# CyberSecTool

CyberSecTool is a directory and comparison site for cybersecurity tools and companies. We aggregate publicly available information and add editorial commentary. Organic listings are ordered alphabetically and are not scored or ranked. Featured listings are paid placements, boosted above the organic list and clearly labelled "Featured"; being featured never changes the organic listings or the comparisons.

## Buying guides
- [Application Security](https://www.cybersectool.com/guides/application-security): Compare the best application security tools in 2026. SCA, SAST, and open-source alternatives. Language support, CI/CD integration, and pricing compared.
- [Automotive Cybersecurity](https://www.cybersectool.com/guides/automotive-cybersecurity): Best automotive cybersecurity companies in 2026. Compare PCA Cyber Security, Upstream, PlaxidityX, VicOne, Karamba, and C2A on services, platforms, and standards.
- [Cloud Security & CNAPP](https://www.cybersectool.com/guides/cloud-security-cnapp): Compare the best CNAPP vendors and cloud security tools in 2026: Wiz, Prisma Cloud, Orca Security, Aqua, Sysdig, Lacework and more, with agentless scanning, workload protection and pricing side by side.
- [Cyber Resilience Act Compliance](https://www.cybersectool.com/guides/cra-compliance): Compare EU Cyber Resilience Act (CRA) compliance companies in 2026. pi3g, ONEKEY, TUV SUD, SGS, Bureau Veritas, DEKRA. Services, conformity assessment, and standards.
- [Data Security & Governance](https://www.cybersectool.com/guides/data-security): Compare the best data security platforms in 2026. Enterprise DLP, cloud data protection, and data discovery. Classification, compliance, and pricing compared.
- [Email Security](https://www.cybersectool.com/guides/email-security): Compare the best email security platforms in 2026. Cloud email security, AI-powered detection, enterprise gateways, and encryption. Features, detection rates, and pricing compared.
- [Endpoint & EDR](https://www.cybersectool.com/guides/endpoint-edr): Compare the best EDR and endpoint security platforms in 2026. Enterprise EDR, XDR, and SMB alternatives. Detection rates, response automation, and pricing compared.
- [Firewall & NGFW](https://www.cybersectool.com/guides/firewall-ngfw): Compare the best firewall and NGFW platforms in 2026. Enterprise next-gen firewalls, cloud-native firewalls, and SMB alternatives. Throughput, features, and pricing compared.
- [Identity & Access Management](https://www.cybersectool.com/guides/identity-access-management): Best identity and access management (IAM) tools in 2026. Compare Okta, Microsoft Entra ID, Auth0, JumpCloud, Keycloak, and more for SSO, MFA, and user lifecycle management.
- [Managed Security Service Providers](https://www.cybersectool.com/guides/mssps): Compare the top MSSPs and MDR providers in 2026. Arctic Wolf, Secureworks, Red Canary, Expel, eSentire, Critical Start. Services, EDR-neutrality, and delivery models.
- [Network Detection & Response (NDR)](https://www.cybersectool.com/guides/ndr): Compare network detection and response (NDR) tools and vendors: Corelight, Darktrace, Vectra AI, ExtraHop, Stamus Networks, Arista NDR, and Fidelis. Capabilities, deployment, and sources for each.
- [PCI PTS Compliance Testing Companies](https://www.cybersectool.com/guides/payment-device-security-testing): PCI PTS compliance testing companies in 2026: PCI Recognized evaluation laboratories and offensive security firms for payment device pre- and post-compliance testing, compared.
- [Penetration Testing Firms](https://www.cybersectool.com/guides/penetration-testing-firms): Compare the top penetration testing firms in 2026. Mandiant, NCC Group, Bishop Fox, Trail of Bits, IOActive, Praetorian. Services, specialisms, and delivery models.
- [Privileged Access Management](https://www.cybersectool.com/guides/privileged-access-management): Best privileged access management (PAM) tools in 2026. Compare CyberArk, BeyondTrust, Delinea, Teleport, StrongDM, HashiCorp Boundary, and more for session recording, JIT access, and credential vaulting.
- [Product Threat Intelligence Providers](https://www.cybersectool.com/guides/product-threat-intelligence): Product threat intelligence providers in 2026: vulnerability intelligence, SBOM validation, and product-specific threat monitoring for automotive, payment, and embedded device makers.
- [SASE & Zero Trust](https://www.cybersectool.com/guides/sase-zero-trust): Compare the best SASE and zero trust vendors in 2026: Zscaler, Palo Alto Prisma Access, Netskope, Cisco, Fortinet, Cloudflare and Cato, with ZTNA, global coverage and pricing side by side.
- [Secrets Management](https://www.cybersectool.com/guides/secrets-management): Compare secrets management tools, solutions and software in 2026: HashiCorp Vault, AWS Secrets Manager, Doppler, Infisical, CyberArk Conjur and more, with pricing, open-source and enterprise options side by side.
- [Security Data Pipeline](https://www.cybersectool.com/guides/security-data-pipeline): Compare the best security data pipeline tools in 2026. Enterprise observability pipelines, cloud-native streaming, and open-source alternatives. Throughput, cost savings, and integrations compared.
- [SIEM & Security Analytics](https://www.cybersectool.com/guides/siem): Compare the best SIEM platforms in 2026. Enterprise SIEM, cloud-native analytics, and open-source alternatives. Detection, scalability, and pricing compared.
- [Vulnerability Management](https://www.cybersectool.com/guides/vulnerability-management): Compare the best vulnerability management platforms in 2026. Enterprise scanners, cloud-native tools, and open-source alternatives. Coverage, accuracy, and pricing compared.

## Best-of lists
- [Best CASB for Unified SASE](https://www.cybersectool.com/best/sase-casb-platforms): Best CASB for unified SASE in 2026. Compare Netskope, Zscaler, Skyhigh, Palo Alto, and Cisco for shadow IT discovery, inline DLP, and app risk scoring.
- [Best Cloud-Native SWG](https://www.cybersectool.com/best/cloud-native-swg): Best cloud-native secure web gateways in 2026. Replace legacy proxies with cloud-delivered web security ranked by performance and threat detection.
- [Best Code Security & Secret Scanning Tools](https://www.cybersectool.com/best/code-security-scanning-tools): Best code security and secret scanning tools in 2026. Compare Semgrep, SonarQube, Snyk, GitHub Advanced Security, and Checkmarx for SAST, SCA, and secret detection.
- [Best CrowdStrike Alternatives](https://www.cybersectool.com/best/crowdstrike-alternatives): Compare the best CrowdStrike alternatives in 2026. Expert-ranked endpoint protection platforms evaluated on detection, deployment, pricing, and support.
- [Best CrowdStrike Alternatives 2026](https://www.cybersectool.com/best/crowdstrike-alternatives-2026): Updated for 2026: the best CrowdStrike alternatives ranked by detection, price, and deployment. Expert picks for enterprise endpoint protection.
- [Best CrowdStrike Alternatives for Endpoint Deployment](https://www.cybersectool.com/best/crowdstrike-alternatives-endpoint-deployment): CrowdStrike alternatives ranked by deployment ease. Find endpoint protection that deploys faster with less operational overhead across all platforms.
- [Best CrowdStrike Alternatives for Enterprise EDR](https://www.cybersectool.com/best/crowdstrike-alternatives-enterprise-edr): Find the best enterprise EDR alternatives to CrowdStrike Falcon. Ranked by telemetry depth, scalability, SIEM integration, and large-scale deployment capabilities.
- [Best CrowdStrike Alternatives for Incident Response](https://www.cybersectool.com/best/crowdstrike-alternatives-incident-response): Top CrowdStrike alternatives for incident response and forensics. Evaluated on containment speed, forensic depth, remediation automation, and IR workflow support.
- [Best CrowdStrike Alternatives for SMBs](https://www.cybersectool.com/best/crowdstrike-alternatives-smb): Best CrowdStrike alternatives for SMBs in 2026. Compare cost-effective endpoint protection platforms with simpler deployment, MSP support, and SMB-friendly pricing.
- [Best CrowdStrike Alternatives With Cheaper Licensing](https://www.cybersectool.com/best/crowdstrike-alternatives-cheaper-licensing): Find CrowdStrike alternatives with cheaper licensing. Ranked by value: same detection quality at 20-60% lower cost with fewer add-on charges.
- [Best CrowdStrike Competitors in Independent Tests](https://www.cybersectool.com/best/crowdstrike-competitors-independent-tests): CrowdStrike competitors ranked by independent test results. See which EDR platforms beat CrowdStrike in AV-TEST, SE Labs, and MITRE ATT&CK evaluations.
- [Best CyberArk Alternatives With Faster Deployment](https://www.cybersectool.com/best/cyberark-alternatives-faster-deployment): CyberArk alternatives ranked by deployment speed and support quality. Find PAM solutions that deploy in days instead of months with simpler architecture.
- [Best Email Data Loss Prevention Solutions](https://www.cybersectool.com/best/email-dlp-solutions): Compare the best email DLP solutions in 2026. Expert-ranked platforms for preventing data loss through email with policy controls and content inspection.
- [Best Email Encryption for HIPAA Compliance](https://www.cybersectool.com/best/email-encryption-hipaa-compliance): Compare the best email encryption tools for HIPAA compliance in 2026. Expert-ranked platforms evaluated on BAA availability, encryption method, audit logging, and ease of use.
- [Best Email Security Tools](https://www.cybersectool.com/best/best-email-security-tools): The best email security tools in 2026: Proofpoint, Mimecast, Abnormal Security, Microsoft Defender for Office 365, IRONSCALES, Barracuda Email Security and more, compared on detection, deployment and pricing.
- [Best Firewalls for Remote Branch Offices](https://www.cybersectool.com/best/firewalls-remote-branch-offices): Best firewalls for remote branch offices in 2026. Ranked by zero-touch deployment, SD-WAN integration, centralized management, and branch security features.
- [Best open-source application security tools](https://www.cybersectool.com/best/best-open-source-application-security-tools): Best open-source application security tools: Semgrep, SonarQube, Trivy. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source IAM tools](https://www.cybersectool.com/best/best-open-source-identity-access-management-tools): Best open-source IAM tools: authentik, Bitwarden (Business), Keycloak. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source PAM tools](https://www.cybersectool.com/best/best-open-source-privileged-access-management-tools): Best open-source PAM tools: CyberArk Conjur, HashiCorp Boundary, Teleport. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source secrets management tools](https://www.cybersectool.com/best/best-open-source-secrets-management-tools): Best open-source secrets management tools: Bitwarden (Business), cert-manager, CyberArk Conjur, External Secrets Operator, and more. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source security data pipeline tools](https://www.cybersectool.com/best/best-open-source-security-data-pipeline-tools): Best open-source security data pipeline tools: Fluentd, Tenzir, Vector. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source SIEM tools](https://www.cybersectool.com/best/best-open-source-siem-tools): Best open-source SIEM tools: Elastic Security, Graylog, Wazuh. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best open-source vulnerability management tools](https://www.cybersectool.com/best/best-open-source-vulnerability-management-tools): Best open-source vulnerability management tools: Greenbone OpenVAS, Nuclei, Trivy. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [Best Palo Alto Alternatives for SMB Endpoint Security](https://www.cybersectool.com/best/palo-alto-alternatives-smb-endpoint): Top Palo Alto alternatives for SMB endpoint security. Simpler, more affordable endpoint protection ranked for small and midsize businesses.
- [Best Platforms for Eliminating Static Credentials in Kubernetes](https://www.cybersectool.com/best/kubernetes-secrets-platforms): Best platforms for secure Kubernetes secrets management in 2026. Eliminate static credentials with dynamic secrets, workload identity, and zero-trust access.
- [Best SASE Platforms for Government & FedRAMP](https://www.cybersectool.com/best/sase-government-fedramp): Best SASE platforms for government and FedRAMP in 2026. Compare iboss, Zscaler, Palo Alto, Cisco, and Cloudflare for FedRAMP authorization and federal zero trust.
- [Best Secret Scanning Tools](https://www.cybersectool.com/best/secret-scanning-tools): Compare the best secret scanning tools in 2026. Ranked by detection accuracy, CI/CD integration, false positive rates, and remediation capabilities.
- [Best Secrets Management for Developers](https://www.cybersectool.com/best/secrets-management-developers): Best secrets management tools for developers in 2026. Ranked by developer experience, SDK quality, local dev integration, and workflow simplicity.
- [Best Secrets Management Tools](https://www.cybersectool.com/best/secrets-management-tools): Compare the best secrets management tools in 2026. Expert-ranked platforms for securing API keys, credentials, and certificates across your organization.
- [Best Secrets Management Tools for DevOps](https://www.cybersectool.com/best/secrets-management-devops): Best secrets management tools for DevOps teams in 2026. Ranked by CI/CD integration, Kubernetes support, IaC compatibility, and developer workflow.
- [Best Secure Web Gateways for Unified SASE](https://www.cybersectool.com/best/secure-web-gateways): Compare the best secure web gateways for SASE in 2026. Ranked by cloud-native architecture, ZTNA integration, DLP, and unified platform capabilities.
- [Best Security Data Pipelines](https://www.cybersectool.com/best/best-security-data-pipelines): The best security data pipeline tools and vendors in 2026: Cribl, Datadog Observability Pipelines, Mezmo, Observo AI, Realm.Security, Vector and more, compared on cost, routing and deployment.
- [Best UEBA Tools for SOC Using Splunk](https://www.cybersectool.com/best/ueba-tools-soc-splunk): Top UEBA tools for Splunk-based SOCs. Ranked by Splunk integration, behavioral analytics, insider threat detection, and SOC workflow enhancement.
- [Best Unified SASE Platforms With Zero Trust](https://www.cybersectool.com/best/sase-platforms-zero-trust): Best unified SASE platforms with zero trust in 2026. Compare vendors for SD-WAN, SWG, CASB, ZTNA, and FWaaS in a single cloud-delivered platform.
- [Best Wiz Alternatives for CSPM](https://www.cybersectool.com/best/wiz-alternatives-cspm): Top Wiz alternatives for cloud security posture management. Compare CSPM platforms ranked by agentless scanning, compliance, and multicloud coverage.
- [Best XDR Platforms](https://www.cybersectool.com/best/xdr-platforms): Compare the best XDR platforms in 2026. Expert-ranked alternatives to CrowdStrike and Palo Alto for unified detection, investigation, and response.
- [Best Zero Trust Network Access (ZTNA) for SASE](https://www.cybersectool.com/best/sase-ztna-platforms): Best ZTNA for SASE in 2026. Compare Zscaler, Cloudflare, Palo Alto, Cato Networks, and Netskope for identity-aware access, micro-segmentation, and VPN replacement.
- [FedRAMP-authorized IAM tools](https://www.cybersectool.com/best/fedramp-authorized-identity-access-management-tools): FedRAMP-authorized IAM tools: Cloudflare Access, Duo Security, Microsoft Entra ID, Okta Workforce Identity, and more. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.
- [FedRAMP-authorized PAM tools](https://www.cybersectool.com/best/fedramp-authorized-privileged-access-management-tools): FedRAMP-authorized PAM tools: BeyondTrust, BeyondTrust Password Safe, CyberArk Privilege Cloud, Saviynt Privileged Access. Compared on capabilities, deployment, and sources. Neutral directory, no rankings.

## Glossary
- [CASB. Cloud Access Security Broker](https://www.cybersectool.com/definitions/casb): A security policy enforcement point placed between cloud service consumers and cloud service providers to monitor activity, enforce security policies, and prote
- [CSPM. Cloud Security Posture Management](https://www.cybersectool.com/definitions/cspm): A category of security tools that continuously monitor cloud infrastructure configurations to identify misconfigurations, compliance violations, and security ri
- [CNAPP. Cloud-Native Application Protection Platform](https://www.cybersectool.com/definitions/cnapp): An integrated security platform that combines cloud workload protection, cloud security posture management, infrastructure-as-code scanning, and runtime protect
- [Cybersecurity Compliance Frameworks](https://www.cybersectool.com/definitions/compliance-frameworks): Structured sets of guidelines, standards, and best practices that organizations follow to manage cybersecurity risk, protect data, and meet regulatory requireme
- [DLP. Data Loss Prevention](https://www.cybersectool.com/definitions/dlp): A set of tools and processes designed to detect and prevent the unauthorized transmission of sensitive data outside an organization's network, endpoints, or clo
- [Email Security](https://www.cybersectool.com/definitions/email-security): The technologies and practices designed to protect email communications from threats including phishing, business email compromise (BEC), malware, spam, and dat
- [EDR. Endpoint Detection and Response](https://www.cybersectool.com/definitions/edr): A security solution that continuously monitors endpoint devices (laptops, servers, workstations) to detect, investigate, and respond to cyber threats using beha
- [XDR. Extended Detection and Response](https://www.cybersectool.com/definitions/xdr): A unified security platform that integrates detection and response across endpoints, networks, cloud workloads, email, and identity to provide correlated threat
- [IAM. Identity and Access Management](https://www.cybersectool.com/definitions/iam): A framework of policies and technologies that ensures the right individuals have appropriate access to technology resources, encompassing authentication, author
- [IGA. Identity Governance and Administration](https://www.cybersectool.com/definitions/iga): A framework of policies and technologies that manages digital identities and governs access rights, including access request workflows, access certification cam
- [IR. Incident Response](https://www.cybersectool.com/definitions/incident-response): The organized approach to preparing for, detecting, containing, eradicating, and recovering from cybersecurity incidents, guided by a formal incident response p
- [MITRE ATT&CK Framework](https://www.cybersectool.com/definitions/mitre-attack): A globally accessible, curated knowledge base of adversary tactics and techniques based on real-world observations, used as a common language for describing and
- [MFA. Multi-Factor Authentication](https://www.cybersectool.com/definitions/mfa): A security mechanism that requires users to provide two or more independent verification factors. Something they know (password), something they have (phone/key
- [NDR. Network Detection and Response](https://www.cybersectool.com/definitions/ndr): Network detection and response (NDR) is a category of security tools that monitor network traffic to detect, investigate, and respond to threats, using behavior
- [NGFW. Next-Generation Firewall](https://www.cybersectool.com/definitions/ngfw): A network security device that combines traditional firewall capabilities (packet filtering, stateful inspection, NAT) with advanced features including applicat
- [Penetration Testing](https://www.cybersectool.com/definitions/pentesting): A simulated cyberattack against an organization's systems, networks, or applications conducted by authorized security professionals to identify exploitable vuln
- [PAM. Privileged Access Management](https://www.cybersectool.com/definitions/pam): A security discipline and set of tools that control, monitor, and audit access to critical systems by privileged users such as system administrators, database a
- [Ransomware](https://www.cybersectool.com/definitions/ransomware): A type of malicious software that encrypts an organization's data or locks systems and demands payment (ransom) in exchange for the decryption key or restored a
- [Secrets Management](https://www.cybersectool.com/definitions/secrets-management): The practice and tooling for securely storing, accessing, rotating, and auditing sensitive credentials such as API keys, database passwords, certificates, and e
- [SASE. Secure Access Service Edge](https://www.cybersectool.com/definitions/sase): A cloud-delivered architecture that converges wide-area networking (SD-WAN) and network security services (SWG, CASB, ZTNA, FWaaS) into a single, globally distr
- [Security Data Pipeline](https://www.cybersectool.com/definitions/data-pipeline): Infrastructure for collecting, transforming, routing, and delivering security telemetry (logs, metrics, traces) from sources to destinations like SIEMs, data la
- [SIEM. Security Information and Event Management](https://www.cybersectool.com/definitions/siem): A platform that aggregates, correlates, and analyzes security event data from across an organization's IT infrastructure to detect threats, support incident res
- [SOAR. Security Orchestration, Automation and Response](https://www.cybersectool.com/definitions/soar): A category of security tools that combine incident response case management, workflow automation, and threat intelligence aggregation to help security teams res
- [SBOM. Software Bill of Materials](https://www.cybersectool.com/definitions/sbom): A comprehensive inventory of all components, libraries, and dependencies that make up a software product, analogous to a list of ingredients on food packaging, 
- [SCA. Software Composition Analysis](https://www.cybersectool.com/definitions/sca): A security practice and toolset that identifies open-source and third-party components in a codebase, detects known vulnerabilities in those dependencies, and m
- [SAST. Static Application Security Testing](https://www.cybersectool.com/definitions/sast): A method of analyzing application source code, bytecode, or binaries for security vulnerabilities without executing the program, typically integrated into the d
- [TI. Threat Intelligence](https://www.cybersectool.com/definitions/threat-intelligence): The evidence-based knowledge about existing or emerging cyber threats, including context about threat actors, their motivations, capabilities, and indicators of
- [VM. Vulnerability Management](https://www.cybersectool.com/definitions/vulnerability-management): The continuous process of identifying, evaluating, prioritizing, and remediating security vulnerabilities across an organization's IT assets including software,
- [ZTA. Zero Trust Architecture](https://www.cybersectool.com/definitions/zero-trust): A security model based on the principle of "never trust, always verify" that requires continuous authentication and authorization for every user, device, and ne

## Tools
- [1Password (Business)](https://www.cybersectool.com/tools/1password-business): Secrets automation and password management for teams and CI/CD
- [Abnormal Security](https://www.cybersectool.com/tools/abnormal-security): AI-powered email security platform specializing in behavioral detection of social engineering attacks
- [Acronis Cyber Protect](https://www.cybersectool.com/tools/acronis): Integrated backup, disaster recovery, and AI-based endpoint security (anti-ransomware, EDR) in one platform.
- [Acronis Email Security](https://www.cybersectool.com/tools/acronis-email-security): Acronis Cyber Protect Cloud with Acronis Email Security protects Microsoft 365, Google Workspace, and other mailboxes against phishing, BEC, account takeover, malware, and zero-day threats, integrated with backup, endpoint protection, and DLP.
- [Akeyless](https://www.cybersectool.com/tools/akeyless): SaaS-based zero-knowledge secrets management platform
- [Aqua Security](https://www.cybersectool.com/tools/aqua-security): Cloud-native security platform specializing in container, Kubernetes, and serverless protection
- [Arctic Wolf](https://www.cybersectool.com/tools/arctic-wolf): Managed security operations platform with concierge-delivered vulnerability management services
- [Arista NDR](https://www.cybersectool.com/tools/arista-ndr): Agentless, AI-assisted network detection and response for campus, data center and cloud
- [Auth0](https://www.cybersectool.com/tools/auth0): Developer-first CIAM with SDKs and docs
- [authentik](https://www.cybersectool.com/tools/authentik): Open-source identity provider with modern UI and protocol support
- [AWS Secrets Manager](https://www.cybersectool.com/tools/aws-secrets-manager): Native AWS secrets management service with automatic rotation
- [Azure Data Explorer](https://www.cybersectool.com/tools/azure-data-explorer): Microsoft's fast data analytics service for real-time analysis of streaming security data
- [Azure Key Vault](https://www.cybersectool.com/tools/azure-key-vault): Microsoft Azure's managed secrets, keys, and certificate service
- [Barracuda CloudGen Firewall](https://www.cybersectool.com/tools/barracuda-cloudgen): Cloud-optimized next-generation firewall with native multi-cloud deployment and integrated SD-WAN
- [Barracuda Email Security](https://www.cybersectool.com/tools/barracuda-email-security): Email threat protection platform available as gateway appliance or cloud service
- [BeyondTrust](https://www.cybersectool.com/tools/beyondtrust): Unified privilege management and secure remote access platform
- [BeyondTrust Password Safe](https://www.cybersectool.com/tools/beyondtrust-password-safe): Enterprise PAM with strong Unix/Linux/Mac coverage
- [BigID](https://www.cybersectool.com/tools/bigid): Data intelligence platform using ML for discovery, classification, and privacy management
- [Bishop Fox](https://www.cybersectool.com/tools/bishop-fox): Offensive security firm pairing high-end penetration testing with Cosmos, a continuous attack-surface management platform.
- [Bitdefender GravityZone](https://www.cybersectool.com/tools/bitdefender): Unified endpoint security with top-rated protection efficacy and low performance impact
- [Bitwarden (Business)](https://www.cybersectool.com/tools/bitwarden-business): Open-source enterprise password manager with self-hosting and transparent security
- [Black Duck](https://www.cybersectool.com/tools/black-duck): Enterprise SCA platform with deep open-source detection, license compliance, and code origin analysis
- [Bureau Veritas](https://www.cybersectool.com/tools/bureau-veritas): Global TIC group whose cybersecurity unit delivers end-to-end CRA compliance, RED testing, penetration testing, and conformity assessment for connected products.
- [Cato Networks](https://www.cybersectool.com/tools/cato-networks): Single-vendor cloud-native SASE platform with private global backbone and converged architecture
- [cert-manager](https://www.cybersectool.com/tools/cert-manager): Kubernetes certificate controller supporting Let's Encrypt, Vault, and more
- [CeTu](https://www.cybersectool.com/tools/cetu): AI-powered security data pipeline for intelligent log ingestion, enrichment, and routing at scale
- [Check Point CloudGuard](https://www.cybersectool.com/tools/check-point-cloudguard): Cloud security posture and network security platform backed by Check Point's threat prevention expertise
- [Check Point Quantum](https://www.cybersectool.com/tools/check-point-quantum): Enterprise network security gateway with ThreatCloud AI intelligence and Maestro hyperscale orchestration
- [Checkmarx](https://www.cybersectool.com/tools/checkmarx): Enterprise application security platform with deep SAST, SCA, DAST, and supply chain security
- [Cisco Firepower](https://www.cybersectool.com/tools/cisco-firepower): Cisco's next-generation firewall with Talos threat intelligence and deep network infrastructure integration
- [Cisco Secure Access](https://www.cybersectool.com/tools/cisco-secure-access): Cisco's unified SASE platform converging Umbrella, Duo, and Meraki into cloud-delivered security
- [Cisco Secure Email](https://www.cybersectool.com/tools/cisco-secure-email): Enterprise email security gateway with Cisco Talos threat intelligence integration
- [Cloudflare Access](https://www.cybersectool.com/tools/cloudflare-access): Zero trust network access that replaces VPNs with identity-aware policies
- [Cloudflare Zero Trust](https://www.cybersectool.com/tools/cloudflare-zero-trust): Developer-friendly zero trust platform built on Cloudflare's global Anycast network
- [Corelight](https://www.cybersectool.com/tools/corelight): Open NDR platform built on the open-source Zeek network monitoring framework
- [Cribl](https://www.cybersectool.com/tools/cribl): Security data pipeline platform for routing, reducing, and transforming observability data
- [Critical Start](https://www.cybersectool.com/tools/critical-start): MDR provider built around its Trusted Behavior Registry and MOBILESOC app, delivering managed detection across multiple EDR, XDR, and SIEM platforms.
- [CrowdStrike](https://www.cybersectool.com/tools/crowdstrike): Cloud-native endpoint protection platform with AI-powered threat detection
- [CrowdStrike Falcon Spotlight](https://www.cybersectool.com/tools/crowdstrike-falcon-spotlight): EDR-integrated scanless vulnerability assessment built on the CrowdStrike Falcon platform
- [CyberArk](https://www.cybersectool.com/tools/cyberark): Enterprise privileged access management and identity security platform
- [CyberArk Conjur](https://www.cybersectool.com/tools/cyberark-conjur): Enterprise privileged access and secrets management platform
- [CyberArk Privilege Cloud](https://www.cybersectool.com/tools/cyberark-privilege-cloud): Enterprise PAM delivered as a SaaS
- [Cybereason](https://www.cybersectool.com/tools/cybereason): AI-driven EDR with MalOp behavioral attack detection
- [Cyera](https://www.cybersectool.com/tools/cyera): AI-powered data security platform providing agentless data discovery, classification, and risk assessment
- [Darktrace](https://www.cybersectool.com/tools/darktrace): AI-driven cyber defense using self-learning technology
- [Dashlane (Business)](https://www.cybersectool.com/tools/dashlane-business): Business password management with built-in VPN, phishing protection, and SSO integration
- [Datadog Observability Pipelines](https://www.cybersectool.com/tools/datadog-observability-pipelines): Managed observability pipeline for routing and transforming telemetry data at scale
- [Datadog Security](https://www.cybersectool.com/tools/datadog-security): Unified security and observability platform with cloud SIEM and posture management
- [DEKRA](https://www.cybersectool.com/tools/dekra): Major TIC organization offering CRA readiness, security evaluation, and certification, with EUCC accreditation and CRA notified-body status from June 2026.
- [Delinea](https://www.cybersectool.com/tools/delinea): Cloud-ready PAM platform built on Secret Server and privilege management
- [Delinea Secret Server](https://www.cybersectool.com/tools/delinea-secret-server): Enterprise password and privileged credential vault
- [Digital Guardian](https://www.cybersectool.com/tools/digital-guardian): Data-centric security platform with deep endpoint DLP and data visibility across enterprise environments
- [Doppler](https://www.cybersectool.com/tools/doppler): Developer-first universal secrets management platform
- [Duo Security](https://www.cybersectool.com/tools/duo-security): Cisco's MFA and zero trust access platform known for ease of deployment
- [Echoworx](https://www.cybersectool.com/tools/echoworx): Enterprise email encryption platform with seven delivery methods and brandable portals
- [Egress](https://www.cybersectool.com/tools/egress): Adaptive, AI-driven email encryption that adjusts protection based on risk
- [Elastic Security](https://www.cybersectool.com/tools/elastic-security): Open-source SIEM and security analytics built on the ELK Stack
- [Ermetic](https://www.cybersectool.com/tools/ermetic): Cloud identity security platform specializing in CIEM and entitlement management, now part of Tenable
- [eSentire](https://www.cybersectool.com/tools/esentire): Canadian MDR pioneer delivering 24/7 SOC services on the Atlas security operations platform, with strong financial-services and legal-vertical specialisation.
- [ESET PROTECT](https://www.cybersectool.com/tools/eset-protect): Lightweight multilayered endpoint security with 30+ years of threat research
- [Exabeam](https://www.cybersectool.com/tools/exabeam): Behavioral analytics SIEM with automated investigation and response
- [Expel](https://www.cybersectool.com/tools/expel): Vendor-neutral MDR founded by former Mandiant leaders, known for transparent operations and an API-only bring-your-own-tech model.
- [External Secrets Operator](https://www.cybersectool.com/tools/external-secrets-operator): K8s operator that syncs secrets from external stores into Kubernetes Secrets
- [ExtraHop](https://www.cybersectool.com/tools/extrahop): Cloud-native NDR with line-rate network traffic analysis
- [Fidelis Network](https://www.cybersectool.com/tools/fidelis-network): Network detection and response component of the Fidelis Elevate XDR platform
- [Finite State](https://www.cybersectool.com/tools/finite-state): AI-native Product Security OS analyzing firmware and binaries across connected devices, with exploit-based threat prioritization.
- [Fluentd](https://www.cybersectool.com/tools/fluentd): Open-source unified data collector and log aggregator from the CNCF ecosystem
- [Forcepoint DLP](https://www.cybersectool.com/tools/forcepoint-dlp): Enterprise DLP platform with risk-adaptive protection and multi-channel data loss prevention
- [ForgeRock](https://www.cybersectool.com/tools/forgerock): Enterprise identity platform with AI-driven orchestration for complex deployments
- [Fortinet FortiGate](https://www.cybersectool.com/tools/fortinet-fortigate): Integrated network security platform with ASIC-accelerated performance and Security Fabric ecosystem
- [Fortinet FortiSASE](https://www.cybersectool.com/tools/fortinet-fortisase): Converged SASE platform powered by FortiOS with competitive pricing and integrated SD-WAN
- [GitHub Advanced Security](https://www.cybersectool.com/tools/github-advanced-security): GitHub-native security scanning with CodeQL SAST, secret scanning, and Dependabot dependency management
- [Google Cloud Secret Manager](https://www.cybersectool.com/tools/gcp-secret-manager): GCP-native secrets storage with versioning and audit
- [Graylog](https://www.cybersectool.com/tools/graylog): Open-source log management and SIEM platform with intuitive analytics
- [Greenbone OpenVAS](https://www.cybersectool.com/tools/greenbone-openvas): The most widely used open-source vulnerability scanner with 100,000+ network vulnerability tests
- [HashiCorp Boundary](https://www.cybersectool.com/tools/hashicorp-boundary): Session broker from HashiCorp, pairs with Vault for JIT credential injection
- [HashiCorp Vault](https://www.cybersectool.com/tools/hashicorp-vault): Industry-standard open-source secrets management platform
- [IBM QRadar](https://www.cybersectool.com/tools/ibm-qradar): AI-powered enterprise SIEM with automated threat detection and investigation
- [iboss](https://www.cybersectool.com/tools/iboss): Cloud-native zero trust platform with FedRAMP authorization and competitive mid-market pricing
- [Infisical](https://www.cybersectool.com/tools/infisical): Open-source end-to-end encrypted secrets management for teams
- [IOActive, Inc.](https://www.cybersectool.com/tools/ioactive): Independent global research-driven security consultancy specialising in full-stack, hardware, embedded, and critical-infrastructure testing.
- [IRONSCALES](https://www.cybersectool.com/tools/ironscales): AI-powered anti-phishing platform with crowdsourced threat intelligence
- [JumpCloud](https://www.cybersectool.com/tools/jumpcloud): All-in-one directory, SSO, and device management for SMBs
- [Juniper SRX](https://www.cybersectool.com/tools/juniper-srx): High-performance security gateway with advanced routing and Junos OS networking heritage
- [Keeper (Business)](https://www.cybersectool.com/tools/keeper-business): Zero-knowledge enterprise password and secrets management with dark web monitoring
- [Keycloak](https://www.cybersectool.com/tools/keycloak): A widely used open-source IAM platform, backed by Red Hat
- [KUMO](https://www.cybersectool.com/tools/kumo-domain-recon): Open-source domain reconnaissance and OSINT framework that runs 26 parallel scanning modules against a target domain.
- [Lacework](https://www.cybersectool.com/tools/lacework): Data-driven cloud security platform using behavioral analytics for automated threat detection
- [LastPass (Business)](https://www.cybersectool.com/tools/lastpass-business): Widely adopted enterprise password management with extensive SSO and MFA integration
- [Lepide Data Security Platform](https://www.cybersectool.com/tools/lepide): Unstructured data security, access governance, auditing, threat detection and DSPM across AD, M365 and file servers.
- [LogRhythm](https://www.cybersectool.com/tools/logrhythm): Unified SIEM platform with threat lifecycle management and built-in SOAR
- [LuxSci](https://www.cybersectool.com/tools/luxsci): Combined HIPAA-compliant email hosting and encryption with multiple delivery methods
- [ManageEngine PAM360](https://www.cybersectool.com/tools/manageengine-pam360): Mid-market PAM from ManageEngine at a much lower price point than the leaders
- [Mandiant (part of Google Cloud)](https://www.cybersectool.com/tools/mandiant): Elite incident response and offensive security consultancy operating as the threat-intelligence arm of Google Cloud Security.
- [Medcrypt](https://www.cybersectool.com/tools/medcrypt): Product Security Intelligence Platform purpose-built for medical device manufacturers.
- [Mend.io](https://www.cybersectool.com/tools/mend-io): Open-source security and license compliance platform with comprehensive SCA and supply chain risk management
- [Mezmo](https://www.cybersectool.com/tools/mezmo): Log management and observability pipeline platform with intelligent data routing
- [Microsoft Defender for Endpoint](https://www.cybersectool.com/tools/microsoft-defender): Enterprise endpoint protection deeply integrated with Microsoft 365 security stack
- [Microsoft Defender for Office 365](https://www.cybersectool.com/tools/microsoft-defender-office-365): Microsoft's native email security for Microsoft 365 with XDR integration
- [Microsoft Defender Vulnerability Management](https://www.cybersectool.com/tools/microsoft-defender-vulnerability-management): Microsoft's built-in vulnerability management integrated with Defender for Endpoint
- [Microsoft Entra ID](https://www.cybersectool.com/tools/microsoft-entra-id): Microsoft's cloud IAM, bundled with M365 and Azure
- [Microsoft Purview](https://www.cybersectool.com/tools/microsoft-purview): Microsoft unified data governance and compliance platform with deep M365 integration
- [Microsoft Sentinel](https://www.cybersectool.com/tools/microsoft-sentinel): Cloud-native Azure SIEM with AI-powered detection and automated response
- [Mimecast](https://www.cybersectool.com/tools/mimecast): Cloud email security platform with threat protection, archiving, and continuity
- [NCC Group](https://www.cybersectool.com/tools/ncc-group): FTSE 250 global cybersecurity and software resilience firm offering technical assurance, managed detection, and incident response.
- [Netskope](https://www.cybersectool.com/tools/netskope): Cloud-native SASE platform with CASB and granular SaaS visibility
- [Netwrix](https://www.cybersectool.com/tools/netwrix): Data security and auditing platform for change tracking, compliance, and user behavior monitoring
- [Nuclei](https://www.cybersectool.com/tools/nuclei): Fast, template-based open-source vulnerability scanner with 8,000+ community-contributed detection templates
- [Observo AI](https://www.cybersectool.com/tools/observo-ai): AI-powered security data pipeline for intelligent data optimization and cost reduction
- [Okta Workforce Identity](https://www.cybersectool.com/tools/okta): Cloud IAM with the broadest integration catalog
- [One Identity](https://www.cybersectool.com/tools/one-identity): Unified identity security platform with PAM and governance
- [One Identity Safeguard](https://www.cybersectool.com/tools/one-identity-safeguard): Enterprise PAM from Quest Software, hardened appliance deployment
- [ONEKEY](https://www.cybersectool.com/tools/onekey): European product-cybersecurity platform automating SBOM generation, vulnerability management, and CRA compliance for connected-device makers.
- [OneLogin](https://www.cybersectool.com/tools/onelogin): Mid-market cloud IAM at a lower price point than Okta
- [Orca Security](https://www.cybersectool.com/tools/orca-security): Agentless cloud security platform using SideScanning technology for full-stack visibility
- [Palo Alto Cortex XDR](https://www.cybersectool.com/tools/cortex-xdr): XDR platform integrating endpoint, network, and cloud data from Palo Alto ecosystem
- [Palo Alto Networks](https://www.cybersectool.com/tools/paloalto): Enterprise next-generation firewall platform with advanced threat prevention, application visibility, and centralized management
- [Palo Alto Prisma Access](https://www.cybersectool.com/tools/palo-alto-prisma-access): Enterprise SASE platform extending Palo Alto's next-gen firewall to cloud-delivered security
- [Paubox](https://www.cybersectool.com/tools/paubox): HIPAA-compliant email encryption built for healthcare with seamless delivery
- [PCA Cyber Security](https://www.cybersectool.com/tools/pca-cyber-security): Offensive automotive and embedded security: vehicle penetration testing, threat intelligence, and product SOC monitoring
- [PCA Cyber Security](https://www.cybersectool.com/tools/pca): Payment-device and embedded penetration testing firm; tests payment terminals beyond PCI PTS certification.
- [pfSense](https://www.cybersectool.com/tools/pfsense): Open-source firewall and router platform based on FreeBSD with zero licensing costs
- [pi3g](https://www.cybersectool.com/tools/pi3g): German embedded-Linux and IoT specialist helping SME manufacturers make connected products compliant with the EU Cyber Resilience Act.
- [Ping Identity](https://www.cybersectool.com/tools/ping-identity): Enterprise-grade IAM with hybrid deployment and strong federation
- [Praetorian](https://www.cybersectool.com/tools/praetorian): Offensive security firm delivering continuous penetration testing and attack-surface management through its Chariot platform.
- [Prisma Cloud](https://www.cybersectool.com/tools/prisma-cloud): Comprehensive CNAPP from Palo Alto Networks securing applications from code to cloud
- [Proofpoint](https://www.cybersectool.com/tools/proofpoint): Enterprise email security platform for advanced threat protection, compliance, and data loss prevention
- [Proton Mail Business](https://www.cybersectool.com/tools/protonmail-business): Swiss-hosted zero-access encrypted email with the strongest privacy protections
- [Pulumi ESC](https://www.cybersectool.com/tools/pulumi-esc): Secrets composition layer: pull from Vault/AWS/Doppler and expose to any runtime
- [Qualys VMDR](https://www.cybersectool.com/tools/qualys-vmdr): Cloud-native vulnerability management platform with integrated detection, prioritization, and patch management
- [Rapid7 InsightVM](https://www.cybersectool.com/tools/rapid7-insightvm): Risk-based vulnerability management platform with live dashboards and remediation project tracking
- [Realm.Security](https://www.cybersectool.com/tools/realm-security): Security data fabric platform for intelligent routing and optimization of security telemetry
- [Red Canary (a Zscaler company)](https://www.cybersectool.com/tools/red-canary): MDR provider known for deep Microsoft Defender expertise and high-fidelity detection engineering, acquired by Zscaler in 2025.
- [SailPoint](https://www.cybersectool.com/tools/sailpoint): AI-driven identity governance and administration platform
- [Saviynt Privileged Access](https://www.cybersectool.com/tools/saviynt-pam): Cloud-native PAM built into Saviynt's converged identity platform
- [Sawmills](https://www.cybersectool.com/tools/sawmills): AI telemetry pipeline that filters and optimises logs, metrics and traces pre-ingestion to cut observability cost.
- [Sealed Secrets](https://www.cybersectool.com/tools/sealed-secrets): Encrypt Kubernetes secrets into a format safe to store in Git
- [Secureworks (a Sophos company)](https://www.cybersectool.com/tools/secureworks): Long-established MDR and XDR provider built around the Taegis platform, now operating as part of Sophos.
- [Securiti](https://www.cybersectool.com/tools/securiti): AI-powered data security, privacy, and governance platform with DSPM and compliance automation
- [Securonix](https://www.cybersectool.com/tools/securonix): Cloud-native SIEM with advanced UEBA and analytics
- [Semgrep](https://www.cybersectool.com/tools/semgrep): Lightweight, open-source static analysis with intuitive pattern-matching rules and fast scan performance
- [SentinelOne](https://www.cybersectool.com/tools/sentinelone): AI-powered autonomous endpoint protection with one-click remediation
- [SERMA Safety & Security](https://www.cybersectool.com/tools/serma-safety-security): French security evaluation lab (ITSEF); PCI Recognized for PTS, plus EMVCo and Common Criteria.
- [SGS](https://www.cybersectool.com/tools/sgs): World-leading testing and certification company that, through SGS Brightsight, provides CRA and RED security evaluation, conformity assessment, and notified-body services.
- [SGS Brightsight](https://www.cybersectool.com/tools/sgs-brightsight): Major PCI Recognized security evaluation lab for payment devices, EMVCo and Common Criteria.
- [Skyhigh Security](https://www.cybersectool.com/tools/skyhigh-security): Data-aware SSE platform with pioneering CASB technology and deep cloud data protection
- [Snyk](https://www.cybersectool.com/tools/snyk): Developer-first application security platform for finding and fixing vulnerabilities in code, dependencies, containers, and IaC
- [SonarQube](https://www.cybersectool.com/tools/sonarqube): Open-source code quality and security analysis platform with broad language support
- [SonicWall](https://www.cybersectool.com/tools/sonicwall): High-performance firewalls with advanced threat detection for SMB to enterprise
- [Sophos Intercept X](https://www.cybersectool.com/tools/sophos-intercept-x): Endpoint protection with deep learning AI and synchronized security ecosystem
- [Sophos XGS](https://www.cybersectool.com/tools/sophos-xgs): Synchronized security firewall with endpoint integration, Xstream TLS inspection, and cloud management
- [SOPS](https://www.cybersectool.com/tools/sops): CLI tool for encrypting YAML/JSON/ENV files with KMS, age, or PGP
- [SPIFFE / SPIRE](https://www.cybersectool.com/tools/spiffe-spire): Workload identity standard: short-lived SVIDs replace shared service secrets
- [Spirion](https://www.cybersectool.com/tools/spirion): Sensitive data discovery and classification platform with high-accuracy identification of regulated data
- [SplitSecure](https://www.cybersectool.com/tools/splitsecure): Distributed secrets management. No vault, no vendor dependency
- [Splunk](https://www.cybersectool.com/tools/splunk): Enterprise SIEM and security analytics platform for threat detection and incident response
- [Splunk Data Stream Processor](https://www.cybersectool.com/tools/splunk-dsp): Splunk's real-time stream processing engine for data optimization and routing
- [SRC Security Research & Consulting](https://www.cybersectool.com/tools/src-security): German PCI Recognized lab for PCI PTS device evaluation and German payment terminal schemes.
- [Stamus Networks](https://www.cybersectool.com/tools/stamus-networks): Suricata-based network detection and response with an open-source community edition
- [StrongDM](https://www.cybersectool.com/tools/strongdm): Infrastructure access proxy with credential injection and session recording
- [Sumo Logic](https://www.cybersectool.com/tools/sumo-logic): Cloud-native SIEM and security analytics with automated threat detection
- [Sysdig](https://www.cybersectool.com/tools/sysdig): Cloud and container security platform built on open-source Falco for runtime threat detection
- [Tanium](https://www.cybersectool.com/tools/tanium): Converged endpoint management platform with real-time vulnerability assessment at massive enterprise scale
- [Teleport](https://www.cybersectool.com/tools/teleport): Modern identity-aware access for SSH, Kubernetes, databases, and apps
- [Tenable](https://www.cybersectool.com/tools/tenable): Vulnerability management platform with Nessus scanning, cloud-native VM, and exposure management
- [Tenzir](https://www.cybersectool.com/tools/tenzir): Open-source security data pipeline with native support for security-specific data formats
- [Tessian](https://www.cybersectool.com/tools/tessian): Human layer security platform preventing inbound threats and outbound misdirected emails
- [Trail of Bits](https://www.cybersectool.com/tools/trail-of-bits): High-end security research and engineering firm known for deep code audits, cryptography reviews, and smart-contract security work.
- [Trellix](https://www.cybersectool.com/tools/trellix): XDR platform combining McAfee Enterprise and FireEye capabilities
- [Trend Micro Cloud One](https://www.cybersectool.com/tools/trend-micro-cloud-one): Multi-cloud security platform offering modular workload protection and posture management
- [Trend Micro Email Security](https://www.cybersectool.com/tools/trend-micro-email-security): Cloud email security gateway with AI-powered BEC detection and XDR integration
- [Trend Micro Vision One](https://www.cybersectool.com/tools/trend-micro): XDR platform with unified visibility across endpoints, email, cloud, and network
- [Trivy](https://www.cybersectool.com/tools/trivy): Open-source vulnerability scanner for containers, file systems, IaC, and Kubernetes with zero-config setup
- [Tuta](https://www.cybersectool.com/tools/tuta): Open-source end-to-end encrypted email with zero-access architecture
- [TUV SUD](https://www.cybersectool.com/tools/tuv-sud): Global testing and certification body offering CRA readiness assessment, vulnerability-management support, third-party conformity assessment, and training.
- [UL Solutions](https://www.cybersectool.com/tools/ul-solutions): Global TIC firm and PCI Recognized lab for payment terminal (PTS POI/HSM) and EMVCo testing.
- [Upstream Security](https://www.cybersectool.com/tools/upstream-security): Cloud-based, agentless connected-vehicle cybersecurity platform with a managed Vehicle SOC
- [Varonis](https://www.cybersectool.com/tools/varonis): Data security and governance platform for access visibility, insider threat detection, and sensitive data protection
- [Vector](https://www.cybersectool.com/tools/vector): High-performance open-source observability pipeline built in Rust by Datadog
- [Vectra AI](https://www.cybersectool.com/tools/vectra-ai): AI-powered NDR with Attack Signal Intelligence for hybrid cloud
- [Veracode](https://www.cybersectool.com/tools/veracode): Cloud-based application security testing platform with SAST, SCA, DAST, and penetration testing
- [VicOne](https://www.cybersectool.com/tools/vicone): Trend Micro subsidiary delivering end-to-end automotive cybersecurity across the vehicle lifecycle
- [Virtru](https://www.cybersectool.com/tools/virtru): End-to-end encryption for Gmail and Outlook with persistent sender control
- [VMware Carbon Black](https://www.cybersectool.com/tools/carbon-black): Behavioral EDR platform with continuous endpoint activity recording
- [WatchGuard Firebox](https://www.cybersectool.com/tools/watchguard-firebox): SMB-focused unified threat management with simplified deployment and MSP-friendly cloud management
- [Wazuh](https://www.cybersectool.com/tools/wazuh): Open-source unified XDR and SIEM platform
- [Wiz](https://www.cybersectool.com/tools/wiz): Agentless cloud security platform with full-stack visibility and risk prioritization across multi-cloud environments
- [Zix (OpenText)](https://www.cybersectool.com/tools/zix): Enterprise email encryption with the larger install base and policy-based automation
- [Zscaler](https://www.cybersectool.com/tools/zscaler): Cloud-native SASE and zero trust platform for secure internet and private application access