Security Operations Tools
Security operations tools for SIEM, SOAR, threat hunting, incident response, and security operations center (SOC) management.
Browse 2,141 security operations tools
FEATURED
USE CASES
AI-driven security ops platform with agents for unified visibility & remediation.
AI-orchestrated XDR platform unifying Zero Trust across IT, OT, and IoT/Edge.
Managed SOC platform with SIEM, EDR, SOAR, CTI, and 24/7 threat detection.
Agentic AI platform for autonomous, end-to-end enterprise security risk reduction.
Federated security analytics mesh for unified detection across SIEMs & data lakes.
AI security analyst tool that guides teams through security investigations.
AI-driven autonomous security investigation agent by Legion Security.
AI SOC agent platform using a context graph to automate alert triage and investigation.
FourCore ATTACK is an adversary emulation platform to manage cyber risk with evidence
24/7 AI-driven managed SOC & XDR services for MSPs and enterprises.
AI-powered malware analysis & threat research platform with chat interface.
Cybersecurity training & simulation service covering ICS, APT, and DevSecOps.
Managed EDR service with 24/7 SOC, threat hunting & endpoint protection.
24/7 managed network detection & response service powered by Bricata/Novawatch.
Managed SIEM service with 24/7 SOC coverage, log mgmt, and IR.
AI-driven decision layer for SOC automation with human oversight controls
AI-powered investigation platform with agentic workflows and GenAI assistants
Deep OSINT investigation tool for threat actor attribution and analysis
Managed SOC service with SIEM, MDR, and MSS capabilities for threat detection
Enterprise XDR platform for unified threat detection and incident response
Cloud-based unified security platform with modular XDR and exposure mgmt
A non-commercial wargame site offering pwn challenges related to system exploitation with different difficulty levels.
HxD is a freeware hex editor and disk editor with advanced features for editing files, memory, and disks.
Security Operations Specializations
2141 tools across 9 specializations · 1142 free, 999 commercial
Cyber Range Training
Cyber Range Training platforms and simulation environments for hands-on cybersecurity training and incident response exercises.
Digital Forensics and Incident Response
Digital Forensics and Incident Response (DFIR) tools for digital forensic analysis, evidence collection, malware analysis, and cyber incident investigation.
Extended Detection and Response
Extended Detection and Response (XDR) platforms that integrate multiple security products for unified threat detection and response across endpoints, networks, and cloud.
Honeypots & Deception
Honeypots and cyber deception solution that simulate vulnerable systems to detect, divert, and analyze attacker activities in real time.
Managed Detection and Response
Managed Detection and Response (MDR) services that provide 24/7 threat monitoring, detection, and response capabilities managed by security experts.
Offensive Security
Offensive security tools for penetration testing, red team exercises, exploit development, and ethical hacking activities.
Security Information and Event Management
SIEM platforms for centralized security log management, correlation, alerting, and compliance reporting.
Security Orchestration Automation and Response
SOAR platforms for automating security workflows, orchestrating incident response, and improving SOC efficiency.
Threat Hunting
Threat hunting tools and platforms for proactive threat detection, advanced persistent threat (APT) discovery, and security investigation.
Security Operations Tools FAQ
Common questions about Security Operations tools, selection guides, pricing, and comparisons.
SIEM (Security Information and Event Management) collects, correlates, and analyzes security logs from across your environment to detect threats. SOAR (Security Orchestration, Automation and Response) automates incident response workflows and playbooks. XDR (Extended Detection and Response) integrates detection across endpoints, network, cloud, and email in a unified platform. Many organizations use SIEM for compliance and broad visibility, XDR for detection, and SOAR for response automation.
