Best IT Security Software for Linux - Page 19
View:
Compare the Top IT Security Software for Linux as of November 2026 - Page 19
Sort By:
-
1
BigMind DR
Genie9
BigMind DR is a local disaster-recovery and imaging solution for Windows by Genie9 — in the backup space since 2010. Block-level imaging, ransomware detection, app-consistent backups for SQL and IIS, USB recovery media, AES-256 encryption. Software-only, bring-your-own-storage — no cloud dependency, no per-GB fees. Unlike cloud backup tools, the lifetime deal is permanently sustainable because all data stays local with almost no ongoing infrastructure cost per user. Free tier available. Plus ($59/yr, 10 users, 2 devices, 1 server) and Pro ($119/yr, 15 users, 3 devices, 3 servers, 365-day retention). Lifetime SKUs available for Plus and Pro.Starting Price: $59 -
2
LinuxGuard
LinuxGuard
LinuxGuard is the control plane for Linux identity — a continuous Identity Security Posture Management (ISPM) and Identity Threat Detection & Response (ITDR) platform purpose-built for the Linux estate, rather than adapted from a Windows-first or cloud-first tool . It gives security and infrastructure teams a single, always-current inventory of every human account, service identity, SSH key, sudo rule, and PAM configuration across on-prem, cloud, and hybrid Linux servers, scoring each identity from 0–100 with inline explanations of the risk factors behind the score . LinuxGuard maps privilege-escalation paths, flags NOPASSWD sudo rules and orphaned or shared SSH keys, detects configuration drift in real time, and maps MITRE ATT&CK-aligned signals for detection and safety-gated automated response. It also generates continuous, audit-ready compliance evidence mapped to NIS2, DORA, SOC 2, CIS, NIST, PCI-DSS, and ISO 27001, and integrates wit -
3
Safeguard
Safeguard
Safeguard is an AI-native software supply chain security platform that discovers vulnerabilities, determines which ones are actually reachable, and can autonomously create and merge fixes. Its Griffin AI system analyzes repositories, containers, dependencies, SBOMs, and call graphs to prioritize exploitable issues instead of overwhelming teams with every detected CVE. The platform can generate remediation pull requests, run CI and regression tests, apply policy gates, and update security attestations after a fix is completed. Safeguard also includes zero-day discovery, runtime protections for AI applications, compliance automation, hardened software components, and support for hundreds of regulatory and security frameworks. Developers and AI agents can interact with the platform through its MCP server, APIs, IDE tools, source-control integrations, and CI/CD connections.Starting Price: $9/month -
4
Railo
Railo
Railo is an autonomous vulnerability remediation engine that turns security findings from Snyk, Semgrep, and CodeQL into verified, test-passing pull requests. Powered by deterministic AST code transformations and formal verification, Railo patches high-impact vulnerability classes (including SSRF, SQL Injection, Path Traversal, and Network Timeouts) in Python and TypeScript repositories. Every patch runs against the repository's native test suite with automatic rollback on failure, eliminating alert fatigue and reducing manual security triage for engineering teams.Starting Price: $99/month -
5
Guardeon
Infilux AppSec
Guardeon is an external attack surface management (EASM) and digital risk protection platform from Infilux AppSec. It continuously discovers what your organization exposes to the internet, including domains, subdomains, IP ranges, cloud services, open ports, certificates and shadow IT, then monitors it for misconfiguration, expiry and exploitable exposure. It also watches the dark web, paste sites and criminal forums for leaked credentials and stolen data tied to your business, and runs brand protection across typosquatted and lookalike domains, fake websites, phishing pages, rogue mobile applications in third party app stores, and impersonation accounts targeting your brand and executives on social media. Confirmed threats go straight into takedown, tracked to closure. Findings are validated, risk scored and delivered in a multi tenant console with alerting, API access and white labeled reporting. Built for security teams and for MSSPs managing many clients. No agents to install.Starting Price: $99/month -
6
DeepState
DeepState
DeepState is a desktop investigation analysis platform for OSINT analysts, investigative journalists and corporate security teams. People, organisations, events, documents, social posts, locations and crypto wallets sit on one infinite canvas as typed nodes, joined by reasoned connections (funds, controls, contradicts), with a timeline, narratives and full-text search. An AI agent beside the board has 70+ research tools: web search, page capture, Wayback Machine, WHOIS, X, Reddit, Bluesky, YouTube, LinkedIn, CourtListener, SEC EDGAR, sanctions lists, historic newspapers, blockchain and OpenStreetMap. It creates and links nodes itself, cites sources, and every action can be undone. Captured evidence keeps its URL, retrieval time, archived copy and credibility rating. Boards export to briefing decks and PDFs. Case data stays in a local SQLite file; use Claude, ChatGPT, OpenRouter, OpenCode or offline Ollama. Windows, macOS, Linux.Starting Price: $29/month -
7
nPro AI
nPro AI
nPro AI is a self-hosted security platform that combines SIEM, XDR, DLP and EMS network monitoring in one product, running entirely on your own servers so security data stays on infrastructure you control. nPro SIEM collects logs from Linux and Windows endpoints, firewalls, network devices and cloud workloads including AWS, Azure, Docker and Kubernetes. Teams can write custom detection rules or import Sigma rules, correlate events against MITRE ATT&CK and investigate grouped alerts with analyst notes. Built-in reports cover ISO 27001, PCI-DSS, GDPR and PDPA, with retention set per log source. nPro DLP blocks sensitive data leaving via USB, cloud uploads and clipboard, controls screen capture and monitors printing. Pricing is per agent, not per GB of logs, with a free plan for up to 99 agents. Built for regulated organisations and MSSPs in Southeast Asia that need to keep security data under their own control.Starting Price: $4.50 -
8
RatelKey
RatelKey
RatelKey is a self-hosted secrets management platform for securely storing, accessing, and managing application secrets without the infrastructure complexity of traditional enterprise solutions. Secrets stay inside your own Burrow instance, while RatelKey provides authentication, access management, updates, and administration. It supports projects and environments, machine identities, role-based access control, IP restrictions, audit logs, canary secrets, encrypted backups, webhooks, SAML/OIDC SSO, SCIM provisioning, and CLI/SDK access. Burrow can run on Linux, Windows, macOS, or Docker, and applications continue retrieving secrets directly from your infrastructure even if the RatelKey control plane is unavailable. RatelKey is designed for teams that have outgrown `.env` files and scattered CI secrets but do not want to operate a complex secrets-management stack.Starting Price: $30/month -
9
Insomnia
CQR
Insomnia is an autonomous AI pentesting and offensive security platform from CQR Cybersecurity. Point it at a target and its AI red team runs recon, vulnerability scanning, OSINT, CVE validation, exploitation and privilege escalation across web apps, APIs, networks, cloud and Active Directory, then writes a client-ready PDF, DOCX or HTML report with CVSS scoring and fixes. It brings 275+ security modules into one tool: SAST and DAST, secret detection with live key validation, dependency and CVE scanning, API and GraphQL testing, wireless audit, Active Directory auditing with BloodHound, an HTTP interception proxy and a CI/CD pipeline builder. It also ships Insomnia OS, a Debian-based offensive OS. There is a free Community Edition and a free SAST engine (pip, npm, Docker, Homebrew, plus VS Code and JetBrains plugins). Paid Advanced and Pro plans add full AI automation, the 30,000+ CVE database, exploitation tooling, OSINT and mobile analysis.Starting Price: $149/month -
10
ThreatSpy
Secure Blink
ThreatSpy by Secure Blink is an autonomous DAST and API security testing platform that runs 24x7 continuously without requiring a human trigger. Every finding passes through a dedicated AI Review layer that validates exploitability and business impact before surfacing to the developer queue — delivering 90%+ reduction in false positives. Remediation Campaigns and Automated Playbooks close the loop from detection to verified fix, auto-creating tickets in Jira, Trello, and ServiceNow on detection. Key capabilities: Continuous autonomous DAST, REST, GraphQL, OpenAPI and Postman Collection API security testing, OWASP Top 10, OWASP API Top 10 and SANS CWE Top 25 coverage, AI Review per finding, Scan Comparison across releases, CI/CD integration with Jenkins, GitHub Actions, GitLab CI, Bitbucket, Azure DevOps and CircleCI, SaaS, Private Cloud and On-Premises deployment. Rated 4.7/5 on G2. GrindStone Award winner RSA 2026. Free 14-day trial. No credit card required. -
11
AgentRidge
Agent Ridge
AgentRidge is desktop security-audit software for assessing e-commerce websites, customer portals and other web platforms within an authorized testing scope. Its AI agents explore defined pages, account roles, checkout flows, business rules, exposed services and data, coordinating security tools as part of an investigation. The software presents findings with evidence, reproduction steps, severity and business impact, and generates PDF reports for developers and security teams. Users can run independent assessments on macOS, Windows or Linux through the command-line edition; audit data and results are stored locally, while account, licensing and payment functions use online services. AgentRidge is intended for e-commerce operators, web-platform teams, agencies, developers, security engineers, penetration testers and red teams. Buyers may choose an annual software license for self-directed audits or a separately scoped, vendor-delivered audit and remediation service.Starting Price: €500 per-audit -
12
Firefox Enterprise
Mozilla
Firefox Enterprise is a paid browser governance product from Mozilla, designed for security-sensitive organizations. It pairs managed Firefox with an administration console deployed on the customer’s infrastructure. IT teams can configure browser policies, manage users and device posture, control access to internal web applications, and govern extensions, telemetry, AI tools and data flows. Controls include data-loss-prevention rules for pasting, file uploads, downloads and printing, plus Lockdown Mode, profile encryption and optional watermarking. Administrators can export security events and admin activity to SIEM systems and configure company sign-in through identity providers that support OpenID Connect. Firefox Enterprise supports Windows, macOS and Linux desktop environments and is intended for IT, security and compliance teams, including those in regulated organizations. -
13
Control Pack
Exploit Pack VOF
Control Pack is a commercial multi-agent command-and-control platform for user-mode red-team operations. It provides payload generation, configurable communications, persistent endpoint sessions, remote tasking, interactive terminals, file transfer, artifact collection and post-exploitation across Windows, Linux, macOS, JVM, .NET, scripting runtimes and browser sessions. Its agent portfolio includes native Windows agents and a cross-platform Rust agent with encrypted reverse SOCKS5 tunneling.Starting Price: €1,200/user/year -
14
Kernel Pack
Exploit Pack
Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent for authorized red-team and penetration-testing operations. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges. Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows. It is designed for red teams and penetration testers performing controlled, non-production Windows kernel assessments.Starting Price: €1,200/year -
15
Logsign
Logsign
Logsign is a global vendor that specializes in providing comprehensive cybersecurity solutions that enable organizations to enhance their cyber resilience, reduce risk, and streamline security processes while decreasing HR and operational chaos. Logsign consistently offers an efficient, user-friendly, and seamless platform and employs the latest technologies to establish secure, resilient, and compliant environments while providing organizations with comprehensive visibility into their IT infrastructure, enhancing threat detection capabilities, and streamlining response efforts. In today's complex threat landscape, Logsign ensures that businesses have a robust cybersecurity posture in place, proactively safeguarding their systems, data, and digital assets. With a presence on four continents and a customer base of over 600 enterprises and governmental institutions as mentioned by Gartner SIEM Magic Quadrant two years in a row, Logsign also has high ratings on Gartner Peer Insight. -
16
Scale Computing Platform
Scale Computing
SC//Platform brings faster time to value in the data center, in the distributed enterprise, and at the edge. Scale Computing Platform brings simplicity, high availability and scalability together, replacing the existing infrastructure and providing high availability for running VMs in a single, easy-to-manage platform. Run your applications in a fully integrated platform. Regardless of your hardware requirements, the same innovative software and simple user interface give you the power to run infrastructure efficiently at the edge. Eliminate mundane management tasks and save the valuable time of IT administrators. The simplicity of SC//Platform directly impacts IT with higher productivity and lower costs. Plan the perfect future by not predicting it. Simply mix and match old and new hardware and applications on the same infrastructure for a future-proof environment that can scale up or down as needed. -
17
NetVizura NetFlow Analyzer
Soneco
NetFlow Analyzer is an easy solution for net admins to better understand bandwidth consumption, traffic trends, applications, hosts and traffic anomalies, by visualising the traffic by network devices, interfaces and subnets, traffic segments and end users. NetFlow Analyzer utilizes Cisco® NetFlow, IPFIX, NSEL, sFlow and compatible netflow-like protocols to help net admins with bandwidth monitoring, network traffic investigation, analyses and reporting. This way, companies can optimise networks and applications, plan network expansion, minimize time spent on troubleshooting and diagnostics, and improve security. NetVizura allows you to define custom traffic to be monitored based on IP subnets and traffic characteristics like protocol and service used. Monitor specific traffic for each organisational unit in your network such as departments, remote sites and collections of regional offices by identifying them with IP subnets. -
18
Teleport
Teleport
The Teleport Infrastructure Identity Platform modernizes identity, access, and policy for infrastructure, for both human and non-human identities, improving engineering velocity and resiliency of critical infrastructure against human factors and/or compromise. Teleport is purpose-built for infrastructure use cases and implements trusted computing at scale, with unified cryptographic identities for humans, machines and workloads, endpoints, infrastructure assets, and AI agents. Our identity-everywhere approach vertically integrates access management, zero trust networking, identity governance, and identity security into a single platform, eliminating overhead and operational silos. -
19
Syxsense Secure
Syxsense
Syxsense Secure is world’s first IT management and security solution that combines vulnerability scanning, patch management, and EDR capabilities in a single cloud console. With insight into the health of every endpoint across your network, you get the peace of mind that comes from predicting, preventing, and eliminating threats in real time. Make exposed risk and attack vectors a thing of the past. -
20
EmpowerID
EmpowerID
EmpowerID is the award winning all-in-one identity management and cloud security suite developed by The Dot Net Factory, LLC dba "EmpowerID". Responsible for managing millions of internal and external cloud and on-premise identities for organizations around the globe, EmpowerID delivers the broadest range of ready to use IAM functionality. In-depth out of the box solutions include: single sign-on, user provisioning, identity governance, group management, role mining, delegated identity administration, password management, privileged access management, access management for SharePoint, and an identity platform for application developers. All solutions leverage a single sophisticated role and attribute-based authorization engine that handles complex organizations and even multi-tenant SaaS providers. We provide a highly scalable, fully customizable IAM infrastructure that delivers results in a more time and cost-efficient manner for your enterprise.Starting Price: $2 per user per month -
21
Dbvisit Standby
Dbvisit Software Ltd
Your databases are at the heart of your business. They contain your most critical information and your world revolves around them. Protecting your databases doesn't have to be difficult or expensive. Standby MultiPlatform (MP) provides enterprise-class Disaster Recovery for all your Oracle SE and Microsoft SQL Server databases, whether on-premise, hybrid, or in the cloud. It effortlessly creates a standby database that is continually updated and verified, ensuring fast and successful failover at any time. StandbyMP is database aware for greater database integrity, easily deployable to remote locations for disaster resiliency, warm and continuously updated for fast recovery, and controlled via a single intuitive dashboard for ease of use. We keep your world moving, whatever the universe has in store! -
22
eScan
MicroWorld Technologies
eScan's next-gen antivirus solution that protects the home network from viruses, malware, ransomware, bots, and more, using a layered approach. With the unique combination of basic and modern techniques, eScan blocks a broad range of attacks. It comprises right from web filtering, signature-based malware detection and behavior analysis to innovative techniques like deep learning malware detection, exploit prevention, heuristic scan, and many more. eScan offers business endpoint protection and endpoint detection and response (EDR) solutions as well as anti-spam solutions for email and multi-factor authentication.Starting Price: $58.95/one-time/user -
23
SDS E-Business Server
Software Diversified Services
SDS is now distributing, supporting, and actively developing new features for the proven E-Business Server, the authentic OpenPGP encryption tool originally developed by cryptography pioneer Phil Zimmerman. Using OpenPGP encryption technology and versatile APIs, SDS E-Business Server offers strong encryption that integrates with the widest range of applications and platforms, including the mainframe. E-Business Server is designed for companies that require the highest levels of protection for data stored internally, transmitted within the organization, and distributed beyond its firewalls. Today’s data security mandates are complex but critical. Gain compliance with GDPR and other required standards with unbreakable signature creation and reliable authentication. E-Business Server dramatically reduces file sizes, bandwidth consumption, processing time, and disk space to keep resources under control. -
24
Adabas & Natural
Software AG
In an age of ever-faster change, you need a forward-thinking partner with a vision. someone who can help you take your powerful Adabas & Natural applications to 2050 and beyond. You’ve relied on Adabas & Natural to get the job done—for decades. Look ahead to a future where you can continue to make the most of that investment and the unique business logic built into your core applications. We’re that partner, committed to helping you digitalize your legacy, fast and risk-free. Together, let’s manage the generational change of developers, modernize your applications to save costs, expand the reach of your core apps, and accelerate development in an ultra-modern environment. Count on leading-edge Adabas & Natural technologies to help you optimize your IT environment and modernize your applications, risk free and fast. Connect to new services with APIs. Run Adabas & Natural in the cloud. Attract new developer talent with DevOps. Save costs by offloading mainframe workload to zIIP. -
25
Chetu
Chetu
Chetu is a US-based software development company that provides startups, SMBs, and Fortune 5000 companies worldwide with custom technology solutions. With an unparalleled software delivery model suited to the needs of the client, Chetu's one-stop-shop model spans the entire software technology spectrum. Headquartered in Sunrise, Florida, Chetu has sixteen locations throughout the U.S., Europe, and Asia, with over 2,200 software experts worldwide. Chetu is a true and seamless backend technology partner, helping your business accelerate the development of desktop, mobile & web-based apps with on-demand developers that focus on moving your business forward. Most software companies insist on owning their own source codes to prevent their clients from seeking out other vendors or tools. Under our agreement, you are the sole proprietor of the source code and intellectual property. -
26
NCP
NCP engineering
For individual workstations, freelancers or smaller installations, NCP Entry Clients offer a wide range of technical features and offer much more than a standard VPN. Our Solution Finder will help you find the right NCP product for your organization. No matter what hardware you use, whether you are looking for a solution for use in your own company or as a partner for your customers, for a few employees or large installations, we will guide you to the right product in just a few steps. With 30 years of experience in remote access environments, NCP is an excellent choice for a complete VPN solution that meets the needs of users, IT administrators and management. NCP’s remote access solutions are fully-automated, highly secure and cost efficient covering important benefits. -
27
MyDLP
Comodo Group
Monitor, discover and prevent data leakage on your company's network and endpoints. Sign up and get data loss protection for your company with MyDLP from Comodo! MyDLP from Comodo is a rock-solid all-in-one data loss prevention (DLP) solution. You don't need to buy several modules or products to Monitor, Discover and Prevent data leakage on your company network and endpoints. With MyDLP, you can block any data flow containing credit card numbers, social security numbers or any sensitive information. Your customers will be more comfortable when sharing their personal and financial information with you. MyDLP provides data security for web, mail, printers, removable devices and more. Your sensitive data will not leak out through network connections or endpoint devices. You train MyDLP with your private data files once, and MyDLP will protect them forever. No one will be able to transfer them outside your network. -
28
REVE Secure
REVE Secure
Dual authentication check of login’s credibility via user’s registered credential (Password) and security token generated at authorized user end only. Passwords are incompetent in securing your logins. Adding 2nd-factor authentication will not only deliver dual authentication security but also ensure safe & secure login & protected account access. With Two Factor Authentication, secure your remote logins and access to Linux/UNIX servers from security breaches and malicious attacks. Integrate a second layer of authentication to existing Windows password-based security to ensure the all-round protection of your enterprise data. Secure & protect logins and access to each different web application and service to avoid unauthorized access and cyber-attacks. Blocks unauthorized login attempts made using passwords. Supports a multitude of platforms and devices. -
29
SyAM
SyAM Software
SyAM simplifies IT by unifying the management of your technology assets. Our software simplifies the way you manage all of your IT Assets, with Unified Device Management and integrated Help Desk you’ll have everything in one place, accessible from any mobile or desktop browser. By implementing Intelligent Power Management from SyAM, you’ll reduce operating costs, and realize an ROI in just a few short months without disrupting users’ productivity. Our software simplifies the way you manage all of your IT Assets, with Unified Device Management and integrated Help Desk you’ll have everything in one place, accessible from any mobile or desktop browser. We reduce Help Desk workload by empowering your end-users with problem reporting through a customizable self-service portal or by enabling a user group with email-to-ticket capabilities. -
30
Digital Guardian
Fortra
No-compromise data protection means the flexibility to adapt to your needs. Digital Guardian is unique among DLP solutions in its ability to support both a use case-based approach (known data types or user groups) or a data risk discovery approach (identifying unknown use cases). Our risk discovery approach enables you to gain visibility by showing you where sensitive data is located, how it flows in the organization, and where it is put at risk, all without policies. Powered by AWS, Digital Guardian delivers simplified deployment, low overhead, and elastic scalability for increased return on your security spend. Coverage for your Windows, macOS, or Linux operating systems and all your applications, both browser based and native. Our “unknown risk” approach enables you to see where sensitive data is located, how it flows, and where it is put at risk - all without policies. Only Digital Guardian provides content, user, and context-based data discovery and classification.
