Best IT Security Software in Canada - Page 32
View:
Compare the Top IT Security Software in Canada as of November 2026 - Page 32
Sort By:
-
1
AXYVOR
CipherThought Corp
AXYVOR is an AI-native cybersecurity platform that unifies exposure management, identity threat detection, adversary intelligence, attack path analysis, and executive risk reporting into a single system operated by AI. Built for mid-market and enterprise security teams, AXYVOR continuously maps attack paths across cloud, identity, and endpoint environments, prioritizes the vulnerabilities that create real business risk, and delivers an AI-generated Board Risk Index that translates technical findings into financial and operational impact for executives and boards. AXYVOR integrates natively with leading EDR, SIEM, identity, and ITSM tools (CrowdStrike, SentinelOne, Okta, Splunk, Microsoft Sentinel, and more), deploying in days instead of months, at a fraction of the cost of legacy platforms like CrowdStrike, Splunk, or Wiz.Starting Price: $2500 -
2
ZTXGate
CoreZT
ZTXGate is an identity-centric Zero Trust Network Access platform for securing access to private applications and infrastructure. Instead of providing broad network access, ZTXGate lets organizations authorize users to defined resources according to identity, device, posture, time, and policy. Access can be standing, temporary, or request-and-approve, with continuous policy enforcement helping respond when relevant conditions change. ZTXGate can be operated by the customer or an MSP and deployed on-premises, in public cloud infrastructure, across hybrid environments, or in fully air-gapped networks. Core access operation does not require a mandatory CoreZT-hosted cloud control plane. The platform supports OIDC and SCIM identity integration, device-posture signals from Microsoft Intune, Microsoft Defender for Endpoint, CrowdStrike, SentinelOne and Jamf, SIEM integration, clientless HTTP/HTTPS access, and phishing-resistant biometric authentication through integrated ZTXBAS.Starting Price: $4/user/month -
3
Hybrid AD Manager
TideReach Ltd
Hybrid AD Manager puts the Active Directory consoles in a browser tab. Users and Computers, Sites and Services, Domains and Trusts, DNS and Group Policy each get their own tab, laid out like the Microsoft snap-ins, with your Entra ID tenant merged in: every account shows as synced, cloud-only or on-premises. RSAT is Windows-only, so admins on macOS, Linux or iPad normally need a Windows VM, a jump box or RDP. Here one MSI installs on a Windows server and everyone else opens a URL. 1.1 added 19 reports on accounts, passwords, computers, privileged access and security posture, each with a chart and CSV/PDF export. 1.2 adds Leavers: offboard someone across AD and Entra ID in one action - disable, reset password, revoke cloud sessions, strip groups, move the account - and undo it from the record. Admins sign in with their own AD accounts, so changes use their own rights and are audited. No agents, no database, no telemetry. Free edition and 30-day trial; Standard from $365/year.Starting Price: $365/year -
4
Zunoy Sandbox
Mentcube Innovations Pvt Ltd
Zunoy Sandbox is a developer testing platform for testing email, SMS, webhooks, OTP, and TOTP/MFA flows without sending test data to real users or production systems. Developers can connect their existing SMTP clients, SMS APIs, or webhook endpoints to Sandbox and capture the resulting events in an isolated testing environment. For email testing, Sandbox provides inboxes where teams can inspect email HTML, headers, attachments, links, and delivery-related information. SMS testing supports OTP and transactional message flows through REST APIs, sender IDs, and templates. The webhook testing feature provides unique endpoints for receiving and inspecting JSON payloads in real time, with options to replay and organize events by project. The TOTP/MFA sandbox can generate time-based authentication codes from secrets or QR codes for testing login and verification flows without using a physical authenticator.Starting Price: $6/month -
5
Secorvia
Secorvia
Secorvia is a cloud and Kubernetes security posture management platform for AWS, Microsoft Azure, Google Cloud and DigitalOcean. Most tools hand you a list sorted by severity, so a critical CVE on a host nothing can reach outranks a medium issue on the one machine holding your database credentials. Secorvia connects assets, vulnerabilities, identities and network reachability into a single live security graph, works out which findings chain together into a real route to something important, and ranks by exploitability and blast radius instead. It covers posture management, vulnerability intelligence, infrastructure as code scanning, container and Kubernetes security, attack path analysis, CIEM for over permissioned identities, runtime security for Linux hosts, and compliance scoring against SOC 2, ISO 27001, CIS and NIST CSF. Scanning is read only. Secorvia observes and ranks, it never changes anything in your account. The free plan is free forever and needs no credit card.Starting Price: $149/month -
6
Sitelemetry
Egenil Teleferik Mühendislik Teknik İşletme Danışmanlık Ltd. Şti.
Sitelemetry is a hosted website audit platform for developers, web agencies, founders and teams responsible for business websites. It reviews security posture, technical SEO, AI-search readiness, accessibility, performance, and analytics or tag integrations, then presents evidence, scores, prioritized findings and remediation guidance. Users can review audits in a web dashboard or connect compatible AI clients through an OAuth-protected Model Context Protocol (MCP) server to request checks and generate fix prompts. Google Search Console can provide read-only search data, while performance checks use Google PageSpeed Insights. Paid plans add the six audit areas, scheduled monitoring and usage capacity; the free plan is limited to security checks. Sitelemetry reports findings but does not automatically edit websites.Starting Price: $49/month -
7
MudraID
Decryptogen
MudraID is a cloud-based identity and trust platform for teams building AI agents, APIs and agent-enabled services. It gives agents distinct cryptographic identities, supports scoped and time-limited delegation, and checks requests against policy, trust and revocation state at action time. Teams can issue, rotate, suspend and revoke agent credentials, enforce per-action permissions, and trace delegation chains. The platform supports OAuth 2.0, OIDC, JWT/JWKS, MCP authorization and signed A2A Agent Cards. Developer options include a Python agent SDK and FastAPI/Starlette middleware; a hash-chained audit trail records decisions and related events. MudraID is intended for product, platform, security and IAM teams that need to govern agent-to-agent and agent-to-service interactions.Starting Price: $99/month -
8
SendGuard for Outlook
Standss (South Pacific) Limited
SendGuard for Outlook is an email security add-in for organizations using Microsoft Outlook and Microsoft 365. It helps reduce misdirected messages and accidental disclosure by prompting senders to verify recipients and attachments, highlighting external addresses, and warning before Reply All. Administrators can configure rules for outgoing messages, including checks for sensitive information and actions that prompt, block, or delay sending; higher-tier plans can scan attachment contents. SendGuard supports message delay and cancellation, branding, and logging of user actions. Windows desktop and Microsoft 365 add-in editions support centralized deployment and administration. The Microsoft 365 add-in is available in New Outlook, Outlook on the web, and Outlook for Mac; Outlook mobile support is also offered. It serves professional services, healthcare, finance, and public-sector teams handling sensitive email.Starting Price: $40/user -
9
SIEM Compliance
NUTRADELIS
SIEM Compliance is a self-hosted security information and event management (SIEM) product for public administrations, their suppliers, and organizations that need security monitoring and audit evidence. It centralizes logs from firewalls, switches, VMware ESXi, Windows and Linux systems, storage, and Cloudflare, with detection rules, incidents and tickets, automation, alerts, reports, and asset inventory. Optional Windows, Linux, and macOS agents collect host inventory and compliance data. The free Community edition includes the full SIEM; paid plans add audit controls for ENS, NIS2, ISO 27001, and eIDAS, evidence mapping, signed auditor evidence packs, and support with an SLA. All plans are unlimited in assets, agents, users, logs, and servers, with no per-agent, per-node, or per-GB fees. The product runs on customer-managed Linux servers, keeping operational data in the customer's infrastructure.Starting Price: €1,490/year -
10
iRepair Shield
iRepair Rimini
iRepair Shield is Windows software for checking Android phones and iPhones over USB. It scans Android apps for malware, spyware and stalkerware indicators, examines iPhone privacy indicators and encrypted backups, and checks device identity, battery health, hardware and activation or carrier locks. Four modules cover virus and malware, anti-spyware, used-device grading and hardware diagnostics. Results include explanations and PDF reports for repair work, customer handover or used-phone buyback. Analysis runs on the connected Windows PC, and phone photos, messages, contacts and backups are not sent to the vendor. A free scan includes Android malware and stalkerware detection, diagnostics and device grading; paid licenses add guided removal, expanded iPhone privacy and forensic checks, certificates and unwatermarked reports. Repair shops can license modules annually for use with unlimited phones on one PC.Starting Price: €19/phone -
11
Sherlock Forensics iPhone and iPad Analyzer
Sherlock Forensics
Sherlock Forensics iPhone and iPad Analyzer is Windows software for acquiring and examining iPhone and iPad evidence through logical MobileBackup2 backups. It also analyzes Cellebrite UFED and Inseyets full-filesystem extractions created with separate acquisition tools. The application runs fully offline and does not modify evidence. It decrypts encrypted backups and organizes data into more than 200 searchable artifact views for messages, calls, contacts, Safari history, Apple Notes, Maps and other app data. The free edition previews 25% of each artifact view, capped at 100 rows. The Forensic Edition adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, a raw SQLite browser, file extraction and screen capture. It can flag deleted records recovered from the examined data. Users include digital forensic examiners, investigators, law enforcement, legal teams and forensic labs that review and document mobile-device evidence.Starting Price: $599 one-time -
12
Android Acquirer
Sherlock Forensics
Android Acquirer is desktop software for consent-based logical acquisition and examination of Android phones and tablets. It connects through Android Debug Bridge (ADB) and a helper application to collect selected device data, including messages, contacts, call records, media, apps and artifacts. Examiners can review extracted records, preserve acquisition details and produce forensic PDF reports with chain-of-custody information and SHA-256 hashes. The software is intended for digital forensic examiners, law-enforcement and legal teams, corporate investigators and other professionals handling authorized device examinations. A free edition supports device detection and inventory checks; the Forensic Edition adds full extraction and reporting. Windows and Linux downloads are offered. It supports examiners who need documented, repeatable workflows for consent-based mobile-device investigations.Starting Price: $399 one-time -
13
Private.Ki
Private.Ki Ltd.
Private.Ki is a web-based encrypted email and messaging service for individuals and organizations seeking private digital communications. It combines an email mailbox with one-to-one and group chat, encrypted attachments, voice messages, one-to-one voice and video calls, message signing and key management. Users can set messages to expire or unsend them, while email views show encryption and signature status. Mail exchanged between Private.Ki accounts is end-to-end encrypted; messages to external email addresses can be encrypted when the recipient’s public key is available. The web app can be accessed through Tor. A free account is available, along with a separately hosted Dedicated edition that can be managed by Private.Ki or deployed on an organization’s own infrastructure. A native Android app is also available; iPhone and iPad access uses the web app while native apps are forthcoming.Starting Price: $0/month -
14
XposedOrNot
XposedOrNot
XposedOrNot is a web-based data-breach lookup and monitoring service for individuals, domain owners, and security teams. Users can search an email address to see the public breaches associated with it, including breach dates and exposed data types, and review breach records in a searchable catalog. Optional alerts notify users when an address appears in a newly indexed breach. Organizations can verify control of a domain and then review aggregated exposure, monitor new breaches, and receive email alerts. The service also provides exposure analytics, a free REST API with public keyless endpoints and rate limits, official SDKs, and integrations for security and investigation tools such as Microsoft Sentinel, Splunk, Wazuh, Maltego, MISP, TheHive/Cortex, and an MCP server. The website, API, and SDKs are open source; higher-volume commercial API plans are available separately.Starting Price: $0 -
15
FindIP Shield
FindIP
FindIP Shield is a visitor risk monitoring and abuse-prevention service for website owners, online stores, SaaS teams, and developers. It analyzes network signals such as VPN, proxy, Tor, hosting or datacenter connections, known malicious IPs, and IP changes during a session. It provides risk scores, reasons, and recommendations for visits and form activity. Teams review activity in a dashboard and can monitor, delay, challenge, or block risky signup, login, lead, or checkout events. Setup options include WordPress and WooCommerce plugins, a Shopify app, Google Tag Manager, Cloudflare, a JavaScript snippet, and an npm SDK. Developers can verify sessions through a server-side endpoint. Shield evaluates network signals rather than device fingerprints and does not read form values, passwords, or payment details. Its Free Preview includes up to 10,000 recorded events per site daily, subject to per-minute rate limits.Starting Price: $0 -
16
Vooki Pro
Vooki Infosec Pvt Ltd
Vooki Pro is a desktop dynamic application security testing (DAST) tool for assessing web applications and REST APIs. It provides automated vulnerability scanning, finding review with request and response evidence, and report exports. Users can import API definitions or collections, configure scan policies, schedule recurring scans, and run scans through a command-line interface for CI/CD workflows. The product is designed for application security teams, penetration testers, cybersecurity consultants, developers, and DevSecOps practitioners who test running web applications and APIs. Vooki Pro runs scans, stores results, and performs its AI-assisted analysis locally on the user's computer. It offers desktop builds for Windows, macOS, and Linux, with issue-tracking and notification integrations including Jira, GitHub Issues, Linear, GitLab, Azure DevOps, Slack, and webhooks.Starting Price: $399/year -
17
Willow
Willow
Willow is a leading enterprise platform for governing AI agents, tools, MCP servers, skills, and plugins. It connects agents such as Claude, ChatGPT, Cursor, Codex, Gemini, n8n, and custom agents to internal systems and SaaS tools, including Jira, GitHub, Slack, and databases, through an MCP gateway. Agents receive human-linked identities, scoped permissions, and audit trails. Security teams define policies, while employees self-serve approved connectors, skills, and plugins. Features include shadow AI discovery; PII redaction and prompt-injection inspection; app- and action-level permissions; SSO, SCIM, and RBAC with Okta, Entra ID, and JumpCloud; SIEM export; token and cost monitoring; and background agents. Willow is available as SaaS, dedicated cloud, or on-premises in a customer VPC. It holds SOC 2 Type II attestation, is GDPR-ready.Starting Price: $0 -
18
Devirt
Devirt
Devirt (devirt.re) is a binary devirtualization and reverse engineering service for security researchers and malware analysts. Protectors such as VMProtect, Themida and Code Virtualizer move selected functions into a private virtual machine, so a disassembler shows an interpreter instead of the program. Devirt runs the protected file, rebuilds how that machine moves state and control, turns the behavior back into native-shaped functions and checks each one against the original. You pick the deliverable: an IDA database, annotated pseudocode, an analyst report, LLVM IR or structured JSON. Every result carries a coverage ledger labeling each function proven, runtime-dependent, unresolved or permanently bounded. Start with a free browser check or a free feasibility assessment; paid work begins only after you approve a written scope. Devirt works only on software that customers own or have authorization to analyze, and returns inspectable logic, not original source code.Starting Price: $29 per file -
19
Noon Security
Aikido Security
Noon is a workforce security platform that combines email threat protection, device security, AI-use governance, phishing simulations, and employee training. It connects with Google Workspace or Microsoft 365 to identify phishing, business email compromise, impersonation, and malicious messages, with review and remediation controls. Its endpoint agent protects employee devices by blocking malware, risky browser extensions, and websites, and by detecting suspicious activity and exposed secrets. AI governance features inventory AI tools and MCP connections, apply usage policies, and help limit sensitive data sharing. Security teams can run role- and behavior-based simulations, assign short follow-up lessons, and review employee risk and activity dashboards. The platform is designed for organizations seeking to protect employee inboxes and devices while managing workplace AI use and security awareness.Starting Price: $0 -
20
Eureka DevSecOps
Eureka DevSecOps
Eureka is a cloud-based application security and DevSecOps platform for software development teams. It checks code, dependencies, exposed secrets, and software-supply-chain risks, and accepts supported scanner output and SARIF results. The platform consolidates findings, removes duplicates, prioritizes them with application context, and tracks ownership, remediation, validation, approvals, and risk decisions. Teams can connect code repositories, issue trackers, and CI/CD workflows, linking findings to tickets and pull requests. Eureka preserves activity and decision history to help prepare application-security evidence for customer security reviews, audits, and regulated software documentation. It is designed for engineering and security teams that want to establish or operate an AppSec process without assembling scanner integrations and evidence workflows themselves.Starting Price: $125/month -
21
Clearlane CRA
Clearlane Apps
Clearlane CRA is a Jira Cloud app for manufacturers and product security teams managing Cyber Resilience Act vulnerability reporting. It turns Jira vulnerability and incident work items into records for Article 14 deadlines, prepares ENISA reporting fields for review and copying, and tracks affected products and versions using CycloneDX or SPDX software bills of materials. Teams can record fixes, inform users, create CSAF 2.0 security advisories, and keep PDF evidence with Jira work items. The app supports English, French and German and runs on Atlassian Forge. It does not submit reports to ENISA; users assess their obligations and submit through the authority's reporting platform.Starting Price: $69/month -
22
Clearlane Breach & Incident Reporting
Clearlane Apps
Clearlane Breach & Incident Reporting is a Jira Cloud app for teams managing GDPR personal data breaches and NIS2 or DORA incidents. It provides a qualification workflow that records the event and the time the organization became aware, then calculates applicable reporting deadlines and tracks status in a register. The app prepares notification text for teams to copy into authority forms, records submission dates and references, and maintains an evidence trail with signed decisions and PDF records; the breach register can be exported as CSV. Jira and Jira Service Management work items are supported. The app does not submit notifications to authorities or make the legal assessment, and national authority forms are not included. It runs on Atlassian Forge within the customer's Atlassian site and supports English, French and German.Starting Price: $69/month -
23
Teisoft Exposure Platform
Teisoft LLC
Teisoft Exposure Platform is a cloud-based security platform for continuous threat exposure management and external attack surface management. It helps security and IT teams discover internet-facing domains, subdomains, applications, APIs, and other assets; assess vulnerabilities and misconfigurations; prioritize findings using risk context; and validate exposures through controlled testing. Teams can assign remediation, track findings to closure, verify fixes, and maintain reports and technical evidence. Its asset inventory is not limited by the number of assets; plans are based on monthly assessment capacity. Jira, Microsoft Teams, and Slack integrations connect findings with remediation and collaboration workflows. The platform is offered for self-managed use or through Teisoft-managed services, for organizations seeking ongoing visibility into external security risks.Starting Price: $295/month -
24
Bossanova
TINYGEM
Bossanova is a desktop vault for individuals and developers managing credentials and sensitive information on Windows or macOS. It stores text and image items in an encrypted local vault, with folders, search, viewing and copying. Users can import .env variables, create or restore encrypted backups, and manually transfer vaults between devices on the same local network; it does not sync through the cloud. Optional MCP tools let supported AI assistants use approved values in HTTPS requests or launch approved programs without returning the values in tool responses. Separate approvals govern assistant connections, per-field access and new targets. A receiving service or environment/file-carrier program still receives the value; the vault does not isolate other local files, processes or the clipboard. An account and device approval are required.Starting Price: $1.99/month -
25
HMDIA Login & Registration is a WordPress plugin for creating branded login, registration, password-reset, account, and contact pages without custom coding. Its free version includes customizable forms and email templates, registration email verification, admin approval, email OTP two-factor authentication, password policies, access controls, and spam protection with a honeypot, Cloudflare Turnstile, or Google reCAPTCHA. Pro adds Google Sign-In, passwordless email-code, magic-link, and passkey sign-in, authenticator-app and passkey two-factor authentication, SMS OTP, recovery codes, session management, temporary access, role-based redirects, advanced fields, user management, and webhooks. SMS verification uses Twilio. Optional add-ons provide additional features and integrations. A setup wizard, online documentation, and video tutorials help WordPress site owners configure forms and authentication settings.Starting Price: $0
-
26
CloudNine
CloudNine Discovery
CloudNine is a cloud-based eDiscovery automation platform that streamlines the litigation discovery, audits, and investigations by allowing users to review, upload, and create documents in a central location. With its comprehensive suite of professional services that include discovery consulting, computer forensics, managed review, online hosting, information, governance, litigation support, and project management, CloudNine dramatically reduces the overall costs of eDiscovery processing. Law firms and corporations can save time and money by consolidating all of their data collection, processing, and review requirements by leveraging CloudNine’s self-service eDiscovery software.Starting Price: $35.00/month -
27
Riskified
Riskified
Riskified is an advanced eCommerce fraud prevention tool designed to drive sales and reduce management costs. As a reliable end-to-end card-not-present (CNP) fraud software, Riskified helps businesses prevent online fraud by reviewing, approving, and guaranteeing their orders. With Riskified, every approval is covered by a chargeback guarantee in case of fraud. Additionally, Riskified’s quick, frictionless review process enables retailers to boost their sales and expand confidently to new markets.Starting Price: $0.01/month -
28
BalanceNG
Inlab Networks
BalanceNG is a reliable and modern multithreading software load balancer developed by Inlab Networks. Available for Linux and also macOS, BalanceNG easily integrates into data center networks and offers top quality packet processing performance, making this solution the ideal choice for hosting companies, network operators, and telco product designers. BalanceNG by Inlab Networks comes with a highly specialized IP stack for IPv6 and IPv4 and an independent active/passive cluster environment that is based on VRRP and the "bngsync" session table synchronization protocol. Operating BalanceNG with two nodes implements high availability on top of the Direct Server Return (DSR) topology. Direct Server Return (DSR) ist the most popular BalanceNG topology. It’s ultra-fast at wire speed (verified up to 10Gbit) and easy to set up. You are expecting tens of millions of concurrent sessions? No problem.Starting Price: $350 one-time payment -
29
Netwrix Auditor
Netwrix
Netwrix Auditor is an IT audit software solution designed to provide visibility into user activity and system changes across IT environments. It helps organizations track who is accessing data, what actions are being taken, and when those actions occur. The platform monitors systems such as Active Directory, file servers, Microsoft 365, databases, and network devices. It provides real-time alerts to notify teams of suspicious activity or potential security risks. Netwrix Auditor also helps identify excessive permissions and other vulnerabilities that could lead to data breaches. The solution includes built-in reports that support compliance with standards like HIPAA, PCI, and SOX. It simplifies audit processes by automating data collection and reporting tasks. By centralizing audit data, it helps organizations improve security and respond to incidents faster. -
30
Scalyr
Scalyr
Scalyr is the log management and observability platform for the new stack. Purpose-built to handle the scale and complexity of modern cloud architectures, Scalyr changes the dynamics of delivering healthy applications by allowing engineers to quickly troubleshoot problems and focus on doing what they love - coding. With 96% of searches completing in under one second and thousands of active users, Scalyr has transformed logs from afterthought into advantage. Scalyr’s rapidly-growing customer base includes NBCUniversal, Business Insider, Valentino, Giphy, Zalando and OkCupid. The company has the highest rating in its category in G2 Crowd, is a Gartner 2018 Cool Vendor, and was recognized as a 2018 Forbes Cloud 100 Rising Star. Visit us at scalyr.com and follow us on Twitter (@scalyr).Starting Price: $35/month
