Best IT Security Software in Germany - Page 56
View:
Compare the Top IT Security Software in Germany as of November 2026 - Page 56
Sort By:
-
1
Strobes
Strobes Security
Strobes is an AI-powered exposure management platform designed to help security teams continuously discover, validate, prioritize, and remediate critical risks. The platform connects attack surface management, application security posture management, risk-based vulnerability management, AI pentesting, penetration testing as a service, integrations, workflows, analytics, and reporting into one continuous system. Strobes uses AI agents to analyze vulnerabilities in business context, validate exploitability, reduce false positives, and guide teams toward the exposures that matter most. Its platform integrates with more than 100 security and engineering tools, including scanners, cloud systems, code tools, ticketing platforms, communication tools, and SIEM solutions. Security teams can use Strobes to reduce remediation backlogs, improve visibility, automate triage, route issues, verify fixes, and maintain audit readiness. -
2
Zunoy Authenticator
Mentcube Innovations Pvt Ltd
Zunoy Authenticator is a security application that helps users protect online accounts with two-factor authentication (2FA). The app generates time-based one-time passwords (TOTP) that add an extra layer of security beyond traditional usernames and passwords. Users can securely store authentication accounts, generate verification codes for supported services, and quickly access codes when signing in. The application is designed to simplify account protection while helping reduce the risk of unauthorized access caused by compromised passwords. It can be used with websites, cloud services, business applications, developer platforms, and other systems that support two-factor authentication. Zunoy Authenticator is suitable for individuals, businesses, developers, and organizations looking to strengthen account security and improve access protection across multiple online services.Starting Price: Free -
3
HackerAI
HackerAI
HackerAI is an AI-powered penetration testing assistant built to help security teams scan targets, analyze vulnerabilities, investigate findings, and write reports faster. It works as a cybersecurity copilot for penetration testers, bug bounty hunters, and security auditors, giving users a conversational way to move through authorized security testing workflows. Instead of working through every stage of a test alone, users can chat with HackerAI to plan recon, interpret scan results, understand potential weaknesses, identify next steps, and turn technical findings into clearer security reports. It is designed for AI-assisted vulnerability research and security assessments, helping users find and fix vulnerabilities by chatting with AI. HackerAI is available through its web experience and desktop downloads for macOS, Windows, and Linux, with mobile options for iOS and Android so AI-powered penetration testing guidance can stay accessible across devices.Starting Price: Free -
4
HoneyWire
HoneyWire
HoneyWire is an open-source deception platform deploying canary tripwires across internal networks to detect lateral movement and intrusion activity. How it works: - TUI wizard instantly deploys lightweight, distroless "HoneyWires" onto any Linux host. - Synthetic services run silently with zero reason for legitimate users or scanners to interact with them. - If an attacker touches a HoneyWire, a high-fidelity alert routes directly to the centralized Hub. Deployment Types: - Web Router Decoy: Emulates admin router logins to trap web reconnaissance. - Canary TCP Tarpit: Binds to critical ports to log payloads and slow attacks. - File Canary (FIM): Monitors files to flag unauthorized access to decoy assets. - ICMP Canary: Detects stealthy ping sweeps and raw network mapping. - Network Scan Detector: Catches port scanning across local subnets. The Hub: A self-hosted, Web-UI control center managing node configurations, fleet, and alert routing, with frictionless UX.Starting Price: Free -
5
trueno
trueno
trueno is an AWS cloud intelligence platform that helps engineering, DevOps, FinOps, and security teams monitor cloud environments using a read-only IAM role. It continuously analyzes AWS accounts for security risks, identity issues, cloud misconfigurations, public exposure, compliance gaps, and unnecessary cloud spending without deploying agents or requiring write permissions. The platform combines security monitoring, cloud cost optimization, compliance visibility, infrastructure inventory, and operational insights into a single dashboard. Teams can prioritize findings, automate reporting, monitor multiple AWS accounts, and gain actionable recommendations to improve security posture while reducing cloud costs.Starting Price: $39/month/user -
6
ThreatProwler
CYBERSAFEHAVEN TECHNOLOGIES LLC
ThreatProwler is a continuous threat exposure management (CTEM) solution that scans your digital infrastructure, information assets and applications to identify all the threats that affect your business. Combined with latest threat intelligence, dark web and data breach details, this is the most comprehensive threat management solution built ground up exclusively for small and medium businesses. ThreatProwler offers Enterprise-grade features including scoping and discovery (auto-identifies assets, shadow assets and provides ability to exclude assets that should not be scanned), extensive prioritization features by severity (CVSS, EPSS, KEV) and by assets (can also configure annualized loss expectancy). Last but not the least, an AI-powered Attack Likelihood Score (ALS) (backed by the world's largest database of cyber events) based on mapping to MITRE ATT&CK paths and the possible impact is presented.Starting Price: $1800/year (max. 5 domains) -
7
AISafe Labs
AISafe Labs
AISafe Labs is a fully autonomous platform offering on-demand services like: Penetration testing and Source code auditing with SOC2/ISO27001 audit-ready reports. This means no more waiting in line for availability or expensive quotes. It's just real security reports delivered with hacker expertise and at machine speed, in hours instead of weeks and at a fraction of what traditional security firms charge.Starting Price: $40/month -
8
Dynacop
Forty2 LLC
Dynacop is multi-factor authentication software that secures Windows console and RDP sign-ins while blocking malicious IPs. It adds a second verification layer by requiring a six-digit code from a mobile device after password entry, preventing unauthorized access from stolen credentials. The software supports shared accounts by enabling identity verification via a TOTP authenticator app, with audit logs tracking who accessed shared admin accounts. Dynacop Shield blocks attackers by analyzing failed login attempts, escalating block durations from 15 minutes to 24 hours for repeat offenders, with persistent attackers blocked longer. Installation is simple, requiring no Active Directory. Admins run the installer, register the machine, and invite users to enroll via TOTP apps like Google Authenticator. Compatible with Windows 10, 11, and Server 2012+, it works on domain and non-domain machines.Starting Price: $2/month/user -
9
Occlira
Occlira
Occlira is a desktop app for Windows and macOS that removes personal data from files on your own machine — nothing uploaded, no account, works offline. 18 formats: documents, spreadsheets and email (DOCX, PDF, XLSX, EML, TXT, MD, CSV, incl. scanned PDFs via on-device OCR), audio (MP3, WAV, M4A, FLAC, OGG) and images (JPG, PNG, HEIC, WEBP, TIFF, BMP). Detection spans 40+ PII types in 7 languages, combining a local AI model with checksum-validated patterns. You review every finding before anything changes, with custom always- and never-remove lists. Documents keep their formatting; hidden metadata and tracked changes are scrubbed. Audio is transcribed and split by speaker, with spoken PII bleeped in the track. Faces are blurred and GPS/EXIF stripped from photos. PDF redaction permanently deletes the underlying text. Anonymization is reversible: real values are restored locally after AI. Includes a browser extension, Word add-in and Claude Desktop connector. One-time licence.Starting Price: $159 -
10
Dregs
Dregs LLC
Dregs is fraud detection for SaaS applications. A lightweight JavaScript tracking script fingerprints devices and streams user events; Dregs scores every identity across four dimensions: Humanity (bot and automation detection), Authenticity (fake profiles and disposable emails), Uniqueness (duplicate accounts linked through shared devices, IPs, and sessions), and Behavior (activity compared against expected patterns). Scores are transparent — built from individual analyzer observations you can inspect and tune, not an opaque risk number. Rules raise alerts to the dashboard, email, Slack, or webhooks, and teams adopt in four stages — Scoring, Alerts, Escalation, Autonomy — ending in automated responses like rate limiting and account quarantine. Dregs targets free-trial abuse, promo and referral fraud, duplicate accounts, stolen-card testing, SMS pumping, credential stuffing, and scraping. Setup is self-serve with a free trial and published pricing.Starting Price: $17/month -
11
VerifiedThreat
VerifiedThreat
VerifiedThreat is an AI-driven cybersecurity platform that continuously validates real-world cyber risk through autonomous threat emulation rather than relying solely on vulnerability scanning or theoretical threat intelligence. The platform deploys agentic AI to simulate attacker behaviour against an organisation's external attack surface, verifying whether vulnerabilities are genuinely exploitable and providing evidence-based findings that security, DevOps, compliance, and risk teams can act upon with confidence. Unlike traditional tools that generate large volumes of potential issues, VerifiedThreat is designed to surface only verified threats supported by empirical proof, helping organisations prioritise remediation while reducing alert fatigue.Starting Price: $220/month -
12
Flint AI
SandboxAQ
Flint AI is a local-first, framework-agnostic AgentOps CLI that helps developers determine whether an AI agent is reliable before it reaches production. One command, flintai scan, analyzes Python source code for security vulnerabilities, misconfigurations, risky tool access, missing guardrails, and quality issues, then uses AI reasoning to triage likely false positives. A second command, flintai eval, sends functional and adversarial prompts to a running agent and scores its responses across more than 35 built-in evaluations, including factual accuracy, instruction adherence, prompt injection resistance, jailbreak resilience, and other runtime behaviors. Each agent receives a reliability score, with findings mapped to OWASP Agentic Security Initiative risks ASI01 through ASI10 and severity scored using CVSS v4.0. Flint AI works with agent frameworks and SDKs including Claude Agents SDK, LangChain, CrewAI, Anthropic SDK, OpenAI SDK, MCP servers, and AutoGen.Starting Price: Free -
13
IntelliBreach
IntelliBreach
IntelliBreach is an automated attack surface management and vulnerability scanning platform for SMBs, security teams, and MSSPs. The scanning engine discovers subdomains, IPs, open ports, and technology stacks, identifying CVEs, outdated software, TLS misconfigurations, missing security headers, and email authentication gaps. AI-powered analysis generates an attacker perspective narrative and chains findings into realistic attack paths. Real-time change detection monitors DNS records, assets, and open ports between nightly scans, alerting immediately when anything changes. AWS cloud posture auditing evaluates IAM misconfigurations, public S3 buckets, and compliance gaps. Every finding includes plain-English remediation instructions tailored to your tech stack. MSSPs can manage multiple client organizations and generate white-label branded reports. Professional PDF reports suit cyber insurance and compliance reviews. Free tier available. Plans from $79/month. No agents to install.Starting Price: $79/month -
14
WordSec
WordSec
WordSec is a complete WordPress security suite. The firewall blocks exploits, malicious bots and brute-force attempts with ready-made presets and custom rules. The malware scanner checks file integrity and repairs infected files in one click. Login security adds 2FA, captcha and lockouts; block attackers by IP or country and watch your traffic live. CVE alerts cover plugins and themes, every action lands in the audit log, and alarms reach you by email, Telegram or Slack. Eight modules replace eight separate plugins, and everything runs locally on your own server.Starting Price: $4.90 -
15
IRPForge
IRPForge
Nonprofits and small businesses get hit by cyberattacks as often as anyone else, but they can't afford what enterprise security vendors charge for incident response planning. A single tabletop exercise from a consulting firm runs $5,000 to $35,000. Most organizations skip planning entirely and hope for the best. IRPForge exists to close that gap. The goal wasn't to chase the AI hype. It was to actually use AI where it's useful, to build something solid enough that a small organization could trust it with something this important. You fill out a guided intake form about your organization. No security background needed. IRPForge uses that, along with CIS Controls v8 and the NIST Cybersecurity Framework as the underlying structure, to generate a branded, audit-ready incident response plan you can download immediately. IRPForge isn't certified or endorsed by NIST or CIS. It's built on their public standards.Starting Price: $199 one time -
16
FolSec
FolSec
FolSec is a comprehensive data access management and security platform designed to protect enterprise file systems across on-premises and cloud environments. It provides centralized visibility and control over NTFS permissions, Active Directory groups, user access, and file activities. The platform enables organizations to discover sensitive data, create meaningful access matrices, identify excessive or unauthorized permissions, manage access requests, and review user privileges. Its audit and anomaly detection capabilities monitor who accessed, modified, moved, or deleted data and can detect suspicious behavior, insider threats, mass file operations, and ransomware activity. FolSec also includes file analysis, stale and duplicate file detection, permission backup and recovery, automated response actions, Active Directory reporting and management, and secure file sharing with expiration, password, download, IP, and two-factor authentication controls. -
17
M4PAM
Mamori.io
Unlike other PAM solutions, M4PAM extends privileged access control into the database. It combines server-level access management, SSH and RDP, identity-based sessions, credential management, and full session recording, with a Database Privileged Access Management (DBPAM) layer that governs which tables, columns, and rows each user can see, edit, or export. Traditional PAM disables an Active Directory account but leaves local database credentials untouched; M4PAM closes that gap. Users authenticate through single sign on and two factor authentication instead of shared credentials, request access on demand, and lose it automatically once it expires. An SQL Firewall and dynamic data masking add further control over database activity. M4PAM can run as a standalone PAM solution or layer on top of an existing third party PAM to close the database gap without replacing it. It connects to native database clients and BI tools, and deploys without agents.Starting Price: $1440/user/year -
18
Oberhahn
Oberhahn
Oberhahn is organizational intelligence for AI. Connect your coding agents, LLM providers, SDKs, and proxies with a one-liner or copy-paste config. Live data streams to your dashboard immediately, then we surface what matters across your entire organization: security exposures in prompts and tool calls, real-time AI spend attributed to models and teams, context intelligence showing what your agents send and repeat, and behavioral intelligence revealing which teams and workflows actually drive AI value. See your organization's AI usage in real time, attribute it to people and teams, and prove impact where it matters most.Starting Price: $49/month -
19
Vulnotes
Vulnotes
Vulnotes is a modern, all-in-one platform for managing cybersecurity audits and writing penetration testing reports, covering the entire engagement lifecycle, from mission planning to the final deliverable. - 📅 Plan & Schedule Missions With Calendar And Availability Management - 👥 Assign Your Team With Roles & Permissions - ✍️ Write Reports In A Visual Editor - 👀 See A Live Preview Of Your Report As You Write It - 🤝 Collaborate In Real Time With Your Whole Team - 🗂️ Reuse Findings With A Vulnerability Template Library - 🤖 Generate Vulnerabilities From Screenshots With Built-In, Multi-Provider AI - 🌍 Translate Automatically Across Languages - 🔒 Keep Data Safe With Automatic Anonymization & Local AI Models - ✅ Review & Validate Reports Before They Ship - 📄 Export Beautiful Deliverables (DOCX, PDF, CSV, JSON, ZIP) In One Click - ☁️ Run It In The Cloud Or 💻 Self-Hosted On-PremiseStarting Price: $48/month -
20
CaaB
CaaB
CaaB is a simple, powerful cloud platform built specifically for managed service providers, combining high-performance infrastructure with a unified, fully white-label Cloud Web Manager. MSPs can deploy and manage virtual machines, virtual desktops, managed Kubernetes, cloud storage, CDN, cloud backup, dedicated firewalls, load balancers, web application firewall, and disaster recovery from one environment. The Cloud Web Manager provides an easy-to-navigate GUI, full automation and API access, multi-tenant user management, two-factor authentication, and usage reporting, helping partners manage customer cloud services under their own brand. Virtual machines are designed for high performance and easy scaling, with customizable hardware, SSD storage, Linux or Windows operating systems, and rapid deployment. Managed Kubernetes removes the need to install, manage, and operate clusters manually, with automated management, built-in security, portability, etc.Starting Price: $101 per month -
21
OSINTverse
OSINTverse
OSINTverse is an open-source intelligence ecosystem that provides investigation tools, data-provider integrations, APIs, educational content, and community resources. Its SearchIn platform offers a UI-first investigation workspace where users can start with an identifier, query multiple integrated OSINT providers, and organize findings into cases. GraphIn provides a graph-first workflow for starting with an entity, expanding relationships through transforms, triaging results, and sharing investigation snapshots. Both products use the same prepaid wallet, with no subscription or per-seat requirement and credits that do not expire. OSINTverse also provides a SearchIn API for engineering teams, shared team workspaces, and integrations with providers such as Shodan, SecurityTrails, DeHashed, Snusbase, Hunter.io, BuiltWith, WhoisXML, and OSINT Industries.Starting Price: $10 -
22
Windwall
RoVo
Windwall is a control center for the Windows Firewall already built into Windows 10 and 11. It shows every connection your PC makes as it happens and blocks any program in one click, with real Windows Firewall rules rather than a second firewall engine. A live log shows the program, address, port and protocol behind each connection. When an unknown program is blocked, a prompt asks: Allow or Block? Three security postures can be switched from the tray, and "Block with Windwall" in the Explorer menu blocks any program or folder. No kernel driver, no background service, no telemetry. Windwall PRO is an optional one-time purchase that adds Shield (a malicious-IP blocklist and malware-filtering DNS), a per-app traffic monitor, connection history, a world map and much more. Available in the Microsoft Store.Starting Price: Free -
23
Altar-1
Aikido Security
Aikido Altar is an open-weight security model built to bring frontier-grade defensive security intelligence into infrastructure organizations' control. It is designed for sovereign security environments where sensitive source code, architecture documentation, vulnerability findings, and other internal context cannot be sent to third-party inference services. Altar is based on GLM-5.3 and uses quantization and expert pruning to reduce the model from 1.51 TB at full precision to 328 GB while preserving most of the parent model’s reasoning and security capabilities. It retains 168 of the original 256 routed experts per backbone expert layer and uses a W4A16 representation, making deployment more practical for agentic security workloads with large and growing context windows. Expert selection was calibrated using internal pentesting traces and multilingual data, with no customer data involved, to preserve cybersecurity, coding, and language understanding.Starting Price: $350 per month -
24
KnoxCall
KnoxCall
Every app, build pipeline and AI agent that calls Stripe, OpenAI or another third-party API needs its key, so copies of live keys pile up in .env files, CI settings, laptops and agent environments. Each copy can leak through a poisoned package, a prompt-injected agent or a compromised build, and a stolen key keeps working until it is replaced everywhere. KnoxCall keeps the real key in one place and adds it to each call on its way out. Your apps, pipelines and agents hold only a KnoxCall token. If one leaks, one click revokes it everywhere, without rotating the provider key. Every call is logged with the app or agent that made it. AI agents get spend limits, prompt checks, and redaction of the personal data KnoxCall detects. CI can use workload identity instead of a stored secret, and Enterprise adds a master key held in your own cloud account, SSO and SCIM. SDKs for Node, Python, Go, PHP, Ruby, React and the browser. Free plan, no card; paid plans from $19 a month.Starting Price: $0 -
25
AIBound
AIBound, Inc.
AIBound is an AI security control plane for enterprise security and IT teams. It discovers AI apps, agents, models, browser extensions, and MCP servers across endpoint, browser, network, code, and cloud environments, then links them to identities, permissions, and data connections to assess risk. Teams can review AI risk grades, route findings for review, alert users, create tickets, or block activity through existing endpoint, network, and workflow tools such as Intune, Zscaler, and ServiceNow. The platform also maintains AI inventories and governance evidence to support enterprise AI oversight. AIBound is agentless and read-only for discovery, and is designed to connect with an organization’s existing security and IT stack rather than require new endpoint software.Starting Price: $6/license/month -
26
ScruteX
ScruteX
ScruteX is a cloud-based continuous threat exposure management platform for security teams, CISOs, and managed security service providers. It combines external attack-surface discovery and vulnerability assessment with monitoring for exposed credentials, data leaks, brand impersonation, third-party vendor risk, and sector-specific threat intelligence. The platform helps teams maintain visibility into internet-facing assets, assess exposure using threat context, and review security findings across their assets, brands, suppliers, and threat landscape. ScruteX is agentless and includes a free tier with one monitored domain, limited keyword monitoring, basic dashboard access, and monthly reports with limited results. Paid plans add selectable modules, broader monitoring, and enterprise capabilities such as continuous monitoring and red-team testing.Starting Price: $0 -
27
BreachLine
BreachLine Labs
BreachLine is a security testing platform centered on Nebula, an AI security engineer that helps teams scope authorized assessments, plan and run tests, investigate potential weaknesses, review evidence and remediation guidance, produce reports, and retest fixes. It supports testing of web applications, APIs, mobile applications, cloud environments, networks, and AI systems, with scheduled work, shared team workspaces, and integrations with communication and issue-tracking tools. Usage is credit-based, with monthly subscription plans and an enterprise per-seat option. BreachLine also offers a separate toolkit of 16 free, no-signup browser security tools for reviewing dependencies, comparing lockfiles and SBOMs, and checking CI workflows and application settings. Deterministic local checks run in the browser; hosted MCP reviews process submitted content on BreachLine systems.Starting Price: £399/month -
28
Dataspike
Dataspike
Dataspike is a modular identity verification, AML screening, fraud detection, and video security platform for fintech, payments, crypto, iGaming, trading, neobanks, marketplaces, and other businesses that verify users. It supports KYC and KYB checks, OCR for custom documents such as Thai bankbooks, zero-knowledge KYC for Web3, sanctions, PEP and adverse media screening, and crypto wallet checks. Its deepfake and forgery tools analyze photos, video, audio, live calls, and altered or AI-generated documents. Video security features include camera-based face recognition, object detection, video analytics, and personal-data redaction in footage. Organizations can use modules separately or combine them in onboarding and risk workflows. Dataspike's models are developed in-house. Integration options include APIs, SDKs, and white-label delivery, with cloud and on-premises deployment.Starting Price: $0.005/sec -
29
Varaxon Scan Hub
Varaxon Technologies
Varaxon Scan Hub is a web-based service for turning Tenable Nessus and Greenbone/OpenVAS vulnerability exports into reports. Users upload a Nessus .nessus XML or Greenbone/OpenVAS XML file; the service extracts findings, hosts, plugin identifiers, and structured CVE references when present. Reports include an executive summary and per-finding details, state when the source export does not support CVE-based assessment, and preserve conflicting records for human review rather than silently merging them. The product is designed for security teams and consultants who need to share scan results and explain coverage limits to clients or stakeholders. A free anonymous pre-flight assessment lets users check what an export supports without an account, payment card, or email. The first three reports are free; monthly and yearly plans and individual pay-as-you-go reports are also available.Starting Price: $49/month -
30
Idura Verify
Idura
Idura Verify is a hosted identity-authentication service for organizations that need users to sign in to websites and apps with electronic identities (eIDs). It connects services to national and commercial eID providers through one integration, using standards such as OpenID Connect and OAuth 2.0, and supports methods including Danish MitID, Swedish and Norwegian BankID, Finnish Trust Network, Dutch iDIN, and German Personalausweis. Developers can integrate it with JavaScript, React, Node.js, .NET, and identity providers such as Auth0 and Okta. The service supports user authentication, session management, and customizable user-facing screens. Organizations can test integrations in a free sandbox before enabling real-user sign-ins on a paid plan.Starting Price: €67/month
