# ImmunitySec

> ImmunitySec is an independent directory of cybersecurity software and tools, with a curated vulnerability database, and cybersecurity news and intelligence. The platform tracks open-source and commercial security software alongside actively exploited CVE records, defensive post-mortems, and technical security research. All content is written for defensive purposes: remediation, authorized testing, and root-cause analysis. ImmunitySec is not affiliated with Immunity, Inc. founded by Dave Aitel.

## Vulnerability Database Hubs

- [Vulnerability Database](https://www.immunitysec.com/vulnerabilities/): Aggregated database of actively exploited vulnerabilities and CVE records.
- [CVE Database](https://www.immunitysec.com/vulnerabilities/cve/): Full directory of Common Vulnerabilities and Exposures with EPSS scores and CVSS metrics.
- [CISA KEV Catalog](https://www.immunitysec.com/vulnerabilities/kev/): Catalog of Known Exploited Vulnerabilities tracked by CISA with mandatory remediation timelines.

## Security News and Intelligence Hubs

- [News & Intelligence Hub](https://www.immunitysec.com/intel/): Technical analysis of vulnerabilities, threat actor operations, AI security, and defensive engineering.
- [Vulnerability News & CVE Analysis](https://www.immunitysec.com/intel/vulnerabilities/): Technical post-mortems and root-cause breakdowns of high-impact CVEs.
- [Threat Intelligence News & Analysis](https://www.immunitysec.com/intel/threat-intelligence/): Adversary tradecraft, APT campaign tracking, and IOC analysis.
- [AI Security News & Analysis](https://www.immunitysec.com/intel/ai-security/): Research on prompt injection, model guardrails, and agentic system vulnerabilities.
- [Defensive Engineering News & Analysis](https://www.immunitysec.com/intel/defensive-engineering/): Detection engineering rules, incident response guides, and defense playbooks.

## Software and Tool Categories

### Defensive & Operations

- [Application Security Tools](https://www.immunitysec.com/appsec/): Static source analysis (SAST), dynamic scanners (DAST), and code security engines.
- [Cloud Security Tools](https://www.immunitysec.com/cloud-native-security/): CSPM scanners, container and Kubernetes policy engines, and cloud configuration auditing tools.
- [Data Security Software](https://www.immunitysec.com/data-security/): Data loss prevention (DLP), sensitive data discovery, and cryptographic utilities.
- [Digital Forensics](https://www.immunitysec.com/dfir/): Disk imaging, memory analysis, artifact parsing, and timeline reconstruction tools.
- [Email Security Software](https://www.immunitysec.com/email-security/): Anti-phishing gateways, spam filtering engines, and email authentication tools.
- [GRC Software](https://www.immunitysec.com/grc/): Compliance management, risk assessment, and security policy automation tools.
- [Honeypot & Deception Tools](https://www.immunitysec.com/honeypots/): Deception platforms, honeytokens, and decoy services for early intrusion detection.
- [IAM Tools](https://www.immunitysec.com/iam/): Identity governance, privileged access management, and authentication security tools.
- [Malware Analysis Tools](https://www.immunitysec.com/malware-analysis/): Sandboxes, binary triage engines, and behavioral analysis utilities.
- [Network Monitoring Tools](https://www.immunitysec.com/network-monitoring/): Packet capture analyzers, flow monitors, and network visibility platforms.
- [Network Security Tools](https://www.immunitysec.com/network-security/): Firewalls, intrusion prevention systems (IPS), and network perimeter defenses.
- [OT/ICS Security Tools](https://www.immunitysec.com/ot-security/): Industrial control systems, SCADA protocol inspection, and operational technology security tools.
- [SIEM Tools](https://www.immunitysec.com/detection-engineering/): SIEM platforms, EDR agents, SOAR automation, and detection rule engines for security operations.
- [Software Composition Analysis Tools](https://www.immunitysec.com/supply-chain-security/): Dependency vulnerability checkers, SBOM generators, and supply chain security scanners.
- [Threat Intelligence Tools](https://www.immunitysec.com/threat-intelligence/): Threat intelligence platforms (TIP), IOC management systems, and threat feed aggregators.
- [Vulnerability Scanning](https://www.immunitysec.com/vulnerability-scanning/): Vulnerability assessment scanners, exposure management systems, and asset discovery tools.

### Offensive & Testing

- [AI Security Tools](https://www.immunitysec.com/ai-security/): Red-teaming suites, prompt injection scanners, and model evaluation utilities.
- [Binary Exploitation](https://www.immunitysec.com/binary-exploitation/): Binary analysis and ROP tools for exploit research and compiler-mitigation verification.
- [CTF & Practice Labs](https://www.immunitysec.com/ctf-labs/): Wargames, challenge platforms, and practice ranges for security skill development.
- [Fuzzing](https://www.immunitysec.com/fuzzing/): Coverage-guided fuzzers, grammar-based engines, and protocol testing suites.
- [Mobile Security Software](https://www.immunitysec.com/mobile-security/): Android and iOS security testing, static bytecode analyzers, and runtime hooks.
- [Open Source Intelligence Tools](https://www.immunitysec.com/osint/): Reconnaissance frameworks, asset discovery utilities, and public data scrapers.
- [Password Cracking](https://www.immunitysec.com/password-cracking/): Password auditing, hash recovery, and credential testing tools.
- [Penetration Testing Tools](https://www.immunitysec.com/penetration-testing/): Interception proxies, network assessment utilities, and penetration testing frameworks.
- [Phishing Simulation Tools](https://www.immunitysec.com/social-engineering/): Authorized phishing simulation, user security awareness, and credential harvesting assessment platforms.
- [Red Teaming Tools](https://www.immunitysec.com/red-team/): Command and control (C2) frameworks, adversary simulation engines, and post-exploitation utilities.
- [Reverse Engineering](https://www.immunitysec.com/reverse-engineering/): Disassemblers, decompilers, binary analysis frameworks, and dynamic debuggers.
- [Wireless & RF Security](https://www.immunitysec.com/wireless-security/): Wi-Fi auditing tools, Bluetooth scanners, and software-defined radio (SDR) utilities.