Welcome to our Cybersecurity Marketplace

CloudQuery transforms multi-cloud sprawl into a unified asset inventory: extensible, queryable cloud config and security data.

Free online protection built for Canadians Block access to malicious websites that can steal your data, install harmful software or trick you into scams. Built with your privacy in mind, Canadian Shield helps reduce online tracking while keeping your data in Canada. Detects and Blocks emerging online threats before they reach you.

Replace your VPN with identity-based access. Cloudflare Zero Trust's free plan, best for teams under 50 users, verifies user identity and device health on every request to your internal and SaaS applications, enforcing least-privilege access for employees and contractors.

Semgrep Community Edition is a free, open-source (LGPL 2.1) static analysis engine for finding and fixing security vulnerabilities in your source code. It supports 30+ programming languages, ships with 3,000+ customizable open-source rules, and runs locally on macOS, Windows and Linux with no login required.

Velociraptor is an advanced, open-source (AGPL) digital forensics and incident response (DFIR) tool. Using the Velociraptor Query Language (VQL), responders can collect evidence and hunt for threats across Windows, macOS and Linux endpoints, helping small teams investigate incidents quickly without costly tooling.

Nuclei is a fast, open-source (MIT) vulnerability scanner from ProjectDiscovery. It draws on a community library of more than 12,000 detection templates to find security issues across web applications, cloud infrastructure and networks, and lets you write your own templates to check for the risks that matter to your business.

Trivy is an all-in-one, open-source (Apache 2.0) security scanner that finds known vulnerabilities (CVEs), infrastructure-as-code misconfigurations, exposed secrets and license issues across code repositories, container images and Kubernetes clusters. It is an easy first scanner for lean DevOps and engineering teams.

CSET is a free software tool from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) that gives you a systematic, repeatable way to evaluate your security posture. It guides you step by step through your IT and operational technology environment, compares your answers to recognized government and industry standards, and provides recommendations to improve your cybersecurity.

You cannot govern AI you cannot see. Arize Phoenix is an open-source platform for tracing and evaluating AI applications and agents, so you can observe how they behave, annotate issues and measure quality over time. It is free to self-host on a laptop, in Docker or on Kubernetes.

Put policy controls around what goes into and comes out of your LLMs. Guardrails AI is an open-source (Apache 2.0) Python framework that adds input and output guards to AI applications, using pre-built validators from Guardrails Hub to detect and reduce specific types of risk and to extract structured, reliable data from language models.

Stop the trial-and-error approach to AI quality and security. Promptfoo is an open-source (MIT) CLI and library for evaluating and red-teaming LLM applications, letting you run automated tests against your prompts, models and agents before they reach production. Now part of OpenAI, the open-source project continues to be developed.

Before you ship a generative AI feature, find out how it can be misused. PyRIT (Python Risk Identification Tool) is Microsoft's open-source framework that helps security teams and engineers red-team generative AI systems and proactively identify risks, so issues are found and fixed before your customers find them.