12 analyzed tools

Security Compliance & Auditing

SOC2 and ISO 27001 automation, vulnerability analysis and continuous pentesting.

Security Compliance & Auditing

CATALOG LEDGER · Showing 1–12 of 12Reset filter

restic

4.7/5.01 verified review
FreeOpen SourceBSD-2-Clause

Modern, secure, and open-source backup program built with cryptography.

  • Single binary architecture without complex server dependencies.
  • Advanced encryption integrated across the entire backup process.
  • Native support for multiple local and cloud storage backends.

36.9kstars on GitHub

View AnalysisVisit Website (opens in a new tab)

Semgrep

4.6/5.01 verified review
FreemiumOpen SourceLGPL-2.1

Application security platform offering SAST, SCA, and AI-assisted secrets detection.

  • Fast semantic analysis engine with highly customizable YAML rules.
  • Broad support for numerous programming languages and modern frameworks.
  • Open-source community edition with unlimited local execution via CLI.

17.4kstars on GitHub

View AnalysisVisit Website (opens in a new tab)

SafeGrd

4.6/5.01 verified review
Paid$15/moMIT

Encrypted immutable backups with automated restore testing.

  • Local age encryption and S3 Object Lock compliance mode.
  • Automated periodic restore testing with signed certificates.
  • Client-side execution ensuring backup data never passes through third-party servers.
View AnalysisVisit Website (opens in a new tab)

Aikido Security

4.6/5.01 verified review
FreemiumOpen SourceLGPL-2.1

Unified security platform for code, cloud infrastructure, and developer workflows.

  • Significant reduction in false positives through contextual analysis.
  • Automated remediation capabilities integrated into development workflows.
  • Unified coverage spanning code, cloud, and supply chain.

3.3kstars on GitHub

View AnalysisVisit Website (opens in a new tab)

Arcjet

4.5/5.01 verified review
Paid$25/moApache-2.0

Runtime security platform for AI agents and web applications.

  • Specialized prompt injection detection using custom models like Himalia 1
  • Granular security policies for agent tool calls and actions
  • Integrated SDKs for local developer environments and production deployments

4stars on GitHub

View AnalysisVisit Website (opens in a new tab)

AegisKernel

4.4/5.01 verified review
Contact SalesOpen SourceMIT

Zero-trust POSIX security runtime for AI agents with deterministic capability boundaries.

  • Deterministic protection intercepting system calls in sub-millisecond times.
  • Direct two-line integration code for LangChain, CrewAI, and AutoGen.
  • Effective mitigation against RCE and environment variable theft attacks.

4stars on GitHub

View AnalysisVisit Website (opens in a new tab)

Tar Minefield

4.3/5.01 verified review
FreeOpen SourceMIT

Test suite and documentation to standardize tar file extraction and prevent parsing discrepancies.

  • Provides comprehensive test cases for tar parsers.
  • Helps identify security vulnerabilities from parsing ambiguities.
  • Promotes behavior convergence across programming languages.

6stars on GitHub

View AnalysisVisit Website (opens in a new tab)

pwned.coffee

4.1/5.01 verified review
Contact SalesOpen SourceMIT

Real-time security incident board with hourly intelligence updates.

  • Hourly updates driven by official threat intelligence sources.
  • Accessible JSON format for security workflow integration.
  • Actionable summaries identifying patching status and exploit severity.

156.4kstars on GitHub

View AnalysisVisit Website (opens in a new tab)

HoneyWired

4.0/5.01 verified review
FreeOpen SourceMIT

QR-based messaging utility with local encryption, decoys, and Shamir splits.

  • Serverless and cloudless architecture ensuring complete anonymity.
  • Fully offline operation with no account or email registrations.
  • Advanced features including message decoys and Shamir secret splits.

53stars on GitHub

View AnalysisVisit Website (opens in a new tab)

Lab Canary

4.0/5.01 verified review
FreeOpen SourceMIT

Public scorecard evaluating AI lab staff contracts and whistleblowing policies.

  • Public transparency backed by verifiable documentary evidence.
  • Clear evaluation standard for contracts and confidentiality clauses.
  • Open access with no paywalls to consult ratings and sources.
View AnalysisVisit Website (opens in a new tab)

PrologWAF

4.0/5.01 verified review
FreemiumOpen SourceMIT

A reverse WAF logic perimeter powered by Prolog and DCG parser.

  • Native Prolog logic engine with high performance on lightweight hardware.
  • Deterministic DCG parser and SIMD acceleration via Rust FFI.
  • Live telemetry output in JSONL format for real-time analysis.

8stars on GitHub

View AnalysisVisit Website (opens in a new tab)

Fengarde

4.0/5.01 verified review
FreeOpen SourceApache-2.0

OCSF-native open-source security pipeline for IT, AI, and OT

  • Modular event-bus architecture with decoupled services
  • OCSF-native for standardized security telemetry
  • Fully open-source under Apache-2.0 license

18stars on GitHub

View AnalysisVisit Website (opens in a new tab)

No self-hosted or open-source platforms found in this page view.

Market Quadrant & Architecture: Security Compliance & Auditing

Vector evaluation comparing audited technical score (Y-Axis) against feature coverage (X-Axis). 100% SSR rendered without client scripts.

Market Quadrant & Architecture: Security Compliance & AuditingVector evaluation comparing audited technical score (Y-Axis) against feature coverage (X-Axis). 100% SSR rendered without client scripts.HIGH PERFORMERSLEADERSNICHECONTENDERSTECHNICAL FEATURE COVERAGEAUDITED TECHNICAL SCORErestic | HIGH PERFORMERS Score: 4.7/5.0 | Features: 2resticSemgrep | LEADERS Score: 4.6/5.0 | Features: 6SemgrepSafeGrd | LEADERS Score: 4.6/5.0 | Features: 5SafeGrdAikido Security | LEADERS Score: 4.6/5.0 | Features: 5Aikido Secur...Arcjet | LEADERS Score: 4.5/5.0 | Features: 4ArcjetAegisKernel | LEADERS Score: 4.4/5.0 | Features: 4AegisKernelTar Minefield | HIGH PERFORMERS Score: 4.3/5.0 | Features: 2Tar Minefieldpwned.coffee | HIGH PERFORMERS Score: 4.1/5.0 | Features: 2pwned.coffeeHoneyWired | HIGH PERFORMERS Score: 4.0/5.0 | Features: 1HoneyWiredLab Canary | HIGH PERFORMERS Score: 4.0/5.0 | Features: 1Lab CanaryPrologWAF | LEADERS Score: 4.0/5.0 | Features: 5PrologWAFFengarde | LEADERS Score: 4.0/5.0 | Features: 4Fengarde
Q1

LEADERS

High score and broad feature coverage

Q2

HIGH PERFORMERS

High score focused on core specialized capabilities

Q3

CONTENDERS

Broad feature set with developing technical scores

Q4

NICHE

Focused solutions for specific lightweight use cases

Market Quadrant & Architecture: Security Compliance & Auditing
ToolAssigned QuadrantTechnical ScoreVerified Features
resticHIGH PERFORMERS4.7/5.02 features
SemgrepLEADERS4.6/5.06 features
SafeGrdLEADERS4.6/5.05 features
Aikido SecurityLEADERS4.6/5.05 features
ArcjetLEADERS4.5/5.04 features
AegisKernelLEADERS4.4/5.04 features
Tar MinefieldHIGH PERFORMERS4.3/5.02 features
pwned.coffeeHIGH PERFORMERS4.1/5.02 features
HoneyWiredHIGH PERFORMERS4.0/5.01 features
Lab CanaryHIGH PERFORMERS4.0/5.01 features
PrologWAFLEADERS4.0/5.05 features
FengardeLEADERS4.0/5.04 features