Incident Response

Threat Intelligence Platforms

D3 Morpheus AI SOC on SecurityListing: AI-driven SOC platform for automated alert triage, investigation, and response

Zero Trust Network Access

Aireye WDR (Wireless Detection and Response) on SecurityListing: WDR platform for Wi-Fi security protecting IT/OT assets wirelessly

Threat Intelligence Platforms

Cymru RADAR on SecurityListing: Real-time threat intelligence platform for external cyber threat defense

Security Orchestration Automation and Response

Logsign Unified SO Platform on SecurityListing: SOAR platform automating threat detection, incident response, and workflows

Endpoint Protection Platform

Morphisec Breach Prevention Platform on SecurityListing: Endpoint security platform using Moving Target Defense to prevent cyber attacks and provide adaptive exposure management and threat prevention.

Threat Intelligence Platforms

Analyst1 Orchestrated Threat Intelligence Platform on SecurityListing: Orchestrated threat intelligence platform for CTI and SOC teams

Endpoint Detection and Response

Qevlar AI on SecurityListing: AI-powered cloud security alert investigation and remediation platform

Endpoint Detection and Response

CyberMaxx MaxxMDR on SecurityListing: MDR solution combining threat detection, response, and offensive security

Threat Intelligence Platforms

Pulsedive on SecurityListing: Pulsedive is a threat intelligence platform that provides frictionless threat intelligence for growing teams, offering features such as indicator enrichment, threat research, and API integration.

Managed Detection and Response

Attic MDR on SecurityListing: 24/7 managed detection and response service for Microsoft 365 environments

Threat Hunting

D3 Security Morpheus AI on SecurityListing: AI-powered autonomous SOC platform for alert triage and investigation automation

Security Orchestration Automation and Response

Dropzone AI on SecurityListing: Dropzone AI is an autonomous AI agent for SOCs that performs end-to-end investigations of security alerts, integrating with existing cybersecurity tools and data sources.

Network Detection and Response

Arkime on SecurityListing: Arkime is an open-source network capture and analysis tool that provides comprehensive network visibility, facilitating swift identification and resolution of security and network issues.

Security Orchestration Automation and Response

Lumifi ShieldVision™ on SecurityListing: SOAR platform with investigation, automation, and incident mgmt capabilities

Threat Hunting

Hunters Pathfinder AI on SecurityListing: AI-driven SOC platform with autonomous threat detection, investigation & response

Security Orchestration Automation and Response

StrangeBee Cortex on SecurityListing: Open-source observable analysis engine and companion tool for TheHive platform

Endpoint Detection and Response

FortiEDR on SecurityListing: FortiEDR is an automated endpoint security solution that integrates with the Fortinet Security Fabric and third-party solutions to reduce MTTR and provide real-time breach detection and response.

Threat Intelligence Platforms

Lumifi Cyber Cyber Threat Intelligence (CTI) on SecurityListing: Curated threat intelligence service using Anomali ThreatStream platform

Threat Hunting

NSFOCUS Intelligent Security Operations Platform on SecurityListing: XDR platform with SOAR capabilities for security operations centers

Exposure Management

With Secure Elements Platform on SecurityListing: WithSecure Elements Cloud is a modular cybersecurity platform that combines AI-powered software and expert services to provide comprehensive protection across endpoints, identities, and cloud environments.

Threat Hunting

INE Security on SecurityListing: INE Security offers a range of cybersecurity certifications, including penetration testing, mobile and web application security, and incident response.

Network Detection and Response

Stamus Networks Clear NDR on SecurityListing: Network detection and response platform for threat detection and analysis

Threat Intelligence Platforms

Team Cymru Pure Signal™ Scout on SecurityListing: Real-time threat intelligence platform for external threat visibility and IoC analysis

Security Orchestration Automation and Response

D3 Security Smart SOAR on SecurityListing: SOAR platform for security orchestration, automation, and incident response

Endpoint Detection and Response

Todyl Managed eXtended Detection & Response on SecurityListing: 24/7 managed XDR service with SOC, threat hunting, and dedicated analysts

Security Awareness Training

ORNA AI Crisis Simulation on SecurityListing: AI-driven tabletop exercise platform for cyber crisis simulation training

Threat Hunting

ThreatConnect Polarity on SecurityListing: Overlay tool providing real-time threat intel & context across security tools

Security Information and Event Management

LogRythm SIEM on SecurityListing: LogRhythm SIEM is a comprehensive security information and event management platform that collects, analyzes, and responds to security events across an organization's IT infrastructure.

Network Detection and Response

Logpoint NDR on SecurityListing: A network detection and response solution that uses AI and machine learning to monitor network traffic, identify malicious behavior, and connect related security events to reveal attack patterns without requiring endpoint agents.

Digital Forensics and Incident Response

MFT Parsers Review on SecurityListing: Review of various MFT parsers used in digital forensics for analyzing NTFS file systems.

Digital Risk Protection

Netlas on SecurityListing: Threat intelligence and digital risk protection platform

Threat Intelligence Platforms

Phriendly Phishing Phish Focus on SecurityListing: Email triage solution with threat analysis and automation for phishing detection

Threat Hunting

Huntbase Platform on SecurityListing: Platform for threat investigation with automation and knowledge management

Security Orchestration Automation and Response

D3 Smart SOAR on SecurityListing: SOAR platform with automated threat hunting and investigation capabilities

Digital Forensics and Incident Response

Belkasoft Evidence Center on SecurityListing: Comprehensive digital forensics and incident response platform for law enforcement, corporate, and academic institutions.

Security Orchestration Automation and Response

Prophet Security Prophet AI on SecurityListing: AI-driven SOC platform for automated alert triage, investigation & response

Extended Detection and Response

Reveald ManagedExtended Detection and Response XDR on SecurityListing: Managed XDR service built on CrowdStrike Falcon LogScale platform

Security Awareness Training

Ridge IT Managed IT on SecurityListing: Managed IT and cybersecurity services provider with Zero Trust implementation

Threat Hunting

PAGO DeepACT on SecurityListing: MDR platform combining threat detection, hunting, and real-time containment

Endpoint Detection and Response

Rootkit Hunter on SecurityListing: A Unix-based tool that scans for rootkits and other malware on a system, providing a detailed report of the scan results.

Digital Forensics and Incident Response

WindowsSCOPE on SecurityListing: A comprehensive incident response tool for Windows computers, providing advanced memory forensics and access to locked systems.

Threat Hunting

Gradient Cyber MXDR on SecurityListing: Managed XDR service with 24/7 SOC for mid-market threat detection & response

Penetration Testing

KFSensor on SecurityListing: KFSensor is an advanced Windows honeypot system for detecting hackers and worms by simulating vulnerable system services.

Endpoint Detection and Response

Metasploit on SecurityListing: A penetration testing framework for identifying and exploiting vulnerabilities.

Threat Intelligence Platforms

InQuest Labs on SecurityListing: The Trystero Project is a threat intelligence platform that measures email security efficacy and provides various tools and resources, while VMware Carbon Black offers endpoint protection and workload security solutions.

Security Orchestration Automation and Response

Simbian AI SOC Agent on SecurityListing: AI agent that autonomously investigates, triages, and responds to security alerts

Endpoint Detection and Response

ThreatDown EDR on SecurityListing: Powerfully simple endpoint security solution that takes down threats without interrupting business.

Security Orchestration Automation and Response

Zenduty on SecurityListing: Zenduty's platform provides real-time operational health monitoring and incident response orchestration to improve incident response times and build a solid on-call culture.

Security Orchestration Automation and Response

Catalyst SOAR on SecurityListing: Catalyst is a SOAR system that automates alert handling and incident response processes, adapting to your workflows and being open source.

Digital Forensics and Incident Response

CrowdStrike Community Tools on SecurityListing: Free tools for the CrowdStrike customer community to support their use of the Falcon platform.

Security Information and Event Management

Exabeam Security Operations Platform on SecurityListing: Exabeam Security Operations Platform is a cloud-native security platform that applies AI and automation to security operations workflows for threat detection, investigation, and response.

Threat Hunting

Mandiant Threat Defense on SecurityListing: Managed threat detection, hunting, and response service by Mandiant experts

Threat Intelligence Platforms

NSFOCUS Threat Intelligence on SecurityListing: Threat intelligence platform providing actionable insights from global sources

Threat Intelligence Platforms

Ryan Stillions: On TTPs on SecurityListing: In-depth analysis of real-world attacks and threat tactics

Threat Intelligence Platforms

CSIS Emergency Response Retainers on SecurityListing: 24/7 incident response retainer service with guaranteed availability

Threat Intelligence Platforms

Cofense Reporter on SecurityListing: A phishing detection and response platform that combines human intelligence from millions of trained employees with AI/ML to identify and remediate email threats that bypass traditional security gateways.

Digital Forensics and Incident Response

Art of Memory Forensics on SecurityListing: A comprehensive guide to memory forensics, covering tools, techniques, and procedures for analyzing volatile memory.

Managed Detection and Response

Company Chat Widget on SecurityListing: Managed Detection and Response service provider

Threat Hunting

Hunters SOC Platform on SecurityListing: Next-gen SIEM with AI-powered alert investigation and automated response

Threat Intelligence Platforms

Hybrid-Analysis on SecurityListing: Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various security tools.

Threat Intelligence Platforms

HoneyDB on SecurityListing: HoneyDB is a honeypot-based threat intelligence platform that provides real-time insights into attacker behavior and malicious activity on networks.

Threat Hunting

Intezer on SecurityListing: Intezer is a cloud-based malware analysis platform that detects and classifies malware using genetic code analysis.

Threat Intelligence Platforms

SIRP OmniSense™ on SecurityListing: AI-native autonomous SOC platform for threat detection and response

Threat Intelligence Platforms

Torq Hyperautomation on SecurityListing: Security hyperautomation platform for SOC workflow automation with AI agents

Security Information and Event Management

LogRhythm Axon on SecurityListing: A cloud-native SIEM platform that provides security analytics, intuitive workflow, and simplified incident response to help security teams defend against cyber threats.

Dynamic Application Security Testing

Miggo Security on SecurityListing: Application monitoring and security platform that provides runtime visibility, threat detection, and automated response capabilities for application-layer security

Digital Forensics and Incident Response

Practical Memory Forensics on SecurityListing: A practical guide to enhancing digital investigations with cutting-edge memory forensics techniques, covering fundamental concepts, tools, and techniques for memory forensics.

Threat Hunting

Radiant Agentic AI on SecurityListing: AI-powered SOC platform for automated alert triage, incident response & logging

Risk Assessment

Stealth-ISS Cybersecurity Readiness Assessment on SecurityListing: Cybersecurity readiness assessment service evaluating security posture

Offensive Security

Theos Red Teaming on SecurityListing: Red teaming service simulating real-world adversary attacks on organizations.

Threat Intelligence Platforms

ThreatQuotient ThreatQ Platform on SecurityListing: Threat intelligence platform for detection, investigation, and response

Security Operations

Bait and Switch Honeypot on SecurityListing: An active and aggressive honeypot tool for network security.

Compliance Management

ISO2HANDLE on SecurityListing: ISO2HANDLE is a powerful software that provides a total solution for Q&R professionals, trusted by over 50,000 users and 750+ organizations worldwide.

Threat Hunting

Mandiant Managed Defense on SecurityListing: 24/7 managed threat detection, investigation, and response service

Threat Intelligence Platforms

Scout Insight on SecurityListing: Provides advanced external threat intelligence to help organizations proactively identify and mitigate potential security threats.

Digital Forensics and Incident Response

Belkasoft X Forensic on SecurityListing: A reliable end-to-end DFIR solution for boosting cyber incident response and forensics capacity.

Security Information and Event Management

Graylog on SecurityListing: Graylog offers advanced log management and SIEM capabilities to enhance security and compliance across various industries.

Threat Intelligence Platforms

InfinityAI on SecurityListing: Infinity Platform / Infinity AI is an AI-powered threat intelligence and generative AI service that combines AI-powered threat intelligence with generative AI capabilities for comprehensive threat prevention, automated threat response, and efficient security administration.

Endpoint Detection and Response

OODA-driven SOC Strategy on SecurityListing: Utilizing SIEM, SOAR, and EDR technologies to enhance security operations with a focus on reducing incident response time.

Threat Hunting

Reveald ManagedDetection and Response on SecurityListing: MDR service for CrowdStrike, Microsoft, and Trellix endpoints with 24/7 monitoring

Threat Intelligence Platforms

The Pyramid of Pain on SecurityListing: A cybersecurity concept categorizing indicators of compromise based on their level of difficulty for threat actors to change.

Threat Intelligence Platforms

Galia IT Dedicated SOC on SecurityListing: Managed SOC service with dedicated security teams for IT and OT environments

Threat Hunting

Highlighter on SecurityListing: Highlighter is a FireEye Market app that integrates with FireEye products to provide enhanced cybersecurity capabilities.

Managed Detection and Response

Netsurion Managed Detection and Response on SecurityListing: MDR service with 24x7 SOC, XDR platform, and threat hunting capabilities

Digital Forensics and Incident Response

ORNA Digital Incident Response Plan on SecurityListing: Digital incident response plan built on SANS 504-B framework

Extended Detection and Response

Performanta Safe XDR on SecurityListing: XDR service for continuous threat exposure management and automated response

Digital Forensics and Incident Response

Binalyze AIR on SecurityListing: Modern digital forensics and incident response platform with comprehensive tools.

Threat Hunting

Enterprise Detection & Response: A Simple Hunting Maturity Model on SecurityListing: A simple maturity model for enterprise detection and response

Data Loss Prevention

Quorum Cyber Clarity on SecurityListing: Managed security services platform offering MDR, threat detection, and DLP

Database Security

SolarWinds Observability on SecurityListing: Unified observability platform for IT infrastructure, apps, and databases

Digital Risk Protection

GroupSense Ransomware Readiness on SecurityListing: Ransomware preparedness & response service with playbooks and negotiation

Threat Intelligence Platforms

HIHAT - High Interaction Honeypot Analysis Toolkit on SecurityListing: A toolkit that transforms PHP applications into web-based high-interaction Honeypots for monitoring and analyzing attacks.

Threat Hunting

Prophet Security Prophet AI Threat Hunter on SecurityListing: AI-driven threat hunting platform for SOC alert triage and investigation

Security Orchestration Automation and Response

SOAR on SecurityListing: A Security Orchestration, Automation and Response (SOAR) platform for incident response and threat hunting.

Digital Forensics and Incident Response

Detecting Lateral Movement through Tracking Event Logs (Version 2) on SecurityListing: A report on detecting lateral movement through tracking event logs, updated to include analysis of various tools and commands used by attackers.

Security Operations

Kojoney on SecurityListing: A honeypot for the SSH Service

Data Loss Prevention

Proofpoint Insider Threat Management on SecurityListing: A security solution that monitors, detects, and responds to insider threats by providing visibility into user activities across endpoints, email, and cloud to prevent data loss from careless, compromised, or malicious insiders.

Digital Forensics and Incident Response

RTIR on SecurityListing: Request Tracker for Incident Response (RTIR) is a tool for incident response teams to manage incident reports, correlate data, and facilitate communication.

Digital Forensics and Incident Response

CyberCPR on SecurityListing: Incident response and case management solution for efficient incident response and management.

Offensive Security

Combatting Incident Responders with Apache mod_rewrite on SecurityListing: Using Apache mod_rewrite rules to rewrite incident responder or security appliance requests to an innocuous website or the target's real website.

Threat Intelligence Platforms

Crafting the InfoSec Playbook on SecurityListing: A practical guide to developing a comprehensive security monitoring and incident response strategy, covering incident response fundamentals, threat analysis, and data analysis.

Managed Detection and Response

Quorum Cyber Emergency MDR on SecurityListing: Emergency MDR service for orgs experiencing active cyber incidents or attacks

Security Orchestration Automation and Response

StrangeBee TheHive IaaS Images on SecurityListing: Collaborative case management platform for incident response and investigation

Security Operations

Bifrozt on SecurityListing: High interaction honeypot solution for Linux systems with data control and integrity features.

Threat Hunting

AfterGlow on SecurityListing: Visualize and analyze network relationships with AfterGlow

Threat Intelligence Platforms

Gradient Cyber Quorum™ on SecurityListing: Unified threat detection platform for network, endpoint, cloud, and user telemetry

Threat Intelligence Platforms

Logsign Unified Security Operations Platform on SecurityListing: Unified security operations platform combining SIEM, TI, UEBA, and TDIR

Digital Forensics and Incident Response

Quorum Cyber Incident Response Preparedness on SecurityListing: IR preparedness services including readiness assessments and tabletop exercises

Threat Hunting

Golismero on SecurityListing: A free and open-source OSINT framework for gathering and analyzing data from various sources

Security Orchestration Automation and Response

Logpoint SOAR & Automation on SecurityListing: SOAR platform for automated alert triage, investigation, and response

Threat Hunting

Theos Managed Threat Detection & Response on SecurityListing: 24/7 managed threat detection and response service with SOC monitoring

Extended Detection and Response

Rewterz XDR on SecurityListing: XDR platform for threat monitoring, detection, and response across environments

Managed Detection and Response

MaxxMDR MDR + NDR on SecurityListing: Managed detection & response with network detection & response capabilities

Threat Intelligence Platforms

DataPlane.org on SecurityListing: Dataplane.org is a nonprofit organization providing free data, tools, and analysis to increase awareness of Internet trends, anomalies, threats, and misconfigurations.

Vulnerability Assessment

Risk Cognizance GRCaaS MSSP Business Launchpad with vCISO Services on SecurityListing: Platform for launching MSSP businesses with GRCaaS and vCISO services

Threat Intelligence Platforms

CyberForce|Q COSOC on SecurityListing: 24x7x365 Security Operations Center with threat detection and response services

Digital Forensics and Incident Response

Sucuri Website Malware Removal & Protection on SecurityListing: Website malware removal service with WAF, monitoring, and cleanup support

Vulnerability Assessment

Blackpanda IR-1 on SecurityListing: SaaS platform for incident response, vulnerability scanning, and cyber insurance

Managed Detection and Response

Quorum Cyber Clarity Extend on SecurityListing: Managed detection and response service with 24/7 SOC monitoring

Security Orchestration Automation and Response

Shuffler on SecurityListing: Shuffle Automation provides an open-source platform for security orchestration, automation, and response.

Digital Forensics and Incident Response

Timeline Explorer v0.4.0.0 on SecurityListing: A powerful tool for analyzing and visualizing system activity timelines.