Best IT Security Software for Cloud - Page 47
View:
Compare the Top IT Security Software for Cloud as of November 2026 - Page 47
Sort By:
-
1
Sekorti
Sekorti
Sekorti--> Enterprise Trust, Built in Minutes. Scan your domain and get a live security report with attack paths. Build a free Trust Center. Answer security questionnaires, RFPs, DDQs, and SIG, CAIQ, and VSAQ frameworks in seconds with AI. Prove SOC 2, ISO 27001, GDPR, ISO 42001, and EU AI Act readiness, without spreadsheets, without delays, without losing deals. Sekorti is the security trust platform for B2B SaaS teams who are tired of losing enterprise deals to compliance friction. 📍 Copenhagen, DenmarkStarting Price: $25/month -
2
VORXOC
Helxon
VorXOC by Helxon is a unified SOC platform designed to simplify and strengthen modern cybersecurity operations. The platform centralizes security monitoring, threat detection, incident response, and security analytics into a single dashboard, helping organizations reduce alert fatigue and improve response efficiency. VorXOC integrates with cloud platforms, SIEMs, firewalls, endpoint security tools, and other security solutions to provide real-time visibility across IT environments. The platform supports threat hunting, automated workflows, security monitoring, and advanced analytics for modern enterprises and managed security operations teams.Starting Price: $500/month -
3
CyberFurl
CyberFurl
CyberFurl continuously monitors your external posture across DNS, Email, Encryption, Web Security Headers, Breach Exposure, CVE Surface, IP Reputation, Malware Intel, Compliance Posture, and AI Threat Signals. 10 pillars. 35+ controls.Starting Price: $29/month -
4
SikkerKey
SikkerKey
SikkerKey allows you to manage application secrets across every machine in your stack using secure, machine-authenticated requests instead of bearer tokens. Instead of distributing replayable scoped tokens, SikkerKey verifies machine identity with asymmetric cryptographic proof, giving teams a stronger security primitive without the usual complexity. Run a single bootstrap command, approve the machine in the dashboard, and it’s ready to securely request the secrets it needs.Starting Price: $25/month -
5
fingerprint.dev
fingerprint.dev
Fingerprint is a device intelligence platform that works across web and mobile applications to identify every visitor with industry-leading accuracy, even when they are anonymous. It helps businesses stop fraud, detect bots and AI agents, reduce friction for trusted users, and build safer, more seamless products. It recognizes returning browsers and mobile devices without relying on cookies or IP addresses, assigning each visitor a persistent visitor ID that remains stable even across incognito mode, VPN usage, cleared cookies, and tampered devices. Fingerprint combines the original fingerprinting library with more than 100 signals developed by its research team, including VPN detection, IP geolocation, high-activity device detection, raw device attributes, IP blocklist matching, geolocation spoofing, browser bot detection, rooted device detection, browser tampering detection, and other Smart Signals.Starting Price: Free -
6
bearhug
bearhug
bearhug is AWS security for teams that don't have a security team. Built on AWS Security Hub and GuardDuty, bearhug continuously monitors your AWS accounts for vulnerabilities, translates every finding into plain English, and lets you fix issues with one click - directly from the dashboard, no AWS console required. Setup takes under five minutes via AWS Marketplace. No installation, no configuration, no consultants. Key features: Plain English and technical views - switch between them depending on your audience One-click remediation with rollback included Real-time monitoring with email alerts as new issues emerge Multi-account dashboard for production, staging, and development environments Compliance alignment with GDPR, SOC 2, ISO 27001, PCI-DSS, and Cyber Essentials Pricing: $100/month per AWS account - flat rate, no per-asset pricing. Billed through your existing AWS Marketplace account.Starting Price: $100 per month -
7
root9
root9
root9 is an Alert Management, On-Call, and IT service management (ITSM) platform for IT Operations, NOC, SRE, DevOps, and Platform Engineering teams. One foundation runs the full operational lifecycle, so alerts, incidents, changes, problems, requests, and on-call response share the same operational identity, memory, and understanding. Capabilities include alert management, event correlation, incident, problem, change, and request management, on-call and escalation, knowledge, automation, operational analytics, and collaboration in Microsoft Teams and Slack. AI agents assist on every record, with the evidence and reasoning shown. Instead of a CMDB nobody keeps current, root9 builds operational identity from real activity (the ICDB), reducing alert fatigue and surfacing patterns that monitoring tools miss. Built to learn, not to be taught. Works alongside Splunk, Datadog, Grafana, CloudWatch, New Relic, Azure Monitor, Dynatrace, ServiceNow, Jira, and more.Starting Price: $179/month unlimited users -
8
Strobes
Strobes Security
Strobes is an AI-powered exposure management platform designed to help security teams continuously discover, validate, prioritize, and remediate critical risks. The platform connects attack surface management, application security posture management, risk-based vulnerability management, AI pentesting, penetration testing as a service, integrations, workflows, analytics, and reporting into one continuous system. Strobes uses AI agents to analyze vulnerabilities in business context, validate exploitability, reduce false positives, and guide teams toward the exposures that matter most. Its platform integrates with more than 100 security and engineering tools, including scanners, cloud systems, code tools, ticketing platforms, communication tools, and SIEM solutions. Security teams can use Strobes to reduce remediation backlogs, improve visibility, automate triage, route issues, verify fixes, and maintain audit readiness. -
9
Zunoy Authenticator
Mentcube Innovations Pvt Ltd
Zunoy Authenticator is a security application that helps users protect online accounts with two-factor authentication (2FA). The app generates time-based one-time passwords (TOTP) that add an extra layer of security beyond traditional usernames and passwords. Users can securely store authentication accounts, generate verification codes for supported services, and quickly access codes when signing in. The application is designed to simplify account protection while helping reduce the risk of unauthorized access caused by compromised passwords. It can be used with websites, cloud services, business applications, developer platforms, and other systems that support two-factor authentication. Zunoy Authenticator is suitable for individuals, businesses, developers, and organizations looking to strengthen account security and improve access protection across multiple online services.Starting Price: Free -
10
HoneyWire
HoneyWire
HoneyWire is an open-source deception platform deploying canary tripwires across internal networks to detect lateral movement and intrusion activity. How it works: - TUI wizard instantly deploys lightweight, distroless "HoneyWires" onto any Linux host. - Synthetic services run silently with zero reason for legitimate users or scanners to interact with them. - If an attacker touches a HoneyWire, a high-fidelity alert routes directly to the centralized Hub. Deployment Types: - Web Router Decoy: Emulates admin router logins to trap web reconnaissance. - Canary TCP Tarpit: Binds to critical ports to log payloads and slow attacks. - File Canary (FIM): Monitors files to flag unauthorized access to decoy assets. - ICMP Canary: Detects stealthy ping sweeps and raw network mapping. - Network Scan Detector: Catches port scanning across local subnets. The Hub: A self-hosted, Web-UI control center managing node configurations, fleet, and alert routing, with frictionless UX.Starting Price: Free -
11
trueno
trueno
trueno is an AWS cloud intelligence platform that helps engineering, DevOps, FinOps, and security teams monitor cloud environments using a read-only IAM role. It continuously analyzes AWS accounts for security risks, identity issues, cloud misconfigurations, public exposure, compliance gaps, and unnecessary cloud spending without deploying agents or requiring write permissions. The platform combines security monitoring, cloud cost optimization, compliance visibility, infrastructure inventory, and operational insights into a single dashboard. Teams can prioritize findings, automate reporting, monitor multiple AWS accounts, and gain actionable recommendations to improve security posture while reducing cloud costs.Starting Price: $39/month/user -
12
ThreatProwler
CYBERSAFEHAVEN TECHNOLOGIES LLC
ThreatProwler is a continuous threat exposure management (CTEM) solution that scans your digital infrastructure, information assets and applications to identify all the threats that affect your business. Combined with latest threat intelligence, dark web and data breach details, this is the most comprehensive threat management solution built ground up exclusively for small and medium businesses. ThreatProwler offers Enterprise-grade features including scoping and discovery (auto-identifies assets, shadow assets and provides ability to exclude assets that should not be scanned), extensive prioritization features by severity (CVSS, EPSS, KEV) and by assets (can also configure annualized loss expectancy). Last but not the least, an AI-powered Attack Likelihood Score (ALS) (backed by the world's largest database of cyber events) based on mapping to MITRE ATT&CK paths and the possible impact is presented.Starting Price: $1800/year (max. 5 domains) -
13
AISafe Labs
AISafe Labs
AISafe Labs is a fully autonomous platform offering on-demand services like: Penetration testing and Source code auditing with SOC2/ISO27001 audit-ready reports. This means no more waiting in line for availability or expensive quotes. It's just real security reports delivered with hacker expertise and at machine speed, in hours instead of weeks and at a fraction of what traditional security firms charge.Starting Price: $40/month -
14
Dynacop
Forty2 LLC
Dynacop is multi-factor authentication software that secures Windows console and RDP sign-ins while blocking malicious IPs. It adds a second verification layer by requiring a six-digit code from a mobile device after password entry, preventing unauthorized access from stolen credentials. The software supports shared accounts by enabling identity verification via a TOTP authenticator app, with audit logs tracking who accessed shared admin accounts. Dynacop Shield blocks attackers by analyzing failed login attempts, escalating block durations from 15 minutes to 24 hours for repeat offenders, with persistent attackers blocked longer. Installation is simple, requiring no Active Directory. Admins run the installer, register the machine, and invite users to enroll via TOTP apps like Google Authenticator. Compatible with Windows 10, 11, and Server 2012+, it works on domain and non-domain machines.Starting Price: $2/month/user -
15
Dregs
Dregs LLC
Dregs is fraud detection for SaaS applications. A lightweight JavaScript tracking script fingerprints devices and streams user events; Dregs scores every identity across four dimensions: Humanity (bot and automation detection), Authenticity (fake profiles and disposable emails), Uniqueness (duplicate accounts linked through shared devices, IPs, and sessions), and Behavior (activity compared against expected patterns). Scores are transparent — built from individual analyzer observations you can inspect and tune, not an opaque risk number. Rules raise alerts to the dashboard, email, Slack, or webhooks, and teams adopt in four stages — Scoring, Alerts, Escalation, Autonomy — ending in automated responses like rate limiting and account quarantine. Dregs targets free-trial abuse, promo and referral fraud, duplicate accounts, stolen-card testing, SMS pumping, credential stuffing, and scraping. Setup is self-serve with a free trial and published pricing.Starting Price: $17/month -
16
VerifiedThreat
VerifiedThreat
VerifiedThreat is an AI-driven cybersecurity platform that continuously validates real-world cyber risk through autonomous threat emulation rather than relying solely on vulnerability scanning or theoretical threat intelligence. The platform deploys agentic AI to simulate attacker behaviour against an organisation's external attack surface, verifying whether vulnerabilities are genuinely exploitable and providing evidence-based findings that security, DevOps, compliance, and risk teams can act upon with confidence. Unlike traditional tools that generate large volumes of potential issues, VerifiedThreat is designed to surface only verified threats supported by empirical proof, helping organisations prioritise remediation while reducing alert fatigue.Starting Price: $220/month -
17
Flint AI
SandboxAQ
Flint AI is a local-first, framework-agnostic AgentOps CLI that helps developers determine whether an AI agent is reliable before it reaches production. One command, flintai scan, analyzes Python source code for security vulnerabilities, misconfigurations, risky tool access, missing guardrails, and quality issues, then uses AI reasoning to triage likely false positives. A second command, flintai eval, sends functional and adversarial prompts to a running agent and scores its responses across more than 35 built-in evaluations, including factual accuracy, instruction adherence, prompt injection resistance, jailbreak resilience, and other runtime behaviors. Each agent receives a reliability score, with findings mapped to OWASP Agentic Security Initiative risks ASI01 through ASI10 and severity scored using CVSS v4.0. Flint AI works with agent frameworks and SDKs including Claude Agents SDK, LangChain, CrewAI, Anthropic SDK, OpenAI SDK, MCP servers, and AutoGen.Starting Price: Free -
18
IntelliBreach
IntelliBreach
IntelliBreach is an automated attack surface management and vulnerability scanning platform for SMBs, security teams, and MSSPs. The scanning engine discovers subdomains, IPs, open ports, and technology stacks, identifying CVEs, outdated software, TLS misconfigurations, missing security headers, and email authentication gaps. AI-powered analysis generates an attacker perspective narrative and chains findings into realistic attack paths. Real-time change detection monitors DNS records, assets, and open ports between nightly scans, alerting immediately when anything changes. AWS cloud posture auditing evaluates IAM misconfigurations, public S3 buckets, and compliance gaps. Every finding includes plain-English remediation instructions tailored to your tech stack. MSSPs can manage multiple client organizations and generate white-label branded reports. Professional PDF reports suit cyber insurance and compliance reviews. Free tier available. Plans from $79/month. No agents to install.Starting Price: $79/month -
19
WordSec
WordSec
WordSec is a complete WordPress security suite. The firewall blocks exploits, malicious bots and brute-force attempts with ready-made presets and custom rules. The malware scanner checks file integrity and repairs infected files in one click. Login security adds 2FA, captcha and lockouts; block attackers by IP or country and watch your traffic live. CVE alerts cover plugins and themes, every action lands in the audit log, and alarms reach you by email, Telegram or Slack. Eight modules replace eight separate plugins, and everything runs locally on your own server.Starting Price: $4.90 -
20
IRPForge
IRPForge
Nonprofits and small businesses get hit by cyberattacks as often as anyone else, but they can't afford what enterprise security vendors charge for incident response planning. A single tabletop exercise from a consulting firm runs $5,000 to $35,000. Most organizations skip planning entirely and hope for the best. IRPForge exists to close that gap. The goal wasn't to chase the AI hype. It was to actually use AI where it's useful, to build something solid enough that a small organization could trust it with something this important. You fill out a guided intake form about your organization. No security background needed. IRPForge uses that, along with CIS Controls v8 and the NIST Cybersecurity Framework as the underlying structure, to generate a branded, audit-ready incident response plan you can download immediately. IRPForge isn't certified or endorsed by NIST or CIS. It's built on their public standards.Starting Price: $199 one time -
21
FolSec
FolSec
FolSec is a comprehensive data access management and security platform designed to protect enterprise file systems across on-premises and cloud environments. It provides centralized visibility and control over NTFS permissions, Active Directory groups, user access, and file activities. The platform enables organizations to discover sensitive data, create meaningful access matrices, identify excessive or unauthorized permissions, manage access requests, and review user privileges. Its audit and anomaly detection capabilities monitor who accessed, modified, moved, or deleted data and can detect suspicious behavior, insider threats, mass file operations, and ransomware activity. FolSec also includes file analysis, stale and duplicate file detection, permission backup and recovery, automated response actions, Active Directory reporting and management, and secure file sharing with expiration, password, download, IP, and two-factor authentication controls. -
22
Oberhahn
Oberhahn
Oberhahn is organizational intelligence for AI. Connect your coding agents, LLM providers, SDKs, and proxies with a one-liner or copy-paste config. Live data streams to your dashboard immediately, then we surface what matters across your entire organization: security exposures in prompts and tool calls, real-time AI spend attributed to models and teams, context intelligence showing what your agents send and repeat, and behavioral intelligence revealing which teams and workflows actually drive AI value. See your organization's AI usage in real time, attribute it to people and teams, and prove impact where it matters most.Starting Price: $49/month -
23
Vulnotes
Vulnotes
Vulnotes is a modern, all-in-one platform for managing cybersecurity audits and writing penetration testing reports, covering the entire engagement lifecycle, from mission planning to the final deliverable. - 📅 Plan & Schedule Missions With Calendar And Availability Management - 👥 Assign Your Team With Roles & Permissions - ✍️ Write Reports In A Visual Editor - 👀 See A Live Preview Of Your Report As You Write It - 🤝 Collaborate In Real Time With Your Whole Team - 🗂️ Reuse Findings With A Vulnerability Template Library - 🤖 Generate Vulnerabilities From Screenshots With Built-In, Multi-Provider AI - 🌍 Translate Automatically Across Languages - 🔒 Keep Data Safe With Automatic Anonymization & Local AI Models - ✅ Review & Validate Reports Before They Ship - 📄 Export Beautiful Deliverables (DOCX, PDF, CSV, JSON, ZIP) In One Click - ☁️ Run It In The Cloud Or 💻 Self-Hosted On-PremiseStarting Price: $48/month -
24
CaaB
CaaB
CaaB is a simple, powerful cloud platform built specifically for managed service providers, combining high-performance infrastructure with a unified, fully white-label Cloud Web Manager. MSPs can deploy and manage virtual machines, virtual desktops, managed Kubernetes, cloud storage, CDN, cloud backup, dedicated firewalls, load balancers, web application firewall, and disaster recovery from one environment. The Cloud Web Manager provides an easy-to-navigate GUI, full automation and API access, multi-tenant user management, two-factor authentication, and usage reporting, helping partners manage customer cloud services under their own brand. Virtual machines are designed for high performance and easy scaling, with customizable hardware, SSD storage, Linux or Windows operating systems, and rapid deployment. Managed Kubernetes removes the need to install, manage, and operate clusters manually, with automated management, built-in security, portability, etc.Starting Price: $101 per month -
25
OSINTverse
OSINTverse
OSINTverse is an open-source intelligence ecosystem that provides investigation tools, data-provider integrations, APIs, educational content, and community resources. Its SearchIn platform offers a UI-first investigation workspace where users can start with an identifier, query multiple integrated OSINT providers, and organize findings into cases. GraphIn provides a graph-first workflow for starting with an entity, expanding relationships through transforms, triaging results, and sharing investigation snapshots. Both products use the same prepaid wallet, with no subscription or per-seat requirement and credits that do not expire. OSINTverse also provides a SearchIn API for engineering teams, shared team workspaces, and integrations with providers such as Shodan, SecurityTrails, DeHashed, Snusbase, Hunter.io, BuiltWith, WhoisXML, and OSINT Industries.Starting Price: $10 -
26
Altar-1
Aikido Security
Aikido Altar is an open-weight security model built to bring frontier-grade defensive security intelligence into infrastructure organizations' control. It is designed for sovereign security environments where sensitive source code, architecture documentation, vulnerability findings, and other internal context cannot be sent to third-party inference services. Altar is based on GLM-5.3 and uses quantization and expert pruning to reduce the model from 1.51 TB at full precision to 328 GB while preserving most of the parent model’s reasoning and security capabilities. It retains 168 of the original 256 routed experts per backbone expert layer and uses a W4A16 representation, making deployment more practical for agentic security workloads with large and growing context windows. Expert selection was calibrated using internal pentesting traces and multilingual data, with no customer data involved, to preserve cybersecurity, coding, and language understanding.Starting Price: $350 per month -
27
KnoxCall
KnoxCall
Every app, build pipeline and AI agent that calls Stripe, OpenAI or another third-party API needs its key, so copies of live keys pile up in .env files, CI settings, laptops and agent environments. Each copy can leak through a poisoned package, a prompt-injected agent or a compromised build, and a stolen key keeps working until it is replaced everywhere. KnoxCall keeps the real key in one place and adds it to each call on its way out. Your apps, pipelines and agents hold only a KnoxCall token. If one leaks, one click revokes it everywhere, without rotating the provider key. Every call is logged with the app or agent that made it. AI agents get spend limits, prompt checks, and redaction of the personal data KnoxCall detects. CI can use workload identity instead of a stored secret, and Enterprise adds a master key held in your own cloud account, SSO and SCIM. SDKs for Node, Python, Go, PHP, Ruby, React and the browser. Free plan, no card; paid plans from $19 a month.Starting Price: $0 -
28
AIBound
AIBound, Inc.
AIBound is an AI security control plane for enterprise security and IT teams. It discovers AI apps, agents, models, browser extensions, and MCP servers across endpoint, browser, network, code, and cloud environments, then links them to identities, permissions, and data connections to assess risk. Teams can review AI risk grades, route findings for review, alert users, create tickets, or block activity through existing endpoint, network, and workflow tools such as Intune, Zscaler, and ServiceNow. The platform also maintains AI inventories and governance evidence to support enterprise AI oversight. AIBound is agentless and read-only for discovery, and is designed to connect with an organization’s existing security and IT stack rather than require new endpoint software.Starting Price: $6/license/month -
29
ScruteX
ScruteX
ScruteX is a cloud-based continuous threat exposure management platform for security teams, CISOs, and managed security service providers. It combines external attack-surface discovery and vulnerability assessment with monitoring for exposed credentials, data leaks, brand impersonation, third-party vendor risk, and sector-specific threat intelligence. The platform helps teams maintain visibility into internet-facing assets, assess exposure using threat context, and review security findings across their assets, brands, suppliers, and threat landscape. ScruteX is agentless and includes a free tier with one monitored domain, limited keyword monitoring, basic dashboard access, and monthly reports with limited results. Paid plans add selectable modules, broader monitoring, and enterprise capabilities such as continuous monitoring and red-team testing.Starting Price: $0 -
30
BreachLine
BreachLine Labs
BreachLine is a security testing platform centered on Nebula, an AI security engineer that helps teams scope authorized assessments, plan and run tests, investigate potential weaknesses, review evidence and remediation guidance, produce reports, and retest fixes. It supports testing of web applications, APIs, mobile applications, cloud environments, networks, and AI systems, with scheduled work, shared team workspaces, and integrations with communication and issue-tracking tools. Usage is credit-based, with monthly subscription plans and an enterprise per-seat option. BreachLine also offers a separate toolkit of 16 free, no-signup browser security tools for reviewing dependencies, comparing lockfiles and SBOMs, and checking CI workflows and application settings. Deterministic local checks run in the browser; hosted MCP reviews process submitted content on BreachLine systems.Starting Price: £399/month
