Best IT Security Software in the UK - Page 31
View:
Compare the Top IT Security Software in the UK as of November 2026 - Page 31
Sort By:
-
1
Duende IdentityServer
Duende Software
Identity is a core element of software architecture, and too often, solutions force enterprises to choose between control and commercial readiness. You end up locked into rigid platforms or forced to sacrifice security for flexibility. Duende IdentityServer eliminates this compromise. We are a secure, standards-compliant identity infrastructure software solution, built natively for .NET by industry leaders and pioneers in security standards, including OpenID Connect, OAuth 2.0, Backend for Frontend (BFF), and FAPI. We give developers deep extensibility by design with full control over the UI, business logic, and hosting, combined with the commercial and legal clarity and predictable pricing that enterprises in highly regulated industries demand, like financial services and healthcare. If you need to embed compliant, composable identity without sacrificing control or maturity, Duende is the proven secure identity standard. We bring the craft to identity, so you can focus on yours.Starting Price: Free plan -
2
PasswordFree
Identité
Instant One-Click Logins with 2FA/MFA Security. 90% of shoppers abandon carts due to login friction. PasswordFree eliminates passwords and replaces them with instant, one-click logins and advanced 2FA/MFA security. No passwords, no long forms—just seamless access for your customers and strong protection against fraud. 🔒 Why PasswordFree? ✅ Instant Login – One-click sign-in for a smooth shopping experience ✅ OTP One-Time Pictures – More secure than SMS or email OTPs ✅ 2FA/MFA Security – Prevents credential theft & unauthorized access ✅ Checkout Verification – Stops fake orders & chargebacks before they happen ✅ Protection Against Fake Accounts – Blocks bots and credential sharing ✅ Customizable UI – Matches your store’s design effortlessly 💻 Works across desktop, mobile, and all Shopify themes Let customers log in, register, and check out instantly—while keeping your store safe. 🔥 Try PasswordFree FREE for 14 daysStarting Price: $4.99/month -
3
QSE
QSE Group
QSE Group delivers quantum-resilient cybersecurity solutions designed to protect sensitive data from both current and future threats, including quantum computing. Using post-quantum cryptographic algorithms aligned with NIST standards, QSE secures data through encryption, key management, and secure communications. Built with an API-first design, it integrates easily into existing cloud, on-prem, or hybrid environments. Core features include secure entropy generation, zero trust policy enforcement, and compatibility with identity systems and SIEM tools. QSE also supports white-label deployment for SaaS vendors and MSPs. With real-time monitoring, compliance-ready reporting, and applications across finance, healthcare, legal, and government sectors, QSE enables future-proof protection without disrupting current infrastructure. It's a practical, scalable solution for organizations serious about long-term data security.Starting Price: $19.90/month -
4
tenfold
tenfold
tenfold is a no-code solution for Identity Governance & Administration (IGA), ensuring that the right people have access to the right resources at the right time. Thanks to its off-the-shelf plugins and streamlined setup, tenfold is fully operational in weeks - helping you avoid long & costly setup phases. Go from access risks to full control over IT privileges with tenfold's comprehensive IGA toolset: - User Lifecycle Management - Role-based Access - End User Self-Service - Approval Workflows - Data Access Governance - User Access Reviews - Separation of DutiesStarting Price: $.09/managed identity/month -
5
Login AlertX
Login AlertX
Login AlertX is a Windows security application that sends real-time email alerts whenever someone logs into or unlocks your computer. It runs quietly in the system tray and starts automatically with Windows to ensure continuous monitoring. Users can customize email notifications, including SMTP settings and message content, for personalized alerts. The software intelligently tracks login sessions to avoid redundant notifications and securely stores sensitive data locally. Upgrading to premium unlocks features like automatic webcam photo capture and audio recording at login events. Login AlertX helps users stay informed and protect their systems from unauthorized access effectively.Starting Price: Freemium -
6
SafeLine WAF
Chaitin Tech
SafeLine WAF is a self-hosted, semantic-based Web Application Firewall developed by the team at Chaitin Technology. It focuses on protecting web applications from a wide range of threats, especially zero-day and application-layer (Layer 7) attacks, with high precision and minimal false positives. It is open source, easy to deploy, and designed to be flexible enough for both enterprise and personal use.Starting Price: $0/month -
7
Dash0
Dash0
Dash0 is an OpenTelemetry-native observability platform for developers and SRE teams. Metrics, logs, traces, and resources sit in one place, linked by OpenTelemetry semantic conventions, so you move from a slow trace to the logs around it without switching tools. Telemetry arrives over OTLP. No proprietary agent, nothing to re-instrument, and your data stays portable. Dash0 ingests Prometheus metrics alongside OpenTelemetry, supports PromQL, and imports existing Prometheus alerting rules and Grafana dashboards. A Kubernetes operator handles collection across clusters. Dashboards are built on Perses and defined as code, so they live in Git alongside your infrastructure. Log AI infers severity, extracts patterns, and groups records, making unstructured third-party logs searchable. Trace triage uses the SIFT framework to narrow a failing request toward a cause. Spend is visible in-product: see which services and log volumes drive cost, and cut them at the source.Starting Price: $0.00 per month -
8
Javascript Obfuscator
Javascript Obfuscator
JavaScript Obfuscator protects browser and Node.js code against reverse engineering and tampering. Use the free online tool, the Windows desktop app, or the javascriptobfuscator-com npm package in builds and CI, with plugins for webpack, Vite, Rollup, esbuild, Next.js and Metro. Protection includes identifier renaming, string encoding and encryption, control-flow flattening, dead-code insertion, member protection, domain and date locking, self-defending output, debugger friction, and VM bytecode protection for marked functions. Teams that cannot send source to a third party can protect locally in the desktop app. Releases can be verified with Ed25519-signed attestations and opt-in reproducible builds. Migrating from javascript-obfuscator or JS-Confuser takes one command: the CLI converts your existing configuration. Free tier available; paid plans from $29/month.Starting Price: Free -
9
Netarx
Netarx
Netarx Identity Key (NIK) detects deepfakes and AI impersonation in real time across video meetings, phone calls, email and text messages. It runs on Windows, Mac, iOS and Android and in Chrome, and its meeting bot can join any Teams, Zoom, Google Meet or Webex meeting that allows recording. NIK combines 40 AI models, Netarx's own and third-party, with more than 1,000 signals: voice and video analysis plus device, network, IP and location, email and calendar metadata, and communication history. Each participant gets a green, yellow or red verdict. Continuous identity verification works with Microsoft Entra and other identity providers and confirms each participant matches the email and calendar invite. False-positive rate in customer production meetings: 0.3%. Contact-center support covers Five9, Genesys, Cisco and Microsoft Teams. Free for individuals and teams of 10 or fewer, then $5 per user per month; Enterprise is $10 per user per month.Starting Price: $5 per user per month -
10
Devolutions Password Manager
Devolutions
Workplace passwords are everywhere—apps, websites, servers. Devolutions Password Manager brings them together in one interface that works across Windows, macOS, Linux, iOS, Android, and browsers. Users can autofill credentials, manage entries based on role-based access control, and respond to time-sensitive access requests—without ever seeing the raw passwords. Workspace includes multi-factor authentication through Devolutions Authenticator, secure in-app messaging, and offline mode. Admins can enforce strong policies, while end-users enjoy a frictionless login experience. The Workforce Password Management package is the backbone. It connects Devolutions Password Manager to centralized credential storage using either cloud-based Devolutions Cloud or self-hosted Devolutions Server, depending on your infrastructure needs. This combination gives growing teams the structure they need to eliminate password chaos and strengthen access governance.Starting Price: $3/month/user -
11
TaskCall
TaskCall
TaskCall is an automated incident response and management platform designed for IT and DevOps teams. It offers on-call management, AIOps, workflow automation, live call routing, analytics, status page and integration tools. Trusted across industries like retail, healthcare, financial services and government. TaskCall helps organizations detect, respond to and resolve incidents faster, minimizing downtime and improving team collaboration.Starting Price: $9/user/month -
12
NetBird
NetBird
NetBird is an open-source Zero Trust Networking platform built by engineers for engineers. It radically simplifies deploying secure private networks using the high-performance WireGuard® protocol. Unlike traditional VPNs, NetBird creates decentralized, low-latency, high-throughput private networks with a single management console for identity-based access control. Integrating seamlessly with your IdP for SSO and MFA, it forms direct, encrypted peer-to-peer tunnels between devices, servers, and clouds - no central bottlenecks or single points of failure. Lightweight clients ensure scalability and privacy, with traffic never passing through management services. NetBird supports integrations with CrowdStrike, Intune, SentinelOne, pfSense, and more. Ideal for Zero Trust remote access, multi-cloud connectivity, dynamic posture checks, detailed auditing, and MSP multi-tenant management - all through one intuitive platform.Starting Price: $5/user/month -
13
RateYourCyber
RateYourCyber
RateYourCyber is an AI-powered GRC automation platform spanning 18 regulatory frameworks (ISO 27001, SOC 2, GDPR, DORA, HIPAA, CMMC, NCA ECC, SAMA CSF, Financial Crime Compliance (FCC), and more) so your team can demonstrate compliance to investors, enterprise clients, and regulators. No dedicated compliance hire needed to get full value from day one. RateYourCyber unifies what the GRC market sells as four separate products: assessment, threat monitoring, third-party risk, and compliance evidence. Single cloud platform, single data model, 17 regulatory frameworks. Controls satisfied in one framework count toward the others. FAIR Monte Carlo risk quantification expresses gaps in financial terms rather than traffic lights. A reporting engine produces one unified board document across every module, three tones, three formats, three languages, 2,430 execution permutations. Free tier to enterprise. Live across seven geographies.Starting Price: £799 -
14
Authsmith
Authsmith
Authsmith is a cloud-based authentication platform that simplifies securing and managing user access for applications. The system supports multiple authentication methods including email/password, social logins, and single sign-on, creating a streamlined login experience. The platform includes analytics capabilities that provide insights into user activity and authentication metrics, allowing administrators to monitor system health and identify potential security concerns. Authsmith features multi-factor authentication and automated security alerts that help prevent unauthorized access and maintain compliance with industry standards. User management tools within Authsmith enable control over roles and permissions from a centralized dashboard. The platform offers API access for developers to integrate authentication features into their applications. Authsmith delivers a comprehensive solution for managing user access while maintaining strong security measures.Starting Price: $30 -
15
PowerSyncPro
PowerSyncPro
PowerSyncPro is a specialized software suite for enterprise IT management, designed to enable seamless synchronisation of identities and migration of Windows workstations between on-premise Active Directory (AD), Entra ID (formerly Azure AD), and Google without requiring device resets or significant user disruption, keeping user profiles and setting. Can move between domain joined and entra joined states in minutes, replacing fresh start where users could experience multiple hours of downtime. The DirSync component enables seamless syncing of users, groups, and contacts between directories, supporting bi-directional password sync, SID history, and cross-tenant scenarios, so organizations can maintain unified identity stores during mergers, acquisitions, divestitures, or IT modernisation. With its enterprise grade sync capabilities, it can delta sync tens of thousands of identities in minutes, even in disconnected environments.Starting Price: $13.50/year/device -
16
BPROT
BPROT
BPROT is a network control, monitoring, and management solution. It provides visibility into what's happening, allowing for simple and easy control of all aspects of internet usage within businesses. Installation is quick and easy (plug and play), and from that moment on, it provides access to information and management related to: - Internet browsing - Network control - Email - Asset inventory (software and hardware) - Protection of off-site devices - Vulnerability analysis - Web application firewall Detailed reports are available in real time or historical data, and no advanced cybersecurity knowledge is required to be properly protected.Starting Price: $97 per month -
17
Fork
VerSprite Cybersecurity
Fork is a SaaS threat modeling platform that empowers security and product teams to perform continuous, risk-centric application threat assessments using the proven PASTA (Process for Attack Simulation and Threat Analysis) methodology, helping them identify the most likely and impactful risks in under two hours and align security with business priorities. It combines industry-focused threat libraries with real-time vulnerability data and threat intelligence to quantify residual risk accurately, support business impact analysis, and enforce quality gates throughout the threat modeling process. Fork provides a unified security insights dashboard that correlates threats with your application’s attack surface and integrates trusted frameworks and taxonomies such as MITRE, OWASP, CWE, CVE (with EPSS), CAPEC, ATT&CK, D3FEND, and ASVS to drive targeted mitigations and actionable outcomes.Starting Price: $75,000/yr -
18
XFA
XFA
XFA is user-driven device security for fast-growing companies that want strong IT security without building an IT team. It checks every computer and phone at sign-in, whether company-owned, personal (BYOD) or a contractor's laptop, and guides people to fix issues themselves. XFA plugs into Google Workspace, Microsoft Entra ID, Okta, OneLogin, Ping Identity or Keycloak in about 15 minutes, with no devices to enroll and no MDM to roll out. People install the XFA app at their first sign-in, without admin rights. XFA verifies OS updates, disk encryption, screen lock, firewall, antimalware, browser version and more, and admins choose per policy whether to warn or block insecure devices. It discovers devices from sign-in logs, sends alerts by email, Slack or Teams, and exports audit evidence to Vanta, Drata, TrustCloud and Thoropass. XFA takes no control of the device and never collects files, messages or browsing history. Free plan available.Starting Price: $5.90 per user per month -
19
All Pass Hub
All Pass Hub
All Pass Hub is a secure, end-to-end encrypted password manager built for small teams of 2–30 users. Security Architecture: - Zero-knowledge design — master password never leaves your device - PBKDF2-SHA256 (600,000 iterations) + AES-128 vault encryption - TLS 1.2+ for secure data transfer - Multi-factor authentication (MFA) supported Core Features: - Role-based access control (RBAC) down to individual credentials - Shared vaults, group management & one-time secure sharing - Full audit trail with real-time activity logs - Browser extension for Chrome & Firefox with fast autofill - CSV import/export for easy migration - Full self-hosting support for data sovereignty Pricing: - Free plan available forever. Premium starts at $2/user/month with a 30-day free trial — no credit card required. - Perfect for agencies, dev teams, and IT/ops who need real security without enterprise-level complexity.Starting Price: $2/month/2-30 users -
20
SecureCodingHub
Secure Coding Hub
SecureCodingHub is an interactive secure coding training platform for AppSec teams and engineering organizations. It offers Code Review Challenges — a two-phase find-and-fix flow across 185+ vulnerability types — and Guided Attack Scenarios with 67 step-by-step walkthroughs simulating full attack chains. Challenges are written in production-realistic code across 15 languages and frameworks including JavaScript, TypeScript, Python, Java, C#, Go, React, Vue, Angular, Swift, and Kotlin. Coverage spans OWASP Web, API, Mobile, and Client-Side Top 10. Compliance evidence builds automatically, mapped to PCI DSS 4.0.1, ISO 27001:2022, and EU CRA. Enterprise features include SAML 2.0/OIDC SSO, SCIM 2.0, SCORM 1.2/2004 LMS integration, multi-tenant hierarchy, assignment workflows, and an immutable audit log for QSA, SOC 2, and ISO audits.Starting Price: Contact us -
21
PhishEye
PhishEye
PhishEye is a digital risk protection platform that helps security, fraud, and brand teams find and shut down phishing sites, lookalike domains, impersonation, and brand abuse. It pairs AI phishing detection with typosquat and domain monitoring across web, ads, social, and search, then turns alerts into prioritised queues with defensible evidence and tracked takedown outcomes across registrars, hosts, and platforms. Built by operators who know what abuse desks actually accept, PhishEye focuses on stable identifiers, clear harm narratives, and follow-ups that hold up when infrastructure rotates - software first, with optional managed support where capacity or coverage is the bottleneck.Starting Price: $99 -
22
Gcore Security
Gcore
Gcore Security is an all-in-one cloud platform providing multi-layer DDoS protection across L3/4/7 and a fully featured WAAP for safeguarding web applications and APIs. Built on globally distributed infrastructure, it detects and mitigates attacks in real time, ensuring stable application performance under extreme load. The platform offers fast onboarding with intuitive configuration for SMBs, while enterprises benefit from a management API, Terraform provider, granular custom rules, SIEM/SOC integrations, and full log export. With specialized optimization for high-traffic, latency-sensitive workloads—particularly in gaming and online entertainment—it delivers reliable protection and uninterrupted user experiences for businesses of any size.Starting Price: €25 per month -
23
TridentStack Control
TridentStack
TridentStack Control is a patch management, vulnerability detection, and compliance automation platform for managing Windows, macOS, and Linux endpoints. It provides one agent for operating system updates, third-party application patches, CVE scanning, network exposure monitoring, policy enforcement, and compliance tracking. The platform includes intelligent update filtering, approval workflows, deployment rings, pre-staging, CVE enrichment, and phased rollouts to help teams patch systems safely. TridentStack Control also manages third-party application updates with package manager integration, silent deployments, version targeting, configuration profiles, and application inventory. Its vulnerability tools detect CVEs across the fleet, prioritize issues by CVSS severity, and support exception management with expiration dates. With DISA STIG and Microsoft Security Baseline compliance scoring, and STIG results mapped to NIST 800-53, TridentStack Control helps IT and security teams.Starting Price: $0 -
24
DNS Assistant
Tripledot LLC
DNS Assistant is a DNS Posture Management platform that gives organizations continuous visibility into the security and integrity of their domain infrastructure. Going beyond traditional uptime and record-change monitoring, DNS Assistant continuously evaluates the full security posture of your DNS, including dangling subdomain and takeover exposure across more than 22 cloud providers, TLS configuration grading, SPF, DKIM, and DMARC email authentication health, DNSSEC chain-of-trust validation, and WHOIS change detection. Built for security teams, infrastructure engineers, and managed service providers, DNS Assistant delivers real-time change detection with multi-channel alerting across email, Slack, Teams, SMS, and webhooks. Its multi-tenant architecture supports organizations, teams, and granular role-based access, making it equally suited to a single business protecting its own domains or an agency managing thousands of client domains from one console. a full REST API provided.Starting Price: $19.99 -
25
Scalekit
Scalekit
Scalekit is the MCP gateway for AI agents. It is for developers and platform teams who need an agent to call tools as the user, not through a shared service account. One endpoint reaches 600+ connectors and 35,000+ tools, including Salesforce, Gmail, Slack, Notion, HubSpot, Jira, and GitHub. Scalekit finds that user's credentials, checks permission, runs the call, and returns a clean response. Tokens stay in an AES-256 vault. It works with Anthropic, OpenAI, LangChain, Google ADK, Vercel AI, and Mastra. Run it in the Scalekit cloud (US, with EU residency available), in your VPC, or self-hosted. SOC 2 Type II and ISO 27001. A HIPAA BAA is available on Enterprise. The Free plan includes 10,000 tool calls and 10,000 trigger events a month. Growth is $99 a month for 100,000 tool calls. Enterprise pricing is custom.Starting Price: $99/month -
26
AXYVOR
CipherThought Corp
AXYVOR is an AI-native cybersecurity platform that unifies exposure management, identity threat detection, adversary intelligence, attack path analysis, and executive risk reporting into a single system operated by AI. Built for mid-market and enterprise security teams, AXYVOR continuously maps attack paths across cloud, identity, and endpoint environments, prioritizes the vulnerabilities that create real business risk, and delivers an AI-generated Board Risk Index that translates technical findings into financial and operational impact for executives and boards. AXYVOR integrates natively with leading EDR, SIEM, identity, and ITSM tools (CrowdStrike, SentinelOne, Okta, Splunk, Microsoft Sentinel, and more), deploying in days instead of months, at a fraction of the cost of legacy platforms like CrowdStrike, Splunk, or Wiz.Starting Price: $2500 -
27
ZTXGate
CoreZT
ZTXGate is an identity-centric Zero Trust Network Access platform for securing access to private applications and infrastructure. Instead of providing broad network access, ZTXGate lets organizations authorize users to defined resources according to identity, device, posture, time, and policy. Access can be standing, temporary, or request-and-approve, with continuous policy enforcement helping respond when relevant conditions change. ZTXGate can be operated by the customer or an MSP and deployed on-premises, in public cloud infrastructure, across hybrid environments, or in fully air-gapped networks. Core access operation does not require a mandatory CoreZT-hosted cloud control plane. The platform supports OIDC and SCIM identity integration, device-posture signals from Microsoft Intune, Microsoft Defender for Endpoint, CrowdStrike, SentinelOne and Jamf, SIEM integration, clientless HTTP/HTTPS access, and phishing-resistant biometric authentication through integrated ZTXBAS.Starting Price: $4/user/month -
28
Hybrid AD Manager
TideReach Ltd
Hybrid AD Manager puts the Active Directory consoles in a browser tab. Users and Computers, Sites and Services, Domains and Trusts, DNS and Group Policy each get their own tab, laid out like the Microsoft snap-ins, with your Entra ID tenant merged in: every account shows as synced, cloud-only or on-premises. RSAT is Windows-only, so admins on macOS, Linux or iPad normally need a Windows VM, a jump box or RDP. Here one MSI installs on a Windows server and everyone else opens a URL. 1.1 added 19 reports on accounts, passwords, computers, privileged access and security posture, each with a chart and CSV/PDF export. 1.2 adds Leavers: offboard someone across AD and Entra ID in one action - disable, reset password, revoke cloud sessions, strip groups, move the account - and undo it from the record. Admins sign in with their own AD accounts, so changes use their own rights and are audited. No agents, no database, no telemetry. Free edition and 30-day trial; Standard from $365/year.Starting Price: $365/year -
29
Zunoy Sandbox
Mentcube Innovations Pvt Ltd
Zunoy Sandbox is a developer testing platform for testing email, SMS, webhooks, OTP, and TOTP/MFA flows without sending test data to real users or production systems. Developers can connect their existing SMTP clients, SMS APIs, or webhook endpoints to Sandbox and capture the resulting events in an isolated testing environment. For email testing, Sandbox provides inboxes where teams can inspect email HTML, headers, attachments, links, and delivery-related information. SMS testing supports OTP and transactional message flows through REST APIs, sender IDs, and templates. The webhook testing feature provides unique endpoints for receiving and inspecting JSON payloads in real time, with options to replay and organize events by project. The TOTP/MFA sandbox can generate time-based authentication codes from secrets or QR codes for testing login and verification flows without using a physical authenticator.Starting Price: $6/month -
30
Secorvia
Secorvia
Secorvia is a cloud and Kubernetes security posture management platform for AWS, Microsoft Azure, Google Cloud and DigitalOcean. Most tools hand you a list sorted by severity, so a critical CVE on a host nothing can reach outranks a medium issue on the one machine holding your database credentials. Secorvia connects assets, vulnerabilities, identities and network reachability into a single live security graph, works out which findings chain together into a real route to something important, and ranks by exploitability and blast radius instead. It covers posture management, vulnerability intelligence, infrastructure as code scanning, container and Kubernetes security, attack path analysis, CIEM for over permissioned identities, runtime security for Linux hosts, and compliance scoring against SOC 2, ISO 27001, CIS and NIST CSF. Scanning is read only. Secorvia observes and ranks, it never changes anything in your account. The free plan is free forever and needs no credit card.Starting Price: $149/month
