Best IT Security Software for Linux - Page 13
View:
Compare the Top IT Security Software for Linux as of July 2026 - Page 13
Sort By:
-
1
Proton Authenticator
Proton
Proton Authenticator is a privacy-first two-factor authentication app that generates time-based one-time passwords to add an extra layer of login security for online accounts beyond just a password, so users can secure accounts across all their devices. It is open source and uses end-to-end encryption, meaning all cryptographic operations and secret keys are generated and stored locally, and even Proton cannot see your unencrypted 2FA data, offering transparency and strong privacy by design. Users can sync 2FA codes across devices with encrypted backups (including via iCloud or a Proton Account), import existing codes from other authenticator apps, and export them if needed, giving flexibility and control over 2FA secrets without vendor lock-in. Proton Authenticator is free to use, has no ads or tracking, and supports secure practices like biometric locks and offline access, so users can generate login codes.Starting Price: Free -
2
Ente Auth
Ente
Ente Auth is a free, open-source two-factor authentication app that helps users generate and manage time-based one-time passwords to secure logins for online accounts with an extra layer of verification beyond just a password, offering end-to-end encrypted backups so you never lose your codes and they remain private even to the service itself. It syncs codes across mobile, desktop, and web clients using fully encrypted channels, lets users import existing 2FA tokens by scanning QR codes or manual entry, and provides features like offline code generation, tagging and searching of codes, pinning favorites, icon identification, and quick “next code” display for faster logins. Backups are encrypted with audited cryptography, giving users peace of mind that only they can decrypt and access their 2FA secrets, and codes can be shared securely with teammates via encrypted links with optional expirations.Starting Price: Free -
3
HCL BigFix SaaS Remediate
HCL Software
HCL BigFix SaaS Remediate is a cloud-native automated vulnerability remediation platform that closes the gap between detecting a vulnerability and fixing it — without any infrastructure to deploy or maintain. While traditional tools scan and report, BigFix automates the entire remediation lifecycle. Deploy in minutes. Access 500,000+ pre-tested Fixlets covering 120+ OS versions and 700+ third-party applications. Achieve 98%+ first-pass patch success across your endpoints. Key capabilities: Automated patch deployment, CyberFOCUS Analytics for threat-prioritized remediation using CISA KEV and MITRE ATT&CK data, IVR with Tenable, Prescriptive Guidance to focus effort on highest-risk exposures, and Protection Level Agreements (PLAs) to track and prove remediation performance. Purpose-built for IT and security teams that need faster remediation, zero infrastructure overhead, and measurable risk reduction. -
4
ComputeSDK
ComputeSDK
ComputeSDK is a free and open-source toolkit designed to enable developers to safely run external or user-generated code within their applications through a unified and consistent interface. It provides a TypeScript-native API that abstracts multiple compute providers, allowing developers to switch between environments such as E2B, Vercel, Daytona, Modal, and others without modifying their core codebase. It is built around isolated sandbox environments, which ensure that executed code runs securely without impacting the host infrastructure, making it suitable for applications that require controlled execution of untrusted code. ComputeSDK supports key capabilities such as executing code and shell commands, managing filesystems, creating and destroying sandboxes, and integrating with modern web frameworks like Next.js, Nuxt, and SvelteKit.Starting Price: $500 per month -
5
VORXOC
Helxon
VorXOC by Helxon is a unified SOC platform designed to simplify and strengthen modern cybersecurity operations. The platform centralizes security monitoring, threat detection, incident response, and security analytics into a single dashboard, helping organizations reduce alert fatigue and improve response efficiency. VorXOC integrates with cloud platforms, SIEMs, firewalls, endpoint security tools, and other security solutions to provide real-time visibility across IT environments. The platform supports threat hunting, automated workflows, security monitoring, and advanced analytics for modern enterprises and managed security operations teams.Starting Price: $500/month -
6
SikkerKey
SikkerKey
SikkerKey allows you to manage application secrets across every machine in your stack using secure, machine-authenticated requests instead of bearer tokens. Instead of distributing replayable scoped tokens, SikkerKey verifies machine identity with asymmetric cryptographic proof, giving teams a stronger security primitive without the usual complexity. Run a single bootstrap command, approve the machine in the dashboard, and it’s ready to securely request the secrets it needs.Starting Price: $25/month -
7
Hyground
Hyground
Hyground is an AI-powered DevOps and SRE co-pilot — not a chatbot wrapper, but a full-stack operational intelligence system that runs inside the customer's Kubernetes cluster with no data egress. The agent connects to 21+ enterprise systems and investigates incidents across logs, metrics, traces, and K8s events. Engineers ask questions in plain language and get answers grounded in their own data — no new query languages to learn. AutoRCA turns an alert webhook into an autonomous root-cause investigation, then posts findings back to Slack or Teams. Investigation starts the instant an alert fires, not when an engineer wakes up. Customers report up to 85% MTTR reduction. Built on Google's Agent Development Kit, Hyground uses a multi-agent architecture and learns from your infrastructure over time. Resolved incidents extend the knowledge base, so runbooks stay current. -
8
TridentStack Control
TridentStack
TridentStack Control is a patch management, vulnerability detection, and compliance automation platform for managing Windows, macOS, and Linux endpoints. It provides one agent for operating system updates, third-party application patches, CVE scanning, network exposure monitoring, policy enforcement, and compliance tracking. The platform includes intelligent update filtering, approval workflows, deployment rings, pre-staging, CVE enrichment, and phased rollouts to help teams patch systems safely. TridentStack Control also manages third-party application updates with package manager integration, silent deployments, version targeting, configuration profiles, and application inventory. Its vulnerability tools detect CVEs across the fleet, prioritize issues by CVSS severity, and support exception management with expiration dates. With compliance frameworks such as CIS, DISA STIG, Microsoft Security Baselines, and NIST controls, TridentStack Control helps IT and security teams automate endpStarting Price: $0 -
9
HackerAI
HackerAI
HackerAI is an AI-powered penetration testing assistant built to help security teams scan targets, analyze vulnerabilities, investigate findings, and write reports faster. It works as a cybersecurity copilot for penetration testers, bug bounty hunters, and security auditors, giving users a conversational way to move through authorized security testing workflows. Instead of working through every stage of a test alone, users can chat with HackerAI to plan recon, interpret scan results, understand potential weaknesses, identify next steps, and turn technical findings into clearer security reports. It is designed for AI-assisted vulnerability research and security assessments, helping users find and fix vulnerabilities by chatting with AI. HackerAI is available through its web experience and desktop downloads for macOS, Windows, and Linux, with mobile options for iOS and Android so AI-powered penetration testing guidance can stay accessible across devices.Starting Price: Free -
10
HoneyWire
HoneyWire
HoneyWire is an open-source deception platform deploying canary tripwires across internal networks to detect lateral movement and intrusion activity. How it works: - TUI wizard instantly deploys lightweight, distroless "HoneyWires" onto any Linux host. - Synthetic services run silently with zero reason for legitimate users or scanners to interact with them. - If an attacker touches a HoneyWire, a high-fidelity alert routes directly to the centralized Hub. Deployment Types: - Web Router Decoy: Emulates admin router logins to trap web reconnaissance. - Canary TCP Tarpit: Binds to critical ports to log payloads and slow attacks. - File Canary (FIM): Monitors files to flag unauthorized access to decoy assets. - ICMP Canary: Detects stealthy ping sweeps and raw network mapping. - Network Scan Detector: Catches port scanning across local subnets. The Hub: A self-hosted, Web-UI control center managing node configurations, fleet, and alert routing, with frictionless UX.Starting Price: Free -
11
Pryv.io
Pryv
Personal Data & Privacy Management Software - A ready-to-use solution for personal data and consent management. - Pryv.io is a solid foundation on which you build your own digital health solution, so you can collect, store, share and rightfully use personal data. - Maintained and developed by Pryv. Features - Provides latest Pryv.io core system ready for production - User registration and authentication - Granular consent-based access control rights - Data model made for privacy, aggregation and sharing - Full data life-cycle: collect - store - change - delete - REST & Socket.io API - Ease of software integration and configuration - Seamless connectivity and interoperability -
12
Motadata
Motadata
Motadata ObserveOps is a unified observability platform that brings metrics, logs, flows, traces, and topology together in one product. Built on Motadata's DFIT deep learning framework, it ingests telemetry from networks, servers, cloud workloads, containers, and applications, then correlates the signals so teams can pinpoint root cause without jumping between tools. The platform runs adaptive AI that does not need pre-training, supports OpenTelemetry-native ingestion, and integrates with Motadata ServiceOps for closed-loop incident workflows. Six deployment modes cover on-premise, private cloud, public cloud, and hybrid setups, including High Availability, Disaster Recovery, and HA-over-WAN for regulated and distributed environments. Over 500 enterprises across 30+ countries use it for full-stack observability. -
13
Nagios XI
Nagios Enterprises, LLC
Provides monitoring of all mission-critical infrastructure components including applications, services, operating systems, network protocols, systems metrics, and network infrastructure. Hundreds of third-party addons provide for monitoring of virtually all in-house applications, services, and systems. Provides a central view of your entire IT operations network and business processes. Powerful dashboards provide at-a-glance access to powerful monitoring information and third-party data. Views provide users with quick access to the information they find most useful. Automated, integrated trending and capacity planning graphs allow organizations to plan for infrastructure upgrades before outdated systems catch them by surprise. Alerts are sent to IT staff, business stakeholders, and end-users via email or mobile text messages, providing them with outage details so they can start resolving issues immediately.Starting Price: $1995.00/one-time -
14
Nagios Log Server
Nagios Enterprises
Nagios Log Server greatly simplifies the process of searching your log data. Set up alerts to notify you when potential threats arise, or simply query your log data to quickly audit any system. With Nagios Log Server, you get all of your log data in one location, with high availability and fail-over built right in. Quickly configure your servers to send all log data with easy source setup wizards and start monitoring your logs in minutes. Easily correlate log events across all servers in a few clicks. Nagios Log Server allows you to view log data in real-time, providing the ability to quickly analyze and solve problems as they occur. This keeps your organization safe, secure, and running smoothly. Nagios Log Server provides users with advanced awareness of their infrastructure. Dive deep into network events, logs, and security events. Use Log Server to provide the evidence necessary to track down security threats, and quickly resolve vulnerabilities with built-in alerts.Starting Price: $1995.00/one-time -
15
Syteca
Syteca
Syteca — control privileged access and detect identity threats in one place. Syteca is a PAM platform built from the ground up with identity threat detection and response (ITDR) capabilities. Instead of bolting on monitoring after the fact, Syteca was designed monitoring-first: every privileged session is visible, recorded, and auditable from the start. The platform covers the full privileged access lifecycle — account discovery, credential vaulting, just-in-time access provisioning, MFA, and manual approval workflows. What sets it apart is what happens after access is granted: continuous session monitoring, risk detection during active sessions, and automated response actions (block the user, terminate the session, kill the process). Syteca works across Windows, macOS, and Linux, and supports on-premises, cloud, and hybrid deployments. Trusted by 1,500+ organizations in 70+ countries. Recognized by Gartner and KuppingerCole. -
16
NGINX
F5
NGINX Open Source: The open source web server that powers more than 400 million websites. NGINX Plus is a software load balancer, web server, and content cache built on top of open source NGINX. Use NGINX Plus instead of your hardware load balancer and get the freedom to innovate without being constrained by infrastructure. Save more than 80% compared to hardware ADCs, without sacrificing performance or functionality. Deploy anywhere: public cloud, private cloud, bare metal, virtual machines, and containers. Save time by performing common tasks through the built‑in NGINX Plus API. From NetOps to DevOps, modern app teams need a self‑service, API‑driven platform that integrates easily into CI/CD workflows to accelerate app deployment – whether your app has a hybrid or microservices architecture – and makes app lifecycle management easier. -
17
RingStor
RingStor
RingStor is an innovative data management company providing digital asset backup, incident management, emergency action and business continuity planning software solutions. Taking its name from the technical architecture involved in data storage, RingStor provides cost-effective, cross-platform, multi-tenant solutions renowned for high performance and reliability. The solutions are rapidly deployable, configurable to fit any infrastructure situation, and easily managed. RingStor has assembled the key components that any business needs to ensure a disaster does not seriously damage your business or even worse put you out of business. RingStor LifeJacket provides a powerful online tool for business to assess risks, log and track incidents, create emergency action plans and business recovery procedures. The SaaS solution enables business to get organized and prepared for a structured business recovery procedure in event of interruption. -
18
Varnish
Varnish Software
Varnish Software’s powerful caching technology helps the world’s biggest content providers deliver lightning-fast web and streaming experiences for huge audiences, without downtime or loss of performance. Our solution combines open-source flexibility with enterprise robustness to speed up media streaming services, accelerate websites and APIs, and enable global businesses to build custom CDNs, unlocking unbeatable content delivery performance and resilience. Our customers include Hulu, Emirates and Tesla, and our technology is powered by a caching layer that’s trusted by more than 10 million websites worldwide. -
19
CodeMeter
Wibu-Systems
CodeMeter is the award-winning protection, licensing, and security system that gives software publishers and ISVs as well as intelligent device makers a complete arsenal to protect IP and fight cyber-threats while harnessing the power of smart licensing to monetize and grow their business. CodeMeter includes a complete lineup of license containers - hardware-, software-, or cloud-based - to store secret license keys safely, a set of stealthy encryption modules, and a versatile array of backend and frontend tools for license management, augmented by professional services. CodeMeter License Central is the versatile gateway to license creation, delivery, management, and monitoring across the complete license lifecycle. The integral CodeMeter Protection Suite comprises a suite of tools that automatically encrypt the compiled code to protect software from piracy, counterfeiting, reverse engineering, and tampering. -
20
WSO2 Identity Server
WSO2
WSO2 Identity Server is API-driven, is based on open standards with the deployment options of on-premise, cloud or hybrid. It supports complex IAM requirements given its high extensibility. WSO2 Identity Server helps you do single sign-on and identity federation backed by strong and adaptive authentication, securely expose APIs, and manage identities by connecting to heterogeneous user stores. Leverage the power of open-source IAM in your enterprise to innovate fast and build secure Customer IAM (CIAM) solutions to provide an experience your users will love -
21
Praetorian Chariot
Praetorian
Chariot is the first all-in-one offensive security platform that comprehensively catalogs Internet-facing assets, contextualizes their value, identifies and validates real compromise paths, tests your detection response program, and generates policy-as-code rules to prevent future exposures from occurring. As a concierge managed service, we operate as an extension of your team to reduce the burden of day-to-day blocking and tackling. Dedicated offensive security experts are assigned to your account to assist you through the full attack lifecycle. We remove the noise by verifying the accuracy and importance of every risk before ever submitting a ticket to your team. Part of our core value is only signaling when it matters and guaranteeing zero false positives. Gain the upper-hand over attackers by partnering Praetorian. We put you back on the offensive by combining security expertise with technology automation to continuously focus and improve your defensive. -
22
RMail
RPost
RMail® is the e-security platform by RPost®, a global leader since 2000. RMail specializes in elegantly easy to use email encryption for privacy and compliance, e-signatures, legal e-delivery proof, secure file sharing, email impostor protection, document rights management, and AI-infused services to prevent data leaks and human e-security errors. RMail’s transmission e-security services are most often used by businesspeople or business systems that send important, sensitive, or consumer-regulated information. These RMail services are generally applied to those messages where the sender needs functionality beyond standard email in terms of (a) easier to use and more automated email encryption for privacy compliance, (b) returning a verifiable proof record of who said what to whom by email, (c) assurance and peace of mind related to delivery and open status of important and time-deadline email, (d) need a timestamped proof of content delivered, (f) need to share large files securely.Starting Price: $7/month/user -
23
Protegrity
Protegrity
Our platform allows businesses to use data—including its application in advanced analytics, machine learning, and AI—to do great things without worrying about putting customers, employees, or intellectual property at risk. The Protegrity Data Protection Platform doesn't just secure data—it simultaneously classifies and discovers data while protecting it. You can't protect what you don't know you have. Our platform first classifies data, allowing users to categorize the type of data that can mostly be in the public domain. With those classifications established, the platform then leverages machine learning algorithms to discover that type of data. Classification and discovery finds the data that needs to be protected. Whether encrypting, tokenizing, or applying privacy methods, the platform secures the data behind the many operational systems that drive the day-to-day functions of business, as well as the analytical systems behind decision-making. -
24
Uptycs
Uptycs
Uptycs is the first unified CNAPP and XDR platform. Reduce risk by prioritizing responses to threats, vulnerabilities, misconfigurations, sensitive data exposure, and compliance mandates. With Uptycs, you can protect your entire enterprise, from laptops and servers to public and private cloud infrastructure. The platform streamlines your response to threats and offers a single UI and data model for easy management. Uptycs ties together threat activity as it traverses on-prem and cloud boundaries, delivering a more cohesive security posture. If you're looking for a powerful security solution that eliminates silos and tool sprawl, Uptycs is the answer. Looking for acronym coverage? We have you covered, including CNAPP, CWPP, CSPM, KSPM, CIEM, CDR, and XDR. Start with your Detection Cloud, Google-like search, and the attack surface coverage you need today. Be ready for what’s next. Shift up with Uptycs. -
25
Privileged Access Management
imprivata
Secure your most sensitive accounts in minutes with Imprivata Privileged Access Management. Privileged accounts, those with the highest level of access, pose a greater security risk than the average end user because of the degree of sensitive information that could be exposed. This risk isn’t lost on hackers, which is why 80% of security breaches involve compromised privileged credentials. Legacy PAM solutions are complex and resource-intensive, often requiring costly engagements with outside consultants. Imprivata Privileged Access Management combines all the features of a traditional enterprise-grade solution but with zero clients and server footprint. Incorporate the principle of least privilege by providing just enough access to complete a task through granular policy control at the system level. Get going in just minutes with a completely agentless architecture that helps you meet wide-ranging compliance requirements quickly.Starting Price: $25 per month -
26
AVX ONE
AppViewX
AVX ONE is the most advanced SaaS certificate lifecycle management (CLM) platform for enterprise PKI, IAM, security, DevOps, cloud, platform and application teams. With visibility, automation and control of certificates and keys, AVX ONE enables crypto-agility to rapidly respond to cryptographic changes, mitigate threats, prevent outages and prepare for Post-Quantum Cryptography. In one unified platform, AppViewX provides instant value via enterprise-wide CLM, Kubernetes and container TLS automation, scalable PKI-as-a-Service, easy Microsoft PKI modernization, secure code signing, IoT identity security, SSH management, and Post-Quantum Cryptography (PQC) readiness with AI and ML risk reduction capabilities in complex hybrid, multi-cloud and edge environments. -
27
WebDefender
Cobweb Security
WebDefender is a multi-feature security plugin for WordPress websites. It performs monitoring, protection, malware detection, and cleaning of your website. We offer three pricing plans for our clients, free, professional, and premium. Choose the one that suits your business activities most. The WebDefender PHP antivirus scanner can easily be installed on any website built on PHP. This antivirus serves for security monitoring and detecting malware and vulnerabilities. All detected drawbacks and malicious software will be removed with the help of our cleanup tool. An all-in-one antivirus Platform for Linux type Web Servers provides monitoring, malware detection and removal. It features a user-friendly cleaning tool that clears away all detected malicious codes from the server. The Antivirus has a SaaS control panel for multiple servers. This professional version includes all the features of WebDefender Security & Protection with a number of extra options.Starting Price: $6.90 per month -
28
BigID
BigID
BigID is data visibility and control for all types of data, everywhere. Reimagine data management for privacy, security, and governance across your entire data landscape. With BigID, you can automatically discover and manage personal and sensitive data – and take action for privacy, protection, and perspective. BigID uses advanced machine learning and data intelligence to help enterprises better manage and protect their customer & sensitive data, meet data privacy and protection regulations, and leverage unmatched coverage for all data across all data stores. 2 -
29
Atomicorp Enterprise OSSEC
Atomicorp
Atomic Enterprise OSSEC is the commercially enhanced version of the OSSEC Intrusion Detection System brought to you by the sponsors of the OSSEC project. OSSEC is the world’s most popular open source host-based intrusion detection system (HIDS) used by tens of thousands of organizations. Atomicorp extends OSSEC with a management console (OSSEC GUI), advanced file integrity management (FIM), PCI compliance auditing and reporting, expert support and more. - Intrusion Detection - File Integrity Monitoring - Log Management - Active Response - OSSEC GUI and Management - OSSEC Compliance Reporting - PCI, GDPR, HIPAA, and NIST compliance - Expert OSSEC Support Get expert support for OSSEC servers and agents as well as help developing OSSEC rules. More info on Atomic Enterprise OSSEC is available at: https://www.atomicorp.com/atomic-enterprise-ossec/ -
30
Armis Centrix
Armis
Armis Centrix™ is a comprehensive cyber exposure management platform that provides continuous, real-time visibility and protection across IT, OT, IoT, and IoMT environments. Powered by the Armis AI-driven Asset Intelligence Engine, it identifies every connected device, assesses cyber risk, and monitors vulnerabilities across an organization’s entire digital attack surface. The platform automates risk scoring, streamlines compliance reporting, and supports rapid incident response through deep asset intelligence. With capabilities that span asset management, OT/IoT security, medical device protection, and early warning threat detection, Armis Centrix™ enhances operational resilience for modern enterprises. VIPR Pro adds advanced prioritization and remediation to connect findings directly to actionable fixes. Designed as a cloud-native, frictionless platform, Armis Centrix™ empowers organizations to reduce exposure, strengthen security posture, and maintain continuity at scale.
