Best IT Security Software in China - Page 37

All Pass Hub is a zero-knowledge password manager for small teams that puts you in full control of your credentials — with optional self-hosting. How Your Data Stays Private: - Client-side encryption before data ever leaves your device - PBKDF2-SHA256 (600,000 iterations) + AES-128 + TLS 1.2+ - Master password is never transmitted or stored on our servers - Self-hosting fully supported — your infra, your rules Team & Access Features: - RBAC at the individual credential level - Shared vaults, group-based sharing & guest accounts - One-time secure share links with automatic expiry - Real-time audit logs for full team visibility - MFA support + browser extension (Chrome & Firefox) - CSV import from any existing password manager Plans: - Free: Unlimited passwords, unlimited devices, autofill — no expiry - Premium: $2/user/month — RBAC, audit trail, supervisor role, advanced sharing - 30-day free trial, no credit card needed

SecureCodingHub serves as an engaging platform for secure coding training tailored for AppSec teams and engineering departments. It provides a unique experience through its Code Review Challenges, which consist of a two-phase process to identify and remediate over 185 types of vulnerabilities. Additionally, it features Guided Attack Scenarios, which include 67 detailed walkthroughs that simulate entire attack sequences. The challenges are crafted using production-like code across a diverse range of 15 programming languages and frameworks, such as JavaScript, TypeScript, Python, Java, C#, Go, React, Vue, Angular, Swift, and Kotlin. The platform ensures comprehensive coverage by addressing the OWASP Top 10 vulnerabilities across Web, API, Mobile, and Client-Side domains. For organizations needing compliance, it automatically generates evidence mapped to standards like PCI DSS 4.0.1, ISO 27001:2022, and the EU CRA. On the enterprise level, SecureCodingHub offers advanced features including SAML 2.0/OIDC single sign-on, SCIM 2.0, LMS integration compatible with SCORM 1.2/2004, a multi-tenant structure, customizable assignment workflows, and an immutable audit log designed for QSA, SOC 2, and ISO audits. This combination of features ensures that organizations not only enhance their secure coding practices but also streamline their compliance efforts effectively.

PhishEye serves as a robust digital risk protection platform designed to assist teams in security, fraud prevention, and brand management in identifying and eliminating phishing websites, lookalike domains, impersonation issues, and brand misuse. By integrating AI-driven phishing detection with comprehensive monitoring for typosquatting and domain threats across various channels including web, advertisements, social media, and search engines, it transforms alerts into prioritized action items that are backed by solid evidence and monitored takedown results from registrars, hosting services, and platforms. Developed by professionals with firsthand experience of what abuse desks truly accept, PhishEye emphasizes the use of stable identifiers and compelling narratives of harm, ensuring that follow-up actions remain effective even as the underlying infrastructure changes. The platform is fundamentally built on a software-first principle, while also offering optional managed support to address situations where additional capacity or coverage is needed, thus enhancing its versatility and effectiveness in combating digital risks. In this way, PhishEye not only provides a solution for immediate threats but also fosters ongoing resilience against future risks.

Gcore Security is a comprehensive cloud solution that offers multi-tiered DDoS defense covering L3, L4, and L7, along with a robust WAAP to protect web applications and APIs. Its infrastructure spans the globe, allowing for real-time attack detection and mitigation, which helps maintain consistent application performance even under heavy traffic conditions. The platform is designed for quick onboarding with user-friendly configuration options tailored for small and medium-sized businesses, while larger enterprises gain access to an API for management, a Terraform provider, detailed custom rules, integrations with SIEM/SOC, and complete log export capabilities. Furthermore, it is specifically optimized for environments that experience high traffic and require low latency, such as gaming and online entertainment, ensuring businesses of all sizes can rely on dependable protection and seamless user experiences. Overall, Gcore Security stands out as a versatile solution for various digital demands.

TridentStack Control is an endpoint management platform that combines patching, vulnerability detection, compliance automation, and policy management in a single product. It manages operating system updates across Windows, macOS, and Linux, along with third-party application updates. A lightweight agent reports software inventory, OS update history, package manager state, listening ports, firewall status, and compliance data. IT teams roll out updates in controlled phases using deployment rings, approval workflows, applicability filtering, supersedence tracking, and pre-staging. TridentStack Control continuously matches software inventory against an enriched CVE catalog, prioritizes findings by CVSS severity, EPSS exploit prediction, and CISA KEV status, and presents them in fleet-wide vulnerability dashboards, with exception management for accepted risks. Its network exposure monitoring shows listening ports, exposed services, process details, firewall correlation, risk levels, and port history. Policy management works without Active Directory, so administrators can deploy configuration settings directly through the agent. Compliance features score endpoints against DISA STIGs on Windows, macOS, Ubuntu 20.04, 22.04 and 24.04 LTS, and RHEL 8 and 9, and against Microsoft Security Baselines on Windows, with STIG results mapped to NIST 800-53, plus score trends and audit trails. The first 200 endpoints are free forever with every feature included, and additional endpoints are $5 per month each.

DNS Assistant is a comprehensive DNS Posture Management platform that offers organizations ongoing insights into the security and reliability of their domain infrastructure. Unlike conventional monitoring that focuses merely on uptime and record changes, DNS Assistant conducts a thorough assessment of your DNS's overall security posture, identifying vulnerabilities such as dangling subdomains and potential takeover risks across over 22 cloud service providers, as well as evaluating TLS configurations, and the health of email authentication protocols like SPF, DKIM, and DMARC. It also performs DNSSEC chain-of-trust validation and monitors WHOIS changes to ensure comprehensive protection. Designed with the needs of security teams, infrastructure engineers, and managed service providers in mind, DNS Assistant provides immediate change detection and offers multi-channel alerts through platforms like email, Slack, Teams, SMS, and webhooks. Its multi-tenant framework accommodates organizations of varying sizes, supporting teams with granular role-based access, which allows both a single entity safeguarding its own domains and an agency overseeing numerous client domains to operate efficiently from a single interface. Additionally, the platform includes a complete REST API, facilitating seamless integration and customization for users.

AXYVOR is an innovative cybersecurity platform designed from the ground up to integrate exposure management, identity threat detection, adversary intelligence, attack path analysis, and risk reporting for executives into a comprehensive AI-driven system. Tailored for mid-market and enterprise security teams, AXYVOR continuously analyzes and maps attack vectors across various environments, including cloud, identity, and endpoints, while identifying and prioritizing vulnerabilities that pose significant business risks. The platform also provides an AI-generated Board Risk Index, which effectively translates complex technical data into understandable financial and operational implications for leadership and board members. AXYVOR seamlessly connects with top-tier tools such as CrowdStrike, SentinelOne, Okta, Splunk, and Microsoft Sentinel, allowing for rapid deployment within days rather than the lengthy months typical of traditional solutions, all while being more cost-effective than legacy systems. In doing so, AXYVOR empowers organizations to enhance their cybersecurity posture without the burden of excessive costs and lengthy integration processes.

ZTXGate represents a cutting-edge Zero Trust Network Access (ZTNA) solution that merges the intuitive experience of a contemporary SaaS control plane with the benefits of on-premises software, including deployment flexibility, data sovereignty, and isolated blast-radius capabilities. Each client utilizes a unique single-tenant instance to ensure optimal security and performance. The platform facilitates identity federation through OIDC SSO for the administrative portal, featuring a per-provider registry, PKCE implementation, group-to-role mapping, and a local break-glass conversion. It also supports SCIM 2.0 inbound provisioning via a dedicated hardened listener equipped with per-token bearer authentication, CIDR allowlisting, and rate limitations. The system enables cross-protocol identifier linkage to ensure that an OIDC login and a SCIM-provisioned user are recognized as a single identity. Additionally, ZTXGate offers a pluggable biometric step-up solution that allows for push challenges through its own authenticator (ZTXBAS), as well as Okta Verify Push and Duo Push, all governed by a unified policy field. Resource-specific policies determine the backend in use, while API credentials are securely encrypted at rest. Furthermore, the platform incorporates MDM and EDR device posture as a crucial element of its policy framework, supporting integrations with Microsoft Intune, Defender, and SentinelOne Singularity to enhance overall security posture and compliance.

Hybrid AD Manager eliminates the need for RSAT snap-ins by offering a single web console that can be installed on a Windows server and accessed through any web browser. The interface features dedicated tabs for Active Directory Users and Computers, Sites and Services, Domains and Trusts, DNS, and Group Policy Management, all designed to mimic familiar Microsoft consoles, thereby minimizing the need for retraining. Additionally, your Entra ID tenant is integrated into this unified view, clearly indicating whether each account is synced, cloud-only, or exclusively on-premises, and allowing synced users to access the same comprehensive property sheet from either environment. All thirteen property tabs are available, complete with a full Security tab and an Advanced ACL editor for fine-tuning permissions. Administrators log in using their existing AD accounts, ensuring that all modifications adhere to their current permissions and are accurately recorded in the audit log. The console is secured with HTTPS using your own certificate, communicates via LDAPS with your domain controllers, and does not transmit any data externally—no agents, no databases, and no telemetry involved. A free edition is available, while Standard licenses start at $365 annually. Installation requires just one MSI on Windows Server 2019 or newer, making it a straightforward solution for organizations looking to streamline their Active Directory management. This innovative approach not only enhances security but also boosts administrative efficiency across the board.

Zunoy Sandbox serves as a platform for developers to conduct tests on various communication methods such as email, SMS, webhooks, OTP, and TOTP/MFA flows, all while ensuring that no test data reaches actual users or production environments. By integrating their current SMTP clients, SMS APIs, or webhook endpoints into the Sandbox, developers can monitor the resulting events within a secure testing framework. When it comes to email testing, the Sandbox offers dedicated inboxes that allow teams to analyze HTML content, email headers, attachments, links, and details related to delivery. For SMS testing, it facilitates OTP and transactional message flows via REST APIs, configurable sender IDs, and customizable templates. Additionally, the webhook testing capability provides distinct endpoints for capturing and analyzing JSON payloads in real time, with features to replay events and categorize them by project. Furthermore, the TOTP/MFA functionality can produce time-sensitive authentication codes derived from secrets or QR codes, enabling developers to test login and verification processes without relying on a physical authenticator, thus enhancing the testing experience significantly.

Secorvia offers a comprehensive cloud and Kubernetes security posture management solution tailored for platforms like AWS, Microsoft Azure, Google Cloud, and DigitalOcean. Unlike typical tools that prioritize issues strictly by severity, often overlooking critical vulnerabilities that are less accessible, Secorvia provides a more nuanced approach by integrating assets, vulnerabilities, identities, and network reachability into a dynamic security graph. This enables it to identify how various findings are interlinked and assess their true risk based on exploitability and potential impact rather than just severity. The platform encompasses a wide array of functionalities including posture management, vulnerability intelligence, infrastructure as code scanning, container and Kubernetes security, attack path analysis, CIEM for managing over-privileged identities, runtime security for Linux environments, and compliance assessments against standards such as SOC 2, ISO 27001, CIS, and NIST CSF. Importantly, Secorvia operates in a read-only mode, meaning it carefully observes and ranks vulnerabilities without altering anything in your cloud account. Additionally, the platform offers a free plan that remains free indefinitely, requiring no credit card for sign-up, making it accessible for organizations of all sizes. This commitment to security and ease of use sets Secorvia apart as a valuable tool in the cloud security landscape.

Sitelemetry serves as a comprehensive hosted platform for auditing websites, catering to developers, web agencies, founders, and teams that manage business sites. It evaluates various aspects including security, technical SEO, AI-search optimization, accessibility, performance metrics, and tag integrations, delivering insights through evidence-backed scores, prioritized issues, and detailed remediation recommendations. Users can access audit results via a web dashboard or link compatible AI clients through a secure Model Context Protocol (MCP) server for requesting checks and generating prompts for fixes. While Google Search Console offers read-only access to search data, performance evaluations utilize Google PageSpeed Insights to gauge efficiency. The platform offers paid subscription options that encompass all six audit domains, along with scheduled monitoring and enhanced usage capacity, whereas the free plan restricts users to security assessments only. It’s important to note that Sitelemetry identifies and reports issues without automatically making changes to the websites it audits. This ensures that users maintain control over their site modifications while benefiting from the platform's insights.

MudraID is a cloud-based platform designed for identity and trust management, specifically tailored for teams engaged in developing AI agents, APIs, and services that leverage agent capabilities. The platform provides agents with unique cryptographic identities, facilitates scoped and temporary delegation, and assesses requests based on policy, trust, and revocation status at the moment of action. Teams have the ability to issue, rotate, suspend, and revoke credentials for agents, enforce permissions on a per-action basis, and track delegation pathways efficiently. It is compatible with OAuth 2.0, OIDC, JWT/JWKS, MCP authorization, and signed A2A Agent Cards, ensuring a robust framework for secure interactions. For developers, it offers a Python agent SDK and middleware options for FastAPI/Starlette, while a hash-chained audit trail meticulously logs decisions and associated events. MudraID serves as an essential tool for product, platform, security, and IAM teams that require effective management of interactions between agents and services, thereby enhancing overall operational integrity and security. This comprehensive approach ensures that all interactions remain traceable and governed under established policies.

SendGuard for Outlook is a security add-in designed for organizations utilizing Microsoft Outlook and Microsoft 365, aimed at enhancing email safety. It significantly minimizes the risk of sending messages to unintended recipients and accidental information leaks by encouraging senders to double-check their chosen recipients and attachments, as well as flagging external email addresses and issuing warnings before a "Reply All" action is taken. Administrators have the flexibility to establish customizable rules for outgoing emails, which can include checks for sensitive data and various actions that can prompt, block, or delay the sending of messages; those opting for higher-tier plans can also benefit from scanning the content of attachments. Additionally, SendGuard provides features such as message delay and cancellation, branding options, and thorough logging of user activities. The add-in is compatible with Windows desktop and Microsoft 365 editions, facilitating centralized deployment and management. Notably, the Microsoft 365 add-in can be accessed through New Outlook, Outlook on the web, and Outlook for Mac, with mobile support for Outlook also included. This tool is especially beneficial for teams in sectors like professional services, healthcare, finance, and the public sector, who regularly handle sensitive email communications. Overall, SendGuard enhances organizational email security while streamlining communication practices.

CloudNine is an innovative cloud-based platform designed to automate eDiscovery processes, enhancing the efficiency of litigation discovery, audits, and investigations by enabling users to manage document reviews, uploads, and creation from a centralized interface. Its extensive array of professional services encompasses discovery consulting, computer forensics, managed review, online hosting, information governance, litigation support, and project management, which together significantly lower the costs associated with eDiscovery processing. By utilizing CloudNine’s self-service eDiscovery software, law firms and corporations can optimize their workflows, ultimately saving both time and financial resources through the consolidation of their data collection, processing, and review needs. Additionally, this platform empowers users with greater control over their eDiscovery tasks, leading to more effective case management and strategic decision-making.

Riskified serves as a sophisticated solution for preventing fraud in the eCommerce sector, aiming to enhance sales while minimizing operational expenses. This dependable end-to-end software for card-not-present (CNP) transactions assists companies in safeguarding against online fraud by analyzing, validating, and guaranteeing their orders. Each approval through Riskified comes with a chargeback guarantee, providing protection in instances of fraud. Furthermore, the platform’s rapid and seamless review mechanism empowers retailers to increase their sales and confidently enter new markets, allowing for greater business growth and opportunity. Through these features, Riskified not only protects businesses but also fosters a more secure online shopping environment.

Inlab Networks has developed BalanceNG, a reliable multithreading software load-balancer. Available for Linux, Solaris, and Mac OS X operating systems, BalanceNG is easy to integrate into data center networks. It offers top quality packet processing performance and makes this the ideal solution for hosting companies, network operators, product designers, and telco product developers. Inlab Networks' BalanceNG comes with a highly-specialized IP stack for IPv6/IPv4 and an independent active/passive Cluster environment that is based upon VRRP and the "bngsync” session table synchronization protocol.

Netwrix Auditor is a comprehensive IT audit software platform that helps organizations monitor and analyze activity across their IT infrastructure. It provides detailed visibility into who is accessing systems, what changes are being made, and how data is being used. The platform supports a wide range of systems, including Active Directory, Microsoft 365, file servers, databases, and network devices. It delivers near real-time alerts to help security teams detect suspicious behavior and respond quickly to potential threats. Netwrix Auditor also identifies risks such as excessive permissions and unusual access patterns that could lead to security incidents. The solution includes prebuilt compliance reports for standards like HIPAA, PCI DSS, and SOX, making it easier to meet regulatory requirements. It automates routine auditing tasks, reducing the time and effort required for reporting and analysis. The platform offers powerful search capabilities that allow teams to investigate incidents efficiently. It centralizes audit data from multiple sources into a single interface for better visibility. Netwrix Auditor integrates with existing IT systems and security tools to enhance overall monitoring capabilities. By combining auditing, reporting, and threat detection, it helps organizations strengthen their security posture and maintain compliance.

Scalyr is the log management platform and observability platform for new stack. Scalyr was designed to deal with the complexity and scale of modern cloud architectures. It allows engineers to quickly solve problems and concentrate on what they love, coding. Scalyr has made logs a benefit with 96% of searches being completed in less than one second and thousands upon thousands of active users. Scalyr's rapidly growing customer base includes NBCUniversal and Business Insider as well as Valentino, Giphy and Zalando. The company is the best-rated in its category in G2 Crowd and is a Gartner 2018 cool vendor. It was also named a 2018 Forbes Cloud 100 Rising Star. Visit us at www.scalyr.com or follow us on Twitter (@scalyr).

Arbutus Audit Analytics assists audit, risk, and compliance professionals in navigating the complex challenges they encounter. This solution empowers users to conduct thorough data analyses, fulfill their audit requirements, enhance collaboration within teams, address data-related obstacles, and reduce dependence on IT resources. There are two versions of Arbutus Audit Analytics available: the Centralized/Enterprise edition and the Desktop/Team edition, each tailored to meet specific organizational needs. With these offerings, professionals can streamline their workflows and improve overall efficiency in their auditing processes.

Jamf Now, previously Bushel, offers an on-demand mobile device management solution that is specifically designed for iPhones, iPads and Macs in the office. This device management platform is fast, easy to use, and affordable. It allows Apple users to easily set up, manage, protect, and secure their workplace. Jamf Now allows you to easily set up company email accounts, protect sensitive information, and automatically install apps for work.

LogicMonitor is the leading SaaS-based, fully-automated observability platform for enterprise IT and managed service providers. Cloud-first and hybrid ready. LogicMonitor helps enterprises and managed service providers gain IT insights through comprehensive visibility into networks, cloud, applications, servers, log data and more within one unified platform. Drive collaboration and efficiency across IT and DevOps teams, in a fully secure, intelligently automated platform. By providing end-to-end observability for enterprise businesses, LogicMonitor connects coders to consumers, customer experience to the cloud, infrastructure to applications and business insights into instant actions. Maximize uptime, optimize end-user experience, predict what comes next, and keep your business fearlessly moving forward.

Loupe helps you identify issues in your application. Loupe is a logging and application monitoring tool for Java and.NET. It helps software teams find and fix errors quickly. Loupe also provides visibility into key metrics and events for all applications and allows users to dig deeper into specific sessions, events, users, or machines. Loupe can be deployed either on-premises or as a hosted cloud solution.

AuthStack is a robust, enterprise-level Single Sign-On (SSO) and Identity Access Management (IAM) solution that can be hosted anywhere. It efficiently manages user logins not only for your own websites and applications but also for third-party platforms, simplifying the process by allowing users to authenticate just once with a single password and profile. Instead of juggling numerous logins for different services, AuthStack streamlines user identity management into a singular experience. For those whose websites or applications support SAML, integrating with AuthStack is straightforward and requires no custom development. In cases where SAML support is absent, a complimentary Connector Framework is available, and assistance with integration can be provided if needed. Additionally, transitioning to AuthStack does not necessitate migrating your current user databases, as the Connector Framework can seamlessly interface with various data sources, including LDAP, MySQL, SOAP, and REST APIs, to verify credentials against existing user records. This means you can enhance security and user convenience without overhauling your existing systems.

Evaluate your web application, REST API, and mobile application effortlessly with just three straightforward steps. Start by inputting your API endpoints or URLs for testing. Next, set up your load testing parameters, including the number of simultaneous users, testing duration, and bandwidth simulation requirements. Select from various global locations to initiate your load tests, and we will handle the rest! Once your tests are complete, your results will be readily available for review. You can analyze your data while the tests are ongoing, check JMeter logs, or save your findings as a PDF at any point. There's no need for installation; you can craft scenarios directly in your browser, all operated from the cloud. With a pay-as-you-go model, you can simulate hundreds of thousands of concurrent users from diverse locations and apply bandwidth simulations. As your tests progress, examine the results to identify any performance bottlenecks. Detailed reports can be downloaded anytime you need them. There’s no need for migration from JMeter, as you can import any JMX project into Frugal Testing and export it whenever you choose. Consistently enhance both your product and business operations with the insights gained from Frugal Testing, ensuring you are always moving towards success.