Endpoint protection, email security, awareness training, passwords and identity, managed detection, scanning, backup and DNS filtering. Each tool is described in our own words, with a link to its official site.
What a featured listing costs · from $199 a month
CrowdStrike Falcon is an endpoint security platform managed from a cloud console. One agent on each Windows, Mac or Linux machine handles malware prevention, records process and network activity for…
Sophos Intercept X is the endpoint protection product from Sophos, managed through the Sophos Central cloud console. It uses a deep learning model to judge files before they run, and…
Microsoft Defender for Business is the endpoint security product Microsoft built for small and mid-size companies. It covers next-generation antivirus, attack surface reduction rules, EDR and automated investigation, which looks…
Abnormal AI, formerly Abnormal Security, is an email security platform that connects to Microsoft 365 or Google Workspace through their APIs instead of sitting in the mail flow. Because it…
KnowBe4 runs security awareness training and simulated phishing campaigns. An admin picks lessons from its library of videos, short modules and games, assigns them to groups of staff, and sends…
1Password is a password manager for individuals, families and businesses. In a company account each person gets a private vault, and teams share passwords, keys and other secrets through shared…
Read the write-upTools come from submissions and from our own reading. A tool must be live and on sale today, and it must be defensive.
We open the official website and docs and confirm the tool does what our listing will say.
Each description is a short account, in our own words, of what the tool does and who it suits.
If we can't confirm a detail, such as Microsoft 365 support or a managed option, the listing says "not enough info".
A tool is listed once we have confirmed that its official site is live and that it does what our description says. Each tool sits in the one category that matches its main job, even when it covers several. We list defensive tools only: nothing built for breaking into systems you don't own. We don't publish scores, rankings or prices, because a score would be our opinion dressed up as a fact, and prices in security change often and depend on seats and add-ons.
Attributes such as "works with Microsoft 365" or "managed option with human analysts" are marked yes or no only when the maker's own site or docs say so. Everything else shows as not enough info. Tools we couldn't confirm stay off the site until we can.
Makers can submit or claim a listing. A person checks every request. Published by Zwings LLC.
Start with how small businesses actually get hurt. Most incidents begin with a stolen password, a fake invoice or a phishing link, and the worst ones end with ransomware on every machine and the backups encrypted too. That points to a short list of controls that matter most: multi-factor login on email and remote access, protection on every laptop and server, filtering for mail, and backups that an attacker can't reach.
Next, decide who will watch the alerts. This question matters more than any feature. A good EDR tool raises alerts, and someone has to read them, often at night or on a weekend. If you have no security staff, look at tools with a managed option, where the vendor's analysts review detections and act on them, or work with a managed service provider that runs the tools for you. A powerful product nobody looks at protects less than a simpler one that someone checks every day.
Count what you already own. Microsoft 365 Business Premium includes Defender for Business, Defender for Office 365 Plan 1, Entra ID P1 and Intune. Google Workspace has its own mail filtering and login controls. Turn on and tune what you are already paying for before you add another agent or console, then buy to fill the gaps.
Be specific about the AI. In this field it usually means one of a few things: models that judge whether a file or process is malicious, models that learn normal email or login behavior and flag what breaks the pattern, and assistants that summarize alerts or answer questions in plain language. Ask the vendor which of these applies, what data the model sees, whether your data trains it, and how often it flags something harmless.
Check how the pieces fit together. Each agent you install uses memory and needs updates, and two antivirus products on one machine can fight each other. Ask whether a new tool replaces something you run today or sits beside it, and whether it can send alerts to the place your team or MSP already looks.
Test your backups before you need them. Keep at least one copy offline or immutable, so it cannot be deleted from a stolen admin account, and restore a full machine on a schedule. Backup is the tool that decides whether a ransomware attack is a bad week or the end of the business.
Finally, plan for people. Awareness training and a password manager only work if staff use them, so pick tools that are easy for non-technical people, explain why they are being added, and make it simple and safe to report a mistake.
No. We describe what each tool does and who it suits, in our own words, and link to the official site. There are no scores or rankings. Paid placements are marked Sponsored and do not change our descriptions.
A defensive security product that uses machine learning or language models somewhere in its job, such as judging files, spotting unusual email or logins, or summarizing alerts. We also list a few core tools with little AI, such as backup software, because a small business security setup is incomplete without them.
It is a good start. Microsoft Defender Antivirus on Windows blocks a lot of common malware. What it lacks on its own is central management, EDR history to investigate an incident, and someone watching alerts. Those gaps are what business endpoint and managed detection tools fill.
Prices for security tools depend on seats, devices, add-ons and whether you buy direct or through an MSP, and they change often. An out-of-date price is worse than none, so each tool page links to the official site where current pricing lives.
No. This directory covers defensive tools only. Vulnerability scanners are included because companies use them to check their own systems, and they should only be pointed at networks you own or have written permission to test.
Use the submission form, or email us. We check every request by hand, write the description ourselves, and correct listings when a tool changes, gets acquired or shuts down.
It means we could not confirm that detail, such as Google Workspace support or an MSP console, from the tool's own site or docs. We leave it marked that way instead of guessing, and update it when the maker confirms.