Best IT Security Software for Cloud - Page 77
View:
Compare the Top IT Security Software for Cloud as of November 2026 - Page 77
Sort By:
-
1
Hydden
Hydden
Hydden is the identity system of record, specializing in AI agent and non-human identity (NHI) security. Identity data is siloed across different tools, so security teams only have fragments of what they need when it matters. As AI agents and NHIs are created outside standard workflows, the chaos grows. Hydden brings it under control, giving IAM and SOC teams end-to-end visibility and control over every human, AI agent and non-human identity across the enterprise. Hydden finds every type of identity and enriches each one with context such as privilege analysis, peer-based permission anomalies, auto classification of identity types and the human owner of each NHI. It records every access and configuration change as it happens, even on systems that don't log those changes themselves. IAM and SOC teams always know everything an identity can reach, right when its access changes. Teams can act directly in Hydden, from custom detection alerts to provisioning and deprovisioning. -
2
Haiku
Haiku
Experience the groundbreaking Haiku game, your gateway to mastering real-world cybersecurity skills. Learning paths within the game are precisely tailored to real cybersecurity jobs and certifications, accelerating the way to your dream cybersecurity career. At Haiku, we harness the power of game-based training to facilitate your team's skill acquisition. Whether you're nurturing cybersecurity newcomers or propelling seasoned professionals to new heights, Haiku empowers your team with invaluable expertise. Gain the knowledge to step in and take action from day one with the ability to spot, contain, and remediate threats. Advance your expertise with training on simulated networks mirrored to your actual technology stack. At Haiku, we seamlessly integrate practical skills-building with the NICE Workforce Framework and certification-preparation pathways, enabling skillset and competency validation at individual and team levels. -
3
Infraon SecuRA
Infraon
A remote access and security platform that enables employees and external actors to remotely access on-premise and hybrid applications and servers without the need for costly VPNs. All remote session Infraon Secura remote control software can record any or all RDP/CLI sessions on a Windows/Linux/other server. It can record precisely all user activity during terminal server sessions. Administrators can join an ongoing remote session and also offer assistance to users during troubleshooting sessions. Ensures that all files transferred over the network are clear and secure. Any files that are suspect or infected are denied access. Provide IT administrators with the ability to view and, if necessary, interrupt and terminate an active session. The zero trust security model restricts commands that are potentially dangerous and unauthorized made by unwitting users. The administrator can write CLI scripts and schedule them to be executed by the SecuRA. -
4
Leverage an expertly engineered global load balancing platform on infrastructure that ensures fast performance. The DNS is fully configurable via APIs, with DDoS protection and no appliances to manage. Direct traffic to the nearest application instance and/or route traffic for GDPR compliancy. Split loads across compute instances. Detect failed or degraded resource instances and reroute clients. Maintain high availability with disaster recovery. Automatically detect primary site failures, get zero-touch failover, and dynamically fail applications over to designated or available instances. Simplify cloud-based DNS management and load balancing and get disaster recovery to ease the burden on your operations and development teams. F5’s cloud-based, intelligent DNS with global server load balancing (GSLB) efficiently directs application traffic across environments globally, performs health checks, and automates responses to activities and events to maintain high performance among apps.
-
5
A containerized environment for continuous web app protection, BIG-IP Next WAF ensures superior security with simplified management. Advanced capabilities make it easy to identify and mitigate threats efficiently. Save time and clicks when completing configuration workflows, reduce the initial tuning phase, and quickly be ready for blocking mode. Simplify detection and response to threats with actionable incident dashboards across multiple policies. Maintain consistent app security policies across environments, in the data center, the edge, or the public cloud. Purchase additional licenses via a simple platform mechanism to increase security coverage. Defend against common attack vectors, including known vulnerabilities (CVEs). Automatically mitigate active attack campaigns with intelligent updates by expert threat researchers at F5. Deliver key contextual awareness by identifying and blocking the sources of known bad IP addresses.
-
6
Bad actors take advantage of SSL/TLS encryption to hide malicious payloads to outsmart and bypass security controls. Don’t leave your organization vulnerable to attack with security solutions that can’t inspect encrypted traffic efficiently at scale. BIG-IP SSL Orchestrator delivers high-performance decryption of inbound and outbound SSL/TLS traffic, enabling security inspection that exposes threats and stops attacks before they happen. Maximize infrastructure and security investments with dynamic, policy-based decryption, encryption, and traffic steering through security inspection devices. Protect against outbound traffic dispersing malware, exfiltrating data, or reaching out to a command-and-control server to trigger attacks. Decrypt incoming encrypted traffic to ensure it’s not hiding ransomware, malware, or other threats that lead to attacks, infections, and data breaches. Prevent new security blind spots by enabling greater flexibility without architectural changes.
-
7
Falcon LogScale
CrowdStrike
Rapidly shut down threats with real-time detection and blazing-fast search while reducing logging costs. Detect threats faster by processing incoming data in under a second. Find suspicious activity in a fraction of the time of traditional security logging tools. A powerful, index-free architecture lets you log all your data and retain it for years while avoiding ingestion bottlenecks. Collect more data for investigations, and threat hunting, and scale to over 1 PB of data ingestion per day with negligible performance impact. Falcon LogScale takes your searching, hunting, and troubleshooting capabilities to the next level with its powerful, intuitive query language. Dig deeper to gain additional context with filtering, aggregation, and regex support. Quickly scan all events with a free-text search. Live and historical dashboards let users instantly prioritize threats, monitor trends, and troubleshoot issues. Easily drill down from charts to search results. -
8
NXLog
NXLog
Achieve complete security observability with powerful insights from your log data. Improve your infrastructure visibility and enhance threat prevention with a versatile multi-platform tool. With support for over 100 operating system versions and more than 120 configurable modules, gain comprehensive insights and increased security. Cut the cost of your SIEM solution by reducing noisy and unnecessary log data. Filter events, truncate unused fields, and remove duplicates to increase the quality of your logs. Collect and aggregate logs from systems across the entire breadth of your organization with a single tool. Reduce complexity in managing security-related events and decrease detection and response times. Empower your organization to meet compliance requirements by centralizing some logs in an SIEM and archiving others in your long-term storage. NXLog Platform is an on-premises solution for centralized log management, with versatile processing. -
9
PiaSoft Flow Logs Viewer
PiaSoft
PiaSoft Flow Logs Viewer is a tool in the AWS Marketplace that provides clarity into your data, with filtering and sorting to help you draw conclusions quickly. It helps you clean up your security groups by comparing rules against your VPC flow logs, to find used, unused, and detached Security group rules. There is a wealth of information locked up in flow logs. Pia Software Flow Logs Viewer provides clarity into your logs, with enriched data, useful conversions, and filtering and sorting. The Flow Logs Viewer enriches your logs with vital information. It answers your questions and lets you dive deeper into the data. Enriches your data with information about your VPC, so you get to the log stream you are looking for quicker. Filtering and sorting to help you draw conclusions quickly. Provides quick access to the data you’re looking for. Data arrives in FLV as soon as PiaSoft Flow Logs Viewer receives it, so there’s no ingestion delay.Starting Price: $0.03 per hour -
10
Splunk Attack Analyzer
Cisco
Automate threat analysis of suspected malware and credential phishing threats. Identify and extract associated forensics for accurate and timely detections. Automatic analysis of active threats for contextual insights to accelerate investigations and achieve rapid resolution. Splunk Attack Analyzer automatically performs the actions required to fully execute an attack chain, including clicking and following links, extracting attachments and embedded files, dealing with archives, and much more. The proprietary technology safely executes the intended threat, while providing analysts a consistent, comprehensive view showing the technical details of an attack. When paired together, Splunk Attack Analyzer and Splunk SOAR provide unique, world-class analysis and response capabilities, making the SOC more effective and efficient in responding to current and future threats. Leverage multiple layers of detection techniques across both credential phishing and malware. -
11
SubdomainRadar.io
SubdomainRadar.io
SubdomainRadar.io is a powerful subdomain discovery platform tailored for cybersecurity professionals, penetration testers, and bug bounty hunters. It offers a wide range of functionalities designed to uncover hidden subdomains and assets within any target domain. With its ability to perform fast, medium, or deep scans, users can choose the level of depth they need depending on the target. Fast scans prioritize speed, while deep scans utilize a broader range of data sources and brute-force techniques to find obscure subdomains that other tools often miss. The platform pulls data from multiple enumerators, ensuring comprehensive coverage. Additionally, its reverse search functionality allows users to search based on subdomain or domain patterns, making it easier to uncover related assets. SubdomainRadar.io also provides an easy-to-use API that can be integrated into existing workflows, supporting automation and rapid subdomain discovery with a rate limit of five requests per second.Starting Price: $29.99 -
12
Cyberday
Cyberday
Cyberday splits chosen frameworks (e.g. ISO 27001, NIS2, DORA, ISO 27701) down to prioritized security tasks and guides you in implementing them directly inside Microsoft Teams. Set your goals by activating your most relevant frameworks from our library. Requirements are instantly turned into policies you can start implementing. Choose the first theme and start evaluating how your current measures cover requirements. You’ll quickly see your starting compliance and understand the gap. Tasks are proven to be implemented (for auditors, top management, or your own team) through assurance information. Assurance info differs according to task type. With the report library's dynamic templates, you can create the desired summaries of cyber security with "one-click". Once you have a clear plan, you can start improving it smartly. You can utilize our tools for risk management, internal auditing, and improvement management to get better every day.Starting Price: €680 per month -
13
NordStellar
Nord Security
NordStellar enables you to detect and respond to cyber threats targeting your company, before they escalate. Give your security teams visibility into how threat actors work and what they do with compromised data. Cut down on data leak detection times, save resources with automated monitoring, and minimize risk to your organization. Businesses are often unaware of data leaks until it’s too late. This calls for modern threat exposure management solutions that help your security team spot data leaks — before they become a problem. Reduce the risk of ransomware, ATO, session hijacking, and other cyber attacks that lead to financial losses. -
14
Juniper SASE
Juniper Networks
Juniper Secure Access Service Edge (SASE) architecture secures your workforce on and off the network with effective security that follows users wherever they go. This AI-optimized experience ensures the network is not just up, but is working well. With Juniper SASE, you can keep users and devices connected and protected wherever they are by delivering zero-trust access to any application from anywhere while optimizing every connection. Juniper meets you where you are and takes you where you want to go by leveraging what you have today and extending your zero-trust initiatives to a cloud-delivered architecture without breaking the bank or your ops team. Juniper offers full-stack Security Service Edge (SSE) and SD-WAN capabilities that leverage the power of the cloud to optimize both the network and the security experience. When securing your distributed workforce, cloud-delivered security is not enough. -
15
Juniper Secure Edge
Juniper Networks
Juniper Secure Edge provides full-stack Secure Services Edge (SSE) capabilities to protect web, SaaS, and on-premises applications and provide users with consistent and secure access that follows them wherever they go. When combined with Juniper’s AI-driven SD-WAN, Juniper Secure Edge provides a best-in-suite SASE solution that helps you deliver seamless and secure end-user experiences that leverage existing architectures and grow with them as they expand their SASE footprint. Identifies applications and inspects traffic for exploits and malware with over 99.8 percent effectiveness. Protects web access by enforcing acceptable use policies and preventing web-borne threats. Provides visibility into SaaS applications and granular controls to ensure authorized access, threat prevention, and compliance. Classifies and monitors data transactions and ensures business compliance requirements and data-protection rules are followed. -
16
SecIntel
Juniper Networks
As the threat landscape evolves and security risks accelerate, you can no longer rely on a single device at the network edge to identify and block threats. Instead, you need a threat-aware network that frees your security analysts to focus on hunting unknown threats and further reduces risk to your organization. SecIntel enables the threat-aware network with a feed of aggregated and verified security data continuously collected from Juniper and multiple other sources. It delivers regularly updated, actionable intelligence to your SRX Series firewalls, MX Series routers and enforcement on Juniper wireless access points, and EX Series and QFX Series switches. Uses curated threat feeds on malicious IPs, URLs, certificate hashes, and domain uses. Infected host and custom threat feeds of all known infected hosts on your network. Allows data from third-party sources, such as industry-specific threat mitigation and prevention input, through custom threat feeds. -
17
Juniper Secure Analytics
Juniper Networks
Juniper Secure Analytics is a leading security information and event management (SIEM) system that consolidates large volumes of event data in near real-time from thousands of network devices, computing endpoints, and applications. Using big data analytics, it transforms the data into network insights and a list of actionable offenses that accelerate incident remediation. Juniper Secure Analytics is an essential part of the Juniper Connected Security portfolio, which extends security to every network point of connection to protect users, data, and infrastructure against advanced threats. A virtual security information and event management (SIEM) system that collects, analyzes, and consolidates security data from global networked devices to quickly detect and remediate security incidents. -
18
Juniper Advanced Threat Protection
Juniper Networks
Juniper Advanced Threat Prevention (ATP) is the threat intelligence hub for your network. It contains a litany of built-in advanced security services that use the power of AI and machine learning to detect attacks early and optimize policy enforcement networkwide. Juniper ATP runs as a cloud-enabled service on an SRX Series Firewall or as a virtual appliance deployed locally. It finds and blocks commodity and zero-day malware within files, IP traffic, and DNS requests. The service assesses risk from encrypted and decrypted network traffic and connected devices, including IoT devices, and distributes that intelligence throughout the network, drastically decreasing your attack surface and helping avoid breaches. Automatically discover and mitigate known and zero-day threats. Identify and stop threats hiding within encrypted traffic without decrypting. Detect targeted attacks on your network, including high-risk users and devices, and automatically mobilize your defenses. -
19
Juniper Cloud Workload Protection
Juniper Networks
Juniper Cloud Workload Protection defends application workloads in any cloud or on-premises environment in and against advanced and zero-day exploits, automatically as they happen. It ensures that production applications always have a safety net against vulnerability exploits, keeping business-critical services connected and resilient. Provides real-time protection against attacks and safeguards the application from malicious actions without manual intervention, catching sophisticated attacks that endpoint detection (EDR) and web application firewall (WAF) solutions cannot. Continuously assesses vulnerabilities in applications and containers, detecting serious and critical exploit attempts as they happen. Provides rich, application-level security event generation and reporting, including application connectivity, topology, and detailed information about the attempted attack. Validates the execution of applications and detects attacks without using behavior or signatures. -
20
Magnet AXIOM
Magnet Forensics
Recover & analyze your evidence in one case. Examine digital evidence from mobile, cloud, computer, and vehicle sources, alongside third-party extractions all in one case file. Use powerful and intuitive analytical tools to automatically surface case-relevant evidence quickly. Recover, analyze, and report on data from mobile, computer, cloud, and vehicle sources in one case file with Magnet Axiom. Easily recover deleted data and analyze digital evidence from mobile, computer, cloud, and vehicle sources in one case file, with an artifact-first approach. Discover the full history of a file or artifact to build your case and prove intent. Magnet Axiom provides the most up-to-date artifact support for the most recent devices and sources. Acquire and analyze mobile, cloud, and computer evidence together in one case. Process warrant returns from providers such as Google, Facebook, and Instagram. -
21
Protect your organization from credential-stuffing attacks and third-party data breaches. Hundreds of billions of records, including email addresses, user credentials, and passwords, have been breached. Hackers use these records to brute-force their way into organizations’ systems and networks to carry out targeted attacks. HEROIC EPIC is an Identity Breach Intelligence Platform™ that discovers and prevents credential stuffing and account takeover attacks
-
22
FortiGuard IPS Service
Fortinet
The AI/ML-powered FortiGuard IPS Service provides near-real-time intelligence with thousands of intrusion prevention rules to detect and block known and suspicious threats before they ever reach your devices. Natively integrated across the Fortinet Security Fabric, the FortiGuard IPS Service delivers industry-leading IPS performance and efficiency while creating a coordinated network response across your broader Fortinet infrastructure. The FortiGuard IPS Service provides rich IPS capabilities like deep packet inspection (DPI) and virtual patching to detect and block malicious traffic entering your network. In both standalone IPS and converged next-generation firewall deployments, the innovative FortiGuard IPS Service is based on a modern, efficient architecture, making performance in even the largest data centers reliably consistent. With FortiGuard IPS Service deployed as part of your broader security infrastructure, Fortinet is able to deploy new intrusion prevention signatures. -
23
FortiGate Cloud
Fortinet
FortiGate Cloud simplifies network operations for Fortinet FortiGate and the connected devices, FortiSwitch, FortiAP, and FortiExtender for initial deployment, setup, and ongoing maintenance. FortiGate Cloud brings enterprise-grade analytics and reporting for small to medium-sized businesses enabling organizations of all sizes complete visibility into their attack surface. FortiGate Cloud is a cloud-based software-as-a-service (SaaS) offering a range of management, reporting, and analytics for FortiGate next-generation firewalls. FortiGate Cloud simplifies the initial deployment, setup, and ongoing management of FortiGate with SD-WAN functions, FortiSwitch, FortiAP, and FortiExtender with zero-touch provisioning, providing you with visibility of your entire deployment. FortiGate Cloud grows with your requirements from a single FortiGate to a complete managed security services management solution for thousands of devices across multiple customers. -
24
FortiPAM
Fortinet
FortiPAM provides privileged access management, control, and monitoring of elevated and privileged accounts, processes, and critical systems across the entire IT environment. FortiPAM is part of the Fortinet Security Fabric, integrating with products such as FortiClient, FortiAuthenticator, and FortiToken. Critical assets need to be protected with the highest level of security. FortiPAM allows for enhanced security including zero-trust network access (ZTNA) controls when users try to access critical assets. ZTNA tags can be applied to check device posture for vulnerabilities, installed AV, location, and more. These checks are done continuously so if something changes on the device, it can be disconnected from the critical asset. In this way, FortiPAM ensures that the users and devices accessing critical assets are secure and prevents threats from impacting the asset. You can use the pre-built applications, or web-based launchers, or easily create your own launch templates. -
25
FortiGSLB Cloud
Fortinet
FortiGSLB Cloud is a DNS-based service that helps to ensure business continuity by keeping an application online and available when a local area experiences unexpected traffic spikes or network downtime. FortiGSLB enables you to deploy redundant resources around the globe to maintain the availability of your business-critical applications. FortiGSLB enables you to deploy redundant resources around the globe to maintain the availability of your business-critical applications. Provides load-sharing and failover functionality with a reach and level of resiliency that exceeds that of traditional device-based solutions. Offers multisite application visibility with advanced application testing. Provides primary authoritative DNS server with standard DNS type zone, A/AAAA, NS, CNAME, MX, TXT, PTR, SRV, and advanced security function DNSSEC. FortiGSLB integrates with Fortinet products, such as FortiADC and FortiGate. -
26
FortiAIOps
Fortinet
FortiAIOps delivers proactive visibility and speeds IT operations, powered by AI. FortiAIOps is an artificial intelligence with machine learning (AI/ML) solution for Fortinet networks. This ensures quick data collection and identification of network anomalies. Fortinet network devices (FortiAPs, FortiSwitches, FortiGates, SD-WAN, FortiExtender) across the network feed the FortiAIOps dataset, enabling insights and event correlation for the network operations center (NOC). Enable visibility into your network across the full OSI stack. For example, get Layer 1 information, such as full RF spectrum analysis to understand interference on your Wi-Fi network. And, get Layer 7 application information that allows you to see what applications are traversing your Ethernet and your SD-WAN connections. Utilize a suite of troubleshooting tools to probe the network and understand diagnose issues. VLAN probing, cable verification, spectrum analysis, service assurance, and more. -
27
FortiDeceptor
Fortinet
FortiDeceptor provides early detection and isolation of sophisticated human and automated attacks by deceiving attackers into revealing themselves. FortiDeceptor, part of Fortinet SecOps Platform, detects and responds to in-network attacks such as stolen credential usage, lateral movement, man-in-the-middle, and ransomware. Adding FortiDeceptor as part of your cybersecurity strategy helps shift your defenses from reactive to proactive with intrusion-based detection layered with contextual intelligence. FortiDeceptor lures attackers into revealing themselves early at the reconnaissance stage by engaging with a wide range of deception assets distributed throughout your environment. The platform generates high-fidelity alerts based on real-time engagement with attackers and malware, providing attack activity analysis and attack isolation. This helps alleviate the burden on SOC teams inundated with false-positive alerts. FortiDeceptor offers flexible deployment options. -
28
FortiCASB
Fortinet
FortiCASB is Fortinet’s cloud-native Cloud Access Security Broker (CASB) service that provides visibility, compliance, data security, and threat protection for cloud-based services. Using direct API access, FortiCASB enables deep inspection and policy management for data stored in SaaS and IaaS applications. FortiCASB also provides advanced tools that provide detailed user analytics and management tools to ensure policies are enforced and your organization’s data isn’t getting into the wrong hands. -
29
FortiGuard Antivirus Service
Fortinet
The FortiGuard Antivirus Service delivers automated updates that protect against the latest polymorphic attacks, viruses, spyware, and other content-level threats. Based on patented Content Pattern Recognition Language (CPRL), the anti-malware engine is designed to prevent known and previously unknown malware variants. FortiGuard AntiVirus leverages a comprehensive technology stack that includes signature-based detection, heuristic and behavior-based detection, and AI- and ML-driven analysis. The subscription service protects your network, endpoints, and cloud deployments from a wide range of malware. It attaches to many Fortinet products including FortiGate Next-Generation Firewalls (NGFWs), FortiMail, FortiWeb, FortiClient, and FortiSandbox. The FortiGuard Antivirus Service can significantly improve your security posture. The service can lower the risk of data breaches and malware infections, reduce security overhead costs, and stop ransomware and zero-day attacks. -
30
Defused
Aves Netsec
Our deception product Defused is a SaaS cyber deception platform used to deploy and manage deception and moving target defense capabilities in your on-premise & cloud networks. Our attacker deception technology enables security teams to set up high-precision deception decoy sensors to know when threats are present in your network and detect cyber attackers without the hassle of a huge setup. Our deception platform serves as SaaS, enabling easy fleet management over even highly distributed environments. You download and configure a virtual machine on your local or cloud network which automatically deploys our deception decoys into that network. The deception decoys are connected to a central management dashboard, running in the cloud, and will transmit any attacker activity as security alerts into the cloud dashboard (using a one-way connection.) Exploit detection against emerging & unpatched vulnerabilities.
