Burp Suite
Free tierWeb App Testing
A complete toolkit for web application testing.
Visit siteThe toolbox
The directory, organised the way practitioners work
Grouped by the job you're trying to do rather than by vendor category. Open source first, pricing model always visible.
Nessus
PaidVulnerability Scanning
Find vulnerabilities before they become breaches.
Visit siteWireshark
Open sourceNetwork Analysis
See and understand traffic across your network.
Visit siteMetasploit
Open sourcePenetration Testing
The world's most widely used penetration framework.
Visit siteNuclei
Open sourceVulnerability Scanning
Template-driven scanning that scales from one host to an entire estate.
Visit siteWazuh
Open sourceSIEM / XDR
Host monitoring, log analysis and compliance reporting in one stack.
Visit siteGhidra
Open sourceReverse Engineering
NSA-built decompiler suite for binary analysis and malware triage.
Visit siteVault
Free tierSecrets Management
Dynamic secrets, leases and encryption-as-a-service for modern infra.
Visit siteTrivy
Open sourceCloud & Container
Scans images, IaC and repos for CVEs and misconfiguration in CI.
Visit siteVelociraptor
Open sourceDigital Forensics
Endpoint hunting and forensic collection at fleet scale.
Visit siteMobSF
Open sourceMobile Security
Static and dynamic analysis for Android and iOS builds.
Visit siteZeek
Open sourceNetwork Analysis
Turns raw traffic into rich, queryable network telemetry.
Visit siteMaltego
Free tierOSINT
Link analysis for investigations across people, infra and companies.
Visit siteosquery
Open sourceSIEM / XDR
Query your fleet's operating systems like a SQL database.
Visit siteSemgrep
Free tierWeb App Testing
Fast, rule-based static analysis that fits into pull requests.
Visit siteCrypto Security Center
Checks we run ourselves, not links to someone else's
Wallet scanning, token approvals, transaction explanations and contract risk — read-only and free, with no wallet connection.
Missing something useful? Submit a tool and we'll review it for the next directory pass.