Our Security Tool Kit
Vulnerability and Compliance Scanning
Tenable
A widely adopted and comprehensive vulnerability scanner used by security professionals to identify security weaknesses, misconfigurations, and compliance issues across a wide range of IT assets. It provides detailed reports and prioritizes vulnerabilities based on severity.
Vulnerability Scanning
OpenVAS
A robust and actively developed open-source vulnerability scanner that performs comprehensive security assessments by identifying security vulnerabilities in network devices, servers, and applications. It leverages a large and constantly updated database of network vulnerability tests (NVTs).
Network Discovery
Nmap
A powerful command-line utility used for network discovery and security auditing. It can identify hosts on a network, the services they offer, their operating systems, packet filters/firewalls, and other network characteristics.
Penetration Testing
Metasploit
A powerful command-line utility used for network discovery and security auditing. It can identify hosts on a network, the services they offer, their operating systems, packet filters/firewalls, and other network characteristics.
Web Application Penetration Testing
Burp Suite
A leading integrated platform specifically designed for web application security testing. It allows security professionals to intercept, inspect, modify, and analyze HTTP/S traffic to identify vulnerabilities like SQL injection, cross-site scripting (XSS), and more.
Network Analysis
Wireshark
A powerful and widely used network protocol analyzer that allows you to capture and interactively browse the traffic running on a computer network.It's invaluable for network troubleshooting, analysis, software and communications protocol development, and education.
Network Analysis and Monitoring
TCP Dump
A command-line packet analyzer that captures network traffic and displays it according to user-specified filter expressions. It's a fundamental tool for network administrators and security analysts.
Network Analysis and Monitoring
Suricata
A high-performance Network Intrusion Detection and Prevention System (NIDS/IPS) and network security monitoring engine. It is multi-threaded and supports modern hardware, offering significant performance improvements over older systems.
Network Analysis and Monioring
Zeek (Bro)
A powerful network analysis framework that goes beyond traditional signature-based IDS. It transforms raw network traffic into a comprehensive set of event logs, providing deep insights into network activity for security monitoring and incident response.
Intrusion Detection and Prevention Systems
OSSEC
OSSEC, or Open Source HIDS SECurity is a Host-based Intrusion Detection System (HIDS) that performs log analysis, file integrity checking, rootkit detection, and real-time alerting on monitored systems. It can also aggregate logs from multiple systems for centralized analysis.
Intrusion Detection and Prevention systems
Snort
A widely deployed open-source NIDS/IPS capable of performing real-time traffic analysis and packet logging to detect suspicious activity and policy violations. It uses a rule-based language to define malicious network behavior.
Web Application Security
OWASP ZAP (Zed Attack Proxy)
A free and open-source web application security scanner. It's designed to be easy to use for beginners while also offering advanced features for experienced penetration testers, acting as a man-in-the-middle proxy to inspect and manipulate HTTP/S traffic.
Web Application Security
SQL MAP
An open-source penetration testing tool that automatesthe process of detecting and exploiting SQL injection vulnerabilities in web applications.It supports a wide range of database management systems
Web Application Security
Nikto
An open-source web server scanner that performs comprehensive tests against web servers for multiple types of vulnerabilities, including outdated software, dangerous files, and configuration issues.
Penetration Testing
Kali Linux
Kali Linux stands as a cornerstone in the cybersecurity landscape, a meticulously crafted Debian-based Linux distribution purpose-built for penetration testing, security auditing, digital forensics, and reverse engineering.