Cross-site scripting labs for web application security enthusiasts
The cybersecurity tools directory
Discover, compare and vote on 2,900+ security tools — from vulnerability scanners and OSINT to forensics and encryption. Curated for security teams, researchers and businesses.
Offensive SecurityMalware AnalysisNetwork SecurityThreat ManagementApplication SecurityDigital ForensicsVulnerability Management Free tools
2,963security tools
24categories
2,729free tools
22community votes
Most popular tools
2,963 tools, ranked by community votes
A comprehensive database of exploits and vulnerabilities for researchers and professionals
A write-up of the reverse engineering challenge from the 2019 BambooFox CTF competition
Important security headers for Fastify with granular control over application routes.
Top 15 recommendations to protect your business from email-borne threats with Security Gateway.
A tool to enumerate S3 buckets for a specific target
3GL is a high-level programming language with a focus on ASM for 6502.
6Guard is an IPv6 attack detector sponsored by Google Summer of Code 2012 and supported by The Honeynet Project organization.
A low overhead rate limiter for your routes
CSRF crumb generation and validation tool for hapi framework.
An exploration of a new method to abuse DCOM for remote payload execution and lateral movement.
Akamai App & API Protector is an integrated security solution that safeguards web applications and APIs against various cyber threats using edge computing and adaptive technologies.
A collection of search queries that can reveal sensitive information, vulnerabilities, and exposed data indexed by Google. Free to access through Exploit-DB's Google Hacking Database.
Symantec Endpoint Protection is a security solution that protects endpoints against malware, viruses, and cyber threats with advanced AI-driven detection capabilities and policy management…
Solve password-riddles on a website without logins or ads.
Get insights into the latest cybersecurity trends and expert advice on enhancing organizational security.
Protect your Fastify server against CSRF attacks with a series of utilities and recommendations for secure application development.
JSON.parse() drop-in replacement with prototype poisoning protection.
A guide to bypassing RFID card reader security mechanisms using specialized hardware
A-LIGN provides cybersecurity compliance audits and certifications, offering a range of services including SOC 2, ISO 27001, HITRUST, and FedRAMP, along with a technology platform for audit…
YARA module for supporting DCSO format bloom filters with hashlookup capabilities.
A tool for visualizing AWS IAM and Organizations in a graph format with Neo4j, supporting anomaly detection and custom data processing.
Absolute Security provides a comprehensive cybersecurity platform that offers endpoint-to-network access coverage, automated security compliance, and secure endpoint and access solutions.
Platform providing community-driven threat intelligence on cyber threats with a focus on malware and botnets.
Load more tools
Showing 24 of 2,963
Browse by category
Offensive Security
291 tools Malware Analysis
263 tools Network Security
255 tools Threat Management
247 tools Application Security
235 tools Digital Forensics
228 tools Vulnerability Management
179 tools Miscellaneous
166 tools Honeypots
159 tools Resources
152 tools Cloud Security
146 tools Security Operations
116 tools Data Protection
83 tools Specialized Security
83 tools Endpoint Security
80 tools IAM
71 tools Blogs & News
56 tools SIEM
55 tools AI Security
28 tools Write Ups
27 tools Grc
17 tools Deepfake Detection
12 tools Phishing
9 tools Attack Surface Management
5 tools
291 tools Malware Analysis
263 tools Network Security
255 tools Threat Management
247 tools Application Security
235 tools Digital Forensics
228 tools Vulnerability Management
179 tools Miscellaneous
166 tools Honeypots
159 tools Resources
152 tools Cloud Security
146 tools Security Operations
116 tools Data Protection
83 tools Specialized Security
83 tools Endpoint Security
80 tools IAM
71 tools Blogs & News
56 tools SIEM
55 tools AI Security
28 tools Write Ups
27 tools Grc
17 tools Deepfake Detection
12 tools Phishing
9 tools Attack Surface Management
5 tools
Frequently asked questions
What is the Hispion cybersecurity tools directory?
It's a free, curated catalogue of 2,900+ security tools — from vulnerability scanners and penetration-testing frameworks to OSINT, forensics and encryption utilities — organised into 24 categories and ranked by community votes.
Are the tools free?
2,729 tools are completely free and many others offer a free tier. Use the pricing filter to show only free, paid or freemium tools.
How are tools ranked?
“Most popular” ranks tools by net community votes (upvotes minus downvotes). You can also sort by newest or alphabetically.
Can I add a tool to the directory?
Yes — use Suggest a tool. Every submission is reviewed by the Hispion team before it is published.