Best IT Security Software for Linux - Page 24
View:
Compare the Top IT Security Software for Linux as of July 2026 - Page 24
Sort By:
-
1
Scalefusion OneIdP
Scalefusion OneIdP
Scalefusion OneIdP is a Zero Trust access solution that brings together Identity & Access Management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, Just-In-Time (JIT) admin access, and more into a single platform. It secures every access request by combining identity verification with real-time device posture checks, ensuring only verified users on compliant devices can access critical resources. With centralized user lifecycle management, automated provisioning, and unified policy controls. OneIdP simplifies onboarding, strengthens access governance, and reduces IT overhead, while delivering a consistent, secure login experience across enterprises. -
2
UPX
UPX Cybersecurity
UPX (Ultimate Packer for eXecutables) is a high-performance executable compression tool designed to reduce the size of programs and libraries without affecting their functionality or performance. It works by compressing executable files such as EXE, DLL, and other formats across multiple operating systems, including Windows, Linux, and macOS, typically reducing file sizes by 50% to 70%, which helps decrease disk usage, download times, and network load. The compressed executables remain fully self-contained and run exactly as before, as it automatically decompress at runtime without requiring additional dependencies or noticeable memory overhead. UPX uses efficient lossless compression algorithms and supports in-place decompression, allowing programs to execute directly from memory while preserving speed and behavior. It is designed to be secure and transparent, as its open-source nature allows antivirus and security tools to inspect compressed files without obstruction. -
3
Aster Mail
Aster Mail
Aster Mail is a free, open-source, end-to-end encrypted email service for people who want real privacy without the technical overhead. All encryption happens on your device before anything reaches our servers, so we have zero access to your messages or metadata. Aster uses standard OpenPGP with portable RSA-4096 keys, so you're never locked in. Your keys work with GPG, Thunderbird, or any PGP client, and they're discoverable through WKD and public keyservers. Aster-to-Aster messages use a Signal-inspired X3DH and Double Ratchet protocol for forward secrecy. Every plan includes encrypted email, custom domain support, free aliases, tracker protection, and full access across web and desktop. The entire codebase is published under AGPL v3 on GitHub, fully auditable, with a public warrant canary and documented vulnerability disclosure. Free plan includes 10 GB encrypted storage, 5 aliases, and 1 custom domain. Paid plans start at $2.99/month. Servers located in Germany. -
4
Matters.AI
Matters.AI
Matters.AI is the first AI Security Engineer for Data, built for the AI and data layer to autonomously see, understand, and resolve data misuse before the SOC opens a ticket. It protects what truly matters wherever data lives or travels, functioning like an AI security engineer that understands context, monitors behavior, and protects sensitive data autonomously across cloud, SaaS, endpoints, microservices, and AI pipelines. Matters is built on semantic intelligence, nearest neighbor search, data lineage modeling, and predictive behavior analysis, so it does not just detect threats; it understands context, anticipates risk, and takes action proactively. Instead of relying on static rules, regexes, dashboards, and noisy alerts, Matters reads between the lines, traces risk in motion, and never sleeps. It identifies sensitive data not just by how it looks, but by what it represents, tracking data across cloud, SaaS, endpoints, and beyond using fingerprinting and eBPF. -
5
Pillar Security
Pillar Security
Pillar Security is a unified AI security platform for securing the agentic workforce across the entire AI lifecycle, from development to deployment and runtime protection. It connects business context across discovery, testing, and protection so security intelligence compounds across AI applications, agents, models, prompts, frameworks, tools, MCP servers, skills, coding agents, SaaS, cloud, code, and endpoints. Pillar helps organizations discover and manage AI assets everywhere, including shadow AI and unapproved systems, assess supply chain and posture risks, map agentic attack surfaces, and validate the vulnerabilities that actually matter. Its AI Security Posture Management capabilities analyze connected agents, tools, permissions, data sources, prompts, models, and supply chain components to expose risky paths, policy violations, misconfigurations, coding agent risks, and blast radius when a single component is compromised. -
6
AI Security Guard
AI Security Guard
AI Security Guard is a multi-faceted platform for securing autonomous AI, combining a protection SDK, product tooling, education, and original research on the agentic future. - Protection SDK: Integration-friendly API wrapper designed to shield AI agents from jailbreaks, prompt injection, and other harmful content before it reaches your models. - AgentGuard360: Built on the API: Intercepts AI traffic in real time before malicious content reaches your agents. Two-tier content scanning, supply chain protection, and device hardening in one tool. Privacy-first: Content stays local unless you request premium analysis. - Research: Original analysis on the autonomous AI future and the security, privacy, and safety issues that follow, including reports like Shipping the Future. -
7
VRadar
ATK New Technology (VRadar)
VRadar is an autonomous security analyst for businesses with no IT team. It goes from signup to protected in about 15 minutes with a one-line script, automatically blocks attackers, filters ~99% of the noise, and surfaces only what matters in plain language. There is no black-box agent to trust: the endpoint tooling is standard open-source Wazuh and Suricata that you can verify yourself, pointed at our AI backend. It auto-blocks password-guessing and malicious IPs, pushes host and firewall blocklists to endpoints, and alerts you when a machine loses protection. Built for owners and small teams who do not have a security analyst on staff.Starting Price: $8/device/month -
8
Snow Software
Snow Software
We have brought together software asset management, cloud management and SaaS management so you can fully optimize all of your technology in one platform that seamlessly integrates with your enterprise ecosystem. Clearly see, understand and manage your entire technology landscape, both on-prem and in the cloud. Maximize the value of your technology investments with deep insights into usage, spend and vulnerabilities. Get the perspective and automation you need to anticipate and align with the rapidly evolving needs of your business. Fast implementation and intuitive design means you are saving money in weeks, not months. Break down your data silos to see on-prem, hybrid and cloud technologies together. Get clean and augmented data, updated daily and powered by the world's largest discovery catalog. Recommendations and self-service drive value, save time and increase productivity. -
9
OX Guard
Open-Xchange
Security and data privacy is a growing concern. Today, both business users and consumers demand more privacy, without adding complexity to their daily tasks. OX Guard was designed specifically with this in mind. This PGP based security add-on for OX App Suite, integrates seamlessly into our existing email app, letting users encrypt and decrypt emails and files easily. There is a growing demand for privacy from users, while at the same time, they are concerned about increased complexity and reduced usability. OX Guard was designed to satisfy these concerns. An easy to use wizard lets users set up OX Guard quickly, with no additional security know-how. After set up users are able to encrypt and decrypt emails and files with just one click, integrating security seamlessly into day-to-day user workflows. -
10
Siwenoid
Siwena
SIWENOID is a JAVA application and runs under Windows, Linux or Mac OS X. It is flexible, reliable, user, and engineer friendly. SIWENOID can integrate many types of subsystems and unify the operation of all. Supports SIEMENS, Bosch, Dahua, Texecom, Paradox systems and many more. Control everything on one (or more) screen with a unified user interface for every subsystem. Siwenoid is built on open-source foundations to keep the cost of the product lower. To keep up with the constant firmware updates of the compatible systems we rely on flexibility. Main goal of the software is to minimize the latency on interconnecting and handling different protocols. Siwenoid can be configured in operation while the subsystems are working. SIWENOID is an OS-independent JAVA application. It is a flexible, reliable, user- and engineer-friendly, scalable, and cost-effective solution. -
11
Eddie
Eddie
Eddie is a high availability clustering tool. It is an open source, 100% software solution written primarily in the functional programming language Erlang (www.erlang.org) and is available for Solaris, Linux and *BSD. At each site, certain servers are designated as Front End Servers. These servers are responsible for controlling and distributing incoming traffic across designated Back End Servers, and tracking the availability of Back End Web Servers within the site. Back End Servers may support a range of Web servers, including Apache. The Enhanced DNS server which provides load balancing and monitoring of site accessibility for geographically distributed web sites. This gives round the clock access to the entire available capacity of the web site, no matter where it is located." The Eddie white papers describe the need for products such as Eddie, and outlines the Eddie approach. -
12
Clari5
Clari5 (CustomerXPs)
Category leaders for Enterprise Fraud Risk Management Systems and Anti-Money Laundering Systems, winner of premier global acclaim for product innovation and featured consistently in global risktech and regtech top 100 rankings, Clari5 redefines real-time, cross-channel Financial Crime Risk Management using a 'central nervous system' approach to help banks combat financial crime. Clari5 uses a ‘human brain like’ approach by synthesizing enterprise-wide intelligence and delivering precise contextual insights in extreme real-time, within the short transaction window, for necessary interventions. Clari5 is a bolt-on system, requires no replacement and features a compact implementation cycle with extremely quick ROI. Harnessing the combined power of Automation, AI, ML, Decision Sciences & Real-time Decisions, Clari5 is today processing over 10 bn transactions and is managing over 500 mn accounts. Marquee banks in 15 countries trust Clari5 to power their fraud risk management strategy. With -
13
RollBack Rx Server
Horizon Datasys
RollBack Rx Server Edition is a robust Windows Server backup and restores utility that enables IT, professionals, an instant backup capability that can quickly restore mission-critical systems back to any number of multiple restore points with unrivaled speeds. RollBack Rx Server Edition makes it quick and easy to safely sandbox updates and service patches with a failsafe approach to system recovery. RollBack Rx Server Edition offers unrivaled background protection and real-time recovery speeds. This allows you to store a locally backed-up sector-map repository of complete multiple instances (or “snapshots”) of the server state. These snapshots can be scheduled to occur at intervals you specify — as frequently as every minute — and can number many thousands. This continual snapshot-taking can be set to occur in the background with no perceptible impact on day-to-day server response times. -
14
Red Hat Virtualization
Red Hat
Red Hat® Virtualization is an enterprise virtualization platform that supports key virtualization workloads including resource-intensive and critical applications, built on Red Hat Enterprise Linux® and KVM and fully supported by Red Hat. Virtualize your resources, processes, and applications with a stable foundation for a cloud-native and containerized future. Automate, manage, and modernize your virtualization workloads. Whether automating daily operations or managing your VMs in Red Hat OpenShift, Red Hat Virtualization uses the Linux® skills your team knows and will build upon for future business needs. Built on an ecosystem of platform and partner solutions and integrated with Red Hat Enterprise Linux, Red Hat Ansible Automation Platform, Red Hat OpenStack® Platform, and Red Hat OpenShift to improve overall IT productivity and drive a higher return on investment. -
15
Digital.ai Application Protection
Digital.ai
Our proprietary protection capabilities shield apps from reverse engineering, tampering, API exploits, and other attacks that can put your business, your customers, and your bottom line at risk. Obfuscates source code, inserts honeypots, and implements other deceptive code patterns to deter and confuse threat actors. Triggers defensive measures automatically if suspicious activity is detected, including app shutdown, user sandbox, or code self-repair. Injects essential app code protections and threat detection sensors into CI/CD cycle after code development, without disrupting the DevOps process. Encrypts static or dynamic keys and data embedded or contained within app code. Protects sensitive data at rest within an app or in transit between the app and server. Supports all major cryptographic algorithms and modes with FIPS 140-2 certification. -
16
OSE
Open Seas
Once hacked, compromised organizations face huge barriers to rebuilding customer trust and brand reputation. OSE detects & alerts to attacks on your critical systems as they occur so you can stop them before damage is done to your organization's IP, brand and reputation with the ensuing loss of customer trust. OSE provides an audit of an attack listing what was changed, what it was before making it quick to resolve. OSE reporting helps with ISO 27000 compliance. OSE (Operating system Security Enforcer) implements your defined Security Policy which can either be an out of the box OSE standard or your personalized version. Rolling-out & apply the security policy on all Unix, Linux & Windows corporate servers. The Autonomous OSE Agent is permanently located on a Unix/Linux server. It is persistent, even in case of network failure. It can also group a set of servers monitored by OSE Agents. -
17
DERMALOG Biometric Software
DERMALOG Identification Systems
The world's fastest and most accurate software. DERMALOG high-speed identification software provides a crucial contribution to prevent identity fraud. It is continuously improved to guarantee reliable products. The software traces identities and duplicates of biometric documents such as national IDs, ePassports, for instance in border control, voters and refugee registration. DERMALOG offers scalable and customizable software that allows performing a wide variety of tasks for processing, editing, searching, retrieving and storing biometric templates and subject records. In addition to the DERMALOG fingerprint technology the German innovation leader presents multi-modal biometric systems which can combine fingerprint identification with an iris or face modality. DERMALOG provides the world's fastest Fingerprint matching. DERMALOG Face Identification provides highest accuracy and speed. DERMALOG Palm Identification for effective crime solving. -
18
SmartSearch
SmartSearch
SmartSearch is here to make AML, KYC and Identity Verification compliance easy. The most comprehensive features from an AML Provider. By simply entering the individual’s name, address and date of birth, SmartSearch will complete a full AML/KYC check - including automatic worldwide Sanction and PEP screening - giving you a clear pass or refer result in a matter of seconds. International verification is challenging due to regulatory, cultural and technological differences between countries. But thanks to our unique ability to integrate multiple data sources, we can verify international individuals and businesses. After initial AML/KYC checks have been completed, we continue to monitor all clients daily, alerting you if their Sanctions or PEP status changes. We can also complete retrospective checks on clients to ensure your firm remains compliant at all times. -
19
Intelligent Threat Detection. Faster Response. 98% of all threats start with Active Directory and nearly always involve the compromise of data stored on enterprise data stores. Our unique combination of detailed auditing, anomaly detection, real time alerting, and real time data discovery and classification allows you to identify, prioritize and investigate threats - fast. Protect Sensitive Data from Rogue Users and Compromised User Accounts. We enable you to detect and investigate threats to your most sensitive data in ways no other vendor can. Bringing together data discovery and classification with threat detection enables you to investigate all events, changes, actions and anomalies with context. End to end visibility of Active Directory, Group Policy, File Servers, Office 365, NetApp, SharePoint, Box, Dropbox and more. Detect and Respond to Security Threats 10x Faster. Investigate threats as they emerge in Active Directory and track movement
-
20
CENTRI Protected Sessions
CENTRI Technology
Secure your IoT data from creation to consumption, through every mile along the way. Protected Sessions changes the game by giving you data security for bi-directional communications while freeing you from the limitations of multiple network protocols and a mixed IoT topology. Session lifecycles are IoT-friendly by design – by working within the constraints of low-power MCU devices using low-power networks that may have intermittent network access, Protected Sessions can maintain the security of your communications channel through lifespans from seconds to months! Using heavyweight industry-standard encryption, CENTRI Protected Sessions is optimized for lightweight devices with data compression and a tiny footprint, providing both security and efficiency between the endpoint device and the back of the cloud. Protected Sessions secures bi-directional communications between your IoT devices and your application server/cloud. -
21
Wind River Helix Virtualization Platform
Wind River
Wind River® Helix™ Virtualization Platform consolidates multi-OS and mixed-criticality applications onto a single edge compute software platform, simplifying, securing, and future-proofing critical infrastructure solutions in the aerospace, defense, industrial, medical, and automotive markets. The demand for more intelligence at the edge while supporting legacy applications requires industries to adapt quickly to modern software and cloud deployment practices while maintaining dedicated, long-standing software. To meet these challenges, Helix Platform allows legacy software to remain unchanged while running alongside new applications, and it provides all the benefits of a consistent, scalable, and agile platform across a wide range of edge devices. Highly regulated applications requiring robust time and space partitioning. Combining multiple workloads without certification requirements. -
22
Clonetab
Clonetab
For ERPs like Oracle e-Business Suite, PeopleSoft & Databases Clonetab is the only software which can virtualize and provide true end-to-end on-demand clones of ERPs (like Oracle e-Business Suite, PeopleSoft) or databases. It can also provide an integrated solution for virtualization, cloning, Disaster Recovery, Backups and Oracle EBS Snapshots. Clonetab engines – Deeply aware of ERP Applications, not just Databases The engines are deeply EBS & PS aware and can identify the major releases (e.g. R12.1, R12.2) and patchset levels like AD, TXK and executes the clone commands accordingly. The platform provides options to retain EBS/PS specific options like profile option retention, Concurrent/Process scheduler setups retention, EBS users with responsibilities retention, Database links, Directories retention, workflows setups and many more options, resulting in a true end-to-end ERP clone. -
23
Cuckoo Sandbox
Cuckoo
You can throw any suspicious file at it and in a matter of minutes Cuckoo will provide a detailed report outlining the behavior of the file when executed inside a realistic but isolated environment. Malware is the swiss-army knife of cybercriminals and any other adversary to your corporation or organization. In these evolving times, detecting and removing malware artifacts is not enough: it's vitally important to understand how they operate in order to understand the context, the motivations, and the goals of a breach. Cuckoo Sandbox is free software that automated the task of analyzing any malicious file under Windows, macOS, Linux, and Android. Cuckoo Sandbox is an advanced, extremely modular, and 100% open source automated malware analysis system with infinite application opportunities. Analyze many different malicious files (executables, office documents, pdf files, emails, etc) as well as malicious websites under Windows, Linux, macOS, and Android virtualized environments. -
24
Secuve TOS
Secuve
SECUVE TOS provides stonr user authentication based on digital signature and supports multiple access control policies. To control access privilege to illegal intruders including hackers, crackers and unauthorized internal users. Prevent forgery of modification of homepage or files, and data leakage. Protect computer systems againsts a variety of attacks resulting from security flaws inherent in operating systems. Detection and prevention of unauthorized network access to systems. Control over the execution of critical commands which can affect system operation. Delegation triggered when a system administrator executes a command requiring administrative privileges. Delegation triggered when the users of specific systems require the sessions for managing accounts. Event audit of user processes or background processes at the kernel level. -
25
iGRIFFIN
Secuve
iGRIFFIN is the solution for consolidated account and privilege management, also know as 'Identity and Access Management'. It provides consolidated account management, control over exploitable commands, access control, and user event audit, based on multi-factor authentication to check actual users by employing multi-factor authentication methods. Also it enables effective internal control over in-house systems to be made in effect by harnessing automated processes for application and approval in case of user access. Command control over a kind of exploitable commands, which should be prohibited to be used. The control is to be enforced in such a way that only authorized users through application/approval processes can be permitted to use exploitable commands. The control is to be enforced in such a way that only authorized users through application/approval processes should be permitted to access important data. -
26
LogGRIFFIN
Secuve
LogGRIFFIN is the solution for consolidated log management capable of big data analysis. It provides real-time log collection to prevent audit logs generated by multiple heterogeneous networks and servers from modification or forgery, and analyzes these collected and stored logs to support incident response, audit trail, and/or legal compliance. Adjusting log-collecting speed of log-collecting agents according to CPU workload of log-collecting servers. Support for encrypted communication between log-collecting agents and log-collecting servers. Supporting big data processing through distributed search engine. Support for defining PROPERTY about new log formats and for analyzing them. User-defined correlation analysis of non-conformative logs based on dynamic analytic chains. Real-time detection and analysis of correlation. -
27
360 Security Guard
360 Security Guard
As an industry-leading security antivirus product, 360 Security Guard can accurately detect and kill all kinds of Trojan viruses, and is always committed to protecting users' computer security. Not only that, we have also developed a variety of features to improve the efficiency of your computer use. Scan the computer from multiple dimensions, including garbage cleaning, computer running speed, system abnormalities, and computer security risks, and quickly assess the computer system status. 38 layers of protection barriers are added layer by layer to sense the threat situation at the first time, forming an all-round, all-weather cyberspace defense system. Get the latest information on popular games and events in real time, gather multiple media, and unify the entrance. The latest and hottest game download and installation, 360 exclusive distribution channel, fast direct access. -
28
TrueFort
TrueFort
Attackers will always find a way in. Insulate your environment against spreading compromise by enforcing a positive security model that curbs lateral movement. TrueFort gives security teams the scalable workload protection platform they need to secure hybrid environments. Next-gen firewalls and IP address-based controls are completely ineffective in modern infrastructure. Whether your workloads execute in the cloud, in virtual infrastructure, or on physical servers, TrueFort protects against advanced attacks with workload hardening, integrity monitoring, detection and response, and identity-based segmentation. Only TrueFort combines environment-wide security observability with real-time response, service account behavior analytics, file integrity monitoring, and CIS-certified hardening and file integrity monitoring that highlights differences between file and binary versions. -
29
ClamAV
ClamAV
ClamAV® is the open-source standard for mail gateway-scanning software. ClamAV includes a multi-threaded scanner daemon, command-line utilities for on-demand file scanning, and automatic signature updates. ClamAV supports multiple file formats and signature languages, as well as file and archive unpacking. Access to ClamAV versions that work with your operating system. ClamAV® is an open-source antivirus engine for detecting trojans, viruses, malware & other malicious threats. ClamAV® is an open-source (GPL) anti-virus engine used in a variety of situations, including email and web scanning, and endpoint security. It provides many utilities for users, including a flexible and scalable multi-threaded daemon, a command-line scanner, and an advanced tool for automatic database updates. Built-in support for various archive formats, including ZIP, RAR, Dmg, Tar, GZIP, BZIP2, OLE2, Cabinet, CHM, BinHex, SIS, and others. -
30
CryptoSentry
SentryBay
CryptoSentry stops ransomware. Once installed on your employees’ devices, it will constantly monitor for suspicious encryption activity. Ransomware is the fastest growing cyber threat in recent years and it will affect your business unless you take action to stop the encryption of files before you are targeted. News headlines are frequently dominated by the damaging consequences of the latest ransomware attack from WannaCry, Petya and CryptoWall to CryptoLocker and Locky, and other less known variants which have had a significant impact on productivity and finance. Because ransomware is an attack on the availability of data, our CryptoSentry solution is designed to prevent it from getting access to data so it can encrypt files. Once installed on your employees’ devices, it will constantly monitor for suspicious encryption activity. If its algorithms determine a threat, it will proactively prevent file encryption.
