Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
Elastic Security is the SIEM and endpoint security solution built on the Elastic Stack, with detection rules, timelines...
The Elastic Stack (Elasticsearch, Kibana and Beats/Elastic Agent) stores, searches and visualises logs; Elastic Security...
Graylog is a log management platform for collecting, indexing and analysing log data from many sources.
OSSEC is an open-source host-based intrusion detection system performing log analysis, integrity checking and rootkit de...
Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring and log manageme...
Sigma is a generic, vendor-neutral rule format for log detections that can be converted into queries for many SIEM produ...
Splunk is a commercial platform for searching, monitoring and analysing machine data, widely used as a SIEM.
Wazuh is an open-source security platform that combines log analysis, file-integrity monitoring, vulnerability detection...