and notes in an encrypted local database for privacy-minded users.
OWASP Juice Shop
OWASP Juice Shop is a free open-source deliberately insecure web app used to practice finding and exploiting web flaws for students and security trainers.
Sysinternals Suite
Sysinternals Suite is a free Microsoft toolkit of Windows utilities used to inspect processes, startup items, and system activity for defenders and admins.
Echidna
Echidna is a free open-source smart contract fuzzer used to break user-defined invariants in Ethereum contracts for auditors and security engineers.
Foundry
Foundry is a free open-source Solidity development and testing toolkit used to build, fuzz, and debug smart contracts for auditors and developers.
Slither
Slither is a free open-source static analyzer for Solidity and Vyper used to find smart contract vulnerabilities before deployment for auditors.
Blockaid
Blockaid is a paid web3 security platform used to detect and block crypto scams, wallet drainers, and onchain exploits for wallets and exchanges.
Greenbone Community Edition (OpenVAS)
Greenbone Community Edition is a free open-source vulnerability management suite used to scan networks for known weaknesses for security teams.
Hayabusa
Hayabusa is a free open-source Windows event log tool used to build fast forensics timelines and hunt for attacker activity for incident responders.