Platform

Integrations

Open source first · commercial APIs only where no open option exists · every connector scoped, vaulted and audited

Connected

of 73 connectors

Open source

64% of the catalogue

Paid APIs connected

only where no open option fits

Events ingested · 24 h

412 M

all connectors

Open source is the default. A paid API is connected only where no open option meets the need, for example HSM hardware in production. Every connector has scoped credentials in the vault, a data-flow record and an owner.

CategoryAllSOC & responseEndpointEdge & networkZero trustIdentityData & cryptoAppSecThreat intelCloudAI securityGRCFraud

TryHSMzero trustpost-quantumSIEM

Wazuh

SOC & response

Connected

SIEM and XDR: endpoint telemetry, integrity monitoring, vulnerability detection.

Open sourceGPL-2.0

OpenSearch Security Analytics

SOC & response

Connected

Log search, Sigma detections, correlation and dashboards.

Open sourceApache-2.0

TheHive + Cortex

SOC & response

Connected

Incident case management with automated analysers.

Open sourceAGPL-3.0

Shuffle SOAR

SOC & response

Connected

Automation engine behind Workflow Manager actions.

Open sourceAGPL-3.0

Sigma

SOC & response

Connected

Detection rules in one format, compiled for each backend.

Open sourceDRL 1.1

Velociraptor

Endpoint

Connected

Endpoint forensics and live hunting.

Open sourceAGPL-3.0

osquery + Fleet

Endpoint

Connected

Device posture queries and hourly drift checks.

Open sourceApache-2.0 · MIT

Suricata

Edge & network

Connected

Intrusion detection and prevention with open rules.

Open sourceGPL-2.0

Zeek

Edge & network

Connected

Network metadata for hunting and DNS analytics.

Open sourceBSD-3

CrowdSec

Edge & network

Connected

Behaviour detection and community blocklists at the edge.

Open sourceMIT

Coraza + OWASP CRS

Edge & network

Connected

Web application firewall engine and core rule set.

Open sourceApache-2.0

OPNsense

Edge & network

Available

Firewall for branch offices.

Open sourceBSD-2

OpenZiti

Zero trust

Connected

Zero-trust overlay with application-embedded access.

Open sourceApache-2.0

NetBird

Zero trust

Available

WireGuard mesh with device posture checks.

Open sourceBSD-3

Pomerium

Zero trust

Available

Identity-aware access proxy.

Open sourceApache-2.0

Keycloak

Identity

Connected

Single sign-on, passkeys, adaptive authentication, RO federation.

Open sourceApache-2.0

Teleport Community

Identity

Connected

Just-in-time privileged access with session recording.

Open sourceAGPL-3.0

OpenFGA

Identity

Connected

Fine-grained authorisation for RO scope checks.

Open sourceApache-2.0

Open Policy Agent

Identity

Connected

Policy as code for access and data rules.

Open sourceApache-2.0

SPIFFE / SPIRE

Identity

Available

Identities for workloads and AI agents.

Open sourceApache-2.0

OpenBao

Data & crypto

Connected

Secrets, transit encryption and key wrapping.

Open sourceMPL-2.0

SoftHSM

Data & crypto

Connected

PKCS#11 software HSM for non-production.

Open sourceBSD-2

step-ca

Data & crypto

Connected

Internal certificate authority with ACME.

Open sourceApache-2.0

EJBCA Community

Data & crypto

Available

PKI for RO client certificates.

Open sourceLGPL-2.1

Open Quantum Safe

Data & crypto

Connected

Post-quantum algorithms for hybrid TLS and testing.

Open sourceMIT

Microsoft Presidio

Data & crypto

Connected

PII detection and redaction, with Bangladeshi identifiers added.

Open sourceMIT

Apache Ranger

Data & crypto

Available

Access policies and audit for the analytics lake.

Open sourceApache-2.0

Semgrep Community

AppSec

Connected

Code scanning; target of the requirement compiler.

Open sourceLGPL-2.1

Trivy

AppSec

Connected

Image, dependency, IaC and secret scanning.

Open sourceApache-2.0

Gitleaks

AppSec

Connected

Secret detection in commits.

Open sourceMIT

OWASP ZAP

AppSec

Connected

Dynamic testing of portals and APIs.

Open sourceApache-2.0

Dependency-Track

AppSec

Connected

SBOM inventory and vulnerability tracking.

Open sourceApache-2.0

Sigstore

AppSec

Connected

Signing and verifying builds.

Open sourceApache-2.0

MISP

Threat intel

Connected

Indicator sharing with the national CIRT and partner FIUs.

Open sourceAGPL-3.0

OpenCTI

Threat intel

Connected

Threat knowledge graph in STIX 2.1.

Open sourceApache-2.0

abuse.ch

Threat intel

Connected

URLhaus, ThreatFox and MalwareBazaar indicators.

Free tierCC0

AbuseIPDB

Threat intel

Connected

IP reputation scores.

Freemium APICommercial terms

GreyNoise Community

Threat intel

Connected

Separates mass scanners from targeted traffic.

Free tierCommercial terms

Prowler

Cloud

Connected

Cloud posture checks.

Open sourceApache-2.0

Kubescape

Cloud

Connected

Kubernetes posture and RBAC analysis.

Open sourceApache-2.0

Falco

Cloud

Connected

Runtime detection for containers.

Open sourceApache-2.0

OpenVAS (Greenbone)

Cloud

Connected

Network vulnerability scanning.

Open sourceAGPL-3.0

Nuclei

Cloud

Connected

Template-based exposure checks.

Open sourceMIT

garak

AI security

Connected

LLM vulnerability scanner for red-teaming.

Open sourceApache-2.0

PyRIT

AI security

Connected

Risk-identification toolkit for generative AI.

Open sourceMIT

NeMo Guardrails

AI security

Connected

Programmable input and output rails.

Open sourceApache-2.0

LLM Guard

AI security

Connected

Prompt-injection and PII scanners for model traffic.

Open sourceMIT

CISO Assistant

GRC

Connected

Control catalogues and crosswalks.

Open sourceAGPL-3.0

FingerprintJS (open source)

Fraud

Connected

Browser fingerprinting for device intelligence.

Open sourceMIT

ALTCHA

Fraud

Connected

Proof-of-work challenge without cookies.

Open sourceMIT

Cloudflare

Edge & network

Available

Edge WAF, DDoS, bot management and zero trust.

Paid APICommercial

Open-source path: Coraza + CrowdSec + OpenZiti

Zscaler

Zero trust

Available

Secure web gateway and private access.

Paid APICommercial

Open-source path: OpenZiti + proxy with ICAP

Cato Networks

Edge & network

Available

SASE cloud: SD-WAN with security service edge.

Paid APICommercial

Open-source path: NetBird + OPNsense

Palo Alto Networks

Edge & network

Available

Firewall, SASE, cloud security and SOC platform APIs.

Paid APICommercial

Open-source path: Suricata + OPNsense + Wazuh

Fortinet

Edge & network

Available

Firewalls, SD-WAN and threat intelligence.

Paid APICommercial

Open-source path: OPNsense + Suricata

Check Point

Edge & network

Available

Firewalls, threat prevention, email and cloud security.

Paid APICommercial

Open-source path: Suricata + CAPE sandbox

CrowdStrike

Endpoint

Available

EDR and XDR, identity protection, adversary intelligence.

Paid APICommercial

Open-source path: Wazuh + Velociraptor

ThreatLocker

Endpoint

Available

Allowlisting, application containment, storage control.

Paid APICommercial

Open-source path: OS application control + osquery

Devicie

Endpoint

Available

Automated Intune baselines with drift repair.

Paid APICommercial

Open-source path: Fleet + Ansible

Island

Endpoint

Available

Enterprise browser with last-mile data controls.

Paid APICommercial

Open-source path: Chromium policies + Kasm

Okta

Identity

Available

Workforce identity, adaptive MFA, identity threat protection.

Paid APICommercial

Open-source path: Keycloak

Cyera

Data & crypto

Available

Data security posture: discovery, classification, exposure.

Paid APICommercial

Open-source path: Presidio + Ranger

CipherStash

Data & crypto

Available

Searchable encryption for data in use.

Paid APICommercial

Open-source path: OpenBao transit + keyed-hash and Bloom indexes

Thales

Data & crypto

Available

HSMs, key management and tokenisation.

Paid APICommercial

Open-source path: OpenBao + SoftHSM outside production

Utimaco

Data & crypto

Connected

General-purpose and payment HSMs over PKCS#11 and KMIP.

Paid APICommercial

Hardware HSM: no open-source equivalent for production

Futurex

Data & crypto

Available

Payment HSMs and cloud HSM service.

Paid APICommercial

Hardware HSM: no open-source equivalent for production

Secure Code Warrior

AppSec

Available

Secure-coding training and guardrails.

Paid APICommercial

Open-source path: OWASP material + in-house ratings

Nullify

AppSec

Available

AI security agents that triage and fix findings.

Paid APICommercial

Open-source path: Semgrep + Trivy + in-house agents

Dam Secure

AppSec

Available

Plain-English security requirements enforced on AI-written code.

Paid APICommercial

Open-source path: Semgrep rules from the requirement compiler

Circumvent

Cloud

Available

Multi-agent correlation and remediation for cloud alerts.

Paid APICommercial

Open-source path: correlation agent over OpenSearch

Darwinium

Fraud

Available

Journey risk with device and behaviour intelligence.

Paid APICommercial

Open-source path: open fingerprinting + behaviour model

MyCISO

GRC

Available

Security maturity assessments and roadmaps.

Paid APICommercial

Open-source path: CISO Assistant

Elliptic

Threat intel

Connected

Blockchain analytics, already used by AFC OS.

Paid APICommercial

No open-source equivalent at this depth