Cybersecurity Software & Tools

Red-teaming suites, prompt injection scanners, LLM guardrails, and model evaluation utilities.

API discovery and posture platforms, API security testing tools, OpenAPI contract auditors, and runtime API protection.

Static source analysis, dynamic scanners, and dependency vulnerability checkers.

Binary analysis and ROP tools for exploit research and compiler-mitigation verification.

CSPM scanners, infrastructure-as-code checkers, and policy-as-code engines for auditing cloud configuration.

Capture-the-flag platforms, vulnerable-by-design applications, and wargames for legal skill practice.

Data loss prevention, data posture management, and sensitive data discovery and classification platforms.

Disk and memory forensics, malware sandboxes, and incident response collection platforms.

Endpoint detection and response agents, XDR platforms, and managed EDR services that detect and contain threats on devices.

Phishing and BEC defenses, API-based inbox security, gateway scanners, and DMARC management.

Coverage-guided mutation engines and stateful protocol testing frameworks.

Compliance automation frameworks, SCAP policy scanners, and risk management platforms.

Decoy services, deception platforms, and canary tokens that detect intruders with high-fidelity alerts.

Secrets managers, identity engines, and access control platforms for managing credentials and privilege.

Container image scanners, Kubernetes benchmark and policy tools, and eBPF runtime security for containerized workloads.

Sandboxes, capability scanners, string deobfuscators, and malware triage platforms.

Android and iOS application analyzers, runtime instrumentation frameworks, and mobile assessment suites.

Packet capture tools, protocol analyzers, and network security monitors for traffic visibility.

Zero trust access, secure web gateways, firewalls, and perimeter enforcement platforms.

Reconnaissance frameworks, attack-surface discovery engines, and public-data enrichment platforms.

Industrial network monitoring, ICS protocol analysis, and OT asset inventory platforms.

Password hash crackers, online credential brute-forcers, and authentication testing utilities.

Intercepting HTTP proxies, security assessment toolkits, and network exploitation frameworks.

Phishing campaign platforms, security awareness testing tools, and credential harvesting simulators.

Port scanners, high-rate network scanners, LAN IP scanners, and ARP discovery tools for mapping live hosts and open services.

Adversary emulation platforms, C2 frameworks, and atomic test libraries for authorized red team operations.

Disassemblers, binary decompilers, and dynamic execution analyzers.

SIEM platforms, SOAR automation, network detection engines, and detection rule frameworks for security operations.

SBOM generators, artifact signing tools, and dependency vulnerability scanners for software supply chain integrity.

Threat intelligence platforms, IOC sharing communities, and STIX/TAXII tooling for collecting and distributing threat data.

Infrastructure scanners, CVE audit engines, container image inspectors, and exposure management platforms.

Wi-Fi auditing, Bluetooth analysis, RFID/NFC research, and software-defined radio (SDR) tools.

Web vulnerability assessment platform and intercepting proxy suite for testing web applications, APIs, and access controls.

Software reverse engineering suite developed by the NSA, offering disassembly, decompilation, and scriptable binary analysis.

Network discovery scanner and port auditor for discovering live hosts, open ports, running services, and OS fingerprints.

Security scanner for container images, file systems, Git repositories, and Kubernetes configurations to detect CVEs.

Open-source SIEM and XDR platform providing endpoint monitoring, log analysis, file integrity checks, and threat detection.

Network packet analyzer and protocol inspection tool for capturing live traffic and debugging network communications in detail.