Ω / SECURITY TOOLS

Security tool directory.

Find security tools by team, platform, deployment and category.

Reviewed listingsOfficial project links · review dates on every record

Browse the catalog or narrow it with the filters above. Each record includes official links, platforms, licensing and its latest review date.

BLUE TEAM · RED TEAM

OpenVAS Scanner

Network vulnerability scanning component of Greenbone Community Edition.

Vulnerability assessment

GPL-2.0 family with file-level qualifiers.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM

osquery

SQL-like endpoint visibility for inventory, logging, and threat hunting.

Endpoint visibility and EDR SIEM and logging Threat hunting

BSD-style license in the canonical repository.
Reviewed Oct 12, 2026

CROSS-TEAM · RED TEAM

OWASP Amass

Attack-surface and DNS asset discovery for explicitly scoped research.

Reconnaissance and asset discovery

Apache-2.0 for the main program; separately licensed subcomponents may apply.
Reviewed Oct 12, 2026

RED TEAM

Pacu

AWS-focused identity and cloud security assessment framework.

Cloud security Identity security

BSD-3-Clause
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Picus Autonomous Exposure Validation Platform

Commercial adversarial exposure and attack-path validation platform.

Detection and control validation Exposure validation and BAS

Proprietary annual subscription.
Reviewed Oct 12, 2026

BLUE TEAM

Plaso

Forensic event extraction and super-timeline generation.

Case management and reporting DFIR and forensics

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Prowler

Cloud posture, identity, compliance, and exposure assessment.

Cloud security Vulnerability management

Apache-2.0 for the canonical open-source project; managed editions have separate terms.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM

REMnux

Curated malware-analysis Linux distribution and tool environment.

DFIR and forensics Malware analysis and reverse engineering

Composite distribution; every included tool retains its own license.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

SafeBreach Validate

Commercial breach-and-attack simulation and detection validation platform.

Detection and control validation Exposure validation and BAS

Proprietary commercial subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · RED TEAM

ScoutSuite

Point-in-time multi-cloud configuration and exposure assessment.

Cloud security Vulnerability assessment

GPL-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

SCYTHE AEV Platform

Commercial adversary-emulation and detection-regression platform.

Adversary emulation Detection and control validation Exposure validation and BAS Reporting and collaboration

Proprietary commercial license scoped by deployment.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM

SCYTHE Sigma Regression Testing

Detection-as-code regression testing and coverage reporting.

Detection and control validation Detection engineering

Detection Rule License 1.1
Reviewed Oct 12, 2026

BLUE TEAM

Security Onion

Security monitoring distribution combining logging, detections, network visibility, and case workflows.

Case management and reporting Detection engineering Network security monitoring SIEM and logging

Elastic License v2 for Security Onion and bundled Elastic components; other components retain their licenses.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM

Sigma

Platform-neutral detection rule specification and reviewed rule corpus.

Detection engineering SIEM and logging Threat hunting

Detection Rule License 1.1 for rules; specification and logo are public domain.
Reviewed Oct 12, 2026

RED TEAM

Sliver

Adversary-emulation and operator-infrastructure framework for controlled engagements.

Adversary emulation Command and control

GPLv3 with separately licensed subcomponents.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM

Splunk Attack Data

Curated attack telemetry for detection development and replay validation.

Detection and control validation Detection engineering

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Splunk Attack Range

Instrumented security lab orchestration and telemetry generation.

Detection and control validation Detection engineering Security lab orchestration

Apache-2.0
Reviewed Oct 12, 2026

RED TEAM

sqlmap

Specialist SQL injection validation and database assessment tooling.

Application security Vulnerability assessment

GPL v2 or later with project clarifications and exceptions.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Stratus Red Team

Granular cloud adversary emulation for telemetry and detection validation.

Adversary emulation Cloud security Detection and control validation

Apache-2.0
Reviewed Oct 12, 2026

RED TEAM

Subfinder

Passive subdomain discovery and namespace expansion for scoped assets.

Reconnaissance and asset discovery

MIT
Reviewed Oct 12, 2026

BLUE TEAM

Suricata

IDS, IPS, and network security monitoring engine.

Detection engineering Network security monitoring

GPL-2.0 source; documentation has separate terms.
Reviewed Oct 12, 2026

BLUE TEAM

TheHive

Incident-response case management and team collaboration platform.

Case management and reporting Incident response Reporting and collaboration

StrangeBee Community, Gold, or Platinum terms depending on edition.
Reviewed Oct 12, 2026

BLUE TEAM

Timesketch

Collaborative forensic timeline analysis and case exploration.

Case management and reporting DFIR and forensics Reporting and collaboration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

VECTR

Purple-team exercise planning, test tracking, measurement, and reporting.

ATT&CK mapping and coverage Detection and control validation Reporting and collaboration

Custom VECTR terms/EULA; bundled Atomic Red material retains separate licensing.
Reviewed Oct 12, 2026