Life & fun · alternatives · 2026
24 alternatives to Cylist – Triages IOCs from multiple sources and delivers a clear threat verdict
Cylist is a threat intelligence triage platform built for SOC analysts. Paste an IP, domain, URL, or file hash, and it queries VirusTotal, AbuseIPDB, ThreatFox, ipinfo.io, and more in parallel, then combines findings into a single threat score. Review details per source, generate
Cylist is a threat intelligence triage platform for SOC analysts. Users submit an IP address, domain, URL, or file hash, and the platform queries multiple sources including VirusTotal, AbuseIPDB, ThreatFox, and… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and Flare. - KatrielMoses/voidaccess
3d ago · github.com · its alternatives →
- 2EY
2019 · secalerts.co · its alternatives →
- 3
CISO▲74Next generation cryptocurrency forensics platform
2021 · ciso.anchainai.com · its alternatives →
- 4
Exploit Alarm▲151Vulnerability intelligence for real-time threat analysis
2024 · exploitalarm.com · its alternatives →
- 5
Hi HN, we are building Tracecat (https://tracecat.com/), an open source automation platform for security alerts. Tracecat automates the tasks a security analyst has to do when responding to a security alert: e.g. contact victims, investigate security logs, report vulnerability. The average security analyst deals with 100 alerts per day. As soon as an alert comes in, you have to investigate and respond. An average alert takes ~30 minutes to analyze (and 100 x 30 min = 50 hours > one whole day) Lots of things get dropped, and this creates vulnerabilities. Many breaches can be…
2024 · github.com · its alternatives →
- 6
Pentest List▲61Discover the best penetration testing tools, security resources, and ethical hacking content. Community-driven platform for cybersecurity professionals.
2024 · pentestlist.com · its alternatives →
- 7
Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs)
Jul 2026 · github.com · its alternatives →
- 8
Free real-time cyber threat intelligence for security teams
Feb 2026 · threatradar24.com · its alternatives →
- 9
Runtime security solution for CI/CD pipelines
2023 · cycode.com · its alternatives →
- 10
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS - matanolabs/matano
2022 · github.com · its alternatives →
- 11
IP address anonymizer module for nginx. Contribute to masonicboom/ipscrub development by creating an account on GitHub.
2018 · github.com · its alternatives →
- 12
CYBRION▲2Unify detections, incidents, SOAR & AI for your SOC
Jul 2026 · privora.cybot-x.com · its alternatives →
- 13
- 14
Cyvers▲63Threat prevention for crypto transactions and wallets
May 2026 · cyvers.ai · its alternatives →
- 15CO
Hey HN! We're launching Cyguru Beta, a free, automated SOC (Security Operations Center) built for everyone. Traditional SOCs are expensive and complex, leaving smaller businesses vulnerable. Cyguru leverages Wazuh & Opensearch for top-tier security with a built-in AI analyst to automate incident analysis, all without needing a dedicated security team. Key Features: - Automated AI Analyst: Goes beyond basic detection, saving you time and money. - Wazuh Powered: Enterprise-grade security, free from expensive licenses. - Simple Setup: Get your SOC up and running in minutes. - Multi-Use:…
2024 · cyguru.io · its alternatives →
- 16
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 17
I built this because I wanted my own directory of public companies running bug bounty programs — where I could see their infrastructure in one place and have a real idea of where to start poking holes. Neobotnet collects intel data from companies on HackerOne and Bugcrowd — subdomains, DNS records, web servers with status codes, indexed/crawled URLs, JS files, and exposed secrets/paths (still building this last part). The data is already there when you need it. No scans to run. Currently tracking 41 companies, 63,878 web servers, and 1.8M+ URLs. Long term I want to expand this to…
Mar 2026 · neobotnet.com · its alternatives →
- 18
Hi everyone, GitHub's CodeQL is a powerful semantic code analysis engine for identifying vulnerabilities across codebases. We've extended CodeQL to support Solidity, the most popular programming language for smart contracts. CodeQL enables you to query code as though it were data, and it's open-source (OSS). You can check it out here: . The product page is available at . CodeQL has its own licensing model, which you can find at https://codeql.github.com/. TL;DR: CodeQL is free for research and open-source projects.
2024 · github.com · its alternatives →
- 19
Your automated threat intelligence analyst. Extract machine readable intelligence from unstructured data.
2021 · stixify.com · its alternatives →
- 20
Ahtapot▲13IOC Analysis | Fast Threat Intel for Security Pros
Oct 2025 · ahtapot.me · its alternatives →
- 21
Hello HN, my name is Varun, and I am the co-founder of StepSecurity. Here is the backstory about Harden-Runner. We thoroughly researched past software supply chain security incidents. The devastating breaches of SolarWinds, Codecov, and others, have one thing in common – they attacked the CI/ CD pipeline or the build server. These incidents made it clear that a purpose-built security agent was needed for CI/ CD. While there are numerous agents available for desktops and servers, such as from CrowdStrike and Lacework, none have been tailored specifically to address the unique risks…
2023 · github.com · its alternatives →
- 22
I built ThreatCluster after getting frustrated with how scattered cybersecurity intelligence is. When a major breach or vulnerability hits, you end up reading the same story across 10+ different security blogs, each with slightly different details, but no way to see the complete timeline or understand the full scope. ThreatCluster automatically groups related cybersecurity articles using semantic clustering, so instead of reading fragments, you get one comprehensive view of each threat. It tracks everything from APT campaigns to vulnerability disclosures to ransomware attacks. You can try it…
Jan 2026 · threatcluster.io · its alternatives →
- 23
DNSWatch - intelligent and affordable malware protection. Protect your business and your data from the growing threat of attacks with DNSWatch.
2015 · strongarm.percipientnetworks.com · its alternatives →
- 24
An open source cybersecurity protocol for syncing decentralized graph data. - amark/gun
2014 · github.com · its alternatives →
Also compare
- VoidAccess – open-source dark web OSINT, from query to a graph alternatives
- Enter your URL and view CVEs affecting your stack over last 6 months alternatives
- CISO alternatives
- Exploit Alarm alternatives
- Tracecat – Open-source security alert automation / SOAR alternative alternatives
- Pentest List alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →