Atomic Red Team
Red Canary
Library tes ATT&CK termasuk teknik OT-relevant.
Open SourceAdversary Emulation
Tools
482
Open Source
212
Freemium
39
Commercial
231
With Link
481
Category:
License:
Deployment:
MITRE Caldera
MITRE
Adversary emulation platform dengan plugin Caldera for OT.
Open SourceAdversary EmulationAdvanced
Caldera for OT
MITRE / INL
Plugin Caldera khusus protokol OT (Modbus, BACnet, DNP3, Profinet).
Open SourceAdversary Emulation
Stratus Red Team
DataDog
Cloud-focused adversary emulation.
Open SourceAdversary Emulation
Protect AI
Protect AI
MLSecOps platform: scanning model, lineage & runtime.
CommercialAI Security
Robust Intelligence
Cisco Robust Intelligence
AI firewall & continuous validation untuk LLM/ML.
CommercialAI Security
Garak
NVIDIA
LLM vulnerability scanner.
Open SourceAI Security
OWASP ZAP
OWASP
Web app & API DAST scanner.
Open SourceAppSec / API
Burp Suite Pro
PortSwigger
Web/API pentest suite professional.
CommercialAppSec / API
Postman + Newman
Postman
API design, test & monitoring; security checks via Newman.
FreemiumAppSec / API
42Crunch
42Crunch
API security platform OpenAPI conformance & runtime.
CommercialAppSec / API
Dragos Platform
Dragos
Visibility OT, threat detection & vulnerability management khusus ICS.
CommercialAsset DiscoveryOn-PremIntermediate
Claroty xDome
Claroty
CPS Protection Platform dengan asset discovery, risk & vulnerability management.
CommercialAsset DiscoveryCloudIntermediate
Claroty CTD
Claroty
Continuous Threat Detection on-prem untuk OT/ICS.
CommercialAsset DiscoveryOn-PremIntermediate
Nozomi Guardian
Nozomi Networks
Passive OT/IoT discovery dengan anomaly detection & vulnerability assessment.
CommercialAsset DiscoveryOn-PremIntermediate
Nozomi Vantage
Nozomi Networks
SaaS visibility multi-site OT/IoT.
CommercialAsset DiscoveryCloud
Armis Centrix
Armis
Agentless asset intelligence IT/OT/IoT/IoMT.
CommercialAsset DiscoveryCloud
Forescout eyeInspect
Forescout
OT network monitoring (formerly SilentDefense) untuk discovery & threat detection.
CommercialAsset DiscoveryOn-Prem
Microsoft Defender for IoT
Microsoft
Agentless network detection untuk OT/IoT (eks-CyberX) terintegrasi Sentinel.
CommercialAsset DiscoveryHybrid
GRASSMARLIN
NSA
Passive network mapping untuk ICS (PCAP-based).
Open SourceAsset DiscoveryStandaloneIntermediate
plcscan
Dmitry Efanov
PLC discovery scanner Siemens S7 & Modbus TCP.
Open SourceAsset DiscoveryIntermediate
NMAP NSE ICS scripts
Nmap Project
NSE scripts untuk Modbus, S7, EtherNet/IP, BACnet, DNP3, IEC-104.
Open SourceAsset Discovery
runZero
runZero
Active+passive asset inventory dengan OT-safe scanning.
FreemiumAsset DiscoveryHybrid
Shodan
Shodan
Search engine internet-exposed device termasuk ICS protocol fingerprints.
FreemiumAsset DiscoveryCloud
Censys
Censys
Internet-wide scanning & attack surface management.
FreemiumAsset DiscoveryCloud
SCADAfence Platform
SCADAfence (Honeywell)
OT network visibility & threat detection.
CommercialAsset Discovery
Verve Security Center
Rockwell / Verve
OT systems management & vulnerability orchestration.
CommercialAsset Discovery
Cisco Cyber Vision
Cisco
Passive OT visibility terintegrasi switch industrial Catalyst IE & IR untuk discovery, baseline, dan detection.
CommercialAsset DiscoveryHybridIntermediate
Palo Alto IoT/OT Security
Palo Alto Networks
Machine learning device profiling & risk scoring untuk IoT/OT terintegrasi NGFW.
CommercialAsset DiscoveryCloud
TXOne EdgeOne
TXOne Networks
Network defense untuk OT dengan asset visibility & virtual patching.
CommercialAsset DiscoveryOn-PremIntermediate
Otorio RAM²
Otorio
OT risk assessment, attack surface management & posture untuk multi-site.
CommercialAsset DiscoveryHybrid
Industrial Defender ASM
Industrial Defender
Automation Systems Manager: inventaris konfigurasi, baseline, compliance NERC CIP.
CommercialAsset DiscoveryOn-Prem
Verve Industrial Protection
Verve Industrial (Rockwell)
Endpoint+network OT management dengan patch, hardening, dan vulnerability prioritization.
CommercialAsset DiscoveryHybrid
Radiflow iSID
Radiflow
Industrial threat detection & vulnerability management berbasis pasif & DPI.
CommercialAsset DiscoveryOn-Prem
SCADAfence Platform
Honeywell (SCADAfence)
Visibility OT, governance, dan continuous monitoring (kini bagian Honeywell).
CommercialAsset DiscoveryOn-Prem
Sectrio
Sectrio
OT/IoT/5G threat intelligence dan asset visibility.
CommercialAsset DiscoveryHybrid
Mission Secure
Mission Secure
OT cybersecurity platform fokus energi & maritim dengan managed detection.
CommercialAsset DiscoveryHybrid
Upstream Security
Upstream
Vehicle SOC & cyber detection untuk OEM otomotif & mobility.
CommercialAutomotive SecurityCloud
Argus Cyber Security
Argus (Continental)
In-vehicle, V2X & fleet cybersecurity.
CommercialAutomotive Security
GuardKnox
GuardKnox
Communication Lockdown untuk ECU & EV.
CommercialAutomotive Security
Cybellum
Cybellum (LG)
Product security platform untuk SBOM & vulnerability ECU.
CommercialAutomotive Security
Block Harbor VicOne
VicOne
Threat intel & VSOC tailored automotive.
CommercialAutomotive Security
Honeywell GoDirect Cyber
Honeywell
Cyber assessment & monitoring untuk avionics & airport.
CommercialAviation Security
Collins Aerospace SecureSphere
Collins Aerospace
Cyber services & SOC penerbangan.
CommercialAviation Security
Thales Cyber Aviation
Thales
Solusi cyber ATM, airport & airline.
CommercialAviation Security
Veeam Backup
Veeam
Backup enterprise dengan immutable repository.
CommercialBackup
Rubrik
Rubrik
Backup + ransomware recovery.
CommercialBackup
Restic
Restic
Encrypted, deduplicated backup CLI.
Open SourceBackup
Borg Backup
BorgBackup
Dedup backup dengan kompresi.
Open SourceBackup
Veeam Backup & Replication
Veeam
Backup enterprise dengan immutable repository.
CommercialBackupOn-Prem
Rubrik Security Cloud
Rubrik
Immutable backup + ransomware investigation.
CommercialBackup
Acronis Cyber Protect
Acronis
Backup + EPP + patch untuk endpoint & server.
CommercialBackup
Rubrik Security Cloud
Rubrik
Backup immutable, ransomware recovery & data security posture.
CommercialBackup & Recovery
Cohesity DataProtect
Cohesity
Hyperconverged backup dengan ransomware detection.
CommercialBackup & Recovery
Veeam Backup & Replication
Veeam
Backup VM/fisik dengan immutable repository.
CommercialBackup & Recovery
Asigra Tigris
Asigra
Backup dengan deep MFA & ransomware protection.
CommercialBackup & Recovery
Honeywell Forge Cybersecurity (Building)
Honeywell
Cybersecurity untuk BMS & gedung komersial.
CommercialBuilding Automation Security
Tridium Niagara Framework
Tridium
Framework BMS multi-protocol; konfigurasi hardening kritikal.
CommercialBuilding Automation Security
Distech Controls Eclypse
Distech
Controller BAS dengan TLS & secure boot.
CommercialBuilding Automation Security
Schneider EcoStruxure Building
Schneider
Platform BAS dengan cybersecurity advisory.
CommercialBuilding Automation Security
Wiz
Wiz
CNAPP agentless dengan attack-path analysis multi-cloud.
CommercialCloud SecurityCloud
Orca Security
Orca
Agentless CNAPP dengan SideScanning.
CommercialCloud SecurityCloud
Prisma Cloud
Palo Alto
CNAPP komprehensif (CSPM, CWPP, CIEM, code-to-cloud).
CommercialCloud SecurityCloud
Lacework
Lacework
CNAPP berbasis Polygraph behavior baseline.
CommercialCloud SecurityCloud
Aqua Security
Aqua
Container & Kubernetes security platform.
CommercialCloud SecurityHybrid
Sysdig Secure
Sysdig
Cloud-native runtime security berbasis Falco.
CommercialCloud SecurityCloud
Falco
CNCF
Runtime security K8s/container berbasis eBPF.
Open SourceCloud Security
Kubescape
ARMO
K8s posture & risk scanning multi-framework.
Open SourceCloud Security
Checkov
Bridgecrew
IaC scanning Terraform/CloudFormation/K8s.
Open SourceCloud Security
tfsec
Aqua
Static analysis Terraform.
Open SourceCloud Security
SANS Cyber Ranges
SANS Institute
Range pelatihan ICS/OT (ICS410, ICS515, NetWars).
CommercialCyber Range
Cyberbit Range
Cyberbit
Cyber range simulasi serangan IT/OT.
CommercialCyber RangeCloud
Hack The Box
Hack The Box
Platform CTF/lab pentest dengan modul AD/ICS.
FreemiumCyber RangeCloud
TryHackMe
TryHackMe
Lab interaktif keamanan beginner→advanced.
FreemiumCyber RangeCloud
ICS Village
ICS Village
Komunitas + lab portable untuk pelatihan ICS.
Open SourceCyber Range
Owl Cyber Defense
Owl Cyber Defense
Hardware data diode & cross-domain solution.
CommercialData Diode
Waterfall HERA
Waterfall Security
Unidirectional secure remote access + diode.
CommercialData Diode
Advenica SecuriCDS
Advenica
Data diode bersertifikasi Common Criteria.
CommercialData Diode
Fox-IT DataDiode
NCC Group / Fox-IT
Data diode bersertifikasi tinggi untuk government & critical infra.
CommercialData Diode
Owl Cyber Defense Diode
Owl
Data diode one-way transfer untuk segmentasi OT.
CommercialData Diode
Waterfall Unidirectional Gateway
Waterfall Security
Unidirectional gateway hardware-enforced replikasi data OT.
CommercialData Diode
Fox-IT Data Diode
Fox Crypto
Diode hardware approved untuk government & critical infrastructure.
CommercialData Diode
TrapX DeceptionGrid
Commvault TrapX
Deception platform dengan emulated ICS traps.
CommercialDeception
Attivo BOTsink (SentinelOne)
SentinelOne
Identity-aware deception & lateral movement detection.
CommercialDeception
Conpot
MushMush Foundation
Low-interaction ICS honeypot (Modbus, S7, BACnet, IPMI).
Open SourceDeception
GasPot
Trend Micro
Honeypot Veeder-Root tank gauge SPBU.
Open SourceDeception
HoneyPLC
Academic
High-interaction PLC honeypot multi-vendor.
Open SourceDeception
Cowrie
Cowrie Project
SSH/Telnet medium-interaction honeypot.
Open SourceDeception
T-Pot
Deutsche Telekom
Honeypot platform multi-flavour all-in-one.
Open SourceDeception
Thinkst Canary
Thinkst
Hardware/virtual canary token deception.
CommercialDeception
Sigma
SigmaHQ
Generic SIEM rule format dengan ICS rule set.
Open SourceDetection Content
MITRE ATT&CK Navigator
MITRE
Web tool mapping TTPs & detection coverage termasuk ATT&CK for ICS.
Open SourceDetection Content
DeTT&CT
Rabobank CDC
Score & compare detection coverage vs ATT&CK.
Open SourceDetection Content
Sigma
SigmaHQ
Generic signature format untuk log; convert ke SIEM apapun.
Open SourceDetection Engineering
YARA
VirusTotal
Pattern matching untuk file/memory malware hunting.
Open SourceDetection Engineering
capa
Mandiant
Identifikasi kapabilitas program (PE/ELF/.NET) berbasis rule.
Open SourceDetection Engineering
Atomic Red Team
Red Canary
Library test atomik untuk MITRE ATT&CK technique.
Open SourceDetection Engineering
MITRE Caldera
MITRE
Automated adversary emulation platform.
Open SourceDetection Engineering
ATT&CK Navigator
MITRE
Annotate, layer, dan kelola matrix MITRE ATT&CK (incl. ICS).
Open SourceDetection Engineering
DeTT&CT
Rabobank CDC
Tool untuk score coverage detection terhadap MITRE ATT&CK.
Open SourceDetection Engineering
VECTR
Security Risk Advisors
Tracking purple team campaign & coverage MITRE.
FreemiumDetection Engineering
Sysmon
Microsoft Sysinternals
Windows logging granular untuk hunting.
FreemiumDetection Engineering
Sysmon Modular Config (Olaf Hartong)
Olaf Hartong
Konfigurasi modular Sysmon dengan MITRE mapping.
Open SourceDetection Engineering
Sigma HQ Rules
SigmaHQ
Repository rules Sigma terbesar untuk SIEM.
Open SourceDetection Engineering
Atomic Red Team
Red Canary
Library tes adversary atomic untuk validasi detection.
Open SourceDetection Engineering
Detection-as-Code (Panther)
Panther Labs
SIEM cloud-native Detection-as-Code.
CommercialDetection Engineering
Chronicle SecOps
Google
SIEM cloud planet-scale (eks Chronicle).
CommercialDetection Engineering
Datadog Cloud SIEM
Datadog
SIEM terintegrasi observability.
CommercialDetection Engineering
draw.io / diagrams.net
JGraph
Diagramming gratis dengan shape ICS.
Open SourceDocumentation
Lucidchart
Lucid Software
Cloud diagramming kolaboratif.
FreemiumDocumentation
Visio
Microsoft
Diagramming klasik dengan stencils Allen-Bradley & Siemens.
CommercialDocumentation
diagrams.net (draw.io)
diagrams.net
Diagram editor gratis untuk arsitektur jaringan/Purdue.
Open SourceDocumentation
Lucidchart
Lucid
Diagram & data visualization kolaboratif.
FreemiumDocumentation
yEd Graph Editor
yWorks
Editor diagram desktop dengan auto-layout kuat.
FreemiumDocumentation
PlantUML
PlantUML
Diagram-as-code (sequence, deployment, dll).
Open SourceDocumentation
Wazuh
Wazuh
XDR + SIEM open source: agent host, FIM, vuln, MITRE mapping.
Open SourceEDROn-PremIntermediate
OSSEC
OSSEC Project
Host-based intrusion detection klasik (log, FIM, rootkit).
Open SourceEDR
CrowdStrike Falcon
CrowdStrike
Cloud-native EDR/XDR dengan threat intel & IT/OT module.
CommercialEDRCloud
SentinelOne Singularity
SentinelOne
Autonomous EDR/XDR berbasis behavioral AI.
CommercialEDRCloud
Microsoft Defender for Endpoint
Microsoft
EDR enterprise terintegrasi M365 & Defender for IoT.
CommercialEDRCloud
Palo Alto Cortex XDR
Palo Alto Networks
XDR endpoint + network + cloud + identity.
CommercialEDRCloud
Trellix EDR
Trellix
EDR enterprise (eks-McAfee/FireEye) dengan threat intel.
CommercialEDRHybrid
TXOne StellarProtect
TXOne Networks
OT-native endpoint protection dengan application allowlisting & USB control untuk HMI/engineering workstation.
CommercialEDROn-Prem
CrowdStrike Falcon
CrowdStrike
Cloud-native EDR/XDR dengan modul Insight for OT.
CommercialEDR/XDRCloud
SentinelOne Singularity
SentinelOne
Autonomous EDR/XDR dengan Singularity for IoT.
CommercialEDR/XDRCloud
Microsoft Defender XDR
Microsoft
XDR terintegrasi Defender for Endpoint/Identity/IoT.
CommercialEDR/XDRCloud
OSQuery / Fleet
Fleet / Linux Foundation
Endpoint visibility via SQL queries.
Open SourceEDR/XDR
Proofpoint Email Protection
Proofpoint
Email security gateway dengan TAP & impostor defense.
CommercialEmail Security
Mimecast
Mimecast
Email security, archiving & continuity.
CommercialEmail Security
Abnormal Security
Abnormal
Behavioral AI untuk BEC & account takeover.
CommercialEmail Security
Cisco Secure Firewall ISA3000
Cisco
NGFW ruggedized industrial dengan FirePower & Snort.
CommercialFirewall
Palo Alto NGFW
Palo Alto Networks
NGFW App-ID + ICS-aware decoder.
CommercialFirewall
Fortinet FortiGate Rugged
Fortinet
FortiGate ruggedized untuk plant floor.
CommercialFirewall
Check Point 1570R
Check Point
NGFW ruggedized untuk SCADA & substation.
CommercialFirewall
Belden Tofino Xenon
Belden / Hirschmann
Industrial firewall purpose-built dengan Modbus/EtherNet/IP DPI.
CommercialFirewall
Phoenix Contact mGuard
Phoenix Contact
Industrial firewall + VPN + IDS untuk machine builder.
CommercialFirewall
Hirschmann EAGLE40
Belden / Hirschmann
Firewall industrial M12, secure remote access.
CommercialFirewall
Moxa EDR-G9010
Moxa
Industrial secure router/firewall multiport gigabit.
CommercialFirewall
GRR Rapid Response
Google
Remote live forensics framework untuk endpoint.
Open SourceForensicsAdvanced
Velociraptor
Rapid7
Endpoint visibility, forensics & threat hunting via VQL.
Open SourceForensicsOn-PremIntermediate
Volatility 3
Volatility Foundation
Memory forensics framework.
Open SourceForensics
Autopsy
Basis Technology
Digital forensics GUI di atas The Sleuth Kit.
Open SourceForensics
The Sleuth Kit
Brian Carrier
Library & tools analisis disk image.
Open SourceForensics
KAPE
Kroll
Kroll Artifact Parser and Extractor untuk triage cepat.
FreemiumForensics
Plaso / log2timeline
Plaso Project
Super timeline forensic engine.
Open SourceForensics
YARA
VirusTotal
Pattern matching swiss-army knife untuk malware.
Open SourceForensics
Autopsy
Basis Technology
Digital forensics GUI di atas The Sleuth Kit.
Open SourceForensics
The Sleuth Kit
Brian Carrier
CLI forensik filesystem (NTFS, FAT, ExFAT, Ext, HFS+).
Open SourceForensics
Volatility 3
Volatility Foundation
Memory forensics framework de facto.
Open SourceForensics
KAPE
Kroll
Kroll Artifact Parser & Extractor: triage cepat Windows.
FreemiumForensics
Plaso / log2timeline
Open Source
Super timeline forensik dari ratusan sumber artifact.
Open SourceForensics
FTK Imager
Exterro
Disk imaging & preview gratis (E01/dd).
FreemiumForensics
CyberChef
GCHQ
Cyber Swiss Army Knife untuk encoding/decoding/parsing.
Open SourceForensics
DFIR-ORC
ANSSI
Triage collector forensik Windows skala enterprise.
Open SourceForensics
Eric Zimmerman Tools
Eric Zimmerman
Suite forensik Windows (MFTECmd, EvtxECmd, RegRipper, dll).
Open SourceForensics
Velociraptor
Rapid7 / Velocidex
Endpoint visibility & hunt berbasis VQL.
Open SourceForensicsIntermediate
GRR Rapid Response
Google
Remote live forensics & incident response framework.
Open SourceForensics
Magnet AXIOM
Magnet Forensics
Suite forensik computer & mobile.
CommercialForensics & DFIR
Cellebrite UFED
Cellebrite
Mobile forensic acquisition & analysis.
CommercialForensics & DFIR
FTK Imager
Exterro
Imaging tool forensik populer.
FreemiumForensics & DFIR
X-Ways Forensics
X-Ways
Forensic tool low-level analysis Windows.
CommercialForensics & DFIR
Velociraptor
Rapid7
Endpoint visibility & forensic hunt at scale.
Open SourceForensics & DFIR
GRR Rapid Response
Google
Remote live forensic framework at scale.
Open SourceForensics & DFIR
Plaso / log2timeline
Plaso Project
Tool super-timeline forensic.
Open SourceForensics & DFIR
TheHive
StrangeBee
Case management & collaboration SOC/CSIRT.
Open SourceForensics & DFIR
Cortex (TheHive)
StrangeBee
Observable analysis & responder engine.
Open SourceForensics & DFIR
Archer GRC
Archer
Platform GRC enterprise risk & compliance.
CommercialGRC & Compliance
ServiceNow GRC
ServiceNow
Integrated risk management di platform ServiceNow.
CommercialGRC & Compliance
OneTrust GRC
OneTrust
GRC, privacy & third-party risk.
CommercialGRC & Compliance
LogicGate Risk Cloud
LogicGate
GRC no-code workflow.
CommercialGRC & Compliance
Eramba
Eramba
Community GRC dengan ISO 27001 & risk register.
Open SourceGRC & Compliance
OpenSCAP
OpenSCAP
Tool compliance SCAP/STIG/CIS.
Open SourceGRC & Compliance
CIS-CAT Pro
CIS
Assessor CIS Benchmarks otomatis.
FreemiumGRC & Compliance
Ansible
Red Hat
Automation & hardening playbooks (CIS Benchmarks).
Open SourceHardening
OpenSCAP
Red Hat
Security compliance scanning (SCAP/STIG/CIS).
Open SourceHardening
CIS-CAT
Center for Internet Security
CIS Benchmarks assessor tool.
FreemiumHardening
Lynis
CISOfy
Linux/Unix security auditing tool.
Open SourceHardening
CIS Benchmarks / CIS-CAT
Center for Internet Security
Konfigurasi hardening konsensus + tool assess.
FreemiumHardening
OpenSCAP
Red Hat
SCAP scanner: STIG/CIS profile evaluation.
Open SourceHardening
Lynis
CISOfy
Hardening & audit Linux/macOS/Unix.
Open SourceHardening
DISA STIGs
DISA / DoD
Security Technical Implementation Guides untuk OS & app.
Open SourceHardening
HackRF One
Great Scott Gadgets
SDR transceiver 1 MHz, 6 GHz untuk audit RF & ICS wireless.
Open SourceHardware / Wireless
YARD Stick One
Great Scott Gadgets
Sub-GHz wireless attack tool.
Open SourceHardware / Wireless
Flipper Zero
Flipper Devices
Multi-tool hardware untuk RFID/NFC/IR/Sub-GHz.
Open SourceHardware / Wireless
Bus Pirate
Dangerous Prototypes
Tool universal bus (I2C/SPI/UART) untuk hardware hacking.
Open SourceHardware / Wireless
JTAGulator
Grand Idea Studio
Tool identifikasi pin JTAG/UART.
Open SourceHardware / Wireless
Saleae Logic
Saleae
Logic analyzer 8/16 channel analisis bus serial.
CommercialHardware / Wireless
Ettus USRP
Ettus (NI)
SDR platform profesional untuk RF research.
CommercialHardware / Wireless
ChipWhisperer
NewAE
Hardware untuk side-channel & fault injection.
Open SourceHardware / Wireless
Conpot
MushMush Foundation
Honeypot ICS dengan template Siemens S7, Guardian AST, IPMI.
Open SourceHoneypotIntermediate
T-Pot
Deutsche Telekom
All-in-one multi-honeypot platform (incl. Conpot).
Open SourceHoneypot
GasPot
Trend Micro
Honeypot Veeder Root Guardian AST (TLS-350).
Open SourceHoneypot
Cowrie
Cowrie
SSH/Telnet honeypot dengan virtual filesystem.
Open SourceHoneypot
Dionaea
DinoTools
Malware-capturing honeypot multi-protokol.
Open SourceHoneypot
Keycloak
Red Hat
Identity & SSO (OIDC/SAML) open source.
Open SourceIAM
CyberArk PAM
CyberArk
Privileged Access Management enterprise.
CommercialIdentity & PAMHybrid
BeyondTrust Password Safe
BeyondTrust
PAM, password vault & session monitoring.
CommercialIdentity & PAMHybrid
Delinea Secret Server
Delinea
Vault privileged credential & session brokering.
CommercialIdentity & PAM
HashiCorp Vault
HashiCorp
Secrets management & dynamic credential.
Open SourceIdentity & PAM
Teleport
Teleport
Access platform SSH/K8s/DB/Windows dengan audit & MFA.
Open SourceIdentity & PAM
Okta Workforce Identity
Okta
SSO, MFA & lifecycle workforce identity.
CommercialIdentity & PAMCloud
Microsoft Entra ID
Microsoft
Identity & access management cloud (eks Azure AD).
CommercialIdentity & PAMCloud
Ping Identity
Ping
IAM enterprise dengan adaptive authentication.
CommercialIdentity & PAM
Yubico YubiKey
Yubico
Hardware security key FIDO2/U2F/PIV/OpenPGP.
CommercialIdentity & PAM
Duo Security
Cisco Duo
MFA & zero-trust access.
CommercialIdentity & PAM
Zeek
Zeek Project
Network security monitor dengan ICS protocol parser via ICSNPP.
Open SourceIDSIntermediate
ICSNPP
INL / Zeek
Zeek package: Industrial Control Systems Network Protocol Parsers.
Open SourceIDS
Snort 3
Cisco Talos
IDS/IPS engine dengan ruleset ICS (Modbus, DNP3, S7).
Open SourceIDSIntermediate
Suricata
OISF
High-performance IDS/IPS/NSM dengan Modbus, DNP3, ENIP keywords.
Open SourceIDS
AWS IoT Device Defender
AWS
Audit konfigurasi & detection anomaly perilaku device IoT.
CommercialIIoT SecurityCloud
Azure Defender for IoT
Microsoft
Threat protection IoT/OT terintegrasi Sentinel & Defender XDR.
CommercialIIoT SecurityCloud
Google Cloud IoT Core (legacy)
Google
Device identity, MQTT/HTTP ingestion (legacy, EoL 2023; migrate ClearBlade).
CommercialIIoT SecurityCloud
ClearBlade IoT
ClearBlade
Edge & cloud IoT platform pengganti Google IoT Core.
CommercialIIoT SecurityHybrid
AWS IoT Greengrass
AWS
Edge runtime untuk IoT dengan secure tunneling & local compute.
CommercialIIoT SecurityHybrid
Azure IoT Edge
Microsoft
Runtime container di edge dengan modul terenkripsi & TPM attestation.
CommercialIIoT SecurityHybrid
Wind River Studio
Wind River
Platform pengembangan & operasi edge IIoT (VxWorks, Linux).
CommercialIIoT SecurityHybrid
PTC ThingWorx
PTC
Platform IIoT industri dengan connector ke SCADA/PLC.
CommercialIIoT SecurityHybrid
Siemens Industrial Edge
Siemens
App store & manajemen device edge industri Siemens.
CommercialIIoT SecurityHybrid
Litmus Edge
Litmus
Edge data platform dengan 250+ driver OT untuk akuisisi & analytics.
CommercialIIoT SecurityHybrid
HiveMQ
HiveMQ
MQTT broker enterprise dengan TLS, OAuth & cluster.
CommercialIIoT SecurityHybrid
EMQX
EMQ
MQTT broker scalable open source & enterprise.
Open SourceIIoT Security
Eclipse Mosquitto
Eclipse
Broker MQTT ringan untuk IoT.
Open SourceIIoT Security
Eclipse Hono
Eclipse
Service IoT untuk telemetri & command-control multi-protocol.
Open SourceIIoT Security
Eclipse Ditto
Eclipse
Digital twin framework open source.
Open SourceIIoT Security
Ignition by Inductive Automation
Inductive Automation
Platform SCADA/MES dengan modul keamanan & gateway.
CommercialIIoT SecurityOn-Prem
TheHive
StrangeBee
Collaborative case management untuk SOC/CSIRT.
FreemiumIncident ResponseOn-Prem
Cortex
StrangeBee
Observable analyzer & responder companion TheHive.
Open SourceIncident Response
Shuffle
Shuffle
SOAR open source modular.
Open SourceIncident Response
Tines
Tines
No-code automation & SOAR.
FreemiumIncident ResponseCloud
Palo Alto Cortex XSOAR
Palo Alto Networks
Enterprise SOAR (formerly Demisto).
CommercialIncident Response
TheHive
StrangeBee
Case management SOC dengan integrasi MISP & Cortex.
Open SourceIncident Response
Cortex (TheHive)
StrangeBee
Observable analyzer & responder untuk TheHive (>200 analyzer).
Open SourceIncident Response
DFIR-IRIS
DFIR-IRIS
Incident response collaboration platform open source.
Open SourceIncident Response
Shuffle SOAR
Shuffle
SOAR open source dengan ratusan app integration.
Open SourceIncident Response
Splunk SOAR (Phantom)
Splunk
Playbook automation enterprise terintegrasi Splunk ES.
CommercialIncident ResponseHybrid
Palo Alto Cortex XSOAR
Palo Alto Networks
SOAR + threat intel + case mgmt.
CommercialIncident ResponseCloud
Tines
Tines
No-code automation untuk security workflow.
CommercialIncident ResponseCloud
Torq
Torq
Hyperautomation security workflow.
CommercialIncident ResponseCloud
Fortinet FortiGate Rugged
Fortinet
NGFW ruggedized untuk OT/ICS dengan ICS protocol awareness.
CommercialIndustrial FirewallOn-Prem
Palo Alto PA-220R
Palo Alto
NGFW ruggedized untuk environment industri ekstrem.
CommercialIndustrial Firewall
Cisco ISA 3000
Cisco
Industrial Security Appliance untuk Purdue lower-layer.
CommercialIndustrial Firewall
Hirschmann EAGLE40
Belden Hirschmann
Industrial firewall & VPN router.
CommercialIndustrial Firewall
Belden Tofino Xenon
Belden
Industrial firewall stateful dengan deep-packet inspection Modbus/EtherNet/IP.
CommercialIndustrial Firewall
Siemens RUGGEDCOM RX1500
Siemens
Layer 3 multi-service router ruggedized substation/utility.
CommercialIndustrial Firewall
Moxa EDR-G9010
Moxa
Industrial secure router + firewall + VPN multi-WAN.
CommercialIndustrial Firewall
Naval Dome
Naval Dome
Endpoint cyber defense untuk OT kapal (bridge, ECDIS, propulsion).
CommercialMaritime SecurityOn-Prem
Cydome Maritime
Cydome
Visibility, monitoring & compliance IMO 2021 untuk armada.
CommercialMaritime SecurityHybrid
CyberOwl Medulla
CyberOwl
Threat detection & fleet risk management maritim.
CommercialMaritime SecurityHybrid
Templar Executives
Templar
Konsultansi cyber maritim & cyber bridge exercise.
CommercialMaritime Security
Lloyd's Register Cyber
Lloyd's Register
Class society guidance & cyber notation kapal.
CommercialMaritime Security
DNV Cyber
DNV
Risk-based cyber assurance, type approval & advisory maritim/energi.
CommercialMaritime Security
Medigate by Claroty
Claroty
Visibility & risk management untuk IoMT & HDO.
CommercialMedical Device SecurityCloud
Asimily
Asimily
IoMT inventory, risk & forensic untuk rumah sakit.
CommercialMedical Device SecurityCloud
Cynerio
Cynerio
HDO security IoMT, IoT, OT & enterprise IT.
CommercialMedical Device SecurityCloud
Ordr
Ordr
Asset intelligence untuk medical, IoT & OT connected device.
CommercialMedical Device SecurityCloud
MobSF
OpenSecurity
Mobile security framework Android & iOS static/dynamic.
Open SourceMobile Security
Frida
Frida
Dynamic instrumentation toolkit reverse engineering.
Open SourceMobile Security
objection
sensepost
Runtime mobile exploration berbasis Frida.
Open SourceMobile Security
Wireshark
Wireshark Foundation
Network protocol analyzer dengan banyak dissector industrial (Modbus, S7, DNP3, IEC-61850).
Open SourceMonitoringBeginner
tcpdump
The Tcpdump Group
CLI packet capture portable & ringan.
Open SourceMonitoring
ntopng
ntop
High-speed traffic analysis & flow collection.
FreemiumMonitoring
Arkime (Moloch)
Arkime
Large-scale full packet capture & indexed search.
Open SourceMonitoring
Malcolm
CISA / Idaho National Lab
Network traffic analysis suite untuk ICS (Arkime + Zeek + Suricata).
Open SourceMonitoringIntermediate
Security Onion
Security Onion Solutions
Distro NSM & log management (Zeek+Suricata+Elastic+TheHive).
Open SourceMonitoringOn-Prem
SELKS
Stamus Networks
Suricata + Elastic + Kibana + Scirius live distro.
Open SourceMonitoring
NetworkMiner
Netresec
Forensic NTA: ekstraksi file, kredensial, dan sesi dari PCAP.
FreemiumMonitoringBeginner
Brim / Zui
Brim Data
Desktop log/PCAP explorer berbasis Zeek + Suricata + Zed query.
Open SourceMonitoring
Stenographer
Google
Full packet capture skala tinggi dengan indexing cepat.
Open SourceMonitoring
nfdump / NfSen
Open Source
Toolset capture & analisis NetFlow/IPFIX/sFlow.
Open SourceMonitoring
ElastiFlow
ElastiFlow
Network flow analytics berbasis Elastic dengan enrichment.
FreemiumMonitoring
Packetbeat
Elastic
Network packet analytics shipper untuk Elastic Stack.
Open SourceMonitoring
Cisco Cyber Vision + ISA-3000
Cisco
OT visibility + industrial firewall.
CommercialNetwork Security
Fortinet FortiGate Rugged
Fortinet
Industrial NGFW dengan OT protocol DPI.
CommercialNetwork Security
Palo Alto NGFW
Palo Alto Networks
NGFW dengan App-ID untuk protokol industri.
CommercialNetwork Security
Hirschmann EAGLE 30
Belden / Hirschmann
Industrial firewall rugged dengan DPI Modbus & DNP3.
CommercialNetwork Security
Tofino Xenon
Belden / Hirschmann
Industrial security appliance plug-and-protect.
CommercialNetwork Security
pfSense
Netgate
Firewall open source berbasis FreeBSD.
Open SourceNetwork Security
OPNsense
Deciso
Fork pfSense dengan UI modern.
Open SourceNetwork Security
Waterfall Unidirectional Gateway
Waterfall Security
Hardware data diode untuk replikasi historian satu arah.
CommercialNetwork Security
Owl Cyber Defense
Owl
Cross-domain & data diode untuk CI.
CommercialNetwork Security
Fox-IT DataDiode
NCC Group / Fox-IT
Certified data diode untuk pemerintahan & utilitas.
CommercialNetwork Security
Garland TAP
Garland Technology
Network TAP & aggregator untuk OT passive monitoring.
CommercialNetwork TAP
Profitap TAP
Profitap
TAP industri & aggregator multi-port.
CommercialNetwork TAP
Gigamon Visibility
Gigamon
Deep observability pipeline TAP-to-tool.
CommercialNetwork TAP
Verve Security Center
Verve (Rockwell)
OT systems management & vulnerability orchestration.
CommercialOT Suite
Hexagon PAS Cyber Integrity
Hexagon
Inventory level-0/1, config & vulnerability OT proprietary.
CommercialOT Suite
SCADAfence (Honeywell)
Honeywell
OT monitoring, governance & risk (eks SCADAfence).
CommercialOT Suite
Otorio RAM²
Otorio
OT risk assessment & management dengan digital twin.
CommercialOT Suite
Mission Secure
Mission Secure
OT cyber protection & managed services.
CommercialOT Suite
OPSWAT MetaDefender OT
OPSWAT
OT cyber tailored CIP/Modbus/IEC-104 deep packet.
CommercialOT Suite
TXOne EdgeIPS / StellarOne
TXOne Networks
OT-native NDR, endpoint lockdown & USB scanning.
CommercialOT Suite
Radiflow CIARA
Radiflow
OT risk assessment & breach attack simulation.
CommercialOT Suite
Indegy (Tenable OT) Active Querying
Tenable
OT-safe active querying untuk asset deep visibility.
CommercialOT Suite
SecurityMatters SilentDefense → Forescout
Forescout
OT NDR (eks SecurityMatters) terintegrasi Forescout platform.
CommercialOT Suite
CyberArk PAM
CyberArk
Privileged access management enterprise dengan modul OT.
CommercialPAM
BeyondTrust PRA
BeyondTrust
Privileged Remote Access untuk vendor & internal.
CommercialPAM
CyberArk PAM
CyberArk
Privileged Access Management standar enterprise.
CommercialPAMHybrid
BeyondTrust Privileged Remote Access
BeyondTrust
Remote access PAM untuk vendor & engineer (populer di OT).
CommercialPAMHybrid
Delinea Secret Server
Delinea
Vault PAM enterprise.
CommercialPAMHybrid
Metasploit Framework
Rapid7
Exploitation framework dengan modul SCADA.
Open SourcePentestIntermediate
ICSSPLOIT
open source
Metasploit-like framework khusus ICS exploits.
Open SourcePentestAdvanced
Industrial Exploitation Framework (ISF)
dark-lbp
Framework eksploitasi ICS multi-vendor.
Open SourcePentest
PLCInject
SCADACS
Tools injection ladder logic ke Siemens S7-300/400.
Open SourcePentest
Modbus-CLI
FavioVazquez / others
CLI sederhana untuk read/write register Modbus.
Open SourcePentest
smod
open source
Modular Modbus penetration testing framework.
Open SourcePentest
Kali Linux
OffSec
Distro pentest dengan banyak tools default.
Open SourcePentestStandalone
Cobalt Strike
Fortra
Adversary simulation & red team platform.
CommercialPentest
Sliver
Bishop Fox
Open source cross-platform C2.
Open SourcePentest
BloodHound
SpecterOps
AD attack path analysis untuk pivot ke OT.
Open SourcePentest
Metasploit Framework
Rapid7
Exploitation framework dengan modul ICS (Modbus, S7, BACnet, DNP3).
Open SourcePentest
Cobalt Strike
Fortra
Adversary simulation & red team C2 standar industri.
CommercialPentestStandalone
Sliver
BishopFox
Open source C2 cross-platform alternatif Cobalt Strike.
Open SourcePentest
Havoc Framework
HavocFramework
Modern post-exploitation C2 framework.
Open SourcePentest
Burp Suite
PortSwigger
Web app testing standar: proxy, scanner, intruder.
FreemiumPentest
OWASP ZAP
OWASP
Open source web app scanner & proxy.
Open SourcePentest
BloodHound
SpecterOps
Active Directory attack path discovery via graph.
Open SourcePentest
Impacket
Fortra
Koleksi script Python untuk SMB/MSRPC/Kerberos.
Open SourcePentest
Responder
Laurent Gaffie
LLMNR/NBT-NS/MDNS poisoner & SMB relay.
Open SourcePentest
Mimikatz
Benjamin Delpy
Credential dumping & Windows auth abuse referensi.
Open SourcePentest
Nmap
Nmap Project
Network mapper & port scanner standar.
Open SourcePentest
Masscan
Robert Graham
Internet-scale port scanner ultra-cepat.
Open SourcePentest
Industrial Exploitation Framework (ISF)
dark-lbp
Exploitation framework khusus ICS (PLC, RTU).
Open SourcePentestAdvanced
smod
theralfbrown
Modular Modbus pentesting framework.
Open SourcePentest
GE Cyber Substation
GE Vernova
Substation cybersecurity sesuai IEC 62351 & NERC CIP.
CommercialPower SubstationOn-Prem
OSIsoft PI System (AVEVA PI)
AVEVA
Data historian industri kritikal untuk power & utility.
CommercialPower SubstationOn-Prem
Subnet PowerSYSTEM Center
Subnet Solutions
Manajemen IED, password & konfigurasi substation NERC CIP.
CommercialPower Substation
NovaTech Orion
NovaTech
Substation gateway & automation controller dengan cyber compliance.
CommercialPower Substation
SEL Blueframe
SEL
Platform compute substation hardened untuk aplikasi protection.
CommercialPower Substation
Triangle MicroWorks SCADA Tools
Triangle MicroWorks
Test set & SDK untuk DNP3, IEC 60870-5/61850.
CommercialPower Substation
pymodbus
pymodbus dev
Library Python untuk Modbus master/slave (TCP, RTU, ASCII).
Open SourceProtocol Research
python-snap7
snap7 / Python wrapper
Library S7 Communication untuk Siemens S7-300/400/1200/1500.
Open SourceProtocol Research
libplctag
libplctag
Library cross-platform untuk Allen-Bradley CIP & Modbus TCP.
Open SourceProtocol Research
open62541
open62541
OPC UA stack open source (C99).
Open SourceProtocol Research
FreeOpcUa python-opcua
FreeOpcUa
Library Python untuk OPC UA client/server.
Open SourceProtocol Research
bacpypes
JoelBender
Library Python untuk BACnet (BMS).
Open SourceProtocol Research
libiec61850
MZ Automation
Implementasi C IEC 61850 MMS/GOOSE/SV.
Open SourceProtocol Research
lib60870
MZ Automation
Library IEC 60870-5-101/104 (telekontrol).
Open SourceProtocol Research
Defensics
Black Duck (Synopsys)
Generational fuzzing untuk 250+ protokol termasuk ICS.
CommercialProtocol Testing
Achilles Test Platform
GE Vernova
Industrial network resilience testing & certification.
CommercialProtocol Testing
Wurldtech Achilles
Wurldtech (GE)
Cert program Achilles Level 1/2 untuk device industri.
CommercialProtocol Testing
boofuzz
jtpereyda
Network protocol fuzzing framework (penerus Sulley).
Open SourceProtocol Testing
PolarProxy
NETRESEC
TLS proxy untuk inspeksi & PCAP encrypted traffic.
FreemiumProtocol Testing
ModbusPal
ModbusPal
Simulator Modbus slave berbasis Java.
Open SourceProtocol Testing
QModMaster
qmodmaster
Modbus TCP/RTU master GUI Qt.
Open SourceProtocol Testing
diagslave / modpoll
FOCUS-SW
Tool CLI Modbus slave simulator & master poll.
FreemiumProtocol Testing
DNP3 Test Harness
Step Function I/O
Library DNP3 & test harness multi-bahasa.
Open SourceProtocol Testing
Cylus Cyrail
Cylus
OT & signalling threat detection untuk operator kereta.
CommercialRail SecurityHybrid
Alstom Cyber
Alstom
Solusi cyber CBTC, signalling & rolling stock.
CommercialRail Security
Siemens Mobility Cyber
Siemens Mobility
Cybersecurity services untuk signalling & infrastruktur kereta.
CommercialRail Security
Hitachi Rail Cyber
Hitachi Rail
Solusi cyber CBTC, ATS & onboard ETCS.
CommercialRail Security
Sliver C2
BishopFox
Cross-platform adversary emulation C2 framework.
Open SourceRed Team
Mythic C2
@its_a_feature_
Multi-agent C2 collaborative framework.
Open SourceRed Team
Havoc Framework
C5pider
Modern post-exploitation command & control.
Open SourceRed Team
NetExec (formerly CrackMapExec)
Pennyw0rth
Swiss-army knife pentest jaringan Windows.
Open SourceRed Team
Responder
lgandx
LLMNR/NBT-NS/MDNS poisoner & relayer.
Open SourceRed Team
PingCastle
PingCastle
Audit Active Directory security posture.
FreemiumRed Team
ADRecon
sense-of-security
Reconnaissance & reporting Active Directory.
Open SourceRed Team
Caldera ICS Plugin
MITRE
Plugin Caldera untuk adversary emulation ICS.
Open SourceRed Team
Claroty SRA
Claroty
Secure Remote Access khusus OT (eks-Secure Remote Access).
CommercialRemote AccessHybrid
Cyolo PRO
Cyolo
Zero-trust access broker untuk OT/IoT.
CommercialRemote Access
Xona Systems
Xona
User-to-asset access controlled untuk CI.
CommercialRemote Access
Apache Guacamole
Apache
Clientless remote desktop gateway (RDP/VNC/SSH).
Open SourceRemote Access
Teleport
Gravitational
Identity-aware access proxy SSH/K8s/DB/Apps.
FreemiumRemote Access
WireGuard
WireGuard
Modern fast VPN protocol.
Open SourceRemote Access
OpenVPN
OpenVPN Inc.
VPN klasik proven enterprise.
FreemiumRemote Access
Tailscale
Tailscale
Mesh VPN berbasis WireGuard.
FreemiumRemote Access
OPSWAT MetaDefender Kiosk
OPSWAT
USB sanitization kiosk multi-AV untuk plant.
CommercialRemovable Media
Honeywell SMX
Honeywell
Secure Media Exchange untuk USB OT.
CommercialRemovable Media
Olea Kiosk
Olea
Hardware kiosk industri untuk inspeksi removable media.
CommercialRemovable Media
USB-Rubber Block / DataDiode USB
Various
USB write-blocker untuk akuisisi data forensik aman.
CommercialRemovable Media
Conpot
MushMush Foundation
ICS honeypot Modbus/S7/IEC-104/BACnet/HTTP.
Open SourceResearch
T-Pot
Deutsche Telekom
Multi-honeypot platform termasuk Conpot.
Open SourceResearch
Cowrie
Cowrie
SSH/Telnet honeypot untuk attacker profiling.
Open SourceResearch
Thinkst Canary
Thinkst
Deception assets fisik & virtual.
CommercialResearch
OTORIO RAM²
OTORIO
OT risk assessment & management automation.
CommercialRisk Management
Radiflow CIARA
Radiflow
Risk assessment automation berbasis ISA/IEC 62443.
CommercialRisk Management
CISA CSET
CISA
Cyber Security Evaluation Tool dengan modul NIST CSF, 62443, NEI.
Open SourceRisk ManagementStandalone
CyberSeer SAFE-T
INL
Structured Assessment For Engineering Toolkit dari Idaho National Lab.
Open SourceRisk Management
OT-CMM
Dragos
OT Cybersecurity Maturity Model assessment.
Open SourceRisk Management
Frenos
Frenos
Autonomous OT risk assessment dengan emulasi attack path.
CommercialRisk ManagementCloud
DeNexus DeRISK
DeNexus
Quantification cyber risk industrial dalam nilai finansial.
CommercialRisk ManagementCloud
CycloneDX
OWASP
SBOM standard & tooling.
Open SourceSBOM
SPDX
Linux Foundation
SBOM standard ISO/IEC 5962.
Open SourceSBOM
Syft
Anchore
Generate SBOM dari container & filesystem.
Open SourceSBOM
Grype
Anchore
Vulnerability scanner SBOM/image.
Open SourceSBOM
Trivy
Aqua Security
All-in-one security scanner container/IaC/SBOM.
Open SourceSBOM
Dependency-Track
OWASP
Continuous component & vulnerability analysis.
Open SourceSBOM
Trivy
Aqua Security
All-in-one scanner: container, IaC, repo, dan SBOM (CycloneDX/SPDX).
Open SourceSBOM
Syft
Anchore
SBOM generator multi-ekosistem (CycloneDX, SPDX, syft JSON).
Open SourceSBOM
Grype
Anchore
Vulnerability scanner berbasis SBOM untuk container & filesystem.
Open SourceSBOM
Dependency-Track
OWASP
Continuous SBOM analysis & supply chain risk monitoring.
Open SourceSBOMOn-Prem
Snyk
Snyk
Developer-first SCA, container, IaC, dan code security.
FreemiumSBOMCloud
Trivy
Aqua
Scanner vulnerability container, IaC, SBOM.
Open SourceSBOM & SCA
Snyk
Snyk
Developer-first security: code, OSS, container, IaC.
CommercialSBOM & SCACloud
Dependency-Track
OWASP
Platform manajemen SBOM & komponen vulnerability tracking.
Open SourceSBOM & SCA
Syft
Anchore
Generator SBOM untuk image & filesystem.
Open SourceSBOM & SCA
Grype
Anchore
Vulnerability scanner berdasarkan SBOM.
Open SourceSBOM & SCA
open62541
open62541 community
OPC UA SDK C99 untuk riset & integration.
Open SourceSDK
pymodbus
pymodbus community
Library Python Modbus client/server.
Open SourceSDK
snap7
Davide Nardella
S7 communication library multi-bahasa.
Open SourceSDK
libiec61850
MZ Automation
IEC 61850 & 60870-5 client/server library.
Open SourceSDK
OPC Foundation UA .NET
OPC Foundation
Reference implementation OPC UA .NET.
Open SourceSDK
HashiCorp Vault
HashiCorp
Secrets, certificates, encryption-as-a-service.
FreemiumSecrets Management
HashiCorp Vault
HashiCorp
Secrets management, dynamic credential, PKI.
Open SourceSecrets ManagementHybrid
Claroty Secure Remote Access
Claroty
OT-native SRA: brokered access tanpa kredensial vendor, recording, approval.
CommercialSecure Remote AccessHybrid
Dispel
Dispel
Moving Target Defense SRA khusus OT.
CommercialSecure Remote AccessCloud
Xage Security
Xage
Zero Trust mesh + identity untuk OT/IT.
CommercialSecure Remote AccessHybrid
Cloudflare Zero Trust
Cloudflare
ZTNA, secure web gateway, dan tunnel.
FreemiumSecure Remote AccessCloud
Zscaler Private Access
Zscaler
ZTNA cloud-native menggantikan VPN legacy.
CommercialSecure Remote AccessCloud
KnowBe4
KnowBe4
Platform security awareness & phishing simulation.
CommercialSecurity Awareness
GoPhish
GoPhish
Framework phishing simulation open source.
Open SourceSecurity Awareness
Splunk Enterprise Security
Splunk / Cisco
SIEM enterprise dengan Add-on Industrial Asset Intelligence.
CommercialSIEMHybrid
Elastic Security
Elastic
SIEM gratis dengan ICS detection rules & integrations.
FreemiumSIEMHybrid
Wazuh
Wazuh
SIEM/XDR open source dengan rule pack OT.
Open SourceSIEMOn-PremIntermediate
Graylog
Graylog
Log management dengan threat detection bawaan.
FreemiumSIEM
IBM QRadar
IBM
SIEM enterprise dengan QRadar OT/ICS content.
CommercialSIEMHybrid
Microsoft Sentinel
Microsoft
Cloud-native SIEM/SOAR di Azure dengan Defender for IoT connector.
CommercialSIEMCloud
Chronicle / Google SecOps
Google
Cloud-native SIEM dengan kapasitas petabyte.
CommercialSIEMCloud
Splunk Enterprise Security
Splunk
SIEM enterprise dengan ES content & ICS apps.
CommercialSIEMHybrid
IBM QRadar
IBM
SIEM dengan UBA, threat intel, dan OT content pack.
CommercialSIEMHybrid
Microsoft Sentinel
Microsoft
Cloud-native SIEM/SOAR terintegrasi Defender for IoT.
CommercialSIEMCloud
Elastic Security
Elastic
SIEM + EDR open source di atas Elastic Stack.
Open SourceSIEMHybrid
Graylog
Graylog
Log management & SIEM open source dengan modul Enterprise.
Open SourceSIEMOn-Prem
Google Chronicle (SecOps)
Google
Cloud SIEM hyper-scale dengan UDM dan threat intel Mandiant.
CommercialSIEMCloud
Exabeam Fusion
Exabeam
SIEM + UEBA dengan timeline berbasis user/entity.
CommercialSIEMCloud
Securonix
Securonix
Cloud SIEM berbasis Snowflake dengan UEBA & SOAR.
CommercialSIEMCloud
Sumo Logic Cloud SIEM
Sumo Logic
Cloud-native SIEM & log analytics.
CommercialSIEMCloud
LogRhythm Axon
LogRhythm
Cloud-native SIEM dengan analytics & case management.
CommercialSIEMCloud
MISP
MISP Project
Threat intelligence sharing platform dengan taxonomies ICS.
Open SourceThreat IntelligenceOn-Prem
OpenCTI
Filigran
Knowledge graph CTI dengan konektor MITRE ATT&CK ICS.
Open SourceThreat IntelligenceIntermediate
Yeti
Yeti Project
Your Everyday Threat Intelligence platform.
Open SourceThreat Intelligence
Recorded Future
Recorded Future
Real-time threat intelligence & risk scoring.
CommercialThreat IntelligenceCloud
Mandiant Advantage
Google / Mandiant
Threat intel & breach analytics dengan modul OT.
CommercialThreat IntelligenceCloud
Dragos WorldView
Dragos
ICS-specific threat intelligence subscription.
CommercialThreat IntelligenceCloud
CISA KEV Catalog
CISA
Known Exploited Vulnerabilities catalog (gratis & dapat di-feed).
Open SourceThreat Intelligence
AlienVault OTX
AT&T / LevelBlue
Open Threat Exchange community pulses.
FreemiumThreat Intelligence
AlienVault OTX
LevelBlue (AT&T)
Open Threat Exchange komunitas dengan pulse & IoC feed.
FreemiumThreat IntelligenceCloud
abuse.ch ThreatFox
abuse.ch
IOC sharing platform: IP/URL/hash terkait malware aktif.
Open SourceThreat Intelligence
abuse.ch URLhaus
abuse.ch
Database URL malware distribusi aktif (gratis).
Open SourceThreat Intelligence
abuse.ch MalwareBazaar
abuse.ch
Sample malware sharing untuk analis & defender.
Open SourceThreat Intelligence
abuse.ch Feodo Tracker
abuse.ch
Tracker C2 banking trojan (Emotet, Dridex, TrickBot).
Open SourceThreat Intelligence
ThreatConnect
ThreatConnect
TIP + SOAR + risk quantification.
CommercialThreat IntelligenceCloud
Anomali ThreatStream
Anomali
TIP enterprise dengan ratusan feed & integrasi SIEM.
CommercialThreat IntelligenceCloud
Recorded Future
Recorded Future
Threat intel platform real-time multi-source.
CommercialThreat Intelligence
Mandiant Advantage
Google Mandiant
Threat intel + attack surface + breach analytics.
CommercialThreat Intelligence
CrowdStrike Falcon Intelligence
CrowdStrike
Threat intel terintegrasi dengan EDR.
CommercialThreat Intelligence
Dragos WorldView
Dragos
ICS-specific threat intelligence (Voltzite, Electrum, dll).
CommercialThreat Intelligence
Anomali ThreatStream
Anomali
TIP enterprise dengan integrasi SIEM/EDR.
CommercialThreat Intelligence
OpenCTI
Filigran
Threat intel platform open source (STIX 2.1).
Open SourceThreat Intelligence
MISP
CIRCL
Malware information sharing platform.
Open SourceThreat Intelligence
AlienVault OTX
LevelBlue
Open Threat Exchange community indicators.
FreemiumThreat Intelligence
abuse.ch (URLhaus, MalwareBazaar)
abuse.ch
Free feed URL, malware sample & SSL blacklist.
Open SourceThreat Intelligence
OT Cyber Range CyberBit
CyberBit
Cyber range simulator dengan skenario OT/SCADA.
CommercialTraining
SANS NetWars ICS
SANS
Hands-on challenge berbasis ICS.
CommercialTraining
DEF CON ICS Village
ICS Village
Komunitas + lab gratis untuk belajar OT.
Open SourceTraining
SANS ICS Curriculum
SANS
Kursus ICS410, ICS456, ICS515, ICS612 & GICSP/GRID cert.
CommercialTraining
ISA Cybersecurity Training
ISA
Sertifikasi ISA/IEC 62443 Cybersecurity Expert.
CommercialTraining
Idaho National Lab CyberStrike
INL
Hands-on training ICS untuk asset owner & responder.
Open SourceTraining
DOE CyberForce Competition
US DOE
Kompetisi cyber-defense skenario energi.
Open SourceTraining
OffSec PEN-200 / OSCP
OffSec
Sertifikasi praktik pentest profesional.
CommercialTraining
INE Cybersecurity
INE
Training & cert e-learning jaringan & cyber.
CommercialTraining
Splunk BOTS
Splunk
Boss of the SOC dataset & competition.
FreemiumTraining
Graphviz
AT&T
DOT-based graph rendering untuk arsitektur.
Open SourceVisualization
Tenable OT Security
Tenable
Vulnerability scanning aktif/pasif untuk OT (eks-Indegy).
CommercialVulnerability ManagementOn-Prem
Rapid7 InsightVM
Rapid7
VM enterprise dengan policy compliance.
CommercialVulnerability ManagementHybrid
Qualys VMDR
Qualys
Cloud-based vulnerability management & detection.
CommercialVulnerability ManagementCloud
OpenVAS / Greenbone
Greenbone
Vulnerability scanner open source dengan feed harian.
Open SourceVulnerability ManagementOn-PremIntermediate
Tenable Nessus
Tenable
Vulnerability scanner deep dengan ICS plugins.
CommercialVulnerability Management
Nessus Professional
Tenable
Scanner vulnerability klasik dengan plugin compliance & OT-safe checks.
CommercialVulnerability ManagementStandalone
Nuclei
ProjectDiscovery
Template-based vulnerability scanner berbasis YAML, sangat cepat.
Open SourceVulnerability ManagementIntermediate
Nikto
Open Source
Web server scanner klasik dengan ribuan signature.
Open SourceVulnerability Management
Kismet
Kismet Project
Wireless detector & sniffer 802.11/BLE/Zigbee.
Open SourceWireless
Aircrack-ng
Aircrack-ng
Suite WPA/WEP audit.
Open SourceWireless
GNU Radio
GNU Radio
SDR framework untuk analisis sinyal radio industri.
Open SourceWirelessAdvanced
HackRF
Great Scott Gadgets
Hardware SDR 1 MHz, 6 GHz.
Open SourceWireless
Kismet
Kismet Wireless
Wireless sniffer/IDS multi-radio (Wi-Fi, Bluetooth, Zigbee).
Open SourceWireless
Aircrack-ng
Aircrack-ng
Suite audit Wi-Fi: capture, crack, injection.
Open SourceWireless
GNU Radio
GNU Radio
SDR framework untuk analisa & PoC RF protokol industrial.
Open SourceWirelessAdvanced
HackRF One
Great Scott Gadgets
SDR half-duplex 1 MHz, 6 GHz untuk research RF.
Open SourceWireless
Ubertooth One
Great Scott Gadgets
Sniffer Bluetooth Classic/BLE.
Open SourceWireless
KillerBee
River Loop Security
Framework audit Zigbee/802.15.4.
Open SourceWireless