Cybersecurity Software & Tools

Red-teaming suites, prompt injection scanners, LLM guardrails, and model evaluation utilities.

Static source analysis, dynamic scanners, and dependency vulnerability checkers.

Binary analysis and ROP tools for exploit research and compiler-mitigation verification.

CSPM scanners, container and Kubernetes policy engines, and cloud configuration auditing tools.

Capture-the-flag platforms, vulnerable-by-design applications, and wargames for legal skill practice.

Data loss prevention, data posture management, and sensitive data discovery and classification platforms.

Disk and memory forensics, malware sandboxes, and incident response collection platforms.

Phishing and BEC defenses, API-based inbox security, gateway scanners, and DMARC management.

Coverage-guided mutation engines and stateful protocol testing frameworks.

Compliance automation frameworks, SCAP policy scanners, and risk management platforms.

Decoy services, deception platforms, and canary tokens that detect intruders with high-fidelity alerts.

Secrets managers, identity engines, and access control platforms for managing credentials and privilege.

Sandboxes, capability scanners, string deobfuscators, and malware triage platforms.

Android and iOS application analyzers, runtime instrumentation frameworks, and mobile assessment suites.

Packet capture tools, protocol analyzers, and network security monitors for traffic visibility.

Zero trust access, secure web gateways, firewalls, and perimeter enforcement platforms.

Reconnaissance frameworks, attack-surface discovery engines, and public-data enrichment platforms.

Industrial network monitoring, ICS protocol analysis, and OT asset inventory platforms.

Password hash crackers, online credential brute-forcers, and authentication testing utilities.

Intercepting HTTP proxies, security assessment toolkits, and network exploitation frameworks.

Phishing campaign platforms, security awareness testing tools, and credential harvesting simulators.

Adversary emulation platforms, C2 frameworks, and atomic test libraries for authorized red team operations.

Disassemblers, binary decompilers, and dynamic execution analyzers.

SIEM platforms, EDR agents, SOAR automation, and detection rule engines for security operations.

SBOM generators, artifact signing tools, and dependency vulnerability scanners for software supply chain integrity.

Threat intelligence platforms, IOC sharing communities, and STIX/TAXII tooling for collecting and distributing threat data.

Infrastructure scanners, CVE audit engines, container image inspectors, and exposure management platforms.

Wi-Fi auditing, Bluetooth analysis, RFID/NFC research, and software-defined radio (SDR) tools.

Web vulnerability assessment platform and intercepting proxy suite for testing web applications, APIs, and access controls.

Software reverse engineering suite developed by the NSA, offering disassembly, decompilation, and scriptable binary analysis.

Network discovery scanner and port auditor for discovering live hosts, open ports, running services, and OS fingerprints.

Security scanner for container images, file systems, Git repositories, and Kubernetes configurations to detect CVEs.

Open-source SIEM and XDR platform providing endpoint monitoring, log analysis, file integrity checks, and threat detection.

Network packet analyzer and protocol inspection tool for capturing live traffic and debugging network communications in detail.