A field guide for response teams.
CSIRTS.eu helps people find tools for incident response work and see the evidence behind each listing.
Tool discovery is easy to start and hard to verify. This index puts the response task first, then makes the maker, product model, deployment options, and source links visible in the same record.
The index contains 97 profiles with documented EU development or project stewardship. Each record distinguishes origin, licensing, deployment and material limits.
Use it to narrow a shortlist
Search the catalog, filter by workflow and product attributes, save profiles locally, and compare the recorded facts side by side.
Use the sources, not just the summary
Profiles link to primary project and vendor pages. Each profile shows when its sources were checked and the observations behind the record.
Know what it cannot decide
A listing is not a security assessment, fit recommendation, accreditation, or an official EU designation. Confirm consequential claims with the maker.
Logo sources and credits
Product and publisher marks identify the listed tools. They belong to their respective owners and do not imply endorsement of this index. When no distinct mark is identified, we show a neutral tool icon.
- IntelFusions Publisher mark
- MISP
- IntelMQ
- n6
- Artemis
- Taranis NG
- MWDB Core
- OpenCTI
- TheHive
- Guardsix SIEM Publisher mark
- Bitdefender GravityZone XDR Publisher mark
- Acquire
- ADTimeline
- AIL Framework
- ASGARD Management Center Publisher mark
- CapLoader
- Cerebrate
- Cortex
- CounterCraft The Platform Publisher mark
- CrowdSec Security Engine
- CVE Search
- Cyberwatch Vulnerability Manager Publisher mark
- Cyscale Cloud Platform Publisher mark
- D4
- DCSO Threat Intelligence Engine Publisher mark
- DECODE
- DFIR ORC
- DFIR-IRIS
- DFIR-O365RC
- DFIRTrack
- Dissect
- DRAKVUF Sandbox
- droid
- EclecticIQ Intelligence Center Publisher mark
- ESET Inspect On-Prem Publisher mark
- Exein Runtime Publisher mark
- Flowintel
- G DATA XDR Publisher mark
- Gatewatcher NDR Publisher mark
- GLIMPS Audit Publisher mark
- GLIMPS Malware Expert Publisher mark
- Guardsix NDR Publisher mark
- HarfangLab EDR Publisher mark
- Holm Security VMP Publisher mark
- IntelOwl
- ipfixprobe
- Karton
- Kunai
- Kunai Sandbox
- Loki-RS
- Lookyloo
- Mailgoose
- Mentat
- Mercury
- Miasm
- mquery
- NERD
- NetworkMiner
- ONEKEY Platform
- OpenAEV
- OpenCVE
- OPENVAS SCAN Publisher mark
- Outpost24 CompassDRP Publisher mark
- Outpost24 OutscanNX Publisher mark
- Pandora
- Pentest-Tools.com Publisher mark
- Plum Island
- Sekoia Defend Publisher mark
- Sekoia Intelligence Publisher mark
- Stormshield Endpoint Security Evolution Publisher mark
- Suspicious
- T-Pot
- Tehtris EDR Publisher mark
- Tenzir
- THOR APT Scanner Publisher mark
- Tuency
- Typosquatting Finder
- unblob
- usbsas
- VMRay Platform Publisher mark
- Vulnerability-Lookup
- Warden
- Watcher
- WithSecure Elements Exposure Management Publisher mark
- WithSecure Elements XDR Publisher mark
CSIRTS.eu is independent of ENISA, CERT-EU, the EU CSIRTs Network, and listed vendors. It is not an incident-reporting service.