Burp Suite
Free tierWeb App Testing
A complete toolkit for web application testing.
Visit siteThe toolbox
Grouped by the job you're trying to do rather than by vendor category. Open source first, pricing model always visible.
Web App Testing
A complete toolkit for web application testing.
Visit siteVulnerability Scanning
Find vulnerabilities before they become breaches.
Visit siteNetwork Analysis
See and understand traffic across your network.
Visit sitePenetration Testing
The world's most widely used penetration framework.
Visit siteVulnerability Scanning
Template-driven scanning that scales from one host to an entire estate.
Visit siteSIEM / XDR
Host monitoring, log analysis and compliance reporting in one stack.
Visit siteReverse Engineering
NSA-built decompiler suite for binary analysis and malware triage.
Visit siteSecrets Management
Dynamic secrets, leases and encryption-as-a-service for modern infra.
Visit siteCloud & Container
Scans images, IaC and repos for CVEs and misconfiguration in CI.
Visit siteDigital Forensics
Endpoint hunting and forensic collection at fleet scale.
Visit siteMobile Security
Static and dynamic analysis for Android and iOS builds.
Visit siteNetwork Analysis
Turns raw traffic into rich, queryable network telemetry.
Visit siteOSINT
Link analysis for investigations across people, infra and companies.
Visit siteSIEM / XDR
Query your fleet's operating systems like a SQL database.
Visit siteWeb App Testing
Fast, rule-based static analysis that fits into pull requests.
Visit siteCrypto Security Center
Wallet scanning, token approvals, transaction explanations and contract risk — read-only and free, with no wallet connection.
Missing something useful? Submit a tool and we'll review it for the next directory pass.