Best IT Security Software in Germany - Page 98
View:
Compare the Top IT Security Software in Germany as of November 2026 - Page 98
Sort By:
-
1
Fallax
Fallax
Fallax runs internal phishing simulations inside your own Google Workspace or Microsoft 365 tenant, trains people the moment they click, and turns the result into audit evidence. Simulations are injected straight into mailboxes through your tenant, so there is no sending domain and nothing to allowlist: no SPF, DKIM or DMARC setup, no effect on email reputation. Anyone who clicks gets a short training page. Scheduling is per person and automatic, adjusted by how each one handled the last simulation, capped and paced by rules you set. One export covers ISO 27001, SOC 2, NIS2, DORA, PCI DSS, HIPAA, GDPR Article 32 and NIST CSF, and syncs to Vanta, Drata, Secureframe and Sprinto. Also included: phishing reports credited automatically from Outlook or a Gmail add-on, app discovery that aims lures at the tools staff really use, department standings, a REST API and an MCP server. EU-hosted and GDPR compliant. Submitted credentials are never stored. First 10 seats free, permanentlyStarting Price: $1/month/user (falls to $0.40) -
2
AI Safety 101
Mandrify
Your team uses AI every day. Prove they use it safely. AI Safety 101 is 14 interactive modules built on real, documented incidents - the Samsung ChatGPT source-code leak, a $25M deepfake CFO video call, AI hallucinations filed in court. Every module puts the learner inside the moment the decision got made, scores their choices, and issues a verifiable certificate; the firm gets a completion evidence file ready for an SEC/FINRA exam. Per-seat annual pricing from $48/seat with a 5-seat minimum. Live the same day: pick a plan, send one link, export the evidence. Built to the standard examiners hold financial firms to. Free demo module.Starting Price: $48/seat/yr, 5-seat min -
3
Operator by Planck Proof
Planck Proof
Operator by Planck Proof is an agentic API penetration testing tool. Give it your OpenAPI spec and credentials for two or more roles; it tests every operation across roles and tenants for authorization flaws (BOLA, BFLA, BOPLA), broken authentication, injection, mass assignment and business-logic abuse, chaining findings into attack paths. Coverage maps to the OWASP API Security Top 10 and includes REST, GraphQL and gRPC APIs, plus the APIs behind AI agents, LLM apps and MCP servers. Every finding ships with the exact request and response, a CVSS score and a runnable proof-of-concept your engineers can execute to confirm the issue and verify the fix. Scope, rate and data controls keep runs safe against real environments, and you can steer or pause the agent at any time. Run it on every deploy, retest fixes, and send findings to Jira. Reports are built for engineers and auditors (SOC 2, PCI DSS, HIPAA). First scan is free; Pro and Enterprise are quoted per API by endpoint volume.Starting Price: $0 -
4
ScanLabsAI
ScanLabsAI
ScanLabsAI is an AI-powered website vulnerability scanner for agencies, MSPs and development teams. It scans against the OWASP Top 10 for Web, API and LLM applications - the last of which most scanners do not cover - and detects leaked AI/LLM provider keys, exposed agentic-tool configuration and GraphQL introspection. Each deep scan runs over 40,000 checks covering CVE detection, SSL/TLS analysis, security headers and DNS. Connected GitHub repositories are scanned for hardcoded secrets and vulnerable dependencies, so problems are caught in source as well as in the deployed site. Findings include AI-written remediation guidance. Scanning is non-intrusive and read-only, completes in under 20 minutes, and reports are never stored. The Agency plan covers 50 client sites for GBP 249/month with white-label PDF reports. The first scan of any website is free. A native MCP server, listed in the official MCP Registry, lets scans run directly from Claude.Starting Price: £9.99; £249/month -
5
DRKCACHE
AFTRDRK
DRKCACHE is a conversational threat intelligence platform powered by AI and grounded in cyber threat intelligence, designed to give security teams precise answers from exclusive sources without relying on traditional search or dashboards. Users can ask questions directly and receive intelligence drawn from AFTRDRK’s underlying threat data and research, turning complex investigations into a conversational workflow. Real-time detections interrupt when an organization appears in relevant threat intelligence, helping teams identify potential exposure as it surfaces rather than waiting for periodic reviews. DRKCACHE can also generate intelligence reports on demand and scope requests for information (RFIs) in seconds, supporting faster investigation and decision-making during active security operations. Its feature set includes real-time detections, priority RFI submission, an actor knowledge base, flash advisories and intelligence briefs, and access to raw threat data for deeper analysis.Starting Price: $2,000 per month -
6
DarkStrata
DarkStrata
DarkStrata is a dark web monitoring and stolen-credential detection platform for businesses, MSPs, MSSPs, and SOC teams. It continuously monitors infostealer logs, breach dumps, criminal forums, Telegram, leak sites, marketplaces, and paste sites, matching exposed data against your domains, employees, and customers. Its focus is fresh stealer data from 20+ malware families, including Lumma, StealC, Vidar, and RedLine, which can expose passwords, session cookies, autofill data, and device fingerprints within 24–48 hours. An 80+ signal scoring engine filters fake, stale, corrupted, and irrelevant records, while genuine exposures receive Info–Critical threat scores based on organizational context. Microsoft Entra ID and Google Workspace sync keep identity matching current. Lens privately guides affected employees through password resets, session revocation, and security training.Starting Price: £259/year -
7
DeepState
DeepState
DeepState is a desktop investigation analysis platform for OSINT analysts, investigative journalists and corporate security teams. People, organisations, events, documents, social posts, locations and crypto wallets sit on one infinite canvas as typed nodes, joined by reasoned connections (funds, controls, contradicts), with a timeline, narratives and full-text search. An AI agent beside the board has 70+ research tools: web search, page capture, Wayback Machine, WHOIS, X, Reddit, Bluesky, YouTube, LinkedIn, CourtListener, SEC EDGAR, sanctions lists, historic newspapers, blockchain and OpenStreetMap. It creates and links nodes itself, cites sources, and every action can be undone. Captured evidence keeps its URL, retrieval time, archived copy and credibility rating. Boards export to briefing decks and PDFs. Case data stays in a local SQLite file; use Claude, ChatGPT, OpenRouter, OpenCode or offline Ollama. Windows, macOS, Linux.Starting Price: $29/month -
8
Diras
Diras
Diras is an AI-native cyber threat intelligence platform built in Saudi Arabia that shows organizations what attackers already know about them. Dark Web Monitoring scans breach dumps, infostealer logs, combo lists and underground markets for exposed employee and customer credentials and infected devices, with passwords masked in every view. Brand Protection detects typosquat and lookalike domains and fake social accounts on Instagram, TikTok, X and LinkedIn, then manages takedowns end to end. External Attack Surface Management maps internet-facing domains, subdomains, IPs, services and certificates and ranks vulnerabilities by severity with fix guidance. AI risk scoring reduces noise, an in-app assistant explains findings, and a read-only MCP server lets teams query live data from Claude, ChatGPT or Cursor. Arabic and English interface, in-Kingdom hosting, NCA, SAMA and PDPL alignment, and unlimited users on every plan.Starting Price: $4000/year -
9
nPro AI
nPro AI
nPro AI is a self-hosted security platform that combines SIEM, XDR, DLP and EMS network monitoring in one product, running entirely on your own servers so security data stays on infrastructure you control. nPro SIEM collects logs from Linux and Windows endpoints, firewalls, network devices and cloud workloads including AWS, Azure, Docker and Kubernetes. Teams can write custom detection rules or import Sigma rules, correlate events against MITRE ATT&CK and investigate grouped alerts with analyst notes. Built-in reports cover ISO 27001, PCI-DSS, GDPR and PDPA, with retention set per log source. nPro DLP blocks sensitive data leaving via USB, cloud uploads and clipboard, controls screen capture and monitors printing. Pricing is per agent, not per GB of logs, with a free plan for up to 99 agents. Built for regulated organisations and MSSPs in Southeast Asia that need to keep security data under their own control.Starting Price: $4.50 -
10
RatelKey
RatelKey
RatelKey is a self-hosted secrets management platform for securely storing, accessing, and managing application secrets without the infrastructure complexity of traditional enterprise solutions. Secrets stay inside your own Burrow instance, while RatelKey provides authentication, access management, updates, and administration. It supports projects and environments, machine identities, role-based access control, IP restrictions, audit logs, canary secrets, encrypted backups, webhooks, SAML/OIDC SSO, SCIM provisioning, and CLI/SDK access. Burrow can run on Linux, Windows, macOS, or Docker, and applications continue retrieving secrets directly from your infrastructure even if the RatelKey control plane is unavailable. RatelKey is designed for teams that have outgrown `.env` files and scattered CI secrets but do not want to operate a complex secrets-management stack.Starting Price: $30/month -
11
Insomnia
CQR
Insomnia is an autonomous AI pentesting and offensive security platform from CQR Cybersecurity. Point it at a target and its AI red team runs recon, vulnerability scanning, OSINT, CVE validation, exploitation and privilege escalation across web apps, APIs, networks, cloud and Active Directory, then writes a client-ready PDF, DOCX or HTML report with CVSS scoring and fixes. It brings 275+ security modules into one tool: SAST and DAST, secret detection with live key validation, dependency and CVE scanning, API and GraphQL testing, wireless audit, Active Directory auditing with BloodHound, an HTTP interception proxy and a CI/CD pipeline builder. It also ships Insomnia OS, a Debian-based offensive OS. There is a free Community Edition and a free SAST engine (pip, npm, Docker, Homebrew, plus VS Code and JetBrains plugins). Paid Advanced and Pro plans add full AI automation, the 30,000+ CVE database, exploitation tooling, OSINT and mobile analysis.Starting Price: $149/month -
12
AIPTx
IntelligenceX
AIPTx is an AI-powered penetration testing and VAPT platform developed by IntelligenceX. It automates security testing across web applications, APIs, networks, cloud environments, and CI/CD pipelines. AIPTx uses AI agents for reconnaissance, attack-surface discovery, vulnerability identification, exploitation, and validation, helping security teams distinguish exploitable vulnerabilities from unvalidated findings. The platform provides proof-of-concept evidence, risk prioritization, remediation guidance, and compliance-ready reports. It supports continuous security testing, authenticated assessments, API security, web application testing, network testing, and DevSecOps workflows. Findings can be exported and integrated into tools used by security and development teams. AIPTx is designed for authorized security testing only.Starting Price: $499/month -
13
ThreatSpy
Secure Blink
ThreatSpy by Secure Blink is an autonomous DAST and API security testing platform that runs 24x7 continuously without requiring a human trigger. Every finding passes through a dedicated AI Review layer that validates exploitability and business impact before surfacing to the developer queue — delivering 90%+ reduction in false positives. Remediation Campaigns and Automated Playbooks close the loop from detection to verified fix, auto-creating tickets in Jira, Trello, and ServiceNow on detection. Key capabilities: Continuous autonomous DAST, REST, GraphQL, OpenAPI and Postman Collection API security testing, OWASP Top 10, OWASP API Top 10 and SANS CWE Top 25 coverage, AI Review per finding, Scan Comparison across releases, CI/CD integration with Jenkins, GitHub Actions, GitLab CI, Bitbucket, Azure DevOps and CircleCI, SaaS, Private Cloud and On-Premises deployment. Rated 4.7/5 on G2. GrindStone Award winner RSA 2026. Free 14-day trial. No credit card required. -
14
AgentRidge
Agent Ridge
AgentRidge is desktop security-audit software for assessing e-commerce websites, customer portals and other web platforms within an authorized testing scope. Its AI agents explore defined pages, account roles, checkout flows, business rules, exposed services and data, coordinating security tools as part of an investigation. The software presents findings with evidence, reproduction steps, severity and business impact, and generates PDF reports for developers and security teams. Users can run independent assessments on macOS, Windows or Linux through the command-line edition; audit data and results are stored locally, while account, licensing and payment functions use online services. AgentRidge is intended for e-commerce operators, web-platform teams, agencies, developers, security engineers, penetration testers and red teams. Buyers may choose an annual software license for self-directed audits or a separately scoped, vendor-delivered audit and remediation service.Starting Price: €500 per-audit -
15
Clone Systems Penetration Testing
Clone Systems, Inc.
Automated Penetration Testing from Clone Systems is a browser-based security testing service for teams that need to assess external and internal infrastructure, Active Directory, cloud environments, web applications, and supported APIs. Users define targets and exclusions in a portal, then launch production-safe attack playbooks that attempt to validate whether weaknesses are exploitable. Findings include severity and exploit evidence, remediation guidance, and mapping to MITRE ATT&CK; teams can rerun tests after fixes during the 30-day testing window. Reports provide an executive summary and technical details for security and compliance workflows, including PCI DSS 4.0.1, HIPAA, SOC 2, and ISO 27001. Clone Systems also offers separately scoped, engineer-led penetration testing for engagements requiring human-led assessment.Starting Price: $1,995 one-time -
16
Trout Access Gate
Trout Software LLC
Access Gate is an on-premises network security platform for industrial and other critical environments. It is supplied as a hardware appliance or virtualized deployment and creates managed security zones over existing network infrastructure. The platform discovers and inventories connected OT, IT and IoT assets, applies identity-based access policies and microsegmentation, and provides controlled remote access to individual machines. Proxy-based connections can help protect legacy equipment, while session recording and tamper-evident event logs support operational review and compliance workflows. Organizations can use it to separate production networks from enterprise systems, limit lateral movement, and provide time-bounded access for vendors and integrators. It is aimed at security, IT and operations teams in manufacturing, utilities and other critical-infrastructure settings.Starting Price: $5450/year -
17
Firefox Enterprise
Mozilla
Firefox Enterprise is a paid browser governance product from Mozilla, designed for security-sensitive organizations. It pairs managed Firefox with an administration console deployed on the customer’s infrastructure. IT teams can configure browser policies, manage users and device posture, control access to internal web applications, and govern extensions, telemetry, AI tools and data flows. Controls include data-loss-prevention rules for pasting, file uploads, downloads and printing, plus Lockdown Mode, profile encryption and optional watermarking. Administrators can export security events and admin activity to SIEM systems and configure company sign-in through identity providers that support OpenID Connect. Firefox Enterprise supports Windows, macOS and Linux desktop environments and is intended for IT, security and compliance teams, including those in regulated organizations. -
18
CrowdStrike Falcon Cloud Security
CrowdStrike
CrowdStrike Falcon Cloud Security is a unified cloud security platform designed to stop breaches from code to runtime with agentless visibility, the Falcon sensor, real-time detection, AI-driven insights, and automated response. It provides continuous visibility across what organizations build and run, helping teams identify adversary risk, investigate threats faster, and stop attacks across multi-cloud environments. Cloud Detection and Response delivers real-time visibility into cloud control-plane activity and correlates cloud signals with endpoint and identity data so SOC teams can detect adversaries earlier. Agentless posture management enriches cloud-risk findings with adversary intelligence and graph-based context to prioritize exploitable exposures and reduce the attack surface. It also secures cloud workloads, containers, Kubernetes environments, identities and entitlements, infrastructure as code, software bills of materials, sensitive cloud data, etc. -
19
Eleve Admin
Eleve Admin — Independent Project
Eleve Admin helps IT teams replace permanent local administrator rights with controlled, time-limited access on Windows computers. From a central web console, administrators can approve temporary admin sessions, review application installation requests and track related audit events. Additional tools include hardware and software inventory, local administrator account visibility, on-screen messages with read confirmation, remote device lockdown and Windows agent update management. The console supports English, Polish and German. A Windows agent connects enrolled devices to the cloud service. Eleve Admin is independently developed in Poland and is currently in beta. Businesses can request a free 60-day evaluation for up to 10 Windows devices. Commercial pricing has not yet been announced. -
20
inforcer
inforcer
inforcer is a Microsoft 365 management and security platform built for Managed Service Providers (MSPs) to sell, secure, and support Microsoft 365 and Copilot at scale. Combining multi-tenant management with threat detection and response, it helps MSPs consolidate tools, standardize configurations, and strengthen security across their customer base. Its 365 Manager enables users to deploy and manage policies, eliminate configuration drift, assess tenant security posture, and align environments with recognized security frameworks. Centralized capabilities include user and group management, application and device deployment, streamlined onboarding and offboarding, policy backup and restoration, and PSA integrations. inforcer TDR delivers real-time threat detection, AI-powered alerting, automated incident containment, forensic reporting, and continuous security improvement. -
21
ChillScan
ChillScan
ChillScan scans live website URLs in about 30 seconds for security, SEO, and performance issues. It checks for exposed OpenAI or Supabase keys in client-side JavaScript, missing security headers, HTTPS and redirect issues, basic SEO gaps, and performance problems, then presents findings in plain English. It works with any website and is especially useful for sites and apps built with Lovable, Bolt, v0, Cursor, or Replit. A free scan requires no signup and shows top findings. The $12 one-time Deep Scan provides all findings with evidence and a copy-ready AI fix prompt for Cursor or Claude. Intended for indie hackers, developers, startups, and small businesses preparing websites or web apps for launch, ChillScan checks only information a public visitor's browser can see; it requires no logins and performs no intrusive testing.Starting Price: $12 one-time -
22
Redecta
Redecta
Redecta is a browser-based data protection product for people and organizations that use generative AI services. Its Chrome extension detects selected sensitive information in prompts and masks it before prompts are sent to supported AI platforms. Users can apply predefined detection types and create custom masking rules, while teams can manage masking settings, AI-use policies, and activity visibility through a web dashboard. The product is designed to work within supported browser-based AI workflows, so users can continue using those services rather than switching to a separate AI interface. Redecta is intended for individuals and teams seeking to reduce the chance that personal, customer, confidential, or internal information is included in AI prompts. Availability depends on the supported platforms and browser setup.Starting Price: $12/month -
23
RedSparta
COTE DEV
RedSparta is an AI-assisted web application security testing platform for developers, SaaS teams, web agencies, and security professionals. Users define authorized domains and exclusions, configure a dedicated test account for authenticated pages, and review findings by severity with evidence, remediation guidance, and coverage limits. After applying a fix, users can launch a retest and compare the result with the original finding. Reports help teams share findings with clients and stakeholders. Developed by COTE DEV, RedSparta is a hosted SaaS offering one-time credit packs and subscriptions for recurring security checks. The Discovery Pack costs €69 one-time. Subscriptions start at €147/month. Credit consumption depends on scan configuration. Automated scans complement manual security assessments; they do not certify that an application is vulnerability-free.Starting Price: €69 one-time -
24
StaticSpider
StaticSpider
StaticSpider is a cloud security platform for development, DevOps, and security teams. It brings together source-code checks for secrets, application vulnerabilities, dependency risks, and software bills of materials with container and cloud-configuration scanning. The platform also describes web penetration checks, AI-assisted code analysis, and tools for device and firewall protection. Teams can review findings, assign validation, and use reports to track security work across code and infrastructure. A free passive website security check is offered alongside platform access. StaticSpider is presented as a single service for organizations seeking to examine application code, cloud environments, containers, and websites from a shared security workflow. -
25
RemoteView
RemoteView
RemoteView is a real-time global intelligence map that combines public information about conflict and unrest, internet outages, shipping chokepoints, earthquakes, and other disasters in one live view. It covers key maritime routes including the Red Sea, Suez, Hormuz, Panama, and Malacca, and provides country pages and live situation hubs for exploring events by place and topic. The service is intended for analysts, journalists, OSINT researchers, and risk and security teams monitoring public events and changing conditions across regions. The map places these open-source signals in geographic context and helps users follow developments relevant to research, reporting, and risk awareness. A public demo is available on the website, alongside Personal and Pro subscription plans and a seven-day trial.Starting Price: $19.99/month -
26
The MCP Census
MCP Census
The MCP Census is a web-based evidence-checking service for developers and teams that use Model Context Protocol (MCP) servers. It compares server listings with public signals such as repository identity and status, package availability, hosted endpoint health, registry records, and vulnerability advisories. Users can look up a server or submit an MCP configuration and receive PASS, REVIEW, BLOCK, or UNKNOWN results under a versioned policy, with reasons and supporting evidence. The service is accessible through a website, REST API, and remote MCP server, and can be used in agent workflows and CI checks for configuration changes. Setup guides connect it to coding agents and developer tools. MCP Census is an initial public-evidence gate, not a malware scanner, penetration test, or guarantee that a server is safe to run.Starting Price: $0 -
27
Bitdefender AI Guardian
Bitdefender
Bitdefender AI Guardian is a macOS security application for people who use autonomous AI agents, including developers and other technical users. It installs a local background service and command-line interface that checks agent activity against user-defined policies. The software inspects prompts, tool calls, MCP servers, installed skills and file access, and can allow, flag or block actions. It can scan skills and MCP servers, help keep credential paths away from agents, and record decisions in an encrypted local audit log for review. Users can also receive private direct-message alerts through a selected chat platform. In its beta, AI Guardian supports Claude Code, OpenClaw and Hermes Agent and is offered free for macOS; the company describes additional operating-system support as planned. It is intended to add controls around agent actions rather than replace an AI model, agent framework or conventional antivirus.Starting Price: $0 -
28
PageVeil
PageVeil
PageVeil is a browser extension for masking sensitive information on live webpages before screen shares, product demos, customer calls, recordings, and screenshots. Users can blur or hide a selected element, draw a protected region, or cover highlighted text, then save rules to reapply by URL, page path, or domain after refreshes and in-app navigation. It can replace real names, contact details, amounts, IDs, and other values with demo-safe data, while Pro adds unlimited saved rules, one-click Demo Mode, scanning for 40+ types of sensitive data, and browser-tab title and favicon masking. PageVeil is intended for sales and solutions teams, product marketers, customer success and support staff, consultants, founders, trainers, and educators who present real web apps. Normal page protection runs in the browser. It is available as an extension for Chrome, Edge, and Firefox.Starting Price: $0 -
29
Rocket
Digital DNA Technologies
Rocket is a cloud-based digital forensics and incident-response evidence collection platform for corporate legal, e-discovery, and security teams. Users initiate remote collections from Windows endpoints and iOS devices through secure links, without installing persistent endpoint software. Collection workflows gather selected endpoint data and mobile-device evidence, then route files to customer-controlled storage. The service records collection activity and generates cryptographic hashes to support integrity review and chain-of-custody documentation. Teams use collected material in legal holds, internal investigations, incident response, and e-discovery workflows. Rocket helps organizations preserve distributed digital evidence while reducing the need to ship devices or storage media. -
30
Control Pack
Exploit Pack VOF
Control Pack is a commercial multi-agent command-and-control platform for user-mode red-team operations. It provides payload generation, configurable communications, persistent endpoint sessions, remote tasking, interactive terminals, file transfer, artifact collection and post-exploitation across Windows, Linux, macOS, JVM, .NET, scripting runtimes and browser sessions. Its agent portfolio includes native Windows agents and a cross-platform Rust agent with encrypted reverse SOCKS5 tunneling.Starting Price: €1,200/user/year
