Security tools
Scanners, sandboxes and firewalls that watch what software on your machine is doing.
308 results, page 3 of 11
CAPEv2
A self-hosted automated malware sandbox that extracts payloads and parses malware configurations.
Casdoor
A self-hosted identity and access management server with single sign-on, MFA and a web interface.
CDN77 TLS Test
A free web checker from CDN77 that lists the SSL and TLS versions a server supports.
Censys
An internet intelligence platform for searching hosts, services and TLS certificates across the internet.
Cert Spotter
A hosted Certificate Transparency monitor that alerts on unauthorized, expiring and invalid SSL certificates for your domains.
cert-manager
A Kubernetes and OpenShift controller that issues and renews X.509 TLS certificates automatically.
Certipy
Audit Active Directory Certificate Services configurations.
CeWL
Builds a custom wordlist by spidering a target website.
Chainsaw
Search Windows forensic records for suspicious activity.
Checkov
Scan infrastructure code for configuration problems.
CheckTLS
A web tool that tests whether a recipient's mail server accepts secure TLS connections for email.
chkrootkit
A command-line tool that checks Unix-like systems locally for signs of a rootkit.
CIRA Canadian Shield
A free protective DNS service from Canada's domain registry that blocks malware, phishing and scams.
CIS-CAT Lite
A free tool from the Center for Internet Security that checks systems against CIS Benchmarks.
Cisco Talos Reputation Center
Online lookup for Cisco Talos reputation and threat intelligence on IP addresses and domains.
Clair
A self-hosted service that statically analyses container images for known vulnerabilities.
ClamAV
An open source antivirus engine, used mostly for scanning mail servers and file shares rather than desktops.
CleanBrowsing
A DNS filtering service that blocks malware, phishing and adult content at the network level.
Cloudflare Radar URL Scanner
Free Cloudflare web tool that scans a URL and reports its technologies, security and performance details.
CloudFox
Inventory cloud permissions and resources during an authorized assessment.
CodeQL
A semantic code analysis engine from GitHub that lets you query source code to find vulnerabilities.
Commix
Open-source tool that detects and exploits command injection vulnerabilities in web applications.
CrowdSec
Detect suspicious behavior in server logs and web traffic.
crt.sh
A free web search engine for certificates recorded in public Certificate Transparency logs.
CryptCheck
A web tool that checks the TLS configuration of HTTPS, SMTP and XMPP servers.
Dalfox
Check web applications for cross-site scripting issues.
Damn Vulnerable Web Application
A deliberately insecure PHP and MariaDB web application for practising common web vulnerabilities legally.
Dangerzone
Converts risky documents into safe PDFs inside a sandbox.
DefectDojo
An open source, self-hosted vulnerability management platform that collects and tracks findings from security scanners.
Dependency-Check
OWASP scanner that finds known vulnerabilities in a project's dependencies.
