Frida
Frida is a free open-source dynamic instrumentation toolkit for hooking and tracing running apps on desktop, mobile and embedded platforms.
Cybersecurity tools, platforms and training
A curated directory of cybersecurity tools, platforms and training for practitioners, researchers and learners.
Top voted
IDA Pro
IDA Pro is Hex-Rays commercial multi-architecture disassembler and decompiler suite for professional reverse engineering, sold as yearly Pro subscriptions.
Certipy
Certipy is a free open-source toolkit for enumerating and assessing Active Directory Certificate Services (AD CS) in authorized pentests and labs.
Evil-WinRM
Evil-WinRM is a free open-source WinRM shell for authorized Windows and Active Directory penetration tests and lab assessments.
Responder
Responder is a free open-source LLMNR, NBT-NS and MDNS poisoner with rogue auth servers for authorized AD and internal network pentests and labs.
theHarvester
theHarvester is a free open-source OSINT tool that gathers emails, subdomains, hosts and related public data about a domain from many online sources.
Maltego
Maltego is an OSINT and investigations platform for visual link analysis, with a free Basic Community Edition and paid Entry and Professional plans.
OSINT & ReconnaissanceFreemium
Censys
Censys maps internet-facing hosts, certificates and services for attack-surface and threat investigations, with a free tier plus credit and enterprise plans.
OSINT & ReconnaissanceFreemium
GitGuardian
GitGuardian detects and remediates leaked secrets across code, CI/CD and collaboration tools, with a free plan for small teams and paid business tiers.
Application SecurityFreemium
TruffleHog
TruffleHog finds and verifies leaked secrets across git, cloud storage and CI artefacts, with a free open-source scanner and commercial TruffleHog Enterprise.
SonarQube
SonarQube analyses code for bugs, vulnerabilities and code smells across many languages, with a free Community Build and commercial Server or Cloud editions.
Bugcrowd
Bugcrowd is a crowdsourced security platform for bug bounties, VDPs, pen testing and red team programmes with researcher matching and triage.
Vulnerability ManagementFreemium
Rapid7 InsightVM
Rapid7 InsightVM assesses assets, prioritises vulnerability risk and drives remediation, now powering Exposure Command vulnerability management.
Qualys
Qualys VMDR is cloud vulnerability management for discovering, prioritising and remediating risks across hybrid IT assets on a per-asset subscription.
Prowler
Open-source cloud security platform for multi-cloud posture, compliance and hardening checks, with optional managed Prowler Cloud plans.
Orca Security
Orca Security is a commercial agentless CNAPP that finds vulnerabilities, misconfigurations, identities and data risks across multicloud workloads.
Cloud SecurityPaid
Trivy
Aqua Security's open-source scanner for vulnerabilities, misconfigurations, secrets and SBOMs across containers, code, Kubernetes and cloud targets.
Auth0
Auth0 by Okta is a customer identity platform for authentication, SSO, MFA and authorization, with a Free plan up to 25,000 monthly active users.
Identity & AccessFreemium
HashiCorp Vault
HashiCorp Vault provides identity-based secrets management for keys, passwords and certificates, with free Community and paid Enterprise or HCP options.
Identity & AccessFreemium
Bitwarden
Open-source password manager with end-to-end encryption, free personal vaults, and paid plans for Premium, Families, Teams and Enterprise.
Microsoft Sentinel
Microsoft Sentinel is Azure's cloud-native SIEM for log analytics, threat detection, investigation and automated SOC response.
Microsoft Entra ID
Microsoft Entra ID (formerly Azure AD) is cloud IAM for workforce SSO, MFA, Conditional Access and hybrid directory management.
Identity & AccessFreemium
Microsoft Defender for Endpoint
Cloud-native Microsoft endpoint protection with EDR, hunting and automated response across Windows, macOS, Linux, mobile and IoT.
Suricata
Suricata is an open-source network IDS, IPS and network security monitoring engine maintained by the Open Information Security Foundation (OISF).