Security Directories on This Site
15 entriesCurated directories across the security landscape.
01Cybersecurity Solutions & ServicesHub for detection, network, cloud, application and identity security.
02Security Software33 security software directories.
03Cybersecurity ResourcesDefinitions, courses and guidance.
04Cybersecurity Solutions & Services ProvidersSecurity products and services providers.
05Digital Security Tools for DevSecOpsSecurity tools for development pipelines.
06Penetration Testing ToolsPenetration testing tools.
07Firewall ProvidersNetwork firewall providers.
08Zero Trust Security SolutionsZero trust access.
09Wireless SecurityWPA3 and wireless security.
10ICS and OT Security ProvidersIndustrial control system security.
11BiometricsBiometric technologies.
12Information SecurityInformation security overview.
13Post-Quantum Cryptography ProvidersPost-quantum cryptography.
14Quantum CryptographyQuantum cryptography resources.
15EncryptionEncryption resources.
Frameworks & Standards
9 entriesWhat security programmes are measured against.
16NIST Cybersecurity FrameworkUS framework for managing cybersecurity risk.
17ISO/IEC 27001International standard for information security management systems.
18CIS Critical Security ControlsPrioritised set of safeguards to defend against common attacks.
19MITRE ATT&CKKnowledge base of adversary tactics and techniques.
20OWASP Top 10Awareness document for the most critical web application security risks.
21OWASP Cheat Sheet SeriesConcise guidance on application security topics.
22Cloud Controls Matrix (CSA)Cloud Security Alliance controls framework for cloud computing.
23SLSAFramework for supply chain security of software artifacts.
24OpenSSFOpen Source Security Foundation projects and guidance.
Vulnerability & Incident Resources
11 entriesWhere vulnerabilities are catalogued and incidents coordinated.
25CVE ProgramCatalogue of publicly disclosed cybersecurity vulnerabilities.
26National Vulnerability DatabaseNIST database of vulnerabilities with CVSS scores.
27CVSSCommon Vulnerability Scoring System from FIRST.
28CISA Known Exploited VulnerabilitiesCatalogue of vulnerabilities known to be exploited in the wild.
29CISAUS Cybersecurity and Infrastructure Security Agency.
30CERT/CCCarnegie Mellon's CERT Coordination Center.
31CERT-InIndia's Computer Emergency Response Team.
32ENISAEuropean Union Agency for Cybersecurity.
33NCSC (UK)UK National Cyber Security Centre guidance.
34FIRSTForum of Incident Response and Security Teams.
35Have I Been PwnedCheck whether an account appears in known data breaches.
Learning, Certification & Community
4 entriesTraining and professional bodies.
Conferences & Events
4 entriesMajor security events.
40Gartner Security & Risk Management SummitThe original page listed roughly 30 links under alphabetical sub-headings (A–E, F–J, K–O, P–T, U–Z). On review, nearly all of them turned out to be unrelated to IT security — apparent keyword collisions and stray indexing rather than curated resources. Most strikingly, the entire "K, L, M, N, O" group consisted of nine links about (an NCD bond listing, airline reviews, a Mastercard review, a breastfeeding-policy news story), evidently swept in by the "K–O" label rather than any security relevance. The rest of the list included Medicare plan FAQs, a food-security agriculture paper, a real-estate listing, a state bar association newsletter, visa-policy news, university A–Z site indexes, and a portfolio-return calculator — none on-topic for IT security. One entry, a since-lapsed 2020 privacy conference listing, was also removed as stale. Only the item below was both live and genuinely on-topic, so it was kept; everything else was removed rather than carried forward as noise.
41RSA ConferenceMajor annual cybersecurity conference.
42Black HatInformation security conference series.
43DEF CONLong-running hacker convention.
Tool & Vendor Roundups (reading list)
16 entriesArticles ranking security tools and companies; some are dated, so check the publication year.
44Top Cybersecurity Software Tools (SoftwareTestingHelp)Top CyberSecurity Software Tools
45Best Network Security Tools (phoenixNAP)Best Network Security Tools
46Top 10 Best Cyber Security Tools (Medium, 2020)Top 10 Best Cyber Security Tools and Softwares
47Cybersecurity Software (Capterra)Cybersecurity Software — Capterra
48Best SIEM Tools: Vendors & Solutions Ranked (Comparitech)Best SIEM Tools: Vendors & Solutions Ranked
49Best DevSecOps Tools for the Pipeline (Mend)Best DevSecOps Tools for the Pipeline
50What is Data Loss Prevention (DLP)? (Fortra)What is Data Loss Prevention (DLP)?
51Top Cybersecurity Companies (eSecurity Planet)Top Cybersecurity Companies
52The Top 25 Cybersecurity Companies (2019)The Top 25 Cybersecurity Companies
53Top Cloud Security Companies & Service ProvidersTop Cloud Security Companies & Service Providers
54Top Security-as-a-Service Providers (TechnologyAdvice)Top Security-as-a-Service Providers
5510 Most Powerful Cybersecurity Companies (CSO)10 Most Powerful Cybersecurity Companies
56The Best SOAR Security Companies (Solutions Review)The Best SOAR Security Companies
57Best Industrial Control Systems Security Solutions (360Quadrants)Best Industrial Control Systems Security Solutions
58Top 10 Cyber Security Companies in USA (ELE Times)Top 10 Cyber Security Companies in USA
59Top-Selling Network Security ProductsTop-Selling Network Security Products
Vulnerability Databases, Advisories & Standards
4 entriesSources for tracking vulnerabilities and measuring risk.
Related Pages
21 entriesNeighbouring hubs.
64Service ProvidersService provider directories.
65Policy as Code (PaC) SoftwarePolicy engines, Kubernetes admission control and cloud compliance checks.
66Cyberprivacy ResourcesPrivacy tools, regulation, frameworks and privacy-enhancing technologies.
67AI Agent Security SolutionsProducts for securing AI agents.
68AI Security Posture Management (AI-SPM)Tools that discover AI assets and assess AI risk.
69Cloud Security Posture Management (CSPM)Tools that find misconfigurations in cloud environments.
70SIEM SoftwareSecurity information and event management products.
71Data Loss Prevention (DLP) SoftwareProducts that prevent leaks of sensitive data.
72XDR SoftwareExtended detection and response products.
73SOAR SoftwareSecurity orchestration, automation and response products.
74MDR Service ProvidersManaged detection and response providers.
75DFIR Service ProvidersDigital forensics and incident response providers.
76Cybersecurity PlatformsCybersecurity platform vendors.
77IaC Security ToolsScanners and policy tools for infrastructure as code.
78DevSecOps ToolsSecurity tooling for DevOps pipelines.
79Post-Quantum CryptographyCryptography designed to resist quantum attacks.
80Privacy ToolsBrowsers, messaging, password managers, VPN and encryption tools.
81Network Security and MicrosegmentationMicrosegmentation and network security products.
82AI Governance & Runtime SecurityPlatforms for AI governance and runtime protection.
83Enterprise Cybersecurity PlatformsConverged security platforms: SIEM, XDR, SOAR, exposure, cloud and identity, with vendors and evaluation criteria.
84Cybersecurity Courses and CertificationsSecurity+, CISSP, CEH, OSCP, GIAC, cloud security and free labs.
Frequently Asked Questions
What is IT security?
IT security is the practice of protecting information systems, networks, applications and data from unauthorised access, attack and loss, through technology, processes and people.
Which frameworks should I start with?
The NIST Cybersecurity Framework and ISO/IEC 27001 for programme structure, CIS Controls for prioritised safeguards, MITRE ATT&CK for attacker behaviour and the OWASP Top 10 for web applications.
Where do I check known vulnerabilities?
The CVE Program and NIST NVD catalogue vulnerabilities, and the CISA Known Exploited Vulnerabilities catalogue shows which are being actively exploited.
How do this page and the Cybersecurity page differ?
This page covers frameworks, standards, resources and roundups; Cybersecurity and Security Software list tools and vendors by category.
How are vulnerabilities tracked?
CVE identifiers name vulnerabilities, NVD and the GitHub Advisory Database describe them, CVSS scores severity, EPSS estimates exploit likelihood and CISA's KEV catalog lists those exploited in the wild.
What is CWE?
The Common Weakness Enumeration catalogs types of software weaknesses, such as injection or buffer overflow, which individual CVEs are instances of.
Why is the roundup list marked as dated?
Rankings and "top companies" articles age quickly, so each should be checked for its publication year before relying on it.