Elastic Security
Elastic Security is Elastic’s SIEM and XDR solution for detecting, investigating and responding to threats across endpoints, cloud and security data.
Cybersecurity tools, platforms and training
A curated directory of cybersecurity tools, platforms and training for practitioners, researchers and learners.
Top voted
Splunk
Splunk is a commercial data platform widely used for SIEM and security analytics, helping teams search, detect, investigate and respond to threats.
Nuclei
ProjectDiscovery’s template-driven vulnerability scanner for fast, community-powered checks across web apps, APIs, networks and cloud assets.
NetExec
Open-source network execution tool (nxc), successor to CrackMapExec, for assessing Windows and Active Directory services in authorized engagements.
BloodHound
SpecterOps graph tool that maps Active Directory and Entra ID attack paths so testers can find and validate identity privilege paths in authorized assessments.
Volatility
Volatility is an open-source memory forensics framework for extracting digital artifacts from RAM dumps during incident response and malware analysis.
Ghidra
NSA open-source software reverse-engineering suite for disassembly, decompilation and binary analysis on many processor architectures.
Amass
OWASP Amass maps external attack surface by discovering domains, addresses and related assets through open-source intelligence and active techniques.
Semgrep
Semgrep is a fast, open-source static analysis engine that finds bugs and security issues in code with pattern rules and ready-made rule packs.
Cloudflare
Cloudflare is a global connectivity and security cloud offering CDN, WAF, DDoS protection and Zero Trust access on one network edge.
Application SecurityFreemium
Palo Alto Networks
Palo Alto Networks provides enterprise cybersecurity across next-generation firewalls, cloud security and security operations platforms.
SentinelOne
Commercial AI-native EDR/XDR platform that protects endpoints and extends detection and response across identity, cloud and security operations.
CrowdStrike
CrowdStrike Falcon is a cloud-delivered cybersecurity platform focused on endpoint detection, prevention and response for enterprise environments.
OffSec
Commercial cybersecurity training and certification platform with hands-on labs, learning paths and industry-recognized exams such as OSCP.
Training & LabsPaid
Impacket
Python library and example tools for working with Windows and network protocols such as SMB, MSRPC, Kerberos and LDAP in authorized testing.
Metasploit Framework
Open-source penetration testing framework from Rapid7 with exploits, payloads, auxiliaries and post-exploitation modules for authorized assessments.
Okta
Cloud identity and access platform for workforce and customer SSO, MFA, lifecycle management and related IAM controls.
MobSF
Open-source framework for static and dynamic security testing of Android, iOS and Windows mobile apps via a self-hosted web UI.
Recorded Future
Commercial threat intelligence platform that correlates open-web, dark-web and technical signals to help teams prioritize cyber risk.
VirusTotal
Online multi-engine scanner for analyzing files, URLs, domains and IPs for malware signals, with free public and paid tiers.
Tenable Nessus
Commercial vulnerability scanner from Tenable for discovering, scoring and reporting weaknesses across networks, systems and apps.
Vulnerability ManagementFreemium
1Password
Commercial credential vault and access platform for passwords, passkeys and secrets across individuals, families and organizations.
Aikido Security
Commercial AppSec platform for SAST, SCA, secrets, cloud posture and DAST, with runtime protection and automated remediation.
Application SecurityFreemium
Wiz
Commercial cloud and AI security platform that maps code, cloud and runtime into a security graph to prioritise exploitable risk.
Cloud SecurityPaid