Best IT Security Software in the UK - Page 57
View:
Compare the Top IT Security Software in the UK as of November 2026 - Page 57
Sort By:
-
1
VerifiedThreat
VerifiedThreat
VerifiedThreat is an AI-driven cybersecurity platform that continuously validates real-world cyber risk through autonomous threat emulation rather than relying solely on vulnerability scanning or theoretical threat intelligence. The platform deploys agentic AI to simulate attacker behaviour against an organisation's external attack surface, verifying whether vulnerabilities are genuinely exploitable and providing evidence-based findings that security, DevOps, compliance, and risk teams can act upon with confidence. Unlike traditional tools that generate large volumes of potential issues, VerifiedThreat is designed to surface only verified threats supported by empirical proof, helping organisations prioritise remediation while reducing alert fatigue.Starting Price: $220/month -
2
Flint AI
SandboxAQ
Flint AI is a local-first, framework-agnostic AgentOps CLI that helps developers determine whether an AI agent is reliable before it reaches production. One command, flintai scan, analyzes Python source code for security vulnerabilities, misconfigurations, risky tool access, missing guardrails, and quality issues, then uses AI reasoning to triage likely false positives. A second command, flintai eval, sends functional and adversarial prompts to a running agent and scores its responses across more than 35 built-in evaluations, including factual accuracy, instruction adherence, prompt injection resistance, jailbreak resilience, and other runtime behaviors. Each agent receives a reliability score, with findings mapped to OWASP Agentic Security Initiative risks ASI01 through ASI10 and severity scored using CVSS v4.0. Flint AI works with agent frameworks and SDKs including Claude Agents SDK, LangChain, CrewAI, Anthropic SDK, OpenAI SDK, MCP servers, and AutoGen.Starting Price: Free -
3
IntelliBreach
IntelliBreach
IntelliBreach is an automated attack surface management and vulnerability scanning platform for SMBs, security teams, and MSSPs. The scanning engine discovers subdomains, IPs, open ports, and technology stacks, identifying CVEs, outdated software, TLS misconfigurations, missing security headers, and email authentication gaps. AI-powered analysis generates an attacker perspective narrative and chains findings into realistic attack paths. Real-time change detection monitors DNS records, assets, and open ports between nightly scans, alerting immediately when anything changes. AWS cloud posture auditing evaluates IAM misconfigurations, public S3 buckets, and compliance gaps. Every finding includes plain-English remediation instructions tailored to your tech stack. MSSPs can manage multiple client organizations and generate white-label branded reports. Professional PDF reports suit cyber insurance and compliance reviews. Free tier available. Plans from $79/month. No agents to install.Starting Price: $79/month -
4
WordSec
WordSec
WordSec is a complete WordPress security suite. The firewall blocks exploits, malicious bots and brute-force attempts with ready-made presets and custom rules. The malware scanner checks file integrity and repairs infected files in one click. Login security adds 2FA, captcha and lockouts; block attackers by IP or country and watch your traffic live. CVE alerts cover plugins and themes, every action lands in the audit log, and alarms reach you by email, Telegram or Slack. Eight modules replace eight separate plugins, and everything runs locally on your own server.Starting Price: $4.90 -
5
IRPForge
IRPForge
Nonprofits and small businesses get hit by cyberattacks as often as anyone else, but they can't afford what enterprise security vendors charge for incident response planning. A single tabletop exercise from a consulting firm runs $5,000 to $35,000. Most organizations skip planning entirely and hope for the best. IRPForge exists to close that gap. The goal wasn't to chase the AI hype. It was to actually use AI where it's useful, to build something solid enough that a small organization could trust it with something this important. You fill out a guided intake form about your organization. No security background needed. IRPForge uses that, along with CIS Controls v8 and the NIST Cybersecurity Framework as the underlying structure, to generate a branded, audit-ready incident response plan you can download immediately. IRPForge isn't certified or endorsed by NIST or CIS. It's built on their public standards.Starting Price: $199 one time -
6
FolSec
FolSec
FolSec is a comprehensive data access management and security platform designed to protect enterprise file systems across on-premises and cloud environments. It provides centralized visibility and control over NTFS permissions, Active Directory groups, user access, and file activities. The platform enables organizations to discover sensitive data, create meaningful access matrices, identify excessive or unauthorized permissions, manage access requests, and review user privileges. Its audit and anomaly detection capabilities monitor who accessed, modified, moved, or deleted data and can detect suspicious behavior, insider threats, mass file operations, and ransomware activity. FolSec also includes file analysis, stale and duplicate file detection, permission backup and recovery, automated response actions, Active Directory reporting and management, and secure file sharing with expiration, password, download, IP, and two-factor authentication controls. -
7
M4PAM
Mamori.io
Unlike other PAM solutions, M4PAM extends privileged access control into the database. It combines server-level access management, SSH and RDP, identity-based sessions, credential management, and full session recording, with a Database Privileged Access Management (DBPAM) layer that governs which tables, columns, and rows each user can see, edit, or export. Traditional PAM disables an Active Directory account but leaves local database credentials untouched; M4PAM closes that gap. Users authenticate through single sign on and two factor authentication instead of shared credentials, request access on demand, and lose it automatically once it expires. An SQL Firewall and dynamic data masking add further control over database activity. M4PAM can run as a standalone PAM solution or layer on top of an existing third party PAM to close the database gap without replacing it. It connects to native database clients and BI tools, and deploys without agents.Starting Price: $1440/user/year -
8
Oberhahn
Oberhahn
Oberhahn is organizational intelligence for AI. Connect your coding agents, LLM providers, SDKs, and proxies with a one-liner or copy-paste config. Live data streams to your dashboard immediately, then we surface what matters across your entire organization: security exposures in prompts and tool calls, real-time AI spend attributed to models and teams, context intelligence showing what your agents send and repeat, and behavioral intelligence revealing which teams and workflows actually drive AI value. See your organization's AI usage in real time, attribute it to people and teams, and prove impact where it matters most.Starting Price: $49/month -
9
Vulnotes
Vulnotes
Vulnotes is a modern, all-in-one platform for managing cybersecurity audits and writing penetration testing reports, covering the entire engagement lifecycle, from mission planning to the final deliverable. - 📅 Plan & Schedule Missions With Calendar And Availability Management - 👥 Assign Your Team With Roles & Permissions - ✍️ Write Reports In A Visual Editor - 👀 See A Live Preview Of Your Report As You Write It - 🤝 Collaborate In Real Time With Your Whole Team - 🗂️ Reuse Findings With A Vulnerability Template Library - 🤖 Generate Vulnerabilities From Screenshots With Built-In, Multi-Provider AI - 🌍 Translate Automatically Across Languages - 🔒 Keep Data Safe With Automatic Anonymization & Local AI Models - ✅ Review & Validate Reports Before They Ship - 📄 Export Beautiful Deliverables (DOCX, PDF, CSV, JSON, ZIP) In One Click - ☁️ Run It In The Cloud Or 💻 Self-Hosted On-PremiseStarting Price: $48/month -
10
CaaB
CaaB
CaaB is a simple, powerful cloud platform built specifically for managed service providers, combining high-performance infrastructure with a unified, fully white-label Cloud Web Manager. MSPs can deploy and manage virtual machines, virtual desktops, managed Kubernetes, cloud storage, CDN, cloud backup, dedicated firewalls, load balancers, web application firewall, and disaster recovery from one environment. The Cloud Web Manager provides an easy-to-navigate GUI, full automation and API access, multi-tenant user management, two-factor authentication, and usage reporting, helping partners manage customer cloud services under their own brand. Virtual machines are designed for high performance and easy scaling, with customizable hardware, SSD storage, Linux or Windows operating systems, and rapid deployment. Managed Kubernetes removes the need to install, manage, and operate clusters manually, with automated management, built-in security, portability, etc.Starting Price: $101 per month -
11
OSINTverse
OSINTverse
OSINTverse is an open-source intelligence ecosystem that provides investigation tools, data-provider integrations, APIs, educational content, and community resources. Its SearchIn platform offers a UI-first investigation workspace where users can start with an identifier, query multiple integrated OSINT providers, and organize findings into cases. GraphIn provides a graph-first workflow for starting with an entity, expanding relationships through transforms, triaging results, and sharing investigation snapshots. Both products use the same prepaid wallet, with no subscription or per-seat requirement and credits that do not expire. OSINTverse also provides a SearchIn API for engineering teams, shared team workspaces, and integrations with providers such as Shodan, SecurityTrails, DeHashed, Snusbase, Hunter.io, BuiltWith, WhoisXML, and OSINT Industries.Starting Price: $10 -
12
Windwall
RoVo
Windwall is a control center for the Windows Firewall already built into Windows 10 and 11. It shows every connection your PC makes as it happens and blocks any program in one click, with real Windows Firewall rules rather than a second firewall engine. A live log shows the program, address, port and protocol behind each connection. When an unknown program is blocked, a prompt asks: Allow or Block? Three security postures can be switched from the tray, and "Block with Windwall" in the Explorer menu blocks any program or folder. No kernel driver, no background service, no telemetry. Windwall PRO is an optional one-time purchase that adds Shield (a malicious-IP blocklist and malware-filtering DNS), a per-app traffic monitor, connection history, a world map and much more. Available in the Microsoft Store.Starting Price: Free -
13
Altar-1
Aikido Security
Aikido Altar is an open-weight security model built to bring frontier-grade defensive security intelligence into infrastructure organizations' control. It is designed for sovereign security environments where sensitive source code, architecture documentation, vulnerability findings, and other internal context cannot be sent to third-party inference services. Altar is based on GLM-5.3 and uses quantization and expert pruning to reduce the model from 1.51 TB at full precision to 328 GB while preserving most of the parent model’s reasoning and security capabilities. It retains 168 of the original 256 routed experts per backbone expert layer and uses a W4A16 representation, making deployment more practical for agentic security workloads with large and growing context windows. Expert selection was calibrated using internal pentesting traces and multilingual data, with no customer data involved, to preserve cybersecurity, coding, and language understanding.Starting Price: $350 per month -
14
KnoxCall
KnoxCall
Every app, build pipeline and AI agent that calls Stripe, OpenAI or another third-party API needs its key, so copies of live keys pile up in .env files, CI settings, laptops and agent environments. Each copy can leak through a poisoned package, a prompt-injected agent or a compromised build, and a stolen key keeps working until it is replaced everywhere. KnoxCall keeps the real key in one place and adds it to each call on its way out. Your apps, pipelines and agents hold only a KnoxCall token. If one leaks, one click revokes it everywhere, without rotating the provider key. Every call is logged with the app or agent that made it. AI agents get spend limits, prompt checks, and redaction of the personal data KnoxCall detects. CI can use workload identity instead of a stored secret, and Enterprise adds a master key held in your own cloud account, SSO and SCIM. SDKs for Node, Python, Go, PHP, Ruby, React and the browser. Free plan, no card; paid plans from $19 a month.Starting Price: $0 -
15
AIBound
AIBound, Inc.
AIBound is an AI security control plane for enterprise security and IT teams. It discovers AI apps, agents, models, browser extensions, and MCP servers across endpoint, browser, network, code, and cloud environments, then links them to identities, permissions, and data connections to assess risk. Teams can review AI risk grades, route findings for review, alert users, create tickets, or block activity through existing endpoint, network, and workflow tools such as Intune, Zscaler, and ServiceNow. The platform also maintains AI inventories and governance evidence to support enterprise AI oversight. AIBound is agentless and read-only for discovery, and is designed to connect with an organization’s existing security and IT stack rather than require new endpoint software.Starting Price: $6/license/month -
16
ScruteX
ScruteX
ScruteX is a cloud-based continuous threat exposure management platform for security teams, CISOs, and managed security service providers. It combines external attack-surface discovery and vulnerability assessment with monitoring for exposed credentials, data leaks, brand impersonation, third-party vendor risk, and sector-specific threat intelligence. The platform helps teams maintain visibility into internet-facing assets, assess exposure using threat context, and review security findings across their assets, brands, suppliers, and threat landscape. ScruteX is agentless and includes a free tier with one monitored domain, limited keyword monitoring, basic dashboard access, and monthly reports with limited results. Paid plans add selectable modules, broader monitoring, and enterprise capabilities such as continuous monitoring and red-team testing.Starting Price: $0 -
17
BreachLine
BreachLine Labs
BreachLine is a security testing platform centered on Nebula, an AI security engineer that helps teams scope authorized assessments, plan and run tests, investigate potential weaknesses, review evidence and remediation guidance, produce reports, and retest fixes. It supports testing of web applications, APIs, mobile applications, cloud environments, networks, and AI systems, with scheduled work, shared team workspaces, and integrations with communication and issue-tracking tools. Usage is credit-based, with monthly subscription plans and an enterprise per-seat option. BreachLine also offers a separate toolkit of 16 free, no-signup browser security tools for reviewing dependencies, comparing lockfiles and SBOMs, and checking CI workflows and application settings. Deterministic local checks run in the browser; hosted MCP reviews process submitted content on BreachLine systems.Starting Price: £399/month -
18
Dataspike
Dataspike
Dataspike is a modular identity verification, AML screening, fraud detection, and video security platform for fintech, payments, crypto, iGaming, trading, neobanks, marketplaces, and other businesses that verify users. It supports KYC and KYB checks, OCR for custom documents such as Thai bankbooks, zero-knowledge KYC for Web3, sanctions, PEP and adverse media screening, and crypto wallet checks. Its deepfake and forgery tools analyze photos, video, audio, live calls, and altered or AI-generated documents. Video security features include camera-based face recognition, object detection, video analytics, and personal-data redaction in footage. Organizations can use modules separately or combine them in onboarding and risk workflows. Dataspike's models are developed in-house. Integration options include APIs, SDKs, and white-label delivery, with cloud and on-premises deployment.Starting Price: $0.005/sec -
19
Varaxon Scan Hub
Varaxon Technologies
Varaxon Scan Hub is a web-based service for turning Tenable Nessus and Greenbone/OpenVAS vulnerability exports into reports. Users upload a Nessus .nessus XML or Greenbone/OpenVAS XML file; the service extracts findings, hosts, plugin identifiers, and structured CVE references when present. Reports include an executive summary and per-finding details, state when the source export does not support CVE-based assessment, and preserve conflicting records for human review rather than silently merging them. The product is designed for security teams and consultants who need to share scan results and explain coverage limits to clients or stakeholders. A free anonymous pre-flight assessment lets users check what an export supports without an account, payment card, or email. The first three reports are free; monthly and yearly plans and individual pay-as-you-go reports are also available.Starting Price: $49/month -
20
Idura Verify
Idura
Idura Verify is a hosted identity-authentication service for organizations that need users to sign in to websites and apps with electronic identities (eIDs). It connects services to national and commercial eID providers through one integration, using standards such as OpenID Connect and OAuth 2.0, and supports methods including Danish MitID, Swedish and Norwegian BankID, Finnish Trust Network, Dutch iDIN, and German Personalausweis. Developers can integrate it with JavaScript, React, Node.js, .NET, and identity providers such as Auth0 and Okta. The service supports user authentication, session management, and customizable user-facing screens. Organizations can test integrations in a free sandbox before enabling real-user sign-ins on a paid plan.Starting Price: €67/month -
21
World ID
World Foundation
World ID is a privacy-preserving protocol that lets people prove facts about themselves online without sharing unrelated personal information. The World ID app lets users claim, manage, and present cryptographic proofs, including Proof of Human, Proof of Presence, and Proof of Attributes such as age or nationality. Proof of Human is obtained through Orb verification, while other proofs can be claimed through supported verification methods. People use World ID with participating apps and services for human verification and access checks. Developers can integrate World ID into web, mobile, and decentralized applications to help limit bots and duplicate accounts and verify human participation. The protocol is open source, and available proofs, integrations, and verification methods vary by location and implementation. -
22
Nebula
BreachLine Labs
Nebula is an AI security engineer that tests your systems for you. It checks web apps, APIs, mobile apps, cloud and Kubernetes, internal networks and Active Directory, and AI and LLM systems. When it finds a problem, it proves the impact with a working exploit, explains how to fix it and retests the fix. You can talk to it on a call or by email, and it can walk you through its findings on slides in a live video meeting. Findings are mapped to OWASP and MITRE ATT&CK and scored with CVSS, with evidence and steps to reproduce. Plans start from £399 a month. Enterprise is £199 per seat per month (minimum five seats), credits billed separately. We're based in London and work with teams worldwide.Starting Price: £399/month -
23
Verivexa
Verivexa
Verivexa is a web-based ISO 27001 management platform for organizations building and maintaining an information security management system (ISMS). It guides teams through implementation tasks and provides connected workspaces for clauses, risks, controls, the Statement of Applicability, policies, documents, evidence, assets, audits, objectives, incidents, reviews and corrective actions. Users can assign responsibilities, manage role-based access, tailor policy starting points and link evidence to requirements and controls. Dashboards and reports help teams review progress and outstanding work, while a public demo presents fictional example records. The platform is intended for small and medium-sized organizations and supports implementation and ongoing ISMS management; it does not provide or guarantee independent certification. Separate downloadable ISO toolkits are not part of the platform subscription.Starting Price: £149/org/month -
24
WPSniffer
Kerger
WPSniffer is a free, open-source command-line malware scanner for WordPress and other PHP sites. It scans files on the host where installed, using YARA-X and community YARA Forge rule packages to detect suspicious code such as webshells. Operators can use supplied rules or add their own .yar/.yara files, choose core, extended, or full rule sets, and pin a rule release for repeatable scans. The Python package scans selected paths, accepts paths from standard input, supports filters, and can run in scheduled jobs or CI workflows. Caching, file-size limits and per-file timeouts help manage larger scans. Reports are available in readable, CSV or TSV formats, with selectable columns and optional email delivery. WPSniffer serves administrators, developers, hosting operators and security teams investigating compromised sites or checking server files for malware. Scans run locally; files are not sent to an external service.Starting Price: $0 -
25
PrimeVeil
Covalence Systems
PrimeVeil is a web-based JavaScript protection tool for developers who need to make client-side or distributed JavaScript harder to inspect and reuse. It transforms source code into custom bytecode executed by an embedded virtual machine, and can add per-build variation, control-flow restructuring, and runtime tamper checks. Users can protect code through the online dashboard, with options for browser, Node.js, React Native, service worker, and other targets. The service also provides compile-time macros for selected strings and functions, a command-line workflow, and a REST API on eligible plans. A free plan supports up to five builds per day and files up to 100 KB; paid plans add higher build allowances, advanced protection, API access, and team features depending on plan.Starting Price: $1/obfuscation -
26
NYMETRA
SYTEWEB
NYMETRA is a Windows and macOS desktop application that prepares confidential documents for use with generative AI. It detects personal and business identifiers in supported files, then lets users review and correct results before replacing selected values with consistent pseudonyms locally. Users can send the pseudonymized content to ChatGPT, Claude or Gemini through their own provider accounts and API credentials where required. NYMETRA can restore original values locally in AI-generated responses and uses OCR to process scanned documents. It is designed for legal, accounting, notarial, financial and other professional teams handling sensitive records. Original documents and correspondence tables remain on the user's computer during normal processing; pseudonymized requests go to the selected AI provider. Licenses are available for individual users, teams and larger organizations.Starting Price: €590 one-time -
27
Pair2FA
Devzel Pvt Ltd
Pair2FA is a web-based shared authenticator for teams that need to use TOTP-based two-factor authentication on common accounts. A user adds an account by scanning its 2FA QR code or entering the setup secret; Pair2FA stores the secret in an AES-256-GCM encrypted vault and generates rotating six-digit codes for teammates who have been granted access. Workspace roles control membership and billing, while per-account permissions determine who may view a code or manage access. Members can revoke account access, and raw-secret export requires a separate permission and re-authentication; account activity is recorded in an audit log. The service is intended for agencies and small businesses sharing client or business logins, and for engineering and operations teams managing infrastructure accounts. A free plan supports two members and three accounts; paid plans add team capacity and administrative features.Starting Price: $9.99/month -
28
LayerV
LayerV
LayerV is private access infrastructure for people and AI agents. It lets organizations provide controlled access to internal web applications, APIs, and infrastructure without exposing the application origin through a direct public route. A connector is placed beside a private resource, and access can be issued only after the organization’s own sign-in and policy logic authorizes the request. Teams can use LayerV to share temporary access, limit who or what can reach a resource, and revoke access when it is no longer needed. The product is intended for developers, IT administrators, and security teams building or operating systems that need access control for employees, contractors, and software agents. Supported use cases include protecting internal tools and APIs, providing temporary access to private resources, and enabling AI agents to reach approved systems without making those systems publicly accessible.Starting Price: $0 -
29
Truthlocks
Truthlocks Inc.
Truthlocks helps individuals, businesses, and developers create and verify signed digital evidence. Proof Frame turns public statements into shareable proof pages with live verification and local file comparison. APIs and SDKs support record verification, machine identity, and signed AI action receipts. Signature validity, issuer assurance, revocation, and transparency evidence are separate checks; a valid signature does not establish that a claim is factually true. The hosted platform is proprietary, and public integrations have separate licenses. Organizations can issue signed records through hosted workflows, with operations billed by usage.Starting Price: $0 -
30
Nonimo
Nonimo
Nonimo helps teams use generative AI with client or other personal data. Its macOS and Windows apps detect identifiers in selected text and replace them with labels before the text reaches an AI tool; users can restore the original values in copied replies. A companion extension works with ChatGPT, Claude and Gemini in Chrome and Safari. The apps also redact Word, Excel, PowerPoint, PDF, OpenDocument and other supported files before upload, while browser tools let users mask fields in identity documents. Text analysis runs locally and works offline. Organizations can deploy browser extensions by policy and export signed usage reports. Nonimo Gateway is a separate self-hosted API proxy in pilot for applications that use AI APIs; it masks sensitive data in requests and restores it in replies. Nonimo serves law, accounting, healthcare, insurance, public-sector and other professional teams handling personal or client information.
