Best IT Security Software for Cloud - Page 83
View:
Compare the Top IT Security Software for Cloud as of November 2026 - Page 83
Sort By:
-
1
HookProbe
HookProbe
HookProbe is an open-source AI-native intrusion detection system (IDS/IPS) that runs on Raspberry Pi and edge devices. It combines eBPF/XDP kernel-level packet filtering with machine learning threat classification to deliver autonomous network security with zero cloud dependency. The stack includes NAPSE (AI packet inspection), HYDRA (threat intelligence pipeline), SENTINEL (ML classification engine), and AEGIS (autonomous defense orchestrator). In production, a single Raspberry Pi 5 processes 11M+ security events, classifies 177K ML verdicts, and tracks 11,800+ attacker IPs — all autonomously. Key features: - 5-minute install on Raspberry Pi 5 or any Linux device - eBPF/XDP wire-speed packet filtering and DDoS mitigation - ML-based threat classification (benign/suspicious/malicious) - Real-time QSecBit security posture scoring - Web dashboard with live threat visualisation - Post-quantum cryptography (Kyber KEM) - Collective mesh defense across nodesStarting Price: $9/month -
2
CrowdStrike Falcon AIDR
CrowdStrike
CrowdStrike Falcon AI Detection and Response (AIDR) is an enterprise security platform designed to protect the rapidly expanding AI attack surface by delivering real-time visibility, detection, and response across AI systems, users, and interactions. It provides unified visibility into how employees and AI agents use generative AI by mapping relationships between users, prompts, models, agents, and supporting infrastructure, while capturing detailed runtime logs for monitoring, compliance, and investigation. It continuously monitors AI activity across endpoints, cloud environments, and applications, enabling organizations to understand how data flows through AI systems and how agents operate within defined boundaries. AIDR detects and blocks AI-specific threats such as prompt injection, jailbreak attempts, malicious entities, harmful outputs, and unauthorized interactions, using behavioral analysis and integrated threat intelligence. -
3
ConnectaSec
ConnectaSec
ConnectaSec is a Zero Trust Network Access (ZTNA) solution designed specifically for SMBs. It replaces traditional VPNs with a secure, software-defined access model where users only reach the resources they are authorized to use. Features include a plug-and-play gateway deployment, centralized multi-tenant management dashboard with a 0-100 security health score, multi-platform clients (Windows, macOS, Linux, iOS, Android), mesh networking architecture, ISO 27001 certified infrastructure, and full data sovereignty with servers located in Spain. Built by MSP professionals for real-world SMB environments.Starting Price: 5€/device/month -
4
Privly
Privly
Privly is a content protection platform built for digital creators. We scan 500+ leak sites, forums, Telegram channels, and file-sharing platforms to find stolen content. When leaks are detected, we generate legally compliant DMCA takedown notices and file them on your behalf. Our invisible watermarking technology traces leaked content back to the exact person it was shared with. Used by OnlyFans, Fansly, and Patreon creators to protect their income and identity.Starting Price: $49/month -
5
Info-Tech Biometric Authentication System
Info-Tech Systems Ltd
Info-Tech’s Biometric Authentication System (BAS) is designed to help construction companies in Singapore comply with the Building & Construction Authority (BCA) requirement for worksites with GFA of 5,000 m² or more. Our system combines turnstiles, facial/fingerprint recognition, and cloud-based software to simplify worker entry and automate ePSS reporting. Ready-to-upload ePSS files Manpower data is pre-formatted according to BCA requirements Zero formatting errors Data is sent in the correct format automatically Faster Submissions Save valuable time every reporting cycle Future Ready Be among the first builders to benefit from next-generation compliance technologyStarting Price: $2 -
6
MindFort
MindFort
MindFort is an AI-powered security platform built around autonomous agents that continuously test web applications for vulnerabilities and fix them in real time, transforming traditional penetration testing into an always-on, self-operating process. Instead of relying on periodic audits or manual scans, it deploys a fleet of AI agents that probe applications, APIs, and infrastructure the way real attackers would, mapping the entire attack surface and identifying exploitable weaknesses with high accuracy. Users can configure a target and testing frequency, and the agents handle everything else, running continuous assessments, adapting their strategies over time, and building contextual knowledge of the system they are protecting. Each detected vulnerability is validated through actual exploitation attempts, drastically reducing false positives and ensuring that only real, actionable issues are surfaced.Starting Price: $199 per month -
7
middleBrick
middleBrick
middleBrick is a zero-friction security scanner for APIs and AI models designed for high-performance engineering teams. Unlike traditional scanners that require complex agents or credentials, middleBrick delivers a comprehensive security audit in under 60 seconds by simply analyzing an endpoint URL. Coverage includes 14 critical security categories: Full OWASP API Top 10 (BOLA/IDOR, BFLA, Mass Assignment, SSRF). AI/LLM Security: 18 adversarial probes testing for prompt injection, jailbreaks, and leakage. Web3 & DeFi: Specialized scanning for JSON-RPC nodes (Ethereum, Solana, Cosmos) and price oracle integrity. Integrated for modern workflows with a GitHub Action, CLI, and an MCP server for Claude and Cursor. middleBrick provides prioritized findings with production-ready remediation steps to help you ship secure code today. It is the "smoke alarm" for your API infrastructure, always on, only alerting you when there is a fire.Starting Price: $99/month -
8
PentestPad
Secure Block
PentestPad is penetration testing software that covers the full engagement lifecycle, from project planning and team collaboration to AI-assisted report writing and client delivery. Testers work in a collaborative editor where an AI assistant drafts finding descriptions, impact, and remediation based on captured vulnerability context. Existing DOCX report templates can be imported and rebuilt inside the platform so reports retain the consultancy's original style. Scanner output imports from Nessus, Burp Suite, and Nuclei, and finished reports export to DOCX, PDF, and XLSX. Each engagement includes a whitelabeled client portal for finding review, remediation tracking, and retest requests. PentestPad is available as managed EU-hosted cloud or self-hosted deployment, is ISO 27001 certified, GDPR compliant, and priced publicly per seat.Starting Price: €49/month/user -
9
Oximy
Oximy
Oximy is a platform built to provide organizations with complete visibility, governance, and protection over how artificial intelligence is used across their workforce, acting as a centralized system of record for enterprise AI activity. It automatically detects and categorizes every AI tool being used by observing network-level interactions, eliminating the need for manual tracking or individual integrations. It continuously monitors how employees, applications, and agents interact with AI systems, analyzing prompts, responses, and data flows in real time to identify risks such as sensitive data exposure, unsafe outputs, or unauthorized usage. It enables organizations to enforce policies dynamically, block risky behavior, and receive alerts when violations occur, while also reconstructing activity to provide full traceability and auditability. Oximy consolidates fragmented AI usage into a unified view, helping teams understand adoption patterns.Starting Price: $9 per month -
10
Shuffle
Shuffle
Shuffle is an open-source Security Orchestration, Automation, and Response (SOAR) platform designed to help security teams automate incident response and integrate security tools using visual workflows and APIs. It enables faster alert triage, consistent playbook execution, and centralized security automation across cloud and on-premise environments. Key features include a no-code workflow builder, an integrated App Creator for rapid API integration, and multi-tenancy support for MSSPs. It follows the Unix philosophy of "Do One Thing and Do It Well," focusing on being the glue between your existing security stack (SIEM, EDR, firewalls, etc.)Starting Price: Free -
11
Tracio
Tracio
Tracio is a device intelligence and fraud prevention platform built for businesses where fraud has real financial consequences: iGaming operators, crypto exchanges, fintech platforms, and ad networks. The platform identifies every visitor with 99.5% accuracy across 1,200+ device signals and delivers instant ALLOW, BLOCK, or CHALLENGE verdicts in under 50 milliseconds. Unlike traditional anti-fraud tools that require teams to interpret raw scores and build their own rule engines, Tracio provides decision-ready outputs in a single API call. The polymorphic JS layer means attackers cannot reverse-engineer the detection logic — a critical advantage against sophisticated adversaries using antidetect browsers, VPNs, and automated tooling. Pricing starts at 6x lower than leading alternatives like Fingerprint Pro, with self-serve plans and transparent pricing — no enterprise sales cycle required. Integration takes five minutes and three lines of code. SOC 2 Type II certified, GDPR-ready.Starting Price: $119/month -
12
Keyshade
Keyshade
Keyshade is a secret and configuration manager designed for developers teams and infra. It helps you avoid hardcoding secrets, eliminate sharing your .env manually, and keep environment variables in sync across local setups, CI/CD pipelines, and production. Whether you're solo or working with a team, Keyshade fits into your workflow with minimal setup and maximum security.Starting Price: $7.99/month -
13
RequestRocket
RequestRocket
RequestRocket's is a hyper scalable universal API authentication and authorization service. RequestRocket empowers organisations to centralise the management of access to third party systems, while offering the ability to down-scope permissions with fine grained access controls for any platform API. Our API's enable on demand configuration of authentication proxies across 6 continents allowing for low latency and high availability security improvements that comply with data sovereignty requirements.Starting Price: $25/month -
14
HailBytes
HailBytes
HailBytes SAT is a self-hosted phishing simulation and Security Awareness Training platform for IT and security teams that want continuous user testing without per-seat licensing or sending employee data to a third-party SaaS. Continuous testing with targeted micro-training measurably reduces successful phishing attacks over time. Key capabilities include unlimited campaigns, AI-assisted phishing templates, post-click training modules and quizzes, credential-capture landing pages, and user segmentation by department, risk tier, or cohort. Enterprise features include RBAC, MFA/TOTP, SSO/OIDC, SAML, SIEM export, and any SMTP provider supported. Deploys from AWS or Azure Marketplace in under 30 minutes on a hardened image you control. Pricing starts at $0.24/vCPU/hour (roughly $4,200/year), typically 70 to 80% less than commercial alternatives. Includes a 30-day free trial. Your account, your data, no vendor lock-in.Starting Price: $0.24/vCPU/hour -
15
Surface Security
Surface Security
Surface Security is an enterprise browser security and AI visibility platform delivered through a managed browser extension, not a browser replacement. It helps organizations detect and control risk inside the browsers employees already use, without forcing a new browser rollout or routing sensitive activity through a vendor cloud. The platform focuses on what happens after the click, including phishing pages, credential entry, adversary-in-the-middle attacks, session theft indicators, risky extensions, shadow SaaS, sensitive data movement, and AI tool usage. Security teams can warn users, block risky actions, enforce browser-layer policies, and send enriched alerts into SIEM and SOAR tools. Surface Security deploys on-premises or in the customer’s cloud, helping organizations maintain data sovereignty and control over telemetry, logs, policies, and investigation data. -
16
Headwind MDM
Headwind MDM
Headwind MDM is an open-source Mobile Device Management (MDM) platform purpose-built for Android. It helps companies of any size manage corporate phones, tablets, rugged devices, handheld scanners, kiosks, digital signage, TV boxes, and custom Android hardware from a single web-based admin panel.Unlike cloud-only MDM tools, Headwind MDM runs on your own infrastructure — including fully air-gapped networks with no internet access. The mobile agent can be signed with platform keys and preinstalled into device firmware, making it ideal for OEMs and custom ROM builds.The Community edition is free and open-source on GitHub. Premium and Enterprise editions add kiosk mode, unattended remote control, web traffic filtering, lost-device management, Samsung Knox integration, and premium support — all with a one-time perpetual license, not a per-device subscription.Starting Price: $19/month -
17
Enkrypt AI
Anaconda
Enkrypt AI is an agentic AI security and compliance platform designed to protect AI applications, models, agents, and their interactions throughout deployment. The platform combines continuous red teaming, real-time guardrails, monitoring, and policy enforcement to help organizations identify and mitigate AI security, safety, compliance, and brand risks. Enkrypt AI dynamically tests AI systems with use-case-specific attacks to uncover issues such as prompt injection, jailbreaking, data leakage, hallucinations, bias, harmful content, model drift, and unsafe agent actions. Real-time guardrails analyze AI interactions and block threats as they occur while adapting to changing prompts and emerging risks. Its compliance capabilities translate internal policies and external regulations into automated controls while producing evidence that organizations can use for audits and governance. -
18
DMARCTrust
DMARCTrust
DMARCTrust is a DMARC monitoring service built for SMBs that don't have an email security expert in-house. Add your domain, get a dedicated reporting address, paste it into your DNS... and we take it from there: reports are parsed automatically, you see every source sending as your domain, with SPF/DKIM alignment and failures that matter. We also watch your DMARC, SPF and BIMI records every 5 minutes and alert you on changes, and we host MTA-STS policies for inbound protection. Built by an ex-Mailjet deliverability engineer, sysadmin since 2005, who got tired of reading aggregate XML by hand for consulting clients. Free for 1 domain, then simple per-domain pricing: no enterprise UI, no pricing traps.Starting Price: Free for 1 domain -
19
Plakar
Plakar
Plakar is the open backup platform enabling resilience-as-code for security and infrastructure teams. A declarative last line of defense built around Kloset, an immutable encrypted deduplication engine that collapses the encryption-vs-efficiency tradeoff and makes complete coverage affordable, paired with a Kubernetes-native control plane that lets teams define, orchestrate, and verify resilience policies as code across VMs, databases, K8s workloads, object storage, and AI pipelines. When ransomware hits, an AI agent breaks production, or you need to walk away from a cloud provider, your data stays portable and recoverable. Plakar runs a zero-trust resilience layer on infrastructure you own — declaratively governed, agent-ready, and priced so complete coverage is actually achievable. Your keys. Your data. Your recovery path.Starting Price: 50€/TiB -
20
KaitoSec
KaitoSec GmbH
KaitoSec is a resilience platform for security teams in mid-sized enterprises and the public sector who bear real regulatory obligations without having enterprise budgets. The platform combines ISMS, BCMS, DSMS, and AI governance into a unified data model: one control, all frameworks. ISO 27001, BSI IT-Grundschutz++, NIS2, DORA, and GDPR are mapped and deduplicated, allowing requirements to be written once and fulfilled everywhere. Evidence collection runs continuously, not annually. Built for teams that are still juggling Excel, Jira, and outdated Java interfaces today. Made & hosted in Germany.Starting Price: $199/month -
21
enhanced.io
enhanced.io
enhanced.io is a security operations platform offering extended detection and response (XDR) across networks, cloud, identity systems, IoT and operational technology. It monitors assets and traffic beyond the reach of endpoint agents, using advanced detection methods. With integration across 400+ systems, including firewalls, cloud platforms, identity providers, and endpoint tools, it supports existing infrastructure. The platform addresses threats like ransomware, phishing, insider attacks, and IoT/OT risks via a unified interface. Vulnerability management prioritizes risks and aids remediation, while compliance reporting aligns with frameworks like HIPAA, GDPR, ISO 27001, NIST CSF, PCI-DSS, and SOC 2. A Fractional Security Director bridges communication with the security operations center. The platform operates on a fixed-cost subscription with 24/7 monitoring. -
22
Lock Down Keys
Lock Down Keys
Lock Down Keys is a zero-knowledge, end-to-end encrypted password manager built specifically for teams. Using AES-256-GCM encryption that runs entirely in the browser, your credentials are never exposed to the server — not even to us. Teams get shared vaults, one-click offboarding, full audit logs, and a built-in password strength checker, all on a free 14-day trial. Unlike personal password managers, Lock Down Keys is designed for collaboration: assign shared vaults by department or project, revoke access instantly when someone leaves, and track every access event. The Chrome browser extension makes autofill seamless. It's a secure, simple alternative to Bitwarden, 1Password, and Dashlane for teams that want enterprise-grade security without the complexity.Starting Price: $5/user/month -
23
Microsoft Vulnerability Management
Microsoft
Microsoft Defender Vulnerability Management helps organizations reduce cybersecurity threats with a risk-based approach to vulnerability management. It supports continuous vulnerability assessment, risk-based prioritization, and remediation across endpoints and cloud workloads, helping teams discover, prioritize, and address the biggest risks before they are exploited. Instead of relying on periodic scans, Defender Vulnerability Management continuously discovers and monitors assets, detects risks even when endpoints are not connected to the corporate network, and provides alerts through agent-based modules and authenticated scanning. It delivers asset visibility, intelligent assessments, and built-in remediation tools and network devices, helping teams prioritize critical vulnerabilities and misconfigurations across the organization. Using Microsoft threat intelligence, breach likelihood predictions, business context, and device assessments.Starting Price: $2 per month -
24
BigMind DR
Genie9
BigMind DR is a local disaster-recovery and imaging solution for Windows by Genie9 — in the backup space since 2010. Block-level imaging, ransomware detection, app-consistent backups for SQL and IIS, USB recovery media, AES-256 encryption. Software-only, bring-your-own-storage — no cloud dependency, no per-GB fees. Unlike cloud backup tools, the lifetime deal is permanently sustainable because all data stays local with almost no ongoing infrastructure cost per user. Free tier available. Plus ($59/yr, 10 users, 2 devices, 1 server) and Pro ($119/yr, 15 users, 3 devices, 3 servers, 365-day retention). Lifetime SKUs available for Plus and Pro.Starting Price: $59 -
25
LinuxGuard
LinuxGuard
LinuxGuard is complete Linux identity security: every user, key and sudo rule on your Linux estate, mapped, managed and enforced. Years of sudo rules, SSH keys and service accounts build paths to root that SIEM, EDR and cloud IAM never see. AI agents now find and use those paths faster than any review. LinuxGuard maps every identity on every host (people, service accounts and AI agents), scores the risk and flags every change as it happens. Then it controls access. People sign in with their directory identity. Access is time-boxed, approved where required and closed by the server itself. sudo comes from central profiles given to directory groups. Leavers lose access on every server within minutes. AI agents get their own identity and short, approved windows, never standing access. One lightweight agent, outbound-only connections, nothing in front of ssh. Compliance evidence for NIS2, DORA, SOC 2 and ISO 27001, exported from a live inventory. Built for Linux by IAM practitioner -
26
Axix VulnScan
Axix Technologies LLC USA
Axix VulnScan is an agentic AI penetration testing platform that automates vulnerability scanning, exploitation testing, and security assessments across networks, applications, and infrastructure. AI-driven agents simulate real-world attack techniques to identify weaknesses before malicious actors do, replacing slow, manual pentesting cycles with continuous, scalable security validation. The platform generates detailed vulnerability reports with severity scoring, remediation guidance, and compliance mapping, helping security teams prioritize fixes based on actual business risk. VulnScan supports token and command-based metered usage, making it flexible for one-time assessments or ongoing continuous testing programs. Integrated with the broader CyberDragon security ecosystem, Axix VulnScan gives enterprises, MSSPs, and regulated industries a faster, AI-powered alternative to traditional penetration testing services across Pakistan, GCC, and UK markets.Starting Price: $1,999/month -
27
CyberDragon
Axix Technologies LLC USA
CyberDragon is an autonomous AI-agent cybersecurity platform built specifically for Industrial Control Systems, OT, IT, and IoT environments in the Industry 4.0 era. Unlike IT security tools retrofitted for industrial use, CyberDragon is engineered from the ground up for SCADA, PLCs, HMI systems, and industrial networks, covering protocols including Modbus, DNP3, OPC-UA, EtherNet/IP, IEC 60870-5-104, and S7Comm. The platform combines continuous ICS monitoring, autonomous AI defense agents, and post-quantum cryptography as a core architectural feature rather than an add-on. With 28+ dashboards, tamper-evident audit logging, and PCI-DSS 4.0.1 compliance mapping, CyberDragon delivers real-time threat detection and automated response for critical infrastructure operators, central banks, and regulated industries. It helps security teams move from reactive incident response to proactive, quantum-safe cyber defense across industrial and enterprise environments.Starting Price: $980/month -
28
HAIEC
HAIEC
AI compliance and security platform helping organizations meet regulatory requirements (NYC LL144, EU AI Act, SOC 2, HIPAA, ISO 27001) through automated audits and evidence-grade documentation. HAIEC is a deterministic AI governance layer that provides continuous exposure monitoring, evidence-grade logging, and audit-ready artifact generation. Every output is reproducible, signed, and mapped to a specific regulatory standardStarting Price: $99/month -
29
Ballerine
Ballerine
Ballerine is an AI-powered merchant risk management platform that helps PSPs, banks, acquirers, PayFacs, fintechs, and marketplaces underwrite, onboard, monitor, and oversee merchants with less manual work. Its AI agents transform fragmented merchant data into real-time risk profiles so underwriters can focus on decisions instead of collecting information. It automates KYB and entity verification, UBO discovery, sanctions and adverse media screening, web analysis, MCC validation, ownership mapping, and compliance checks while keeping human review available for edge cases. During onboarding, Ballerine enriches submitted data with external signals such as reputation, reviews, regulatory mentions, ownership links, and traffic insights to build a 360-degree merchant view. Risk teams can configure workflows, approval steps, acceptance policies, alerts, and manual reviews around their own risk appetite. -
30
CYBORA
CYBORA
CYBORA is a Cyber Risk Resilience platform that ties every risk to the live systems and controls behind it, then keeps checking around the clock — so exposure is measured continuously rather than reconstructed once a year. Risks carry owners, treatments, appetite thresholds and live key risk indicators on a 5x5 matrix, with control mapping across ISO 27001, NIST CSF, SOC 2, PCI DSS, HIPAA, GDPR, CIS v8, DORA and NIS2. Third-party risk runs 34 deterministic rules including DORA Article 28 concentration exposure. Assets and AI models are registered and classified for EU AI Act risk. Detection feeds the register directly: OSINT and darknet monitoring, IOC tracking, SOC case management with MITRE ATT&CK mapping and SIEM export to Splunk, Elastic and Sentinel. Business impact analysis, continuity plans and a live crisis workspace close the loop. Delivered from Lithuania, the UK and the US. Private tenant, two 256-bit keys, self-hosting, 20+ languages.Starting Price: $250/month
