Best IT Security Software for Cloud - Page 26
View:
Compare the Top IT Security Software for Cloud as of November 2026 - Page 26
Sort By:
-
1
Tencent EdgeOne
Tencent
Tencent EdgeOne is a powerful CDN (Content Delivery Network) and cloud security platform designed to accelerate your web applications while providing comprehensive protection against cyber threats. As a top-tier China CDN provider, Tencent EdgeOne ensures fast and reliable content delivery across China and global markets. Key Features: - CDN Acceleration: Fast content delivery with optimized routing for superior user experience. - DDoS Protection: Advanced mitigation to safeguard your infrastructure from disruptive attacks. - WAF (Web Application Firewall): Robust web protection against OWASP top vulnerabilities, SQL injection, XSS, and more. - China CDN: Optimized network nodes across China for low latency and high availability in the Chinese market. Tencent EdgeOne combines cutting-edge technology with Tencent’s extensive experience in network infrastructure, making it the preferred choice for businesses targeting China and global audiences.Starting Price: $1.40 per month -
2
Attaxion
Attaxion
The Attaxion Exposure Management Platform provides businesses with full visibility and control over their external exposure, integrating External Attack Surface Management (EASM) capabilities to continuously discover and monitor internet-facing assets. It enables asset discovery, risk prioritization, and real-time detection of vulnerabilities across known and shadow IT assets. Beyond core EASM, Attaxion includes Traffic Monitoring and Impersonation Detection modules. Traffic Monitoring adds visibility into asset activity and suspicious interactions, while Impersonation Detection identifies lookalike domains and brand abuse attempts. Scalable and easy to integrate, Attaxion supports a proactive approach to reducing security gaps and managing external exposure.Starting Price: $129 per month -
3
nebty
nebty
nebty is a brand protection service from Munich, Germany. It finds websites, profiles and ads that impersonate your company, and it takes them down. nebty checks new domain registrations for lookalike and typosquatting domains. It also watches for phishing pages, fake shops, fake social media profiles and scam ads on LinkedIn, Facebook, Instagram, TikTok and Google Ads, and for harmful results on Google, Bing, ChatGPT and Perplexity. Each finding gets a risk score and a real-time alert. When a finding is confirmed as malicious, nebty runs the full takedown: it secures evidence, contacts the registrar, host or platform, and reports the site to blocklists such as Google Safe Browsing. You can follow every case in the dashboard. Takedowns are billed per case, only when they succeed. nebty is built for small and mid-sized teams without their own security team. Monitoring starts at €99 per brand per month, with no setup fees and a 14-day free trial.Starting Price: €99/month per brand -
4
CloudConnexa
OpenVPN
CloudConnexa is OpenVPN's cloud-delivered Zero Trust Network Access (ZTNA) platform that also delivers core Security Service Edge (SSE) capabilities, replacing legacy VPN infrastructure with a fully managed, cloud-native service. Signing up provisions a private overlay network spanning 30+ global regions in a full-mesh topology for low-latency, redundant connectivity. Network and Host Connectors attach private networks, servers, and IoT devices, while OpenVPN tunnels (with Data Channel Offload for higher throughput) secure remote-user, site-to-site, and internet access. Identity-based access rules, integrated with SAML, LDAP, and SCIM, ensure users reach only authorized resources. Built-in Cyber Shield adds DNS content filtering, IDS/IPS, device identity verification, and 2FA. Domain-based routing cloaks server IPs for microsegmentation. It's all managed from one cloud dashboard, giving organizations scalable, zero-trust connectivity without running their own VPN servers.Starting Price: Free up to 5 seats -
5
Vendifi
Vendifi
Vendifi is a cutting-edge third-party risk management (TPRM) platform built for regulated industries like healthcare, finance, and government. Designed to simplify vendor compliance, Vendifi automates the entire due diligence process—from creating regulatory-compliant questionnaires to distributing them, chasing third parties for documentation, and validating responses. Alongside automated due diligence, Vendifi provides advanced cybersecurity monitoring, including real-time threat detection, vulnerability assessments, and ransomware alerts. Built on Microsoft SharePoint and Azure, Vendifi integrates seamlessly with your existing ecosystem, ensuring data security and compliance within your Office 365 environment. Whether you're managing 10 vendors or 10,000, Vendifi scales with your needs, offering a centralized solution for third-party risk management, compliance tracking, and vendor lifecycle management.Starting Price: $11499/annual -
6
Palisade
Palisade Technologies
The Next-Generation AI-Assisted DMARC Solution Tired of wrestling with complicated DNS records, cryptic authentication protocols, and endless manual checks? Meet Palisade, the first fully automated DMARC implementation and monitoring platform built with AI at its core. We empower organizations of all technical levels to boost email deliverability and prevent domain spoofing and impersonation.Starting Price: $29.99 -
7
PasswordFree
Identité
Instant One-Click Logins with 2FA/MFA Security. 90% of shoppers abandon carts due to login friction. PasswordFree eliminates passwords and replaces them with instant, one-click logins and advanced 2FA/MFA security. No passwords, no long forms—just seamless access for your customers and strong protection against fraud. 🔒 Why PasswordFree? ✅ Instant Login – One-click sign-in for a smooth shopping experience ✅ OTP One-Time Pictures – More secure than SMS or email OTPs ✅ 2FA/MFA Security – Prevents credential theft & unauthorized access ✅ Checkout Verification – Stops fake orders & chargebacks before they happen ✅ Protection Against Fake Accounts – Blocks bots and credential sharing ✅ Customizable UI – Matches your store’s design effortlessly 💻 Works across desktop, mobile, and all Shopify themes Let customers log in, register, and check out instantly—while keeping your store safe. 🔥 Try PasswordFree FREE for 14 daysStarting Price: $4.99/month -
8
QSE
QSE Group
QSE Group delivers quantum-resilient cybersecurity solutions designed to protect sensitive data from both current and future threats, including quantum computing. Using post-quantum cryptographic algorithms aligned with NIST standards, QSE secures data through encryption, key management, and secure communications. Built with an API-first design, it integrates easily into existing cloud, on-prem, or hybrid environments. Core features include secure entropy generation, zero trust policy enforcement, and compatibility with identity systems and SIEM tools. QSE also supports white-label deployment for SaaS vendors and MSPs. With real-time monitoring, compliance-ready reporting, and applications across finance, healthcare, legal, and government sectors, QSE enables future-proof protection without disrupting current infrastructure. It's a practical, scalable solution for organizations serious about long-term data security.Starting Price: $19.90/month -
9
Dash0
Dash0
Dash0 is an OpenTelemetry-native observability platform for developers and SRE teams. Metrics, logs, traces, and resources sit in one place, linked by OpenTelemetry semantic conventions, so you move from a slow trace to the logs around it without switching tools. Telemetry arrives over OTLP. No proprietary agent, nothing to re-instrument, and your data stays portable. Dash0 ingests Prometheus metrics alongside OpenTelemetry, supports PromQL, and imports existing Prometheus alerting rules and Grafana dashboards. A Kubernetes operator handles collection across clusters. Dashboards are built on Perses and defined as code, so they live in Git alongside your infrastructure. Log AI infers severity, extracts patterns, and groups records, making unstructured third-party logs searchable. Trace triage uses the SIFT framework to narrow a failing request toward a cause. Spend is visible in-product: see which services and log volumes drive cost, and cut them at the source.Starting Price: $0.00 per month -
10
Javascript Obfuscator
Javascript Obfuscator
JavaScript Obfuscator protects browser and Node.js code against reverse engineering and tampering. Use the free online tool, the Windows desktop app, or the javascriptobfuscator-com npm package in builds and CI, with plugins for webpack, Vite, Rollup, esbuild, Next.js and Metro. Protection includes identifier renaming, string encoding and encryption, control-flow flattening, dead-code insertion, member protection, domain and date locking, self-defending output, debugger friction, and VM bytecode protection for marked functions. Teams that cannot send source to a third party can protect locally in the desktop app. Releases can be verified with Ed25519-signed attestations and opt-in reproducible builds. Migrating from javascript-obfuscator or JS-Confuser takes one command: the CLI converts your existing configuration. Free tier available; paid plans from $29/month.Starting Price: Free -
11
Netarx
Netarx
Netarx Identity Key (NIK) detects deepfakes and AI impersonation in real time across video meetings, phone calls, email and text messages. It runs on Windows, Mac, iOS and Android and in Chrome, and its meeting bot can join any Teams, Zoom, Google Meet or Webex meeting that allows recording. NIK combines 40 AI models, Netarx's own and third-party, with more than 1,000 signals: voice and video analysis plus device, network, IP and location, email and calendar metadata, and communication history. Each participant gets a green, yellow or red verdict. Continuous identity verification works with Microsoft Entra and other identity providers and confirms each participant matches the email and calendar invite. False-positive rate in customer production meetings: 0.3%. Contact-center support covers Five9, Genesys, Cisco and Microsoft Teams. Free for individuals and teams of 10 or fewer, then $5 per user per month; Enterprise is $10 per user per month.Starting Price: $5 per user per month -
12
TaskCall
TaskCall
TaskCall is an automated incident response and management platform designed for IT and DevOps teams. It offers on-call management, AIOps, workflow automation, live call routing, analytics, status page and integration tools. Trusted across industries like retail, healthcare, financial services and government. TaskCall helps organizations detect, respond to and resolve incidents faster, minimizing downtime and improving team collaboration.Starting Price: $9/user/month -
13
NetBird
NetBird
NetBird is an open-source Zero Trust Networking platform built by engineers for engineers. It radically simplifies deploying secure private networks using the high-performance WireGuard® protocol. Unlike traditional VPNs, NetBird creates decentralized, low-latency, high-throughput private networks with a single management console for identity-based access control. Integrating seamlessly with your IdP for SSO and MFA, it forms direct, encrypted peer-to-peer tunnels between devices, servers, and clouds - no central bottlenecks or single points of failure. Lightweight clients ensure scalability and privacy, with traffic never passing through management services. NetBird supports integrations with CrowdStrike, Intune, SentinelOne, pfSense, and more. Ideal for Zero Trust remote access, multi-cloud connectivity, dynamic posture checks, detailed auditing, and MSP multi-tenant management - all through one intuitive platform.Starting Price: $5/user/month -
14
RateYourCyber
RateYourCyber
RateYourCyber is an AI-powered GRC automation platform spanning 18 regulatory frameworks (ISO 27001, SOC 2, GDPR, DORA, HIPAA, CMMC, NCA ECC, SAMA CSF, Financial Crime Compliance (FCC), and more) so your team can demonstrate compliance to investors, enterprise clients, and regulators. No dedicated compliance hire needed to get full value from day one. RateYourCyber unifies what the GRC market sells as four separate products: assessment, threat monitoring, third-party risk, and compliance evidence. Single cloud platform, single data model, 17 regulatory frameworks. Controls satisfied in one framework count toward the others. FAIR Monte Carlo risk quantification expresses gaps in financial terms rather than traffic lights. A reporting engine produces one unified board document across every module, three tones, three formats, three languages, 2,430 execution permutations. Free tier to enterprise. Live across seven geographies.Starting Price: £799 -
15
Authsmith
Authsmith
Authsmith is a cloud-based authentication platform that simplifies securing and managing user access for applications. The system supports multiple authentication methods including email/password, social logins, and single sign-on, creating a streamlined login experience. The platform includes analytics capabilities that provide insights into user activity and authentication metrics, allowing administrators to monitor system health and identify potential security concerns. Authsmith features multi-factor authentication and automated security alerts that help prevent unauthorized access and maintain compliance with industry standards. User management tools within Authsmith enable control over roles and permissions from a centralized dashboard. The platform offers API access for developers to integrate authentication features into their applications. Authsmith delivers a comprehensive solution for managing user access while maintaining strong security measures.Starting Price: $30 -
16
BPROT
BPROT
BPROT is a network control, monitoring, and management solution. It provides visibility into what's happening, allowing for simple and easy control of all aspects of internet usage within businesses. Installation is quick and easy (plug and play), and from that moment on, it provides access to information and management related to: - Internet browsing - Network control - Email - Asset inventory (software and hardware) - Protection of off-site devices - Vulnerability analysis - Web application firewall Detailed reports are available in real time or historical data, and no advanced cybersecurity knowledge is required to be properly protected.Starting Price: $97 per month -
17
Fork
VerSprite Cybersecurity
Fork is a SaaS threat modeling platform that empowers security and product teams to perform continuous, risk-centric application threat assessments using the proven PASTA (Process for Attack Simulation and Threat Analysis) methodology, helping them identify the most likely and impactful risks in under two hours and align security with business priorities. It combines industry-focused threat libraries with real-time vulnerability data and threat intelligence to quantify residual risk accurately, support business impact analysis, and enforce quality gates throughout the threat modeling process. Fork provides a unified security insights dashboard that correlates threats with your application’s attack surface and integrates trusted frameworks and taxonomies such as MITRE, OWASP, CWE, CVE (with EPSS), CAPEC, ATT&CK, D3FEND, and ASVS to drive targeted mitigations and actionable outcomes.Starting Price: $75,000/yr -
18
XFA
XFA
XFA is user-driven device security for fast-growing companies that want strong IT security without building an IT team. It checks every computer and phone at sign-in, whether company-owned, personal (BYOD) or a contractor's laptop, and guides people to fix issues themselves. XFA plugs into Google Workspace, Microsoft Entra ID, Okta, OneLogin, Ping Identity or Keycloak in about 15 minutes, with no devices to enroll and no MDM to roll out. People install the XFA app at their first sign-in, without admin rights. XFA verifies OS updates, disk encryption, screen lock, firewall, antimalware, browser version and more, and admins choose per policy whether to warn or block insecure devices. It discovers devices from sign-in logs, sends alerts by email, Slack or Teams, and exports audit evidence to Vanta, Drata, TrustCloud and Thoropass. XFA takes no control of the device and never collects files, messages or browsing history. Free plan available.Starting Price: $5.90 per user per month -
19
All Pass Hub
All Pass Hub
All Pass Hub is a secure, end-to-end encrypted password manager built for small teams of 2–30 users. Security Architecture: - Zero-knowledge design — master password never leaves your device - PBKDF2-SHA256 (600,000 iterations) + AES-128 vault encryption - TLS 1.2+ for secure data transfer - Multi-factor authentication (MFA) supported Core Features: - Role-based access control (RBAC) down to individual credentials - Shared vaults, group management & one-time secure sharing - Full audit trail with real-time activity logs - Browser extension for Chrome & Firefox with fast autofill - CSV import/export for easy migration - Full self-hosting support for data sovereignty Pricing: - Free plan available forever. Premium starts at $2/user/month with a 30-day free trial — no credit card required. - Perfect for agencies, dev teams, and IT/ops who need real security without enterprise-level complexity.Starting Price: $2/month/2-30 users -
20
PhishByte
PhishByte
PhishByte is an Australian phishing simulation and cyber security awareness training platform built for small and medium-sized businesses. Designed to reduce human cyber risk, PhishByte delivers realistic phishing simulations, short interactive training modules, and real-time Human Risk Scores that track team progress over time. Unlike one-off compliance tick boxes, PhishByte builds lasting behavioural change through continuous simulation and just-in-time learning. When an employee clicks a phishing link, they receive an immediate training intervention — making the lesson relevant and memorable. PhishByte aligns with the Australian Cyber Security Centre's Essential Eight framework and helps organisations meet Privacy Act obligations. It requires no dedicated IT team and is simple to set up and manage. Plans start free for up to 10 users, with Professional and Enterprise tiers available for growing teams.Starting Price: $14.40 AUD/user/year -
21
SecureCodingHub
Secure Coding Hub
SecureCodingHub is an interactive secure coding training platform for AppSec teams and engineering organizations. It offers Code Review Challenges — a two-phase find-and-fix flow across 185+ vulnerability types — and Guided Attack Scenarios with 67 step-by-step walkthroughs simulating full attack chains. Challenges are written in production-realistic code across 15 languages and frameworks including JavaScript, TypeScript, Python, Java, C#, Go, React, Vue, Angular, Swift, and Kotlin. Coverage spans OWASP Web, API, Mobile, and Client-Side Top 10. Compliance evidence builds automatically, mapped to PCI DSS 4.0.1, ISO 27001:2022, and EU CRA. Enterprise features include SAML 2.0/OIDC SSO, SCIM 2.0, SCORM 1.2/2004 LMS integration, multi-tenant hierarchy, assignment workflows, and an immutable audit log for QSA, SOC 2, and ISO audits.Starting Price: Contact us -
22
PhishEye
PhishEye
PhishEye is a digital risk protection platform that helps security, fraud, and brand teams find and shut down phishing sites, lookalike domains, impersonation, and brand abuse. It pairs AI phishing detection with typosquat and domain monitoring across web, ads, social, and search, then turns alerts into prioritised queues with defensible evidence and tracked takedown outcomes across registrars, hosts, and platforms. Built by operators who know what abuse desks actually accept, PhishEye focuses on stable identifiers, clear harm narratives, and follow-ups that hold up when infrastructure rotates - software first, with optional managed support where capacity or coverage is the bottleneck.Starting Price: $99 -
23
Gcore Security
Gcore
Gcore Security is an all-in-one cloud platform providing multi-layer DDoS protection across L3/4/7 and a fully featured WAAP for safeguarding web applications and APIs. Built on globally distributed infrastructure, it detects and mitigates attacks in real time, ensuring stable application performance under extreme load. The platform offers fast onboarding with intuitive configuration for SMBs, while enterprises benefit from a management API, Terraform provider, granular custom rules, SIEM/SOC integrations, and full log export. With specialized optimization for high-traffic, latency-sensitive workloads—particularly in gaming and online entertainment—it delivers reliable protection and uninterrupted user experiences for businesses of any size.Starting Price: €25 per month -
24
AUTODIT
NN Technologies
AUTODIT.IO is an AI-powered cybersecurity platform that continuously discovers internet-facing assets, Shadow IT, and forgotten services — giving organizations a real-time view of their attack surface from an attacker's perspective. It automatically detects vulnerabilities, leaked credentials, and misconfigurations, then prioritizes risks based on actual exploitability rather than just raw severity scores. It also automates compliance monitoring and reporting for frameworks like NIS2, DORA, ISO 27001, and GDPR, replacing costly annual penetration tests with continuous, agentless coverage.Starting Price: €200 -
25
TridentStack Control
TridentStack
TridentStack Control is a patch management, vulnerability detection, and compliance automation platform for managing Windows, macOS, and Linux endpoints. It provides one agent for operating system updates, third-party application patches, CVE scanning, network exposure monitoring, policy enforcement, and compliance tracking. The platform includes intelligent update filtering, approval workflows, deployment rings, pre-staging, CVE enrichment, and phased rollouts to help teams patch systems safely. TridentStack Control also manages third-party application updates with package manager integration, silent deployments, version targeting, configuration profiles, and application inventory. Its vulnerability tools detect CVEs across the fleet, prioritize issues by CVSS severity, and support exception management with expiration dates. With DISA STIG and Microsoft Security Baseline compliance scoring, and STIG results mapped to NIST 800-53, TridentStack Control helps IT and security teams.Starting Price: $0 -
26
DNS Assistant
Tripledot LLC
DNS Assistant is a DNS Posture Management platform that gives organizations continuous visibility into the security and integrity of their domain infrastructure. Going beyond traditional uptime and record-change monitoring, DNS Assistant continuously evaluates the full security posture of your DNS, including dangling subdomain and takeover exposure across more than 22 cloud providers, TLS configuration grading, SPF, DKIM, and DMARC email authentication health, DNSSEC chain-of-trust validation, and WHOIS change detection. Built for security teams, infrastructure engineers, and managed service providers, DNS Assistant delivers real-time change detection with multi-channel alerting across email, Slack, Teams, SMS, and webhooks. Its multi-tenant architecture supports organizations, teams, and granular role-based access, making it equally suited to a single business protecting its own domains or an agency managing thousands of client domains from one console. a full REST API provided.Starting Price: $19.99 -
27
Scalekit
Scalekit
Scalekit is the MCP gateway for AI agents. It is for developers and platform teams who need an agent to call tools as the user, not through a shared service account. One endpoint reaches 600+ connectors and 35,000+ tools, including Salesforce, Gmail, Slack, Notion, HubSpot, Jira, and GitHub. Scalekit finds that user's credentials, checks permission, runs the call, and returns a clean response. Tokens stay in an AES-256 vault. It works with Anthropic, OpenAI, LangChain, Google ADK, Vercel AI, and Mastra. Run it in the Scalekit cloud (US, with EU residency available), in your VPC, or self-hosted. SOC 2 Type II and ISO 27001. A HIPAA BAA is available on Enterprise. The Free plan includes 10,000 tool calls and 10,000 trigger events a month. Growth is $99 a month for 100,000 tool calls. Enterprise pricing is custom.Starting Price: $99/month -
28
AXYVOR
CipherThought Corp
AXYVOR is an AI-native cybersecurity platform that unifies exposure management, identity threat detection, adversary intelligence, attack path analysis, and executive risk reporting into a single system operated by AI. Built for mid-market and enterprise security teams, AXYVOR continuously maps attack paths across cloud, identity, and endpoint environments, prioritizes the vulnerabilities that create real business risk, and delivers an AI-generated Board Risk Index that translates technical findings into financial and operational impact for executives and boards. AXYVOR integrates natively with leading EDR, SIEM, identity, and ITSM tools (CrowdStrike, SentinelOne, Okta, Splunk, Microsoft Sentinel, and more), deploying in days instead of months, at a fraction of the cost of legacy platforms like CrowdStrike, Splunk, or Wiz.Starting Price: $2500 -
29
ZTXGate
CoreZT
ZTXGate is an identity-centric Zero Trust Network Access platform for securing access to private applications and infrastructure. Instead of providing broad network access, ZTXGate lets organizations authorize users to defined resources according to identity, device, posture, time, and policy. Access can be standing, temporary, or request-and-approve, with continuous policy enforcement helping respond when relevant conditions change. ZTXGate can be operated by the customer or an MSP and deployed on-premises, in public cloud infrastructure, across hybrid environments, or in fully air-gapped networks. Core access operation does not require a mandatory CoreZT-hosted cloud control plane. The platform supports OIDC and SCIM identity integration, device-posture signals from Microsoft Intune, Microsoft Defender for Endpoint, CrowdStrike, SentinelOne and Jamf, SIEM integration, clientless HTTP/HTTPS access, and phishing-resistant biometric authentication through integrated ZTXBAS.Starting Price: $4/user/month -
30
OutPhish Australia
BCBP Holdings Pty Ltd t/a OutPhish
OutPhish Australia provides automated phishing simulations and security awareness training for Australian businesses. Import staff by CSV, record roles and schedule recurring tests with configurable styles and difficulty. AI-assisted scenarios use organisation context; targeted follow-up lessons explain warning signs. Reports track sends, opens, clicks and simulated credential entry, with monthly trends and CSV/PDF exports. A separate free online course includes five lessons, Australian examples, practical exercises and assessments. Start free for up to 15 staff, with no card required. Paid plans start at A$19/month for 16–25 staff. See our website for current plans and staff limits. Tickets can be submitted 24 hours a day; response SLA is one business day. Documentation is available. No public API. Operated by BCBP Holdings Pty Ltd t/a OutPhish.Starting Price: Free; paid from A$19/month
