Best IT Security Software for Linux - Page 26

Compare the Top IT Security Software for Linux as of November 2026 - Page 26

  • 1
    TrueFort

    TrueFort

    TrueFort

    Attackers will always find a way in. Insulate your environment against spreading compromise by enforcing a positive security model that curbs lateral movement. TrueFort gives security teams the scalable workload protection platform they need to secure hybrid environments. Next-gen firewalls and IP address-based controls are completely ineffective in modern infrastructure. Whether your workloads execute in the cloud, in virtual infrastructure, or on physical servers, TrueFort protects against advanced attacks with workload hardening, integrity monitoring, detection and response, and identity-based segmentation. Only TrueFort combines environment-wide security observability with real-time response, service account behavior analytics, file integrity monitoring, and CIS-certified hardening and file integrity monitoring that highlights differences between file and binary versions.
  • 2
    ClamAV

    ClamAV

    ClamAV

    ClamAV® is the open-source standard for mail gateway-scanning software. ClamAV includes a multi-threaded scanner daemon, command-line utilities for on-demand file scanning, and automatic signature updates. ClamAV supports multiple file formats and signature languages, as well as file and archive unpacking. Access to ClamAV versions that work with your operating system. ClamAV® is an open-source antivirus engine for detecting trojans, viruses, malware & other malicious threats. ClamAV® is an open-source (GPL) anti-virus engine used in a variety of situations, including email and web scanning, and endpoint security. It provides many utilities for users, including a flexible and scalable multi-threaded daemon, a command-line scanner, and an advanced tool for automatic database updates. Built-in support for various archive formats, including ZIP, RAR, Dmg, Tar, GZIP, BZIP2, OLE2, Cabinet, CHM, BinHex, SIS, and others.
  • 3
    CryptoSentry

    CryptoSentry

    SentryBay

    CryptoSentry stops ransomware. Once installed on your employees’ devices, it will constantly monitor for suspicious encryption activity. Ransomware is the fastest growing cyber threat in recent years and it will affect your business unless you take action to stop the encryption of files before you are targeted. News headlines are frequently dominated by the damaging consequences of the latest ransomware attack from WannaCry, Petya and CryptoWall to CryptoLocker and Locky, and other less known variants which have had a significant impact on productivity and finance. Because ransomware is an attack on the availability of data, our CryptoSentry solution is designed to prevent it from getting access to data so it can encrypt files. Once installed on your employees’ devices, it will constantly monitor for suspicious encryption activity. If its algorithms determine a threat, it will proactively prevent file encryption.
  • 4
    WinMagic SecureDoc
    SecureDoc is an encryption and security management solution designed to safeguard data at rest (DAR). The software has two components: client software for encrypting and decrypting data and server software for configuration and management across the organization's laptops, desktops, servers and external devices. Using a FIPS 140-2 validated AES 256-bit cryptographic engine, SecureDoc ensures compliance with industry regulations and data integrity. With features like pre-boot authentication and central management, the software seamlessly protects sensitive information on various platforms (Windows, macOS and Linux).
  • 5
    Clair

    Clair

    Clair

    Clair is an open-source project for the static analysis of vulnerabilities in application containers (currently including OCI and docker). Clients use the Clair API to index their container images and can then match it against known vulnerabilities. Our goal is to enable a more transparent view of the security of the container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, and transparent. Manifests are Clair's representation of a container image. Clair leverages the fact that OCI Manifests and Layers are content-addressed to reduce duplicated work.
  • 6
    BunkerWeb

    BunkerWeb

    Bunkerity

    BunkerWeb is a next-generation and open-source Web Application Firewall (WAF). Being a full-featured web server (based on NGINX under the hood), it will protect your web services to make them "secure by default". BunkerWeb integrates seamlessly into your existing environments (Linux, Docker, Swarm, Kubernetes, …) and is fully configurable (don't panic, there is an awesome web UI if you don't like the CLI) to meet your own use-cases . In other words, cybersecurity is no more a hassle. BunkerWeb contains primary security features as part of the core but can be easily extended with additional ones thanks to a plugin system).
  • 7
    AI EdgeLabs

    AI EdgeLabs

    AI EdgeLabs

    AI EdgeLabs is an AI-powered Edge embedded cybersecurity solution for distributed Edge/IoT environments. It is a software-defined tool that identifies and responds to all types of threats in real-time ensuring seamless business operations. What sets AI EdgeLabs apart: - The first cybersecurity solution to employ on-device AI in uncovering hidden network threats and zero-day attacks that might disrupt critical operations. - The first cybersecurity solution designed to be deployed directly on edge devices, recognized as the most vulnerable components of any edge infrastructure. - It is a lightweight solution that can be deployed on nearly any edge device, consuming as little as 4% CPU, having no side effects on the performance of neighboring applications. - It is a containerized solution that can be easily deployed on thousands of edge devices remotely within hours. -It identifies and responds to threats even in scenarios with no connectivity and limited bandwidth.
  • 8
    Facia

    Facia

    Facia.ai

    Founded in 2022, Facia specializes in biometric authentication and facial recognition technology. We leverage advanced AI and ML algorithms to deliver secure solutions for businesses. Our 3D liveness detection technology offers rapid responses in under a second, achieving a 0% False Acceptance Rate (FAR) with an FRR below 1% to prevent unauthorized access. Our services include 1:1 Photo ID Verification, 1:N Face Search, and Age Verification. We offer customizable API and SDK integration options for seamless compatibility. Our system provides real-time 3D face verification, ensuring speed and precision without compromising security. We protect against print and mask-based spoofing. Facia is dedicated to advancing biometric authentication, providing secure identity verification solutions for businesses.
  • 9
    Denuvo

    Denuvo

    Irdeto

    With video gaming growing at an astonishing rate and the Metaverse looming on the horizon, securing the industry from piracy and cheaters while ensuring the best gaming experience is more important than ever. Denuvo Anti-Tamper and anti-cheat technologies protect PC games from piracy and detect cheating, so that you can decide how you respond to cheaters. Denuvo anti-tamper and anti-cheat solutions protect your mobile games from tampering, cracking, cloning, cheating, debugging, reverse engineering, and modding. Denuvo anti-cheat protects sensitive game logic and data and detects cheating in games so that you can decide how you respond to cheaters. Enabling a secure way to distribute games over new channels besides existing platforms. You can create your own PC platform (Windows, Linux, and/or macOS), save up to 30% of the revenue typically paid to the platform providers, and keep full control over the distribution.
  • 10
    eLxr Pro

    eLxr Pro

    Wind River

    eLxr Pro from Wind River is a commercial enterprise-grade Linux solution designed for cloud-to-edge deployments, supporting mission-critical workloads like AI, machine learning, and computer vision. Built on the open-source eLxr distribution, eLxr Pro offers flexible, long-term support, security monitoring, and ongoing updates. It ensures compatibility with hardware accelerators and compliance with industry standards. By providing expert consultative services and performance optimizations, eLxr Pro helps businesses scale their edge computing solutions while managing costs, security, and resources effectively.
  • 11
    RunSafe Security

    RunSafe Security

    RunSafe Security

    RunSafe Security protects embedded software across critical infrastructure, delivering automated vulnerability identification and software hardening from build-time to runtime to defend the software supply chain and critical systems without compromising performance or requiring code rewrites. The RunSafe Security Platform includes the authoritative build-time SBOM generator for embedded systems and C/C++ projects, automated vulnerability identification and risk quantification, patented memory relocation techniques to mitigate memory-based vulnerabilities, and pre-hardened open-source packages and containers for immediate protection. RunSafe Security’s customers span the aerospace and defense, energy, operational technology, industrial automation, transportation and automotive, medical device, and high-tech manufacturing verticals.
  • 12
    Ivanti

    Ivanti

    Ivanti

    Ivanti offers integrated IT management solutions designed to automate and secure technology across organizations. Their Unified Endpoint Management platform provides intuitive control from a single console to manage any device from any location. Ivanti’s Enterprise Service Management delivers actionable insights to streamline IT operations and improve employee experiences. The company also provides comprehensive network security and exposure management tools to protect assets and prioritize risks effectively. Trusted by over 34,000 customers worldwide, including Conair and City of Seattle, Ivanti supports secure, flexible work environments. Their solutions enable businesses to boost productivity while maintaining strong security and operational visibility.
  • 13
    VeriEye Extended SDK

    VeriEye Extended SDK

    Neurotechnology

    VeriEye Extended SDK provides a complete toolkit for building scalable biometric client-server systems using advanced iris recognition. It includes all capabilities of the Standard SDK, enhanced with components needed for multi-device deployment. The Extended edition adds Iris Client licenses for desktop, mobile and embedded platforms, allowing developers to build and connect clients across various environments. It also includes sample applications and clear tutorials to speed up development and integration. A ready-to-use matching server is provided, giving teams an out-of-the-box backend for enrollment, template management and high-speed matching in both verification and identification scenarios. This version offers a robust foundation for creating secure iris recognition solutions that work reliably across networked infrastructures.
    Starting Price: €859
  • 14
    Soflab G.A.L.L.

    Soflab G.A.L.L.

    Soflab Technology Sp. z o.o.

    The Soflab G.A.L.L. application is designed to anonymize sensitive data in non-production environments, enabling the generation of high-quality synthetic data that remains consistent with real data and supports reliable testing. At the same time, it ensures full protection of sensitive information, effectively preventing data leaks. Reduced data breach risk by replacing real data with artificial equivalents and detecting sensitive or erroneous records. Lower legal and financial exposure while protecting customer transactional data. Unified anonymization across non-production systems ensures a consistent data model and preserved production relationships. Synthetic data, generated from key production attributes, maintains statistical consistency for BI and AI. A central test data repository enables controlled reuse, lowers maintenance costs, accelerates deployments (up to 5 days), and supports simulation and reusable scenarios.
  • 15
    Eyako

    Eyako

    Eyako

    Eyako is a cybersecurity management platform designed to help CISOs and security leaders centralize cyber operations, risks, compliance, vulnerabilities, incidents, and governance into one unified control center. The platform acts as a “CISO Command Platform” that consolidates cybersecurity signals from multiple tools and systems into a single operational dashboard. Eyako helps organizations prioritize remediation actions based on risk impact, enabling security teams to focus on the most critical threats and compliance tasks first. The platform covers key cybersecurity domains including governance, risk management, compliance tracking, vulnerability management, supplier security, incidents, projects, and data protection. Security leaders can generate executive-ready board reports automatically, reducing the time spent manually preparing presentations and status summaries.
  • 16
    Harden

    Harden

    Harden

    Harden AIF is an agent endpoint security platform for AI coding agents. It evaluates supported agent tool calls before execution using the developer’s intent, session context, organisational policy, and the effect of the proposed action. Harden helps protect against destructive commands, unauthorized access, unintended data transfers, secret exposure, privilege misuse, and other unsafe agent actions. Legitimate actions can proceed normally, sensitive data in supported flows can be safely redacted, and actions that fall outside the developer’s intent or authority are blocked before execution. Harden works across popular coding agents and agentic development tools including Claude Code, Codex, Cursor, Antigravity CLI, Kiro, Hermes, and OpenClaw, providing a consistent security layer across the agent ecosystem.
  • 17
    Sandbox0

    Sandbox0

    Sandbox0

    Sandbox0 is an Apache-2.0 sandbox runtime for long-running AI agents and services that execute untrusted code. It provides isolated Linux environments with command execution, stateful contexts, file operations, SSH, supervised sessions, and network controls. Sandboxes retain a durable writable RootFS across successful pause-and-resume checkpoints; snapshots, restore, and forks support reusable workspaces. The Python, JavaScript/TypeScript, and Go SDKs, HTTP API, and s0 CLI let applications create and manage sandboxes. Sandbox0 Cloud provides hosted access, while teams can self-host the runtime on dedicated Nomad infrastructure. Default pause preserves filesystem state, not live process memory or external connections; experimental memory recovery requires compatible deployment support.
    Starting Price: $0.015/GiB-hour
  • 18
    Powertech Policy Minder
    Powertech Policy Minder for IBM i is a security administration tool that automates critical tasks and provides comprehensive security compliance reporting. By automating security administration, Policy Minder saves time and eliminates labor-intensive manual tasks usually required to administer the details of security. Policy Minder for IBM i features a graphical user interface (GUI) in addition to the traditional green screen. Policy Minder provides an easy way to define your security policy on IBM i, whether you want to customize a security policy based on your organization's unique requirements or use a template based on cybersecurity best practices. Comparing your security policy to your system's current configuration is simple and automated. You can even schedule your policy checks so that they run automatically. The FixIt function automatically finds settings that are out of compliance and fixes them.
  • 19
    Unisys Stealth
    Traditional security controls are insufficient to protect from cyberattacks in the digital age, compelling organizations to adopt a Zero Trust Network. The principles are simple – trust no user or device, inside or outside the private network and grant as little access as possible upon reliable identification. Implementing these principles can be complex – solutions that require expensive, time-consuming upgrades to existing network infrastructure make the move to Zero Trust prohibitive. Unisys Stealth is a flexible cybersecurity software built on identity-based encrypted microsegmentation that transforms your existing network – both on-premises and in the cloud – into a Zero Trust Network. Unisys Stealth products and services offer cybersecurity solutions that maximize your security posture, maintain regulatory compliance and protect your organization.
  • 20
    FCI Cyber

    FCI Cyber

    FCI Cyber

    FCI is a NIST-Based Managed Security Service Provider (MSSP) offering Cybersecurity Compliance Enablement Technologies & Services to CISOs and security personnel of organizations with prescriptive cybersecurity regulatory requirements. FCI blends best-of-breed technologies, cybersecurity best practices, expertise, and innovation to deliver cloud-based Managed Endpoint and Network Protection as well as Safeguard Scanning & Evidencing. FCI’s Next Generation Endpoint Security Audit and Compliance (ESAC) system is specifically designed for financial services organizations. This innovative solution is set to replace outdated legacy systems that have fallen short of user expectations in performance and support. As the first layer of the FCI SOAR (Security, Orchestration, Automation, and Response) platform, it sets the foundation for comprehensive security and compliance management.
  • 21
    Polymorphing

    Polymorphing

    Polyverse

    Polyverse is a leading provider of zero-trust software cybersecurity solutions. Its Polymorphing technology protects against the most sophisticated attacks, even on unpatched and legacy systems. Used by governments and security-conscious organizations worldwide, Polyverse protects against memory exploits, script injections, supply-chain attacks and the like anywhere Linux runs, from devices to the cloud. CNBC has named Polyverse as one of the world’s top 100 startups. For more information, contact info@polyverse.com.
  • 22
    UpCloud

    UpCloud

    UpCloud

    UpCloud is a global cloud infrastructure provider designed to help businesses deploy and manage modern applications with high performance and reliability. The platform offers scalable cloud servers, managed databases, Kubernetes services, and storage solutions through a unified cloud environment. UpCloud focuses on delivering fast and reliable infrastructure supported by a strong service level agreement and real-time customer support. Businesses can deploy resources across multiple global data centers, enabling flexible infrastructure for distributed applications and workloads. The platform also includes networking tools such as load balancers, VPN gateways, and software-defined networking. Transparent pricing and zero outbound traffic costs help organizations manage cloud spending more predictably. With a focus on performance, security, and simplicity, UpCloud helps companies build and scale cloud-based services.
    Starting Price: $5 per month
  • 23
    Monarx

    Monarx

    Monarx

    Monarx is an AI-powered server security platform built for hosting providers, with a strong focus on advanced malware protection. It combines behavior-based malware detection, automated cleanup, and deep system-level remediation to identify and remove threats that traditional malware scanners can miss. Unlike solutions that rely primarily on signature-based scanning, Monarx detects malicious behavior in real time, stops malicious processes, and removes persistent threats that can survive traditional cleanup methods. Beyond malware protection, Monarx provides additional layers of security through ThreatShield for runtime attack prevention and virtual patching, and SmartWAF for web application protection. Designed to run with minimal resource usage, Monarx helps hosting providers reduce reinfections, lower security-related support costs, protect more customers, and increase ARPU through security upsells.
    Starting Price: $15 per month