Best IT Security Software for Linux - Page 11
View:
Compare the Top IT Security Software for Linux as of November 2025 - Page 11
Sort By:
-
1
Passware Kit
Passware
Passware Kit Forensic is the complete encrypted electronic evidence discovery solution that reports and decrypts all password-protected items on a computer. The software recognizes 340+ file types and works in batch mode recovering passwords. Analyzes live memory images and hibernation files and extracts encryption keys for hard disks and passwords for Windows & Mac accounts. Passware Bootable Memory Imager acquires memory of Windows, Linux, and Mac computers. Resolved navigation issues after stopping the password recovery process. Instant decryption of the latest VeraCrypt versions via memory analysis. Accelerated password recovery with multiple computers, NVIDIA and AMD GPUs, and Rainbow Tables. In addition to all the key features of a Windows version, Passware Kit Forensic for Mac provides access to APFS disks from Mac computers with Apple T2 chip.Starting Price: $1,195 one-time payment -
2
NCheck BioAttendance
Neurotechnology
NCheck BioAttendance is a Multi-Biometric Attendance Management System designed to register and manage employee attendance using face, fingerprint, and iris biometric identification. Powerful features: Face, Fingerprint, and Iris attendance recognition Geofencing and locaton based tracking Contactless and hygienic Identification with face mask Face liveness detection Real-time face detection Multiple face detection Detect stress levelStarting Price: $0 for 5 user -
3
Octo Browser
Octo Browser
An antidetect browser is a specialized tool designed to help users create and manage multiple online accounts while avoiding detection, bans, or restrictions. It is particularly useful for digital marketers, social media managers, affiliate marketers, and individuals who require anonymity and privacy when browsing the internet. This software works by masking users' digital fingerprints, preventing websites from linking multiple accounts to the same person. It integrates seamlessly with proxy servers, allowing users to switch IP addresses effortlessly, reducing the risk of detection. Additionally, it enables per-account management of cookies, browser settings, and other identifiers, ensuring each profile operates independently. With robust privacy features and a user-friendly interface, it is an essential tool for those who require secure and organized online account management.Starting Price: €10 per month -
4
Monarx
Monarx
Monarx’s revolutionary technology is consistently proven to detect & prevent more malicious activity than other tools, proactively, automatically and safely. Hosting providers around the world save more time & money with Monarx and drive extra revenue by reselling active protection to their customers. Malware wastes valuable engineering time and generates support costs from customers whose sites have been compromised or blacklisted. Monarx provides the best protection, automatically, resulting in more cost savings. Run detect only mode to generate leads for upselling your customers to Protect mode. Monarx’s superior technology transforms malicious activity into a stream of high-quality, targeted, timely leads that convert at high rates. Monarx gives you multiple options for driving real, measurable value to your hosting business. Monarx is continually put to the test by hosting providers and is consistently proven to be superior.Starting Price: $15 per month -
5
Keplersafe
Keplersafe
All-in-one security with 1-click resolve that protects your entire business. A unified threat protection solution designed to bring you cutting-edge, holistic defense with zero drain on your IT resources. Our AI anticipates risk, then proactively identifies and addresses issues automatically, saving you valuable time. Keplersafe is the complete solution that makes it easy to be compliant for mid-market businesses with any sized IT or security team by helping to ensure you're protected according to best practices and accepted industry standards. The Keplersafe platform is built on the principle of holistic, non-disruptive security. Our platform employs innovative AI technology and behavioral analysis to assist businesses in staying secure and compliant, without IT teams having to worry, investigate or fix issues themselves. Keplersafe is based in New York City, with Sales and R&D offices around the globe.Starting Price: $8.99 per month -
6
PureDome
PureDome
PureDome, an advanced secure connectivity solution, is purpose-built to elevate network security for businesses. Streamlining access management enables authorized team members to exclusively access company assets. With its unified cloud platform, PureDome integrates crucial elements of user roles, including secure remote access, data access control, and team management. This integration simplifies network infrastructure management and centralizes operations, facilitating seamless business workflows. PureDome empowers teams to securely connect to the corporate network from any location through its reliable, secure remote access feature. Businesses can rely on PureDome's exceptional customer support, available 24/7 via live chat and ticket support, to address any concerns or inquiries promptly and effectively. Main Features: Secure Remote Access Dedicated IPs for Individual Customers User & Device Management Network Segmentation Centralized Management Plan CustomizationStarting Price: $8.45 per user per month -
7
garak
garak
garak checks if an LLM can be made to fail in a way we don't want. garak probes for hallucination, data leakage, prompt injection, misinformation, toxicity generation, jailbreaks, and many other weaknesses. garak's a free tool, we love developing it and are always interested in adding functionality to support applications. garak is a command-line tool, it's developed in Linux and OSX. Just grab it from PyPI and you should be good to go. The standard pip version of garak is updated periodically. garak has its own dependencies, you can to install garak in its own Conda environment. garak needs to know what model to scan, and by default, it'll try all the probes it knows on that model, using the vulnerability detectors recommended by each probe. For each probe loaded, garak will print a progress bar as it generates. Once the generation is complete, a row evaluating that probe's results on each detector is given.Starting Price: Free -
8
SHIELD
SHIELD
Device-First Fraud Prevention with Real-Time Identification & Intelligence. SHIELD's Device Intelligence persistently identifies devices, users, and accounts you can trust — and those you can't. Don't let fraudsters fool you. Make precise decisions about device trustworthiness with the global standard for device identification — SHIELD Device ID. Get the most comprehensive view of every user with real-time actionable device signals and continuous risk profiling. Eliminate risk blind spots, provide superior user experiences, and accelerate growth. Instant insights. No additional codes needed. Gain intelligence without giving PII data. Self-configurable risk thresholds. We return all data, and more. Get the full picture with transparent intelligence. Stay ahead of new and emerging fraud attacks. Real-time attack pattern syncing worldwide. -
9
Pynt
Pynt
Pynt is an innovative API Security Testing platform exposing verified API threats through simulated attacks. We help hundreds of companies such as Telefonica, Sage, Halodoc, and more, to continuously monitor, classify and attack poorly secured APIs, before hackers do. Pynt's leverages an integrated shift-left approach, and unique hack technology using home-grown attack scenarios, to detect real threats, discover APIs, suggest fixes to verified vulnerabilities, thereby eliminating the API attack surface risk. Thousands of companies rely on Pynt to secure the no. 1 attack surface - APIs, as part of their AppSec strategy.Starting Price: $1888/month -
10
Enpass
Enpass Technologies Inc.
Enpass believes your data belongs to you. Compliance-friendly Enpass Business secures passwords and passkeys in vaults on your organization’s own infrastructure or trusted business cloud, providing greater security than proprietary, SaaS-hosted solutions. Enpass is highly customizable for users, and a powerful Admin Console provides fine-grained control over vault sharing, password generation, and employee security. ISO 27001 certified, zero-knowledge AES-256 encryption on 100% of data.Starting Price: $2.99/month -
11
Fingerbank
Fingerbank
Fingerbank is a set of tools to identify networking devices based on their network fingerprints. A device fingerprint is very useful for numerous kinds of applications. For example, it can be used by Network Access Control solutions such as PacketFence to grant different network access based on the device type (gaming console vs. laptop). Fingerbank knows how a device should present itself on the network its communications patterns and when a device deviates from those. Our technology is performing continuous data mining to extract common patterns from networking devices and can therefore raise an alert when a device acts abnormally. When a device connects to a network, it exposes various precious information on different layers of the networking stack. The Fingerbank collector can build a precise fingerprint of the device and use the knowledge and algorithms of the Fingerbank cloud API to accurately identify the device.Starting Price: $250 per month -
12
dnstwist
dnstwist
Find lookalike phishing domains that adversaries can use to attack you. See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an automated workflow that aims to uncover potentially malicious domains that target your organization. This tool generates a comprehensive list of permutations based on a provided domain name and subsequently verifies whether any of these permutations are in use. Additionally, it can generate fuzzy hashes of web pages to detect ongoing phishing attacks, brand impersonation, and much more.Starting Price: Free -
13
XplicitTrust Network Access
XplicitTrust
XplicitTrust Network Access is a Zero Trust Network Access (ZTNA) solution that provides secure, seamless access to applications regardless of location for users working from anywhere. It provides identity-based access control that integrates with existing identity providers for single sign-on (SSO) and multi-factor authentication (MFA) using factors such as user identity, device security, location and time. The platform includes real-time network diagnostics and centralized asset management for better oversight. Clients require no configuration and the solution is compatible with platforms including Windows, MacOS and Linux. XplicitTrust uses strong encryption, end-to-end protection, automatic key rotation and context-aware authentication to provide robust security. It also supports scalable application access and secure connections for IoT, legacy applications and remote desktops, making it versatile for today's security needs.Starting Price: $5/month/user -
14
ZITADEL
ZITADEL
ZITADEL is an open-source identity and access management platform designed to simplify authentication and authorization for applications. It offers a comprehensive suite of features, including customizable hosted login pages, support for modern authentication methods such as Single Sign-On (SSO) and social logins, and enforcement of multifactor authentication to enhance security. Developers can integrate authentication directly into their applications using ZITADEL's APIs or build dedicated login interfaces. The platform supports role-based access control, allowing for precise permission assignments based on user roles, and is inherently multi-tenant, facilitating easy extension of applications to new organizations. ZITADEL's extensibility enables seamless adaptation to various workflows, user management processes, and brand guidelines, with features like ZITADEL Actions that execute workflows after predefined events without the need for additional code deployment.Starting Price: $100 per month -
15
Caido
Caido Labs Inc.
Caido is a modern web security toolkit designed for pentesters, bug bounty hunters, and security teams who need an efficient and customizable solution for web application testing. Caido features a powerful intercept proxy for capturing and manipulating HTTP requests, replay functionality for testing endpoints, and automation tools for handling large-scale workflows. Its sitemap visualization provides a clear view of web application structures, helping users map and navigate complex targets. With HTTPQL, users can efficiently filter and analyze traffic, while no-code workflows and a plugin system enable easy customization to fit specific testing needs. Built on a flexible client/server architecture, Caido supports local or remote hosting, allowing seamless access from anywhere. Its project management system simplifies switching between targets and eliminates the need for manual file handling, keeping workflows organized.Starting Price: Free -
16
ArtistScope Site Protection System (ASPS)
ArtistScope
ArtistScope Site Protection Software (ASPS) provides the most robust and most secure website security and copy protection for all web page media, safe from all copy including screen capture, download, scraping, etc. In fact ASPS provides the most secure solution for data security and the prevention of data loss and plagiarism ever imagined. The ASPS server module is installed on the web server (Apache or Windows) to deliver encrypted web pages from your web site that only the ArtisBrowser can interpret and display, creating a secure tunnel between website and the user's web browser in which no data or media can be copied or extracted by any means, not even from browser cache or memory. ASPS is most unique and it is most secure because it does not depend on popular web browsers which are useless for copy protection. Any media displayed on your web page will be copy protected and you can use any video file format or embedded player that you like.Starting Price: $495.00 -
17
GoAccess
GoAccess
GoAccess is an open source, real-time web log analyzer and interactive viewer that operates within a terminal on Unix-like systems or through a browser interface. Designed for rapid analysis, it provides immediate HTTP statistics, making it ideal for system administrators who need quick insights into server performance. The tool supports various web log formats, including those from Apache, Nginx, Amazon S3, Elastic Load Balancing, CloudFront, and Caddy, allowing users to set the log format and analyze logs effortlessly. Written in C, GoAccess requires only ncurses as a dependency, ensuring swift, millisecond-level updates. It offers customizable terminal and web-based dashboards, enabling users to tailor color schemes to their preferences. Beyond terminal output, GoAccess can generate comprehensive, self-contained real-time HTML reports, as well as JSON, facilitating analytics, monitoring, and data visualization.Starting Price: Free -
18
PryvateNow
PryvateNow
PryvateNow is a comprehensive communication platform that encrypts and secures voice and video calls, instant messages, emails, and conference calls, both on and off the network. It offers solutions tailored for small and medium-sized enterprises, corporate entities, and large enterprises, ensuring full control over communications and data. Key features include Post-Quantum ZRTP encryption for world-leading data security, built-in auditing and compliance aligning with MiFID II, HIPAA, and GDPR, and white-labeled OEM versions of Pryvate Closed User Groups (CUG) available. The platform also provides a Secure Integration Kit for VoIP, allowing providers to integrate Pryvate’s secure communication suite into their existing platforms seamlessly. PryvateNow's technology encompasses encrypted voice and video calls, secure email, file transfer and storage, and secure voice and video conference calls.Starting Price: $1.25 per month -
19
Duende IdentityServer
Duende
IdentityServer is a flexible and standards-compliant OpenID Connect and OAuth 2.0 framework for ASP.NET Core, offering full control over UI, UX, business logic, and data. IdentityServer is officially certified by the OpenID Foundation and implements over a dozen protocols and standards from the OpenID Foundation and IETF working groups. It supports unlimited hosting options, allowing deployment on-premises, in the cloud, behind a VPN, on Windows, Linux, Docker, or Kubernetes. Duende Software also offers additional products such as IdentityServer for Redistribution and a Backend for Frontend (BFF) security framework. Comprehensive documentation and training resources are available to support developers in implementing these solutions. Being fully standards-compliant is very important to us, and we want to give you access to every aspect of the OAuth and OpenID Connect protocol family.Starting Price: $1,500 per year -
20
Grafana Loki
Grafana
Grafana Loki is an open source log aggregation system designed to efficiently collect, store, and query logs from various sources. Unlike traditional logging systems, Loki is optimized for cloud-native applications, making it a great fit for modern, containerized environments like Kubernetes. It works seamlessly with Grafana for visualizing log data alongside metrics and traces, providing a unified observability platform. Loki indexes only metadata, such as labels and timestamps, which reduces the amount of data stored and improves query performance compared to more traditional log management systems. This lightweight approach allows for easier scalability and cost-effective storage. Loki also supports log aggregation from various sources, including Syslog, application logs, and container logs, and integrates with other observability tools to provide a complete view of system performance.Starting Price: Free -
21
Security Onion
Security Onion
Security Onion is a comprehensive open source platform for intrusion detection, network security monitoring, and log management. It provides a set of powerful tools to help security professionals detect and respond to potential threats across an organization's network. Security Onion integrates various technologies, including Suricata, Zeek, and Elastic Stack, to collect, analyze, and visualize security data in real-time. Security Onion’s intuitive user interface allows for easy management and analysis of network traffic, security alerts, and system logs. It also includes built-in tools for threat hunting, alert triage, and forensic analysis, helping users identify potential security incidents quickly. Security Onion is designed for scalability, making it suitable for environments of all sizes, from small businesses to large enterprises.Starting Price: Free -
22
Malcolm
Malcolm
Malcolm is an open source security monitoring platform designed to help security professionals collect, process, and analyze network data for threat detection and incident response. It integrates multiple powerful tools to gather and visualize network traffic, log data, and security alerts. Malcolm’s user-friendly interface allows security analysts to easily investigate potential threats by providing detailed insights into network activity. It is designed for scalability, offering flexible deployment options across various environments, from small businesses to large enterprises. Malcolm’s modular design ensures users can customize the platform to suit their specific security requirements, while its integration with other observability tools ensures comprehensive monitoring. While Malcolm is great for general-purpose network traffic analysis, its creators see a particular need in the community for tools providing insight into protocols used in industrial control systems (ICS).Starting Price: Free -
23
ZTX Platform
SecureTrust Cyber
The ZTX Platform is a fully managed, engineer-led cybersecurity solution that delivers Zero Trust security in a streamlined, scalable package. It unifies SASE, XDR, SIEM, RMM, and micro-segmentation into a single platform installed and operational within one business day. ZTX is licensed per seat, making it cost-effective and flexible for growing organizations. The platform offers centralized monitoring, real-time threat detection, automated response, and strict policy enforcement. Each user session is isolated via encrypted tunnels, preventing lateral movement and ensuring compliance. Ideal for companies seeking simplified, high-performance cybersecurity without managing multiple tools.Starting Price: $30/month per device -
24
OpticalBackup
OpticalBackup
OpticalBackup is a secure, long-term way to protect important data. Files are encrypted and written to tamper-proof optical discs designed to last for decades—offline, immutable, and safe from ransomware or deletion. The process is simple and fully automated. Upload your files, and OpticalBackup handles the rest: burning, labeling, and either storing your discs in a secure facility or shipping them to you. No hardware, scripts, or manual steps needed. Discs can’t be altered once written, ensuring data integrity over time. Ideal for critical files like legal records, personal archives, creative work, or sensitive business data. Flexible subscription plans include cloud access, encryption, and storage or delivery options. OpticalBackup also supports the 3-2-1 backup rule, adding a physical, offline layer to your strategy. Preserve what matters most—with confidence it’ll still be there in decades.Starting Price: $33/month -
25
ESET PROTECT Complete is a comprehensive cybersecurity solution designed to safeguard business endpoints, cloud applications, and email systems. It offers advanced protection against ransomware and zero-day threats through cloud-based sandboxing technology and machine learning-driven detection. It includes full disk encryption capabilities, aiding compliance with data protection regulations. ESET PROTECT Complete also provides robust security for mobile devices, file servers, and email servers, incorporating anti-malware, anti-phishing, and anti-spam measures. Its centralized, cloud-based management console allows for streamlined deployment, monitoring, and response to security incidents across the organization. Additional features include vulnerability and patch management, ensuring that software vulnerabilities are promptly identified and addressed.Starting Price: $287.72 one-time payment
-
26
ESET PROTECT Elite
ESET
ESET PROTECT Elite is an enterprise-grade cybersecurity solution that integrates extended detection and response with comprehensive multilayered protection. It offers advanced threat defense using adaptive scanning, machine learning, cloud sandboxing, and behavioral analysis to prevent zero-day threats and ransomware. The platform includes modern endpoint protection for computers and smartphones, server security for real-time data protection, and mobile threat defense. It also features full disk encryption, helping organizations comply with data protection regulations. ESET PROTECT Elite provides robust email security, including anti-phishing, anti-malware, and anti-spam technologies, along with cloud app protection for Microsoft 365 and Google Workspace. Vulnerability and patch management capabilities allow for automatic tracking and patching of vulnerabilities across all endpoints.Starting Price: $275 one-time payment -
27
WEDOS Protection
WEDOS Group SA
WEDOS Protection is a modern security solution combining powerful DDoS mitigation, CDN acceleration, and intelligent traffic filtering — designed for high availability, stability, and optimal web performance. It protects serious online businesses against volumetric and sophisticated application-layer attacks, including botnets and L7 exploits. Our global infrastructure WEDOS Global uses edge servers distributed worldwide to analyze and control traffic in real time. The service provides DNS protection, an advanced Web Application Firewall (WAF), HTTPS proxy, smart caching, anti-bot filters, and multiple protection layers that together form a robust security and performance ecosystem. ✅ Effective L3–L7 DDoS mitigation ✅ Global content acceleration via proprietary network ✅ Easy to implement – no code changes needed ✅ High availability and low latency even during attacks An ideal choice for high-traffic websites, ecommerce projects, agencies, and hosting providers.Starting Price: $1 -
28
KubeArmor
AccuKnox
KubeArmor is a cloud-native runtime security enforcement engine designed for Kubernetes workloads, containers, and virtual machines. It leverages eBPF and Linux Security Modules (LSMs) like AppArmor and SELinux to preemptively harden workloads and prevent attacks without modifying pods or containers. KubeArmor enforces real-time policy-based controls on process behavior, file access, networking, and resource usage. It simplifies complex security settings by providing Kubernetes-native policy management and detailed policy violation logging. Installation is straightforward via Helm charts, and it integrates seamlessly with multiple cloud marketplaces. KubeArmor’s proactive inline mitigation approach improves security beyond traditional post-attack responses.Starting Price: Free -
29
Devolutions PAM
Devolutions
Devolutions Privileged Access Manager (PAM) discovers privileged accounts, automates password rotation, approves check-outs, enforces just-in-time (JIT) privilege elevation, and records every session—giving small and midsize businesses (SMBs) enterprise-grade control without enterprise-grade hassle. Bundle PAM with the Privileged Access Management package and it slots straight into Devolutions Hub delivered as SaaS (Software-as-a-Service) or a self-hosted on-premises (on-prem) Devolutions Server, while Remote Desktop Manager provides one-click launches and Gateway supplies secure tunnels. One integrated stack takes you from standing privileges to true zero-standing-privilege—all under a single pane of glass, complete with granular RBAC (Role-Based Access Control) and tamper-proof audit logs.Starting Price: $50/month/user -
30
KeePassXC
KeePassXC
KeePassXC is a modern, secure, open source password manager that runs on Windows, macOS, and Linux and stores all credentials in an offline, encrypted database under your full control. It uses strong encryption (AES-256 by default, with optional Twofish or ChaCha20) and supports key files or hardware security keys (such as YubiKey) for enhanced protection, so your master password and database remain entirely under your control. You can save usernames, passwords, URLs, notes, attachments, and custom attributes, organize and search them in groups, generate strong randomized passwords or passphrases, and autofill login forms via the built-in Auto-Type or browser extension. It works with the KeePass 2 (.kdbx) database format, can import from CSV or backups of other password managers, and allows storage of TOTP two-factor authentication codes within the database.Starting Price: Free
