Explore top cybersecurity tools including endpoint protection, identity management, network security, cloud security, and threat intelligence platforms.
Active Pro listings from this category appear first. Your sort applies within Pro and Free results.
ProboCloud & SaaS SecurityProbo is an open-source governance, risk and compliance platform written in Go. It tracks controls, risks, vendors, privacy records, access reviews, audits and signed policies, runs self-hosted or on Probo Cloud in the EU or US, and exposes every record to a CLI, GraphQL and MCP.Open sourceSelf-hostedFreemium
ProofpointEmail SecurityProofpoint provides email protection products for detecting and managing malicious messages and related risks.CommercialSoftwareContact sales
Proton WebClientsEmail Clients & ArchivingProton's public monorepo for its web clients (Mail, Calendar, Drive, Docs, Pass, VPN account, Wallet, Lumo, Meet) and Electron or Tauri desktop apps. GPL-3.0, but the clients need Proton's closed backend, so it is not a self-hosting kit.Open sourceWeb platformFreemium
ProxyBridgeVPN, Mesh & Remote AccessProxyBridge is an open-source client that routes or blocks traffic per application through SOCKS5 or HTTP proxies on Windows, macOS and Linux.Open sourceSoftware
QualysVulnerability ManagementQualys VMDR discovers assets, prioritizes vulnerabilities with TruRisk and real-time threat intelligence, and supports patching or ticketing for fixes.CommercialSoftwareContact sales
Rapid7Application SecurityRapid7 sells vulnerability management, application testing and detection and response products on its Command Platform, with public APIs for several.CommercialSoftwareContact sales
REAApplication SecurityREA (Reverse Engineer Anything) is an MCP server and CLI, distributed as the rea-agents npm package, that lets coding agents inspect native binaries, JavaScript and Electron apps, .NET assemblies, Android APKs and websites locally and return findings with evidence.Open sourceSoftware
Recorded FutureSIEM & Threat IntelligenceRecorded Future is a modular threat intelligence platform covering cyber threats, vulnerabilities, third-party risk and brand protection; acquired by Mastercard in 2024.CommercialSoftwareContact sales
SailPointIdentity & Access ManagementSailPoint provides enterprise identity governance: access certification, automated provisioning and separation-of-duties controls, on-prem or SaaS.CommercialSelf-hostedContact sales
SaviyntIdentity & Access ManagementSaviynt Identity Cloud is a cloud-native identity security platform combining identity governance, privileged and just-in-time access, application access governance for SAP and ERP, non-human identity management and Zuma for AI agents.CommercialWeb platformContact sales
SearXNGSearch EnginesFree AGPL metasearch engine that sends your query to many search services, merges the results and keeps users anonymous to them. Run it with Docker or scripts on Linux, or use a public instance; JSON, CSV and RSS output are optional.Open sourceSelf-hosted
SecureAuthIdentity & Access ManagementSecureAuth's Agent Authority discovers AI agents and service accounts and enforces per-action policies, alongside Customer, Workforce and B2B identity products.CommercialSelf-hostedPaid
SentinelOneEndpoint SecuritySentinelOne's Singularity Platform covers endpoint EDR and XDR, cloud workloads, identity, mobile and an AI SIEM, with list prices from $179.99 per endpoint per year. Closed source, cloud-managed and sold through partners.CommercialSoftwarePaid
SnykApplication SecuritySnyk scans open-source dependencies, code, containers and infrastructure-as-code for vulnerabilities, built into IDEs, CLI and CI/CD pipelines.CommercialWeb platformFreemium
SophosNetwork Security & NDRSophos is a British security vendor selling firewall, endpoint and managed detection and response products, administered through Sophos Central.CommercialSelf-hostedContact sales
SplunkSIEM & Threat IntelligenceSplunk offers a data platform for search and analysis, with a separate Enterprise Security product for SecOps.CommercialSelf-hostedPaid
StrongDMIdentity & Access ManagementStrongDM provides just-in-time, zero standing privilege access to cloud infrastructure, databases, containers and CI/CD pipelines, and is now part of Delinea.CommercialSoftwareContact sales
StytchIdentity & Access ManagementStytch provides authentication APIs and SDKs for passkeys, passwords, SSO and MCP, plus fraud protection, and has joined Twilio.CommercialSoftwareFreemium
SuperTokensIdentity & Access ManagementSuperTokens is open source user authentication with passwordless and social login, free to self host and free on the managed service under 5K users.Open sourceSelf-hosted
TailscaleVPN, Mesh & Remote AccessTailscale connects devices and services in a private network called a tailnet, with identity-based access policies, traffic routing and an API for automation.CommercialSoftwareFreemium
TaniumVulnerability ManagementTanium Exposure Management combines endpoint and external attack surface data with risk prioritization and remediation on one platform.CommercialSelf-hostedContact sales
TeampassPassword ManagersTeampass is a GPL-3.0 password manager installed on your own PHP and MySQL or MariaDB server, with folders and roles, per-user encryption keys, LDAP and OpenID Connect sign-in, MFA, a REST API and governance reports. Browser autofill is a paid extension.Open sourceSelf-hostedFreemiumExplore collections with tools relevant to this category, grouped by deployment, source model or workload.
17 matching tools from this category
11 matching tools from this category
5 matching tools from this category
Cybersecurity tools help teams prevent, detect, investigate and respond to risks affecting identities, endpoints, networks, applications and data.
What belongs in this category: A listing belongs here when security is a core product function and the tool addresses a defined control, threat or assurance requirement.
iThub lists 120 tools in Security & Identity. 65 of 120 are open source, 64 of 120 can be self-hosted, 83 of 120 have a free, freemium or open-source pricing model and 72 of 120 offer an API.
Recently added: TruffleHog, OpenSnitch, CyberChef, VoidAuth
Use the resources that match your decision stage. Profile data and linked sources were refreshed through November 14, 2026.
