Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
Sigma is a generic, vendor-neutral rule format for log detections that can be converted into queries for many SIEM produ...
Sliver is an open-source cross-platform adversary-emulation framework used by red teams to test detection and response.
Snort is a widely used open-source intrusion detection and prevention system that inspects traffic with rule-based signa...
Snyk is a developer-security platform (with a free tier) that finds vulnerabilities in dependencies, code, containers an...
SonarQube analyses code quality and security (bugs, vulnerabilities, security hotspots) across many languages; a Communi...
SpiderFoot automates OSINT collection about domains, IPs, emails and names using many data sources, with a web UI.
Splunk is a commercial platform for searching, monitoring and analysing machine data, widely used as a SIEM.
Subfinder is a passive subdomain discovery tool that queries public sources such as certificate transparency and DNS dat...
Suricata is an open-source network threat detection engine that can work as an IDS, an inline IPS and a network security...
Syft generates a software bill of materials (SBOM) listing the packages inside container images and filesystems.
System Monitor (Sysmon) is a Windows system service from Microsoft Sysinternals that logs process creation, network conn...
Hydra is a parallelised network login tester that tries credential lists against services such as SSH, FTP and HTTP form...
TestDisk repairs partition tables and recovers lost partitions; its companion PhotoRec recovers files by signature.
The Sleuth Kit is a library and collection of command-line tools for analysing disk images and file systems.
TheHive is a collaborative security incident response platform for managing cases, tasks and observables (the 4.x line w...
Timesketch is an open-source tool for collaborative forensic timeline analysis, often fed with Plaso output.
Tor Browser routes your web traffic through the Tor network to protect your privacy and help circumvent censorship.
Trivy is a comprehensive scanner for vulnerabilities, misconfigurations and secrets in container images, file systems, g...
TruffleHog finds, classifies and can verify leaked credentials across git history, filesystems and other sources.
Velociraptor is an open-source endpoint monitoring, digital forensics and incident-response platform that collects artef...
VeraCrypt is free open-source disk encryption software that creates encrypted containers or encrypts whole partitions an...
VirusTotal is an online service that analyses files, URLs, domains and IP addresses with many antivirus engines and othe...
Volatility 3 is the memory-forensics framework for analysing RAM captures to list processes, network connections and inj...
WPScan is a WordPress security scanner that identifies the core version, plugins and themes and matches them against a v...