Best IT Security Software for Cloud - Page 84
View:
Compare the Top IT Security Software for Cloud as of November 2026 - Page 84
Sort By:
-
1
PortaAIM
PortaOne
PortaAIM is an inference service delivery platform that combines PortaBilling with an AI gateway to authorize, meter, and settle AI usage in real time. It checks the customer, pricing rules, and balance before a request runs, reserves funds against the worst-case cost, then meters actual usage in tokens, images, audio, tool calls, or other units and releases any unused balance. Pricing, tokens, credits, and bundles are configured without code changes, and resellers are settled within the same system. PortaAIM routes requests to the lowest-cost capable model, offers a white-label customer portal, and runs across multiple sites for continuity. It supports full API and MCP access, and includes guardrail modules for frameworks such as the EU AI Act. Available as perpetual license or pay-as-you-go, self-hosted or hosted by PortaOne — built on 25+ years of real-time billing experience for nearly 500 operators worldwide. -
2
FinAuth
FinAuth
FinAuth is an identity verification SDK that delivers production-grade KYC and biometric authentication through a single REST API or a fully offline, hardware-bound SDK. It combines NIST FRVT #1-ranked face matching, iBeta Level 2 anti-spoofing liveness detection, document OCR supporting 200+ ID types, and AML watchlist screening. The platform offers both a hosted cloud API for instant deployment and an offline SDK for air-gapped, GDPR-sovereign environments. With 99.85% biometric match accuracy and sub-10ms on-device inference, FinAuth is designed for regulated sectors requiring high assurance identity checks.Starting Price: $1 -
3
ShieldLabs
ShieldLabs Inc
ShieldLabs is fraud detection and prevention with traffic quality scoring. It stops multi-accounting, account sharing, account takeover, fake signups and ad fraud. A single JavaScript snippet collects more than 100 device and network signals on every visit and cross-checks them, which exposes deep masking and delivers up to 99% detection accuracy. Returning visitors are recognised across cleared cookies, incognito mode and changed IP addresses, and linked users are detected across accounts, devices and IP addresses. VPNs, proxies, Tor, Apple Private Relay, datacenter IPs, anti-detect browsers, browser automation, bots and AI agents each come back as a named signal, not one binary flag. Every visitor, user, device and IP gets a risk score. Ready-made patterns cover multi-accounting, account sharing, account takeover and impossible travel, and traffic quality is scored by source, channel and campaign. Five minutes to integrate. Client and server SDKs, public API, signed webhooksStarting Price: $79/month -
4
BrowserPod
Leaning Technologies Ltd
BrowserPod is a browser-based virtual machine. Its API provides a lightweight Linux kernel, replacing expensive and complex cloud infrastructure by delegating server processes to the client's browser via WebAssembly. Developers use BrowserPod to run sandboxes for AI code, create developer tools and documentation without the cloud compute, and as part of wider enterprise transformation programs aiming to reduce their cloud costs and dependencies. Instead of provisioning costly cloud servers, BrowserPod allows you to execute full-stack workloads directly within the user’s browser tab. Each pod is ephemeral, constrained by the browser’s security model, and isolated from the host operating system via a dedicated syscall layer The Linux kernel enables wide compatibility across a range of native runtimes, including Node.js, Rust, Python, Ruby and Go.Starting Price: $20/month/user -
5
LeakData
CyberVisir Solutions Ltd
LeakData is a digital risk and breach monitoring platform that helps individuals and organizations discover whether monitored email addresses, domains, usernames, phone numbers, IP addresses, crypto wallets and other online assets appear in exposed data. It centralizes asset monitoring in a secure dashboard, sends alerts when new exposure is detected, and provides clear findings so users can assess risk and take protective action. LeakData supports continuous monitoring, searchable breach intelligence, guided remediation, team-ready workflows and API access for eligible plans. A free plan is available, with paid subscriptions starting at $4.99 per month.Starting Price: $0 -
6
IntoDNS.ai
Cobytes B.V.
IntoDNS.ai is a free DNS and email security analysis platform. It runs deterministic checks for DNS, SPF, DKIM, DMARC, DNSSEC, MTA-STS, TLS-RPT, BIMI, SMTP STARTTLS, FCrDNS, blacklist status, and web security headers in one workflow. Public diagnostics are free forever and require no registration or API key for normal use. Results include readable evidence and actionable fix guidance, with AI-assisted explanations where available. Teams can also use report snapshots, scheduled monitoring, a public REST API, CLI, and the official MCP server with 45 tools for AI-agent workflows. IntoDNS.ai is developed and operated by Cobytes B.V. in the Netherlands.Starting Price: Free -
7
Safeguard
Safeguard
Safeguard is an AI-native software supply chain security platform that discovers vulnerabilities, determines which ones are actually reachable, and can autonomously create and merge fixes. Its Griffin AI system analyzes repositories, containers, dependencies, SBOMs, and call graphs to prioritize exploitable issues instead of overwhelming teams with every detected CVE. The platform can generate remediation pull requests, run CI and regression tests, apply policy gates, and update security attestations after a fix is completed. Safeguard also includes zero-day discovery, runtime protections for AI applications, compliance automation, hardened software components, and support for hundreds of regulatory and security frameworks. Developers and AI agents can interact with the platform through its MCP server, APIs, IDE tools, source-control integrations, and CI/CD connections.Starting Price: $9/month -
8
Decripte
Decripte
Decripte is an AI-native cybersecurity and incident-response platform for end-to-end detection, investigation, containment, eradication and recovery. It connects endpoint, cloud, server and infrastructure evidence in a governed response workflow, combining specialized AI automation with expert 24/7 human oversight. The platform includes threat management, incident planning, case coordination, evidence handling, reports and guided response actions.Starting Price: $0 free plan -
9
PenScan
PenScan
PenScan is a Security Intelligence Platform designed to help organizations discover, assess, prioritize, and manage vulnerabilities across their web applications and digital assets. It combines automated security scanning with vulnerability management and actionable security workflows to help teams identify weaknesses before they can be exploited. PenScan supports multiple security scanners and provides features including vulnerability discovery, risk prioritization, vulnerability triage and assignment, asset and subdomain discovery, scheduled and recurring scans, scan comparison, multi-domain management, remediation tracking, and detailed security reporting. Security teams can generate dedicated Executive, Technical, and Compliance reports, as well as combined multi-target reports for a broader view of their security posture. PenScan helps teams move from simply discovering vulnerabilities to understanding, prioritizing, assigning, and tracking them through remediation.Starting Price: ₹2900 per scan -
10
SecureMy365
Cyber Spot
SecureMy365 is an automated Microsoft 365 security assessment and remediation platform by Cyber Spot. It helps businesses strengthen identity security, reduce account takeover risks, and protect critical data across Outlook, OneDrive, and SharePoint. Our platform scans your O365 tenant for security misconfigurations and provides clear, actionable steps to remediate them. Features include Identity Secure Score Review, Customized Branded Web Login, Modern MFA Settings, Conditional Access Policies, Risky Sign-In Notifications, and Real-Time Monitoring.Starting Price: $750/domain/year -
11
InboxGuards
DME Computer Services
InboxGuards is an account-takeover alarm for small and mid-size teams on Google Workspace or Microsoft 365. Connect the workspace, grant read-only audit access, and get alerts when configured signals appear — things like suspicious sign-ins, inbox rules that forward or hide mail, and other takeover patterns that show up in provider logs. It is not a secure email gateway and does not promise to catch every incident. You keep control of what happens next. Pricing is $4 per active user per month with a 30-day guarantee and no credit card required to start. Owned and operated by Orion CMD LLC in Omaha, Nebraska. Install from the Google Workspace Marketplace or at inboxguards.com.Starting Price: $4/user email -
12
Railo
Railo
Railo is an autonomous vulnerability remediation engine that turns security findings from Snyk, Semgrep, and CodeQL into verified, test-passing pull requests. Powered by deterministic AST code transformations and formal verification, Railo patches high-impact vulnerability classes (including SSRF, SQL Injection, Path Traversal, and Network Timeouts) in Python and TypeScript repositories. Every patch runs against the repository's native test suite with automatic rollback on failure, eliminating alert fatigue and reducing manual security triage for engineering teams.Starting Price: $99/month -
13
Helios by Isaphia
Isaphia Security
Helios by Isaphia is a unified exposure-management platform combining External Attack Surface Management (EASM), Internal ASM, Cyber Threat Intelligence (CTI), and Cloud Security Posture Management (CSPM) in a single dashboard. External ASM continuously discovers and prioritizes every internet-facing asset you own — including the ones you forgot. Internal ASM uses lightweight collectors to map what's reachable behind the firewall, surfacing the legacy systems that attackers pivot to once inside. CTI is asset-aware: every indicator is matched against your real inventory instead of flooding you with thousands of generic IOCs. CSPM catches misconfigurations, identity risk, and compliance drift across AWS, Azure, and GCP. Helios was built by Isaphia Security's penetration testers and red teamers around one question: what do we reach for first on a real engagement? Run it yourself as SaaS, or have Isaphia's practitioners operate it for you as a managed service.Starting Price: $200/month -
14
Guardeon
Infilux AppSec
Guardeon is an external attack surface management (EASM) and digital risk protection platform from Infilux AppSec. It continuously discovers what your organization exposes to the internet, including domains, subdomains, IP ranges, cloud services, open ports, certificates and shadow IT, then monitors it for misconfiguration, expiry and exploitable exposure. It also watches the dark web, paste sites and criminal forums for leaked credentials and stolen data tied to your business, and runs brand protection across typosquatted and lookalike domains, fake websites, phishing pages, rogue mobile applications in third party app stores, and impersonation accounts targeting your brand and executives on social media. Confirmed threats go straight into takedown, tracked to closure. Findings are validated, risk scored and delivered in a multi tenant console with alerting, API access and white labeled reporting. Built for security teams and for MSSPs managing many clients. No agents to install.Starting Price: $99/month -
15
Fallax
Fallax
Fallax runs internal phishing simulations inside your own Google Workspace or Microsoft 365 tenant, trains people the moment they click, and turns the result into audit evidence. Simulations are injected straight into mailboxes through your tenant, so there is no sending domain and nothing to allowlist: no SPF, DKIM or DMARC setup, no effect on email reputation. Anyone who clicks gets a short training page. Scheduling is per person and automatic, adjusted by how each one handled the last simulation, capped and paced by rules you set. One export covers ISO 27001, SOC 2, NIS2, DORA, PCI DSS, HIPAA, GDPR Article 32 and NIST CSF, and syncs to Vanta, Drata, Secureframe and Sprinto. Also included: phishing reports credited automatically from Outlook or a Gmail add-on, app discovery that aims lures at the tools staff really use, department standings, a REST API and an MCP server. EU-hosted and GDPR compliant. Submitted credentials are never stored. First 10 seats free, permanentlyStarting Price: $1/month/user (falls to $0.40) -
16
AI Safety 101
Mandrify
Your team uses AI every day. Prove they use it safely. AI Safety 101 is 14 interactive modules built on real, documented incidents - the Samsung ChatGPT source-code leak, a $25M deepfake CFO video call, AI hallucinations filed in court. Every module puts the learner inside the moment the decision got made, scores their choices, and issues a verifiable certificate; the firm gets a completion evidence file ready for an SEC/FINRA exam. Per-seat annual pricing from $48/seat with a 5-seat minimum. Live the same day: pick a plan, send one link, export the evidence. Built to the standard examiners hold financial firms to. Free demo module.Starting Price: $48/seat/yr, 5-seat min -
17
Operator by Planck Proof
Planck Proof
Operator by Planck Proof is an agentic API penetration testing tool. Give it your OpenAPI spec and credentials for two or more roles; it tests every operation across roles and tenants for authorization flaws (BOLA, BFLA, BOPLA), broken authentication, injection, mass assignment and business-logic abuse, chaining findings into attack paths. Coverage maps to the OWASP API Security Top 10 and includes REST, GraphQL and gRPC APIs, plus the APIs behind AI agents, LLM apps and MCP servers. Every finding ships with the exact request and response, a CVSS score and a runnable proof-of-concept your engineers can execute to confirm the issue and verify the fix. Scope, rate and data controls keep runs safe against real environments, and you can steer or pause the agent at any time. Run it on every deploy, retest fixes, and send findings to Jira. Reports are built for engineers and auditors (SOC 2, PCI DSS, HIPAA). First scan is free; Pro and Enterprise are quoted per API by endpoint volume.Starting Price: $0 -
18
ScanLabsAI
ScanLabsAI
ScanLabsAI is an AI-powered website vulnerability scanner for agencies, MSPs and development teams. It scans against the OWASP Top 10 for Web, API and LLM applications - the last of which most scanners do not cover - and detects leaked AI/LLM provider keys, exposed agentic-tool configuration and GraphQL introspection. Each deep scan runs over 40,000 checks covering CVE detection, SSL/TLS analysis, security headers and DNS. Connected GitHub repositories are scanned for hardcoded secrets and vulnerable dependencies, so problems are caught in source as well as in the deployed site. Findings include AI-written remediation guidance. Scanning is non-intrusive and read-only, completes in under 20 minutes, and reports are never stored. The Agency plan covers 50 client sites for GBP 249/month with white-label PDF reports. The first scan of any website is free. A native MCP server, listed in the official MCP Registry, lets scans run directly from Claude.Starting Price: £9.99; £249/month -
19
DRKCACHE
AFTRDRK
DRKCACHE is a conversational threat intelligence platform powered by AI and grounded in cyber threat intelligence, designed to give security teams precise answers from exclusive sources without relying on traditional search or dashboards. Users can ask questions directly and receive intelligence drawn from AFTRDRK’s underlying threat data and research, turning complex investigations into a conversational workflow. Real-time detections interrupt when an organization appears in relevant threat intelligence, helping teams identify potential exposure as it surfaces rather than waiting for periodic reviews. DRKCACHE can also generate intelligence reports on demand and scope requests for information (RFIs) in seconds, supporting faster investigation and decision-making during active security operations. Its feature set includes real-time detections, priority RFI submission, an actor knowledge base, flash advisories and intelligence briefs, and access to raw threat data for deeper analysis.Starting Price: $2,000 per month -
20
DarkStrata
DarkStrata
DarkStrata is a dark web monitoring and stolen-credential detection platform for businesses, MSPs, MSSPs, and SOC teams. It continuously monitors infostealer logs, breach dumps, criminal forums, Telegram, leak sites, marketplaces, and paste sites, matching exposed data against your domains, employees, and customers. Its focus is fresh stealer data from 20+ malware families, including Lumma, StealC, Vidar, and RedLine, which can expose passwords, session cookies, autofill data, and device fingerprints within 24–48 hours. An 80+ signal scoring engine filters fake, stale, corrupted, and irrelevant records, while genuine exposures receive Info–Critical threat scores based on organizational context. Microsoft Entra ID and Google Workspace sync keep identity matching current. Lens privately guides affected employees through password resets, session revocation, and security training.Starting Price: £259/year -
21
Diras
Diras
Diras is an AI-native cyber threat intelligence platform built in Saudi Arabia that shows organizations what attackers already know about them. Dark Web Monitoring scans breach dumps, infostealer logs, combo lists and underground markets for exposed employee and customer credentials and infected devices, with passwords masked in every view. Brand Protection detects typosquat and lookalike domains and fake social accounts on Instagram, TikTok, X and LinkedIn, then manages takedowns end to end. External Attack Surface Management maps internet-facing domains, subdomains, IPs, services and certificates and ranks vulnerabilities by severity with fix guidance. AI risk scoring reduces noise, an in-app assistant explains findings, and a read-only MCP server lets teams query live data from Claude, ChatGPT or Cursor. Arabic and English interface, in-Kingdom hosting, NCA, SAMA and PDPL alignment, and unlimited users on every plan.Starting Price: $4000/year -
22
Insomnia
CQR
Insomnia is an autonomous AI pentesting and offensive security platform from CQR Cybersecurity. Point it at a target and its AI red team runs recon, vulnerability scanning, OSINT, CVE validation, exploitation and privilege escalation across web apps, APIs, networks, cloud and Active Directory, then writes a client-ready PDF, DOCX or HTML report with CVSS scoring and fixes. It brings 275+ security modules into one tool: SAST and DAST, secret detection with live key validation, dependency and CVE scanning, API and GraphQL testing, wireless audit, Active Directory auditing with BloodHound, an HTTP interception proxy and a CI/CD pipeline builder. It also ships Insomnia OS, a Debian-based offensive OS. There is a free Community Edition and a free SAST engine (pip, npm, Docker, Homebrew, plus VS Code and JetBrains plugins). Paid Advanced and Pro plans add full AI automation, the 30,000+ CVE database, exploitation tooling, OSINT and mobile analysis.Starting Price: $149/month -
23
AIPTx
IntelligenceX
AIPTx is an AI-powered penetration testing and VAPT platform developed by IntelligenceX. It automates security testing across web applications, APIs, networks, cloud environments, and CI/CD pipelines. AIPTx uses AI agents for reconnaissance, attack-surface discovery, vulnerability identification, exploitation, and validation, helping security teams distinguish exploitable vulnerabilities from unvalidated findings. The platform provides proof-of-concept evidence, risk prioritization, remediation guidance, and compliance-ready reports. It supports continuous security testing, authenticated assessments, API security, web application testing, network testing, and DevSecOps workflows. Findings can be exported and integrated into tools used by security and development teams. AIPTx is designed for authorized security testing only.Starting Price: $499/month -
24
ThreatSpy
Secure Blink
ThreatSpy by Secure Blink is an autonomous DAST and API security testing platform that runs 24x7 continuously without requiring a human trigger. Every finding passes through a dedicated AI Review layer that validates exploitability and business impact before surfacing to the developer queue — delivering 90%+ reduction in false positives. Remediation Campaigns and Automated Playbooks close the loop from detection to verified fix, auto-creating tickets in Jira, Trello, and ServiceNow on detection. Key capabilities: Continuous autonomous DAST, REST, GraphQL, OpenAPI and Postman Collection API security testing, OWASP Top 10, OWASP API Top 10 and SANS CWE Top 25 coverage, AI Review per finding, Scan Comparison across releases, CI/CD integration with Jenkins, GitHub Actions, GitLab CI, Bitbucket, Azure DevOps and CircleCI, SaaS, Private Cloud and On-Premises deployment. Rated 4.7/5 on G2. GrindStone Award winner RSA 2026. Free 14-day trial. No credit card required. -
25
AgentRidge
Agent Ridge
AgentRidge is desktop security-audit software for assessing e-commerce websites, customer portals and other web platforms within an authorized testing scope. Its AI agents explore defined pages, account roles, checkout flows, business rules, exposed services and data, coordinating security tools as part of an investigation. The software presents findings with evidence, reproduction steps, severity and business impact, and generates PDF reports for developers and security teams. Users can run independent assessments on macOS, Windows or Linux through the command-line edition; audit data and results are stored locally, while account, licensing and payment functions use online services. AgentRidge is intended for e-commerce operators, web-platform teams, agencies, developers, security engineers, penetration testers and red teams. Buyers may choose an annual software license for self-directed audits or a separately scoped, vendor-delivered audit and remediation service.Starting Price: €500 per-audit -
26
Clone Systems Penetration Testing
Clone Systems, Inc.
Automated Penetration Testing from Clone Systems is a browser-based security testing service for teams that need to assess external and internal infrastructure, Active Directory, cloud environments, web applications, and supported APIs. Users define targets and exclusions in a portal, then launch production-safe attack playbooks that attempt to validate whether weaknesses are exploitable. Findings include severity and exploit evidence, remediation guidance, and mapping to MITRE ATT&CK; teams can rerun tests after fixes during the 30-day testing window. Reports provide an executive summary and technical details for security and compliance workflows, including PCI DSS 4.0.1, HIPAA, SOC 2, and ISO 27001. Clone Systems also offers separately scoped, engineer-led penetration testing for engagements requiring human-led assessment.Starting Price: $1,995 one-time -
27
CrowdStrike Falcon Cloud Security
CrowdStrike
CrowdStrike Falcon Cloud Security is a unified cloud security platform designed to stop breaches from code to runtime with agentless visibility, the Falcon sensor, real-time detection, AI-driven insights, and automated response. It provides continuous visibility across what organizations build and run, helping teams identify adversary risk, investigate threats faster, and stop attacks across multi-cloud environments. Cloud Detection and Response delivers real-time visibility into cloud control-plane activity and correlates cloud signals with endpoint and identity data so SOC teams can detect adversaries earlier. Agentless posture management enriches cloud-risk findings with adversary intelligence and graph-based context to prioritize exploitable exposures and reduce the attack surface. It also secures cloud workloads, containers, Kubernetes environments, identities and entitlements, infrastructure as code, software bills of materials, sensitive cloud data, etc. -
28
Eleve Admin
Eleve Admin — Independent Project
Eleve Admin helps IT teams replace permanent local administrator rights with controlled, time-limited access on Windows computers. From a central web console, administrators can approve temporary admin sessions, review application installation requests and track related audit events. Additional tools include hardware and software inventory, local administrator account visibility, on-screen messages with read confirmation, remote device lockdown and Windows agent update management. The console supports English, Polish and German. A Windows agent connects enrolled devices to the cloud service. Eleve Admin is independently developed in Poland and is currently in beta. Businesses can request a free 60-day evaluation for up to 10 Windows devices. Commercial pricing has not yet been announced. -
29
inforcer
inforcer
inforcer is a Microsoft 365 management and security platform built for Managed Service Providers (MSPs) to sell, secure, and support Microsoft 365 and Copilot at scale. Combining multi-tenant management with threat detection and response, it helps MSPs consolidate tools, standardize configurations, and strengthen security across their customer base. Its 365 Manager enables users to deploy and manage policies, eliminate configuration drift, assess tenant security posture, and align environments with recognized security frameworks. Centralized capabilities include user and group management, application and device deployment, streamlined onboarding and offboarding, policy backup and restoration, and PSA integrations. inforcer TDR delivers real-time threat detection, AI-powered alerting, automated incident containment, forensic reporting, and continuous security improvement. -
30
ChillScan
ChillScan
ChillScan scans live website URLs in about 30 seconds for security, SEO, and performance issues. It checks for exposed OpenAI or Supabase keys in client-side JavaScript, missing security headers, HTTPS and redirect issues, basic SEO gaps, and performance problems, then presents findings in plain English. It works with any website and is especially useful for sites and apps built with Lovable, Bolt, v0, Cursor, or Replit. A free scan requires no signup and shows top findings. The $12 one-time Deep Scan provides all findings with evidence and a copy-ready AI fix prompt for Cursor or Claude. Intended for indie hackers, developers, startups, and small businesses preparing websites or web apps for launch, ChillScan checks only information a public visitor's browser can see; it requires no logins and performs no intrusive testing.Starting Price: $12 one-time
