Dan Griffin's Blog
Comments on security, PKI, smart cards, cryptography, and entrepreneurship.
The Best Security Tools Lists
December 6, 2006
We’ve been working on an interesting project lately, which has allowed us to research some of the more popular network-based security scanning tools on the market. One of the things we’ve encountered during our research is a proliferation of lists of security tools. Turns out that’s exactly what we were looking for!
I feel compelled to provide my own lists. These do not reflect the opinion of any of my clients.
The 2006 List of The Best Security Tools Lists
- Fyodor’s - unlike the other lists, this one appears to be based on feedback from a decent sampling of people who should know what they’re talking about. On the other hand, it’s skewed toward open-source, gray-hat stuff. Still, it gives the low-down on 100 different tools, which is cool.
- Darknet - well commented, although only discusses 15 tools.
- dmoz - just an alphabetical list: boring.
- My own list, which follows …
Before I provide my own Best Security Tools list, some additional comments:
- The following list reflects a considered compromise between the marketing prowess of the entities represented, correlated with a gut check on whether the average Fortune 1000 IT guy would be interested. This, in turn, is balanced against perceived quality, which is partially based on the lists above.
- I’m only considering network-based vulnerability scanners.
The 2006 List of The Best Network-Based Vulnerability Scanning Tools
- Tenable/Nessus
- Metasploit
- Canvas
- Core Impact
- ISS
- Watchfire
- eEye
- Qualys
No Comments »
No comments yet.
RSS feed for comments on this post. TrackBack URL
