Threat Detection & Response

HashiCorp Vault

Identity-based secrets management and encryption-as-a-service platform

Identity & Access ManagementThreat Detection & Response

Enterprise secrets management tool that secures, stores, and controls access to tokens, passwords, certificates, and encryption keys via UI, CLI, or HTTP API.

Malcolm

Network traffic analysis suite bundling Suricata, Zeek, and Arkime for ICS forensics

Threat Detection & Response

Malcolm combines packet capture, IDS, and protocol analysis into a single Docker Compose stack with prebuilt dashboards for OT network forensics.

Suricata

Open-source network intrusion detection and prevention engine with ICS protocol parsing

Threat Detection & Response

Suricata inspects network traffic at wire speed, matching against rule sets for 20+ protocols including MQTT, Modbus, and DNP3.

Wazuh

Free, open-source unified XDR and SIEM for endpoint and OT security

Threat Detection & Response

Wazuh is a free, open-source security platform that unifies XDR and SIEM capabilities for endpoint protection, threat detection, and compliance monitoring across IT and OT environments.

IDS/IPS, SIEM/XDR, SOAR, OT and IT threat monitoring