Best IT Security Software in Germany - Page 31
View:
Compare the Top IT Security Software in Germany as of November 2026 - Page 31
Sort By:
-
1
Devolutions Password Manager
Devolutions
Workplace passwords are everywhere—apps, websites, servers. Devolutions Password Manager brings them together in one interface that works across Windows, macOS, Linux, iOS, Android, and browsers. Users can autofill credentials, manage entries based on role-based access control, and respond to time-sensitive access requests—without ever seeing the raw passwords. Workspace includes multi-factor authentication through Devolutions Authenticator, secure in-app messaging, and offline mode. Admins can enforce strong policies, while end-users enjoy a frictionless login experience. The Workforce Password Management package is the backbone. It connects Devolutions Password Manager to centralized credential storage using either cloud-based Devolutions Cloud or self-hosted Devolutions Server, depending on your infrastructure needs. This combination gives growing teams the structure they need to eliminate password chaos and strengthen access governance.Starting Price: $3/month/user -
2
TaskCall
TaskCall
TaskCall is an automated incident response and management platform designed for IT and DevOps teams. It offers on-call management, AIOps, workflow automation, live call routing, analytics, status page and integration tools. Trusted across industries like retail, healthcare, financial services and government. TaskCall helps organizations detect, respond to and resolve incidents faster, minimizing downtime and improving team collaboration.Starting Price: $9/user/month -
3
NetBird
NetBird
NetBird is an open-source Zero Trust Networking platform built by engineers for engineers. It radically simplifies deploying secure private networks using the high-performance WireGuard® protocol. Unlike traditional VPNs, NetBird creates decentralized, low-latency, high-throughput private networks with a single management console for identity-based access control. Integrating seamlessly with your IdP for SSO and MFA, it forms direct, encrypted peer-to-peer tunnels between devices, servers, and clouds - no central bottlenecks or single points of failure. Lightweight clients ensure scalability and privacy, with traffic never passing through management services. NetBird supports integrations with CrowdStrike, Intune, SentinelOne, pfSense, and more. Ideal for Zero Trust remote access, multi-cloud connectivity, dynamic posture checks, detailed auditing, and MSP multi-tenant management - all through one intuitive platform.Starting Price: $5/user/month -
4
RateYourCyber
RateYourCyber
RateYourCyber is an AI-powered GRC automation platform spanning 18 regulatory frameworks (ISO 27001, SOC 2, GDPR, DORA, HIPAA, CMMC, NCA ECC, SAMA CSF, Financial Crime Compliance (FCC), and more) so your team can demonstrate compliance to investors, enterprise clients, and regulators. No dedicated compliance hire needed to get full value from day one. RateYourCyber unifies what the GRC market sells as four separate products: assessment, threat monitoring, third-party risk, and compliance evidence. Single cloud platform, single data model, 17 regulatory frameworks. Controls satisfied in one framework count toward the others. FAIR Monte Carlo risk quantification expresses gaps in financial terms rather than traffic lights. A reporting engine produces one unified board document across every module, three tones, three formats, three languages, 2,430 execution permutations. Free tier to enterprise. Live across seven geographies.Starting Price: £799 -
5
Authsmith
Authsmith
Authsmith is a cloud-based authentication platform that simplifies securing and managing user access for applications. The system supports multiple authentication methods including email/password, social logins, and single sign-on, creating a streamlined login experience. The platform includes analytics capabilities that provide insights into user activity and authentication metrics, allowing administrators to monitor system health and identify potential security concerns. Authsmith features multi-factor authentication and automated security alerts that help prevent unauthorized access and maintain compliance with industry standards. User management tools within Authsmith enable control over roles and permissions from a centralized dashboard. The platform offers API access for developers to integrate authentication features into their applications. Authsmith delivers a comprehensive solution for managing user access while maintaining strong security measures.Starting Price: $30 -
6
PowerSyncPro
PowerSyncPro
PowerSyncPro is a specialized software suite for enterprise IT management, designed to enable seamless synchronisation of identities and migration of Windows workstations between on-premise Active Directory (AD), Entra ID (formerly Azure AD), and Google without requiring device resets or significant user disruption, keeping user profiles and setting. Can move between domain joined and entra joined states in minutes, replacing fresh start where users could experience multiple hours of downtime. The DirSync component enables seamless syncing of users, groups, and contacts between directories, supporting bi-directional password sync, SID history, and cross-tenant scenarios, so organizations can maintain unified identity stores during mergers, acquisitions, divestitures, or IT modernisation. With its enterprise grade sync capabilities, it can delta sync tens of thousands of identities in minutes, even in disconnected environments.Starting Price: $13.50/year/device -
7
BPROT
BPROT
BPROT is a network control, monitoring, and management solution. It provides visibility into what's happening, allowing for simple and easy control of all aspects of internet usage within businesses. Installation is quick and easy (plug and play), and from that moment on, it provides access to information and management related to: - Internet browsing - Network control - Email - Asset inventory (software and hardware) - Protection of off-site devices - Vulnerability analysis - Web application firewall Detailed reports are available in real time or historical data, and no advanced cybersecurity knowledge is required to be properly protected.Starting Price: $97 per month -
8
Fork
VerSprite Cybersecurity
Fork is a SaaS threat modeling platform that empowers security and product teams to perform continuous, risk-centric application threat assessments using the proven PASTA (Process for Attack Simulation and Threat Analysis) methodology, helping them identify the most likely and impactful risks in under two hours and align security with business priorities. It combines industry-focused threat libraries with real-time vulnerability data and threat intelligence to quantify residual risk accurately, support business impact analysis, and enforce quality gates throughout the threat modeling process. Fork provides a unified security insights dashboard that correlates threats with your application’s attack surface and integrates trusted frameworks and taxonomies such as MITRE, OWASP, CWE, CVE (with EPSS), CAPEC, ATT&CK, D3FEND, and ASVS to drive targeted mitigations and actionable outcomes.Starting Price: $75,000/yr -
9
XFA
XFA
XFA is user-driven device security for fast-growing companies that want strong IT security without building an IT team. It checks every computer and phone at sign-in, whether company-owned, personal (BYOD) or a contractor's laptop, and guides people to fix issues themselves. XFA plugs into Google Workspace, Microsoft Entra ID, Okta, OneLogin, Ping Identity or Keycloak in about 15 minutes, with no devices to enroll and no MDM to roll out. People install the XFA app at their first sign-in, without admin rights. XFA verifies OS updates, disk encryption, screen lock, firewall, antimalware, browser version and more, and admins choose per policy whether to warn or block insecure devices. It discovers devices from sign-in logs, sends alerts by email, Slack or Teams, and exports audit evidence to Vanta, Drata, TrustCloud and Thoropass. XFA takes no control of the device and never collects files, messages or browsing history. Free plan available.Starting Price: $5.90 per user per month -
10
All Pass Hub
All Pass Hub
All Pass Hub is a secure, end-to-end encrypted password manager built for small teams of 2–30 users. Security Architecture: - Zero-knowledge design — master password never leaves your device - PBKDF2-SHA256 (600,000 iterations) + AES-128 vault encryption - TLS 1.2+ for secure data transfer - Multi-factor authentication (MFA) supported Core Features: - Role-based access control (RBAC) down to individual credentials - Shared vaults, group management & one-time secure sharing - Full audit trail with real-time activity logs - Browser extension for Chrome & Firefox with fast autofill - CSV import/export for easy migration - Full self-hosting support for data sovereignty Pricing: - Free plan available forever. Premium starts at $2/user/month with a 30-day free trial — no credit card required. - Perfect for agencies, dev teams, and IT/ops who need real security without enterprise-level complexity.Starting Price: $2/month/2-30 users -
11
SecureCodingHub
Secure Coding Hub
SecureCodingHub is an interactive secure coding training platform for AppSec teams and engineering organizations. It offers Code Review Challenges — a two-phase find-and-fix flow across 185+ vulnerability types — and Guided Attack Scenarios with 67 step-by-step walkthroughs simulating full attack chains. Challenges are written in production-realistic code across 15 languages and frameworks including JavaScript, TypeScript, Python, Java, C#, Go, React, Vue, Angular, Swift, and Kotlin. Coverage spans OWASP Web, API, Mobile, and Client-Side Top 10. Compliance evidence builds automatically, mapped to PCI DSS 4.0.1, ISO 27001:2022, and EU CRA. Enterprise features include SAML 2.0/OIDC SSO, SCIM 2.0, SCORM 1.2/2004 LMS integration, multi-tenant hierarchy, assignment workflows, and an immutable audit log for QSA, SOC 2, and ISO audits.Starting Price: Contact us -
12
PhishEye
PhishEye
PhishEye is a digital risk protection platform that helps security, fraud, and brand teams find and shut down phishing sites, lookalike domains, impersonation, and brand abuse. It pairs AI phishing detection with typosquat and domain monitoring across web, ads, social, and search, then turns alerts into prioritised queues with defensible evidence and tracked takedown outcomes across registrars, hosts, and platforms. Built by operators who know what abuse desks actually accept, PhishEye focuses on stable identifiers, clear harm narratives, and follow-ups that hold up when infrastructure rotates - software first, with optional managed support where capacity or coverage is the bottleneck.Starting Price: $99 -
13
Gcore Security
Gcore
Gcore Security is an all-in-one cloud platform providing multi-layer DDoS protection across L3/4/7 and a fully featured WAAP for safeguarding web applications and APIs. Built on globally distributed infrastructure, it detects and mitigates attacks in real time, ensuring stable application performance under extreme load. The platform offers fast onboarding with intuitive configuration for SMBs, while enterprises benefit from a management API, Terraform provider, granular custom rules, SIEM/SOC integrations, and full log export. With specialized optimization for high-traffic, latency-sensitive workloads—particularly in gaming and online entertainment—it delivers reliable protection and uninterrupted user experiences for businesses of any size.Starting Price: €25 per month -
14
TridentStack Control
TridentStack
TridentStack Control is a patch management, vulnerability detection, and compliance automation platform for managing Windows, macOS, and Linux endpoints. It provides one agent for operating system updates, third-party application patches, CVE scanning, network exposure monitoring, policy enforcement, and compliance tracking. The platform includes intelligent update filtering, approval workflows, deployment rings, pre-staging, CVE enrichment, and phased rollouts to help teams patch systems safely. TridentStack Control also manages third-party application updates with package manager integration, silent deployments, version targeting, configuration profiles, and application inventory. Its vulnerability tools detect CVEs across the fleet, prioritize issues by CVSS severity, and support exception management with expiration dates. With DISA STIG and Microsoft Security Baseline compliance scoring, and STIG results mapped to NIST 800-53, TridentStack Control helps IT and security teams.Starting Price: $0 -
15
DNS Assistant
Tripledot LLC
DNS Assistant is a DNS Posture Management platform that gives organizations continuous visibility into the security and integrity of their domain infrastructure. Going beyond traditional uptime and record-change monitoring, DNS Assistant continuously evaluates the full security posture of your DNS, including dangling subdomain and takeover exposure across more than 22 cloud providers, TLS configuration grading, SPF, DKIM, and DMARC email authentication health, DNSSEC chain-of-trust validation, and WHOIS change detection. Built for security teams, infrastructure engineers, and managed service providers, DNS Assistant delivers real-time change detection with multi-channel alerting across email, Slack, Teams, SMS, and webhooks. Its multi-tenant architecture supports organizations, teams, and granular role-based access, making it equally suited to a single business protecting its own domains or an agency managing thousands of client domains from one console. a full REST API provided.Starting Price: $19.99 -
16
Scalekit
Scalekit
Scalekit is the MCP gateway for AI agents. It is for developers and platform teams who need an agent to call tools as the user, not through a shared service account. One endpoint reaches 600+ connectors and 35,000+ tools, including Salesforce, Gmail, Slack, Notion, HubSpot, Jira, and GitHub. Scalekit finds that user's credentials, checks permission, runs the call, and returns a clean response. Tokens stay in an AES-256 vault. It works with Anthropic, OpenAI, LangChain, Google ADK, Vercel AI, and Mastra. Run it in the Scalekit cloud (US, with EU residency available), in your VPC, or self-hosted. SOC 2 Type II and ISO 27001. A HIPAA BAA is available on Enterprise. The Free plan includes 10,000 tool calls and 10,000 trigger events a month. Growth is $99 a month for 100,000 tool calls. Enterprise pricing is custom.Starting Price: $99/month -
17
AXYVOR
CipherThought Corp
AXYVOR is an AI-native cybersecurity platform that unifies exposure management, identity threat detection, adversary intelligence, attack path analysis, and executive risk reporting into a single system operated by AI. Built for mid-market and enterprise security teams, AXYVOR continuously maps attack paths across cloud, identity, and endpoint environments, prioritizes the vulnerabilities that create real business risk, and delivers an AI-generated Board Risk Index that translates technical findings into financial and operational impact for executives and boards. AXYVOR integrates natively with leading EDR, SIEM, identity, and ITSM tools (CrowdStrike, SentinelOne, Okta, Splunk, Microsoft Sentinel, and more), deploying in days instead of months, at a fraction of the cost of legacy platforms like CrowdStrike, Splunk, or Wiz.Starting Price: $2500 -
18
ZTXGate
CoreZT
ZTXGate is an identity-centric Zero Trust Network Access platform for securing access to private applications and infrastructure. Instead of providing broad network access, ZTXGate lets organizations authorize users to defined resources according to identity, device, posture, time, and policy. Access can be standing, temporary, or request-and-approve, with continuous policy enforcement helping respond when relevant conditions change. ZTXGate can be operated by the customer or an MSP and deployed on-premises, in public cloud infrastructure, across hybrid environments, or in fully air-gapped networks. Core access operation does not require a mandatory CoreZT-hosted cloud control plane. The platform supports OIDC and SCIM identity integration, device-posture signals from Microsoft Intune, Microsoft Defender for Endpoint, CrowdStrike, SentinelOne and Jamf, SIEM integration, clientless HTTP/HTTPS access, and phishing-resistant biometric authentication through integrated ZTXBAS.Starting Price: $4/user/month -
19
Hybrid AD Manager
TideReach Ltd
Hybrid AD Manager puts the Active Directory consoles in a browser tab. Users and Computers, Sites and Services, Domains and Trusts, DNS and Group Policy each get their own tab, laid out like the Microsoft snap-ins, with your Entra ID tenant merged in: every account shows as synced, cloud-only or on-premises. RSAT is Windows-only, so admins on macOS, Linux or iPad normally need a Windows VM, a jump box or RDP. Here one MSI installs on a Windows server and everyone else opens a URL. 1.1 added 19 reports on accounts, passwords, computers, privileged access and security posture, each with a chart and CSV/PDF export. 1.2 adds Leavers: offboard someone across AD and Entra ID in one action - disable, reset password, revoke cloud sessions, strip groups, move the account - and undo it from the record. Admins sign in with their own AD accounts, so changes use their own rights and are audited. No agents, no database, no telemetry. Free edition and 30-day trial; Standard from $365/year.Starting Price: $365/year -
20
Zunoy Sandbox
Mentcube Innovations Pvt Ltd
Zunoy Sandbox is a developer testing platform for testing email, SMS, webhooks, OTP, and TOTP/MFA flows without sending test data to real users or production systems. Developers can connect their existing SMTP clients, SMS APIs, or webhook endpoints to Sandbox and capture the resulting events in an isolated testing environment. For email testing, Sandbox provides inboxes where teams can inspect email HTML, headers, attachments, links, and delivery-related information. SMS testing supports OTP and transactional message flows through REST APIs, sender IDs, and templates. The webhook testing feature provides unique endpoints for receiving and inspecting JSON payloads in real time, with options to replay and organize events by project. The TOTP/MFA sandbox can generate time-based authentication codes from secrets or QR codes for testing login and verification flows without using a physical authenticator.Starting Price: $6/month -
21
Secorvia
Secorvia
Secorvia is a cloud and Kubernetes security posture management platform for AWS, Microsoft Azure, Google Cloud and DigitalOcean. Most tools hand you a list sorted by severity, so a critical CVE on a host nothing can reach outranks a medium issue on the one machine holding your database credentials. Secorvia connects assets, vulnerabilities, identities and network reachability into a single live security graph, works out which findings chain together into a real route to something important, and ranks by exploitability and blast radius instead. It covers posture management, vulnerability intelligence, infrastructure as code scanning, container and Kubernetes security, attack path analysis, CIEM for over permissioned identities, runtime security for Linux hosts, and compliance scoring against SOC 2, ISO 27001, CIS and NIST CSF. Scanning is read only. Secorvia observes and ranks, it never changes anything in your account. The free plan is free forever and needs no credit card.Starting Price: $149/month -
22
Sitelemetry
Egenil Teleferik Mühendislik Teknik İşletme Danışmanlık Ltd. Şti.
Sitelemetry is a hosted website audit platform for developers, web agencies, founders and teams responsible for business websites. It reviews security posture, technical SEO, AI-search readiness, accessibility, performance, and analytics or tag integrations, then presents evidence, scores, prioritized findings and remediation guidance. Users can review audits in a web dashboard or connect compatible AI clients through an OAuth-protected Model Context Protocol (MCP) server to request checks and generate fix prompts. Google Search Console can provide read-only search data, while performance checks use Google PageSpeed Insights. Paid plans add the six audit areas, scheduled monitoring and usage capacity; the free plan is limited to security checks. Sitelemetry reports findings but does not automatically edit websites.Starting Price: $49/month -
23
MudraID
Decryptogen
MudraID is a cloud-based identity and trust platform for teams building AI agents, APIs and agent-enabled services. It gives agents distinct cryptographic identities, supports scoped and time-limited delegation, and checks requests against policy, trust and revocation state at action time. Teams can issue, rotate, suspend and revoke agent credentials, enforce per-action permissions, and trace delegation chains. The platform supports OAuth 2.0, OIDC, JWT/JWKS, MCP authorization and signed A2A Agent Cards. Developer options include a Python agent SDK and FastAPI/Starlette middleware; a hash-chained audit trail records decisions and related events. MudraID is intended for product, platform, security and IAM teams that need to govern agent-to-agent and agent-to-service interactions.Starting Price: $99/month -
24
SendGuard for Outlook
Standss (South Pacific) Limited
SendGuard for Outlook is an email security add-in for organizations using Microsoft Outlook and Microsoft 365. It helps reduce misdirected messages and accidental disclosure by prompting senders to verify recipients and attachments, highlighting external addresses, and warning before Reply All. Administrators can configure rules for outgoing messages, including checks for sensitive information and actions that prompt, block, or delay sending; higher-tier plans can scan attachment contents. SendGuard supports message delay and cancellation, branding, and logging of user actions. Windows desktop and Microsoft 365 add-in editions support centralized deployment and administration. The Microsoft 365 add-in is available in New Outlook, Outlook on the web, and Outlook for Mac; Outlook mobile support is also offered. It serves professional services, healthcare, finance, and public-sector teams handling sensitive email.Starting Price: $40/user -
25
SIEM Compliance
NUTRADELIS
SIEM Compliance is a self-hosted security information and event management (SIEM) product for public administrations, their suppliers, and organizations that need security monitoring and audit evidence. It centralizes logs from firewalls, switches, VMware ESXi, Windows and Linux systems, storage, and Cloudflare, with detection rules, incidents and tickets, automation, alerts, reports, and asset inventory. Optional Windows, Linux, and macOS agents collect host inventory and compliance data. The free Community edition includes the full SIEM; paid plans add audit controls for ENS, NIS2, ISO 27001, and eIDAS, evidence mapping, signed auditor evidence packs, and support with an SLA. All plans are unlimited in assets, agents, users, logs, and servers, with no per-agent, per-node, or per-GB fees. The product runs on customer-managed Linux servers, keeping operational data in the customer's infrastructure.Starting Price: €1,490/year -
26
iRepair Shield
iRepair Rimini
iRepair Shield is Windows software for checking Android phones and iPhones over USB. It scans Android apps for malware, spyware and stalkerware indicators, examines iPhone privacy indicators and encrypted backups, and checks device identity, battery health, hardware and activation or carrier locks. Four modules cover virus and malware, anti-spyware, used-device grading and hardware diagnostics. Results include explanations and PDF reports for repair work, customer handover or used-phone buyback. Analysis runs on the connected Windows PC, and phone photos, messages, contacts and backups are not sent to the vendor. A free scan includes Android malware and stalkerware detection, diagnostics and device grading; paid licenses add guided removal, expanded iPhone privacy and forensic checks, certificates and unwatermarked reports. Repair shops can license modules annually for use with unlimited phones on one PC.Starting Price: €19/phone -
27
Sherlock Forensics iPhone and iPad Analyzer
Sherlock Forensics
Sherlock Forensics iPhone and iPad Analyzer is Windows software for acquiring and examining iPhone and iPad evidence through logical MobileBackup2 backups. It also analyzes Cellebrite UFED and Inseyets full-filesystem extractions created with separate acquisition tools. The application runs fully offline and does not modify evidence. It decrypts encrypted backups and organizes data into more than 200 searchable artifact views for messages, calls, contacts, Safari history, Apple Notes, Maps and other app data. The free edition previews 25% of each artifact view, capped at 100 rows. The Forensic Edition adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, a raw SQLite browser, file extraction and screen capture. It can flag deleted records recovered from the examined data. Users include digital forensic examiners, investigators, law enforcement, legal teams and forensic labs that review and document mobile-device evidence.Starting Price: $599 one-time -
28
Android Acquirer
Sherlock Forensics
Android Acquirer is desktop software for consent-based logical acquisition and examination of Android phones and tablets. It connects through Android Debug Bridge (ADB) and a helper application to collect selected device data, including messages, contacts, call records, media, apps and artifacts. Examiners can review extracted records, preserve acquisition details and produce forensic PDF reports with chain-of-custody information and SHA-256 hashes. The software is intended for digital forensic examiners, law-enforcement and legal teams, corporate investigators and other professionals handling authorized device examinations. A free edition supports device detection and inventory checks; the Forensic Edition adds full extraction and reporting. Windows and Linux downloads are offered. It supports examiners who need documented, repeatable workflows for consent-based mobile-device investigations.Starting Price: $399 one-time -
29
Private.Ki
Private.Ki Ltd.
Private.Ki is a web-based encrypted email and messaging service for individuals and organizations seeking private digital communications. It combines an email mailbox with one-to-one and group chat, encrypted attachments, voice messages, one-to-one voice and video calls, message signing and key management. Users can set messages to expire or unsend them, while email views show encryption and signature status. Mail exchanged between Private.Ki accounts is end-to-end encrypted; messages to external email addresses can be encrypted when the recipient’s public key is available. The web app can be accessed through Tor. A free account is available, along with a separately hosted Dedicated edition that can be managed by Private.Ki or deployed on an organization’s own infrastructure. A native Android app is also available; iPhone and iPad access uses the web app while native apps are forthcoming.Starting Price: $0/month -
30
XposedOrNot
XposedOrNot
XposedOrNot is a web-based data-breach lookup and monitoring service for individuals, domain owners, and security teams. Users can search an email address to see the public breaches associated with it, including breach dates and exposed data types, and review breach records in a searchable catalog. Optional alerts notify users when an address appears in a newly indexed breach. Organizations can verify control of a domain and then review aggregated exposure, monitor new breaches, and receive email alerts. The service also provides exposure analytics, a free REST API with public keyless endpoints and rate limits, official SDKs, and integrations for security and investigation tools such as Microsoft Sentinel, Splunk, Wazuh, Maltego, MISP, TheHive/Cortex, and an MCP server. The website, API, and SDKs are open source; higher-volume commercial API plans are available separately.Starting Price: $0
