CIEM for Open Source

Penetration testing tools and PTaaS for point-in-time manual or assisted pentests that produce a findings report.

Digital forensics tools whose primary job is to collect, preserve, and analyze evidence after the fact.

Threat Intelligence Platforms (TIP) that aggregate and operationalize intel, including IOC management and integration.

Honeypots and cyber deception solutions that simulate vulnerable systems to detect, divert, and analyze attacker activities in real time.

Detection engineering and detection-as-code platforms for authoring, managing, testing, translating, sharing, and deploying detection rules and content (Sigma, YARA, Suricata, SIEM/EDR correlation rules) across the SOC. Includes detection rule repositories, generators, converters, and rule-management tooling.