Security on Azure, AWS & GCP Marketplace

Security

2FAuth

A self-hosted two-factor authentication token manager that stores and generates TOTP and HOTP codes through a web interface.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

ACME Solver

A tool that automates ACME protocol challenges to obtain and renew Let's Encrypt SSL/TLS certificates.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Active Directory DC

A Windows Server domain controller that provides centralised identity, authentication, and Group Policy management.

Windows

Published on

Security

addy.io

A self-hosted email alias and forwarding service, formerly AnonAddy, that lets users create anonymous addresses to protect their real inbox.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Authentik

Identity provider and access management server supporting OIDC, SAML, LDAP and MFA, deployed with its PostgreSQL database, Redis cache and web interface.

UbuntuDebian

Published on

Security

Authgear

Open-source authentication server offering passwordless login, social sign-in, MFA and user management through OIDC-compatible APIs and a hosted admin portal.

UbuntuDebian

Published on

Security

Bandit

Static analysis tool that scans Python source for common security issues such as hardcoded credentials, unsafe subprocess calls and weak cryptography.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Beelzebub

Low-code honeypot framework written in Go that emulates SSH, HTTP and TCP services, optionally using an LLM to fake convincing shell responses.

UbuntuDebian

Published on

Security

Boundary

HashiCorp's identity-based access proxy brokering just-in-time sessions to SSH, RDP and database targets without distributing network credentials to end users.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

BunkerWeb

Web application firewall and reverse proxy built on NGINX, applying ModSecurity rules, bot detection, rate limiting and automatic Let's Encrypt certificates.

UbuntuDebian

Published on

Security

CA Injector

Helper controller from the cert-manager project that injects CA certificate bundles into Kubernetes webhook configurations, API services and custom resource definitions.

UbuntuDebian

Published on

Security

Catalyst SOAR

Incident response and security orchestration platform providing alert ticketing, automation playbooks and artifact enrichment for SOC analysts working through investigations.

UbuntuDebian

Published on

Security

Cert-Manager Webhook

Admission webhook component for cert-manager that validates and mutates certificate resources and enables DNS-01 solvers when issuing ACME certificates in Kubernetes.

UbuntuDebian

Published on

Security

CIS Hardened RHEL

RHEL hardened to the CIS Level 1 server profile with SELinux enforcing and an OpenSCAP scan result shipped alongside.

RHELAlmaLinuxRocky

Published on

Security

CIS Hardened Ubuntu

Ubuntu built against the CIS Benchmark Level 1 profile, with auditd, the remediation scripts and a compliance report included.

Ubuntu

Published on

Security

ClamAV

Open-source antivirus engine with the clamd daemon, freshclam signature updater and command-line scanner suited to mail gateways and file servers.

UbuntuDebianRHELAlmaLinuxRockyCentOS

Published on

Security

ClamAV Antivirus

Antivirus scanning appliance built on ClamAV, preconfigured with scheduled filesystem scans, automatic signature updates and quarantine handling for Linux servers.

Ubuntu

Published on

Security

Cloud LDAP

OpenLDAP-based directory server providing centralised user and group authentication over LDAP and LDAPS, with a web administration interface for entry management.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Cosign

Sigstore tool for signing and verifying container images and artifacts, supporting keyless signing, attestations, OCI registries and transparency log lookups.

DebianUbuntuAlpine

Published on

Security

CTFd

Capture-the-flag platform for running security competitions, providing challenge management, scoreboards, team registration and a plugin and theme system.

UbuntuDebian

Published on

Security

Data Encryption & Security Service

Image intended for encrypting data at rest and in transit and managing keys; the specific components depend on the publisher's build.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Dex

OpenID Connect identity provider that federates authentication to LDAP, SAML and upstream OAuth providers, commonly used in front of Kubernetes clusters.

DebianUbuntuAlpine

Published on

Security

DIRB

Command-line web content scanner that brute-forces directories and files on HTTP servers using wordlists, packaged with its default dictionary set.

KaliUbuntuDebian

Published on

Security

Domain Controller

Windows Server image promoted to Active Directory Domain Services, providing Kerberos authentication, LDAP directory services, DNS and Group Policy for a domain.

Windows

Published on

Security

EveBox

EveBox is a web-based viewer for browsing and triaging Suricata EVE JSON alert and event logs from network intrusion detection systems.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Fail2ban

Fail2ban is an intrusion prevention tool that scans log files and automatically bans IP addresses showing signs of malicious activity such as repeated failed logins.

UbuntuDebianRHELAlmaLinuxRockyopenSUSECentOS

Published on

Security

Falco

Falco is a CNCF runtime security tool that detects anomalous behaviour in containers, Kubernetes and hosts using kernel-level system call monitoring.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

ffuf

ffuf is a fast, Go-based command-line web fuzzer used for discovering hidden directories, files and parameters during penetration testing.

UbuntuDebianKali

Published on

Security

FreeRADIUS

Open-source RADIUS server handling authentication, authorization and accounting for network access, with EAP methods and LDAP or SQL back ends.

UbuntuDebianRHELAlmaLinuxRockyCentOS

Published on

Security

FreeRADIUS with daloRADIUS

Pairs the FreeRADIUS AAA server with daloRADIUS, a PHP web console for managing users, hotspots, NAS devices and accounting records in MySQL.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Ghostwriter

Django application used by offensive security teams to track engagements, clients, infrastructure and findings, and to generate consistent penetration test reports.

UbuntuDebian

Published on

Security

Gophish

Phishing simulation framework for security awareness programmes, providing campaign templates, landing pages, SMTP sending profiles and per-recipient click and credential tracking.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Hanko

Authentication server for passwordless login, implementing passkeys and WebAuthn alongside email one-time codes, with drop-in UI components and a Postgres backend.

UbuntuDebian

Published on

Security

Harbor Adapter Trivy

Adapter service connecting the Trivy vulnerability scanner to Harbor's pluggable scan API so container images in a Harbor registry are scanned on push.

UbuntuDebian

Published on

Security

HashiCorp Vault

Vault with a durable storage backend, TLS listeners and auto-unseal against the host cloud's KMS.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Hoop

Access gateway that proxies developer connections to databases, servers and Kubernetes with authentication, approval workflows, session recording and data masking.

UbuntuDebian

Published on

Security

IntelOwl

Threat intelligence platform that enriches files, domains, IP addresses and hashes by fanning requests out to many analysers and connectors behind one API.

UbuntuDebian

Published on

Security

iptables

Linux kernel packet filtering administration utility, preinstalled with rule persistence so the VM can act as a stateful firewall or NAT gateway.

UbuntuDebianRHELAlmaLinuxRockyCentOS

Published on

Security

JWT CLI

Command-line tool for encoding, decoding and verifying JSON Web Tokens, useful for inspecting claims and signing test tokens during development.

DebianUbuntu

Published on

Security

KeePass

Offline password manager storing credentials in an encrypted KDBX database, with key file support, plugins and auto-type for desktop sessions.

WindowsUbuntuDebian

Published on

Security

Keycloak

Keycloak in production mode behind a reverse proxy, with PostgreSQL storage and hostname configuration already correct.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Keycloak Config CLI

Command-line utility that imports realm, client and role definitions into Keycloak from version-controlled JSON or YAML, enabling configuration as code.

UbuntuDebian

Published on

Security

kube-rbac-proxy

Sidecar that authenticates incoming requests and authorises them against Kubernetes RBAC before forwarding to an otherwise unprotected upstream such as a metrics endpoint.

UbuntuDebian

Published on

Security

Kubescape

Scans clusters, manifests and images against NSA, MITRE and CIS controls, reporting misconfigurations and vulnerabilities from CI or the command line.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

libModSecurity

ModSecurity version 3 library with connectors for Nginx and Apache, delivering web application firewall rule processing and OWASP Core Rule Set support.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Libreswan

IPsec VPN implementation for Linux supporting IKEv1 and IKEv2, packaged with the pluto daemon and configuration templates for site-to-site tunnels.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Macie Service

Image geared toward sensitive-data discovery and classification across cloud object storage, including the client tooling used to configure and run scans.

UbuntuDebian

Published on

Security

MobSF

Mobile Security Framework performs static and dynamic analysis of Android and iOS applications, inspecting APK and IPA files through a web interface.

UbuntuDebianKali

Published on

Security

Nessus

Tenable's vulnerability scanner runs credentialed and network assessments against hosts, producing prioritised findings and reports in a local web console.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Nmap

A network scanning and security auditing tool used to discover hosts, open ports and running services on a network.

UbuntuDebianRHELAlmaLinuxRockyopenSUSECentOS

Published on

Security

OAuthlib

A generic Python library implementing the OAuth1 and OAuth2 authorization protocol specifications for building secure authentication flows.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

OpenIKED

An open-source implementation of the IKEv2 key exchange protocol used to establish and manage IPsec VPN tunnels.

UbuntuDebian

Published on

Security

OpenLDAP

An open-source implementation of the Lightweight Directory Access Protocol for centralised authentication and directory services.

UbuntuDebianRHELAlmaLinuxRockyopenSUSECentOS

Published on

Security

OpenVPN

OpenVPN with a working PKI, IP forwarding and firewall rules in place — the parts that usually take an afternoon.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

OSSEC HIDS Agent

Host-based intrusion detection agent forwarding log analysis, file integrity monitoring and rootkit check results to a central OSSEC or Wazuh manager.

UbuntuDebianRHELAlmaLinuxRockyCentOS

Published on

Security

Outline Server

Shadowsocks-based VPN server from Jigsaw's Outline project, administered through generated access keys so users can create censorship-resistant proxy connections.

UbuntuDebian

Published on

Security

Password Pusher

Self-hosted application for sharing passwords and secrets via links that expire after a set number of views or days, with audit logging.

UbuntuDebian

Published on

Security

Pi-hole

Pi-hole as a network-wide DNS sinkhole, with upstream resolvers over DNS-over-HTTPS and the admin UI locked down.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Pinniped CLI

Command-line client for Pinniped, which federates external identity providers into Kubernetes clusters and generates short-lived kubeconfig credentials for cluster login.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Presidio

Microsoft Presidio detects and anonymises personally identifiable information in text and images, combining NLP recognisers with configurable redaction and masking services.

UbuntuDebian

Published on

Security

Pritunl VPN

VPN server with a web administration console managing OpenVPN and WireGuard profiles, users and organisations, storing configuration in MongoDB.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Sealed Secrets

Kubernetes controller and kubeseal CLI that encrypt Secrets into SealedSecret resources safe to commit to Git, decrypted only inside the target cluster.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

SimpleLogin

Email alias service that hides a real mailbox behind disposable addresses, supporting forwarding, replies, custom domains and an OIDC login provider.

UbuntuDebian

Published on

Security

Snort

Network intrusion detection and prevention engine that inspects packets against rule sets, offering logging, alerting and inline blocking modes.

UbuntuDebianRHELAlmaLinuxRockyCentOS

Published on

Security

SoftEther VPN

Multi-protocol VPN server supporting its own SSL-VPN protocol plus OpenVPN, L2TP/IPsec and SSTP, with virtual hubs and a management console.

UbuntuDebianRHELAlmaLinuxRockyWindows

Published on

Security

SOPS

Secrets editor that encrypts values inside YAML, JSON and env files using KMS, age or PGP keys while keeping file structure readable in Git.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

SpiderFoot

OSINT automation tool querying hundreds of data sources to map domains, IP ranges, e-mail addresses and exposed assets, driven from a web UI.

UbuntuDebianKali

Published on

Security

sqlmap

Penetration testing tool automating detection and exploitation of SQL injection flaws, supporting many database backends and out-of-band data retrieval.

KaliUbuntuDebian

Published on

Security

Suricata

Network intrusion detection and prevention engine performing multi-threaded deep packet inspection, with EVE JSON logging and support for Emerging Threats rulesets.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Tetragon

eBPF-based runtime security tool from the Cilium project that records process, file and network events and enforces policy directly in kernel space.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Vaultwarden

Vaultwarden as a lightweight Bitwarden-compatible password server, behind TLS with backups scheduled.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

VPN Server

Preconfigured virtual private network server providing encrypted remote access tunnels, certificate or key based authentication and downloadable client configuration files.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Vuls

Agentless vulnerability scanner for Linux and FreeBSD servers that matches installed packages against CVE databases and reports findings via terminal or web UI.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Wazuh Server

Open-source security platform combining host intrusion detection, log analysis, file integrity monitoring and vulnerability detection with an indexer and dashboard.

UbuntuDebianRHELAlmaLinuxRockyCentOS

Published on

Security

Wfuzz

Python web application fuzzer that brute-forces directories, parameters and credentials by substituting payloads into HTTP requests and filtering the responses.

UbuntuDebianKali

Published on

Security

WireGuard

WireGuard with key generation, peer templates and kernel module verification handled at build time.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

XiPKI

Java-based certificate authority and OCSP responder implementing RFC 5280 PKI, with HSM support and a relational database backend for issued certificates.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

YARA

Pattern-matching engine used by malware researchers to write and run rules against files, memory and processes, with CLI scanner and Python bindings.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

ZAP

OWASP Zed Attack Proxy, an intercepting proxy and dynamic scanner for web application vulnerabilities, with an automation API and headless daemon mode.

UbuntuDebianRHELAlmaLinuxRockyKali

Published on

Security

ZAProxy

Distribution of the OWASP ZAP security testing proxy, including the desktop interface, active and passive scan rules, and the add-on marketplace.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security

Zeek

Network security monitor that turns traffic into structured connection, DNS and HTTP logs, with a scripting language for detection; formerly named Bro.

UbuntuDebianRHELAlmaLinuxRockyopenSUSE

Published on

Security

ZITADEL

Identity and access management server offering OIDC, OAuth2 and SAML single sign-on, multi-tenancy and passwordless login, backed by PostgreSQL.

UbuntuDebianRHELAlmaLinuxRocky

Published on

Security on Azure, AWS & Google Cloud

Every product in Security

Other catalog categories

Can't find the image you need?Can't find the image you need?

Can't find the image you need?