Welcome to our Cybersecurity Marketplace

CloudQuery transforms multi-cloud sprawl into a unified asset inventory: extensible, queryable cloud config and security data.

Stop brute-force and web attacks before they reach your apps. The CrowdSec Security Engine is open-source (MIT) intrusion detection from CrowdSec that analyzes your logs and requests to spot malicious behavior, then blocks offending IPs through remediation components on your firewall or web server. CrowdSec says the engine is and always will be free, giving small teams IDS and IPS at no cost.

Turn scattered threat feeds into one picture your team can act on. OpenCTI is Filigran's open-source threat intelligence platform, with a free Community Edition released under Apache 2.0. It links threat actors, malware, techniques and indicators in a STIX 2.1 knowledge graph and connects to SIEM, SOAR and EDR tools through 400+ connectors, giving a small team shared, searchable intelligence.

Put single sign-on and two-factor login in front of your self-hosted apps. Authelia is an open-source authentication and authorization server, licensed under Apache 2.0, that works alongside common reverse proxies. It supports one-time passwords, WebAuthn and passkeys, is an OpenID Certified OpenID Connect provider, and locks out repeated failed logins, so a small team can enforce granular access policies.

Find out what happened on a Windows machine in minutes, not days. Hayabusa is a free Windows event log fast forensics timeline generator and threat hunting tool from Yamato Security, written in Rust and released under AGPLv3. It applies Sigma-based detection rules to event logs and outputs CSV or JSON timelines, helping a small team triage incidents on one host or across many.

Check whether your Microsoft 365 tenant is configured securely, and keep checking. Maester is a free, open-source (MIT) test automation framework from the community-driven Maester Team, built on the PowerShell Pester framework. It ships 360+ built-in security tests covering Entra ID, Exchange Online, CISA SCuBA and CIS Microsoft 365 baselines, so a small team can spot risky settings and track drift.

Know which open-source components in your software carry known vulnerabilities. OWASP Dependency-Track is a free, open-source platform under Apache 2.0 that ingests CycloneDX SBOMs and tracks components across projects and versions. It checks them against NVD, GitHub Advisories, OSV and other sources, prioritizes findings with EPSS, and enforces policies, helping a small team manage software supply chain risk.

Test your LLM app the way you test code, before users find the problems. DeepEval is an open-source LLM evaluation framework from Confident AI, licensed under Apache 2.0. It offers 50+ research-backed metrics, including hallucination, faithfulness, toxicity and bias, in Pytest-style unit tests that run in CI/CD, so a small team can catch regressions in RAG pipelines, chatbots and agents.

See exactly what your LLM application is doing in production. Langfuse is an open-source AI engineering platform, MIT licensed for core features and now part of ClickHouse. It traces every LLM call, tool invocation and retrieval step, runs evaluations and manages prompts. Self-host it for free, or use the free cloud Hobby plan with 50k units per month and 2 users.

Trace, evaluate and guard your AI agents from one open-source platform. Opik is Comet's AI observability tool, licensed under Apache 2.0, with free self-hosting and a free cloud tier. It logs every step an agent takes, scores outputs with 30+ metrics and LLM-as-a-judge, and offers guardrails against PII exposure, helping a small team ship more reliable AI features.

Before you ship a generative AI feature, find out whether prompt injection can break it. Spikee is an open-source (Apache 2.0) prompt injection testing kit developed by Reversec. It builds use-case-specific test datasets, applies evasion techniques and tests LLMs, guardrails and full applications for risks such as data exfiltration and XSS, with Burp Suite integration.

Free online protection built for Canadians Block access to malicious websites that can steal your data, install harmful software or trick you into scams. Built with your privacy in mind, Canadian Shield helps reduce online tracking while keeping your data in Canada. Detects and Blocks emerging online threats before they reach you.