Best IT Security Software in Germany - Page 55

Compare the Top IT Security Software in Germany as of November 2026 - Page 55

  • 1
    Ente Auth
    Ente Auth is a free, open-source two-factor authentication app that helps users generate and manage time-based one-time passwords to secure logins for online accounts with an extra layer of verification beyond just a password, offering end-to-end encrypted backups so you never lose your codes and they remain private even to the service itself. It syncs codes across mobile, desktop, and web clients using fully encrypted channels, lets users import existing 2FA tokens by scanning QR codes or manual entry, and provides features like offline code generation, tagging and searching of codes, pinning favorites, icon identification, and quick “next code” display for faster logins. Backups are encrypted with audited cryptography, giving users peace of mind that only they can decrypt and access their 2FA secrets, and codes can be shared securely with teammates via encrypted links with optional expirations.
    Starting Price: Free
  • 2
    Aegis Authenticator

    Aegis Authenticator

    Beem Development

    Aegis Authenticator is a free, secure, open source Android app for managing two-factor authentication tokens, helping users add an extra layer of security to their online accounts by generating time-based or HMAC-based one-time codes (HOTP/TOTP) that work with thousands of services that support industry-standard 2FA, making it a privacy-respecting alternative to apps like Google Authenticator or Authy. Tokens are stored in a locally encrypted vault that can be unlocked with a strong password and optionally with device biometrics, and the app includes features such as encrypted backups, QR-code scanning, manual entry, and import/export from other authenticator apps so users can migrate their existing 2FA credentials easily and securely. Aegis provides extensive organization tools including custom icons, grouping, alphabetical and custom sorting, and search to help manage many accounts effectively, and its design emphasizes security and privacy.
    Starting Price: Free
  • 3
    2FAS Auth
    2FAS is a two-factor authentication and password management platform centered on its open source 2FAS Authenticator app, which helps users add a strong second layer of login security to online accounts by generating time-based and event-based one-time codes that refresh frequently to defend against unauthorized access, making it easier to secure email, social, financial, and other services that support 2FA. It is designed to be simple, private, and secure, it works offline, does not store passwords or usage metadata, and doesn’t require users to create an account, offering anonymous use while still syncing codes across multiple mobile devices with encrypted backup options, biometric or PIN protection, and support for importing and exporting authentication seeds so you retain control of your data and can migrate between devices or apps.
    Starting Price: Free
  • 4
    2FAS Pass
    2FAS Pass is a local-first password manager designed with security and privacy at its core that lets users store and manage passwords and sensitive credentials in an encrypted vault on their own device without requiring an account or external cloud service; all data is encrypted end-to-end so only the user can access it, and the app can work offline while providing optional encrypted synchronization using services like Google Drive, iCloud, or custom WebDAV setups if users choose. It emphasizes full data control and privacy by storing credentials locally by default, with security tiers to protect especially sensitive entries, and no centralized server collecting or storing personal information, giving users confidence that their vault remains private and under their own management. 2FAS Pass also integrates with a browser extension for seamless access to stored passwords while browsing, lets users import and export items, and supports typical password management functions.
    Starting Price: Free
  • 5
    PicKey

    PicKey

    PicKey

    PicKey.ai is an AI-powered visual password manager that eliminates the need to remember complex text passwords by letting you log in using a unique visual Master Key composed of a personal image (like a favorite place, object, or face) combined with a 3D collectible, and then generates and manages strong site credentials on the fly without ever storing the actual passwords, using advanced neural image recognition and patented MagicPass cryptography to re-create credentials securely when needed. Instead of memorizing password strings, users simply authenticate with their chosen Vision Secret photo plus a 3D Keymoji selection, and PicKey’s AI recognizes the image even under variations in lighting or angle, mirroring human photographic memory and making login intuitive and memorable while enhancing resistance to brute-force, phishing, and keylogging attacks.
    Starting Price: $4 per month
  • 6
    Outtake

    Outtake

    Outtake

    Outtake is an AI-powered cybersecurity platform that uses always-on, agentic AI agents to secure an organization’s digital presence by continuously scanning and defending against modern threats like brand impersonation, phishing, fake domains, fraudulent ads, and spoofed apps across the open web, social platforms, forums, and media at internet scale. Its autonomous agents analyze text, images, video, and audio in real time to detect coordinated attacks, correlate related malicious activity across formats and surfaces, and prioritize and execute remediation steps faster than traditional, manual processes, shrinking takedown timelines from weeks to hours while reducing analyst workload. It includes open source intelligence for narrative and risk monitoring, digital risk protection that maps and dismantles interconnected threat networks, and Outtake Verify, a browser extension that cryptographically authenticates email sender identity to prove who actually sent a message.
    Starting Price: Free
  • 7
    QSafe

    QSafe

    C9Lab

    QSafe is an AI-powered Digital Risk Protection Platform designed to help businesses detect, monitor, and respond to external cyber threats in real time. The platform identifies brand impersonation, phishing domains, fake social media accounts, leaked credentials, dark web exposure, and emerging attack vectors. QSafe provides continuous monitoring across domains, social media, mobile apps, and underground sources, enabling security teams to take rapid action before threats escalate into incidents. It is built for enterprises, BFSI, startups, and growing organizations that need visibility beyond traditional perimeter security.
  • 8
    ZeroLeaks

    ZeroLeaks

    ZeroLeaks

    ZeroLeaks is an AI prompt security platform that helps organizations identify and fix exposed system prompts, internal tools, and logic vulnerabilities that could allow prompt injection, prompt extraction, or other forms of leakage that expose internal instructions or intellectual property to unauthorized actors. It provides an interactive dashboard where users can scan system prompts manually or automate scanning via CI/CD integration to catch leaks and injection vectors before code is deployed, and it uses an AI-powered red-team-style analysis engine to assess prompt surfaces for logic flaws, extraction risks, and potential misuse with evidence, scoring, and remediation recommendations. ZeroLeaks targets enterprise-grade security for large-language-model-based products by offering vulnerability assessments that highlight prompt exposure depth, prioritized risks, proof, and access paths for issues found, and suggested fixes such as prompt restructuring, tool gating, etc.
    Starting Price: $499 per month
  • 9
    keyhold.io

    keyhold.io

    keyhold.io

    Your clients send credentials via Slack. Your contractors have passwords in email threads. Chaos. keyhold.io is a zero-knowledge secret custody platform for teams who manage credentials that aren't theirs. Send secure request links, collect credentials encrypted before they reach our servers, and get full audit trails of every access. Built for MSPs, agencies, and anyone tired of sensitive access scattered across chat threads.
    Starting Price: £50/month
  • 10
    Cyber Prot

    Cyber Prot

    SC Next IT Computers SRL

    Cyber Prot is a streamlined security utility built for users who need lightweight yet ironclad protection for their Windows environment. It focuses on proactive defense, ensuring your system remains secure from unauthorized access and internal clutter. Key Features: Instant Data Lock: Uses high-level encryption to shield your most sensitive folders and files from prying eyes. Smart Uninstall Guard: Features a specialized security lock that requires admin validation to remove the software, preventing malware or unauthorized users from disabling your protection. System Hygiene: Beyond security, it monitors and manages background services, stopping "resource-hungry" processes to maintain peak PC speed. Stealth Operation: Designed to run silently in the background, providing maximum safety without intrusive pop-ups or heavy CPU usage. Zero-Trace Removal: Ensures a 100% clean uninstall, wiping all temporary data and registry entries.
    Starting Price: $0
  • 11
    Sherlocks.ai

    Sherlocks.ai

    Sherlocks.ai

    Sherlocks.ai is an autonomous AI SRE agent that works 24x7x365 to prevent incidents, automate root cause analysis, and accelerate recovery without adding headcount. Unlike traditional monitoring tools, Sherlocks acts as an intelligent teammate inside your Slack channels, instantly responding to alerts, correlating logs, metrics, and traces across your entire stack, and delivering context-aware RCA in seconds , not hours. Teams using Sherlocks see 3x faster incident resolution, 50% reduction in toil, and 20-30% cloud cost savings through intelligent predictive scaling. No agent installation required as it connects directly to your existing observability stack (OpenTelemetry, Prometheus, Datadog) via secure API. SOC2 Type 2 certified with self-hosted deployment available for full data control.
    Starting Price: $1500/month
  • 12
    OpsWorker

    OpsWorker

    OpsWorker AI

    Resolve production incidents and development issues with AI that understands your code, infrastructure, and telemetry — reducing MTTR by up to 80% and boosting engineering productivity by 50%. OpsWorker helps Software Developers, SREs, and DevOps Engineers reduce MTTR, resolve complex development issues, and manage high-incident environments. Through intelligent incident correlation, code-aware troubleshooting, and deep integration into your technical ecosystem, OpsWorker delivers actionable insights and autonomous remediation — ensuring resilient, high-performance operations across Kubernetes and Cloud workloads. Built as an AI SRE platform for modern AIOps, OpsWorker leverages AI Observability to analyze incidents across distributed systems, correlate signals from metrics, logs, traces, and deployments, and surface the most probable root cause within minutes. Designed with an EU-first approach, OpsWorker prioritizes data sovereignty and enterprise-grade security while enabling
  • 13
    Csper

    Csper

    Csper

    Csper is a security-focused platform designed to simplify the implementation, deployment, and management of Content Security Policy (CSP) for web applications, providing automated tools and insights that help protect users from common web vulnerabilities such as cross-site scripting. It offers a suite of features, including a CSP generator that can automatically create policy headers for any website, browser extensions that assist in building and refining policies in real time, and an evaluator that scans existing configurations to detect misconfigurations and security gaps. It enables developers to quickly generate, test, and deploy CSP rules, then monitor their effectiveness through actionable feedback and reporting, reducing the complexity traditionally associated with configuring CSP manually. Csper emphasizes ease of use and automation, allowing teams to understand, deploy, and maintain CSP in minutes while ensuring policies remain effective as applications evolve.
    Starting Price: $50 per month
  • 14
    Serus

    Serus

    Serus

    Serus is an AI-powered privacy platform designed to help individuals regain control over their personal information online by monitoring, managing, and actively reducing their digital exposure. It continuously scans both the surface web and dark web using AI and open-source intelligence techniques to identify where personal data appears, including search results, data broker listings, fake accounts, impersonation attempts, and AI-generated content using a person’s likeness. It organizes this information into a clear, centralized view, giving users full visibility into their digital footprint and associated risks. Beyond detection, Serus differentiates itself by automating the removal process, using proprietary methods to submit takedown requests, delist sensitive data from search engines, and reduce exposure across multiple sources without requiring manual effort.
    Starting Price: $15 per month
  • 15
    VibeSecurity

    VibeSecurity

    VibeSecurity

    VibeSecurity is an AI-powered vulnerability scanning platform designed to protect AI-generated code by continuously analyzing, detecting, and remediating security flaws throughout the development lifecycle. It focuses on modern “vibe coding” workflows, where developers rely on AI tools to generate code quickly, but often introduce hidden vulnerabilities such as insecure authentication, exposed tokens, or injection risks. It uses intelligent agents to perform real-time code analysis, identifying security issues before they reach production and providing automated fix suggestions with implementation guidance. It integrates directly into developer environments through IDE plugins, GitHub applications, and CI/CD pipelines, enabling continuous monitoring of repositories, pull requests, and deployments without disrupting workflows.
    Starting Price: $32 per month
  • 16
    BotBye

    BotBye

    BotBye

    BotBye detects and blocks bots, fraud, and phishing. It protects websites, apps, and APIs with adaptive risk scoring that evaluates every request in real time. Every request is protected with a one-time token generated client-side and verified via API. The response includes a verdict (Allow, Challenge, or Block) with risk scores, triggered signals, and enrichment data. Threat coverage: account takeover, credential stuffing, brute force attacks, fake registrations, data scraping, form spam, API abuse, coupon fraud, and multi-accounting. Core protection works out of the box. Risk scoring, custom rules, and rate limiting let you adapt to any threat specific to your business. BotBye detects phishing sites impersonating your brand, including HTML clones, reverse proxies, and custom-built fakes, and responds with takedowns, counter-attacks, and compromised user flagging. SDKs for 10+ frameworks, free plan with no credit card required. Paid from $10/mo.
    Starting Price: $10
  • 17
    HCL BigFix SaaS Remediate
    HCL BigFix SaaS Remediate is a cloud-native automated vulnerability remediation platform that closes the gap between detecting a vulnerability and fixing it — without any infrastructure to deploy or maintain. While traditional tools scan and report, BigFix automates the entire remediation lifecycle. Deploy in minutes. Access 500,000+ pre-tested Fixlets covering 120+ OS versions and 700+ third-party applications. Achieve 99.5%+ first-pass patch success across your endpoints. Key capabilities: Automated patch deployment, CyberFOCUS Analytics for threat-prioritized remediation using CISA KEV and MITRE ATT&CK data, IVR with Tenable, Prescriptive Guidance to focus effort on highest-risk exposures, and Protection Level Agreements (PLAs) to track and prove remediation performance. Purpose-built for IT and security teams that need faster remediation, zero infrastructure overhead, and measurable risk reduction.
  • 18
    ComputeSDK

    ComputeSDK

    ComputeSDK

    ComputeSDK is a free and open-source toolkit designed to enable developers to safely run external or user-generated code within their applications through a unified and consistent interface. It provides a TypeScript-native API that abstracts multiple compute providers, allowing developers to switch between environments such as E2B, Vercel, Daytona, Modal, and others without modifying their core codebase. It is built around isolated sandbox environments, which ensure that executed code runs securely without impacting the host infrastructure, making it suitable for applications that require controlled execution of untrusted code. ComputeSDK supports key capabilities such as executing code and shell commands, managing filesystems, creating and destroying sandboxes, and integrating with modern web frameworks like Next.js, Nuxt, and SvelteKit.
    Starting Price: $500 per month
  • 19
    Better Auth

    Better Auth

    Better Auth

    Better Auth is a framework-agnostic authentication and authorization framework for TypeScript designed to help developers implement secure login systems directly within their own applications and databases. It provides a full set of authentication features out of the box, including email and password login, session management, email verification, password reset, and support for over 40 social login providers such as Google, GitHub, etc., all configurable with minimal code. It is built to work with a wide range of modern frameworks like Next.js, Nuxt, SvelteKit, Astro, and Express, allowing teams to integrate authentication regardless of their tech stack while maintaining strong TypeScript support and type safety. Better Auth includes advanced capabilities such as multi-factor authentication, multi-tenant organization management, and enterprise features like SSO, SAML, and SCIM provisioning, making it suitable for both simple apps and large-scale systems.
    Starting Price: Free
  • 20
    GPT‑5.4‑Cyber
    GPT-5.4-Cyber is a specialized, cyber-permissive variant of GPT-5.4 designed specifically to support defensive cybersecurity workflows, enabling security professionals to analyze, detect, and remediate vulnerabilities more effectively. It is fine-tuned to lower the refusal boundary for legitimate security tasks, allowing deeper engagement with activities such as vulnerability research, exploit analysis, and secure code evaluation that are typically restricted in general-purpose models. A key capability includes binary reverse engineering, which allows the model to analyze compiled software without access to source code to identify malware potential, weaknesses, and overall system robustness. Integrated within OpenAI’s Trusted Access for Cyber (TAC) program, the model is distributed through a tiered access system that requires identity verification and progressive trust levels, ensuring that only vetted defenders, researchers, and organizations can access its most advanced features.
    Starting Price: Free
  • 21
    Knostic

    Knostic

    Knostic

    Knostic is an enterprise AI security and governance platform designed to prevent data leakage and control how large language models access and share information within organizations. It introduces “need-to-know”–based access controls that dynamically determine what information an AI system can reveal based on user roles, context, and intent, rather than relying solely on static file permissions. It focuses on the knowledge layer between raw data and AI-generated responses, analyzing how information is inferred, combined, and delivered to ensure sensitive content is not overshared. Knostic provides continuous visibility into AI usage across tools like Copilot and other LLM-powered assistants, identifying risks such as semantic oversharing, inference-based exposure, and unauthorized knowledge access. It simulates real-world prompts to uncover hidden vulnerabilities before deployment, assigns quantified risk scores, and enables organizations to enforce granular policies.
    Starting Price: Free
  • 22
    zauth

    zauth

    zauth

    zauth is security for the agentic internet, built to find vulnerabilities before they are exploited, score code before it is trusted, and verify endpoints before agents pay. The agentic internet is being built faster than anyone can secure it, and zauth focuses on the gap created by broken endpoints, vulnerable apps, and unaudited repositories. Its trust ecosystem includes Vector, an autonomous vulnerability pentester where every pentest runs in a fully isolated container with its own Chromium browser, bash access, disposable email, and crypto wallet. Point Vector at any URL, and it handles recon, exploit testing, and reporting on its own. RepoScan scans any GitHub repository to detect copied code, verify code provenance, and assess project authenticity, giving users a trust score before they deploy, invest, or integrate. Provider Hub and Database help teams deploy and monitor x402 endpoints with real-time uptime tracking, latency metrics, and instant failure alerts.
    Starting Price: Free
  • 23
    Termii

    Termii

    Termii

    Termii is an AI-native signal reliability platform that helps businesses guarantee critical customer transactions by evaluating SMS, WhatsApp, voice, and email simultaneously, then routing each message to the highest-confidence channel for that signal, moment, and customer. It is built for OTPs, fraud checks, transaction alerts, authentication, verification, and customer engagement that must arrive quickly and securely. Termii’s API platform makes communication functionality available to businesses of any size, allowing teams to add SMS, group messaging, voice, WhatsApp, and email into products or applications in just a few minutes. Its Token API helps prevent fraud before it occurs by generating and verifying one-time passwords sent to customers’ mobile devices, while the Switch API allows businesses to send messages globally across SMS and WhatsApp through a REST API.
    Starting Price: Free
  • 24
    Sekorti

    Sekorti

    Sekorti

    Sekorti--> Enterprise Trust, Built in Minutes. Scan your domain and get a live security report with attack paths. Build a free Trust Center. Answer security questionnaires, RFPs, DDQs, and SIG, CAIQ, and VSAQ frameworks in seconds with AI. Prove SOC 2, ISO 27001, GDPR, ISO 42001, and EU AI Act readiness, without spreadsheets, without delays, without losing deals. Sekorti is the security trust platform for B2B SaaS teams who are tired of losing enterprise deals to compliance friction. 📍 Copenhagen, Denmark
    Starting Price: $25/month
  • 25
    VORXOC

    VORXOC

    Helxon

    VorXOC by Helxon is a unified SOC platform designed to simplify and strengthen modern cybersecurity operations. The platform centralizes security monitoring, threat detection, incident response, and security analytics into a single dashboard, helping organizations reduce alert fatigue and improve response efficiency. VorXOC integrates with cloud platforms, SIEMs, firewalls, endpoint security tools, and other security solutions to provide real-time visibility across IT environments. The platform supports threat hunting, automated workflows, security monitoring, and advanced analytics for modern enterprises and managed security operations teams.
    Starting Price: $500/month
  • 26
    CyberFurl

    CyberFurl

    CyberFurl

    CyberFurl continuously monitors your external posture across DNS, Email, Encryption, Web Security Headers, Breach Exposure, CVE Surface, IP Reputation, Malware Intel, Compliance Posture, and AI Threat Signals. 10 pillars. 35+ controls.
    Starting Price: $29/month
  • 27
    SikkerKey

    SikkerKey

    SikkerKey

    SikkerKey allows you to manage application secrets across every machine in your stack using secure, machine-authenticated requests instead of bearer tokens. Instead of distributing replayable scoped tokens, SikkerKey verifies machine identity with asymmetric cryptographic proof, giving teams a stronger security primitive without the usual complexity. Run a single bootstrap command, approve the machine in the dashboard, and it’s ready to securely request the secrets it needs.
    Starting Price: $25/month
  • 28
    Hyground

    Hyground

    Hyground

    Hyground is an AI-powered DevOps and SRE co-pilot — not a chatbot wrapper, but a full-stack operational intelligence system that runs inside the customer's Kubernetes cluster with no data egress. The agent connects to 21+ enterprise systems and investigates incidents across logs, metrics, traces, and K8s events. Engineers ask questions in plain language and get answers grounded in their own data — no new query languages to learn. AutoRCA turns an alert webhook into an autonomous root-cause investigation, then posts findings back to Slack or Teams. Investigation starts the instant an alert fires, not when an engineer wakes up. Customers report up to 85% MTTR reduction. Built on Google's Agent Development Kit, Hyground uses a multi-agent architecture and learns from your infrastructure over time. Resolved incidents extend the knowledge base, so runbooks stay current.
  • 29
    fingerprint.dev

    fingerprint.dev

    fingerprint.dev

    Fingerprint is a device intelligence platform that works across web and mobile applications to identify every visitor with industry-leading accuracy, even when they are anonymous. It helps businesses stop fraud, detect bots and AI agents, reduce friction for trusted users, and build safer, more seamless products. It recognizes returning browsers and mobile devices without relying on cookies or IP addresses, assigning each visitor a persistent visitor ID that remains stable even across incognito mode, VPN usage, cleared cookies, and tampered devices. Fingerprint combines the original fingerprinting library with more than 100 signals developed by its research team, including VPN detection, IP geolocation, high-activity device detection, raw device attributes, IP blocklist matching, geolocation spoofing, browser bot detection, rooted device detection, browser tampering detection, and other Smart Signals.
    Starting Price: Free
  • 30
    root9

    root9

    root9

    root9 is an Alert Management, On-Call, and IT service management (ITSM) platform for IT Operations, NOC, SRE, DevOps, and Platform Engineering teams. One foundation runs the full operational lifecycle, so alerts, incidents, changes, problems, requests, and on-call response share the same operational identity, memory, and understanding. Capabilities include alert management, event correlation, incident, problem, change, and request management, on-call and escalation, knowledge, automation, operational analytics, and collaboration in Microsoft Teams and Slack. AI agents assist on every record, with the evidence and reasoning shown. Instead of a CMDB nobody keeps current, root9 builds operational identity from real activity (the ICDB), reducing alert fatigue and surfacing patterns that monitoring tools miss. Built to learn, not to be taught. Works alongside Splunk, Datadog, Grafana, CloudWatch, New Relic, Azure Monitor, Dynatrace, ServiceNow, Jira, and more.
    Starting Price: $179/month unlimited users