Free Cyber Security Tools a Vrstvy Obrany

Bezplatné nástroje pre kybernetickú bezpečnosť organizované podľa vrstiev Defense-in-Depth modelu.

Úvod

Kybernetická bezpečnosť nemusí byť drahá. Existuje množstvo kvalitných open-source a free nástrojov, ktoré poskytujú enterprise-level ochranu.

Tento článok mapuje free security tools podľa vrstiev bezpečnostného modelu.

Zdroj

Kompletný zoznam a detaily nájdeš na Peerlyst:

The Free Cyber Security Layers

Vrstvy Bezpečnosti (Layers of Security)

1. Data Security

DLP (Data Loss Prevention):

OpenDLP - Open source DLP agent-less, centralized
MyDLP - Data Loss Prevention

Encryption:

VeraCrypt - Disk encryption
GnuPG - Email a file encryption
Cryptomator - Cloud storage encryption

2. Application Security

Web Application Firewall (WAF):

ModSecurity - Open source WAF
NAXSI - Nginx WAF

SAST (Static Analysis):

SonarQube - Code quality a security
Bandit - Python security linter

3. Endpoint Security

Antivirus/EDR:

ClamAV - Open source antivirus
Wazuh - Host-based intrusion detection

Host Firewall:

UFW - Uncomplicated Firewall (Linux)
Windows Firewall (built-in)

4. Network Security

Firewall/IDS:

pfSense - Open source firewall
Suricata - IDS/IPS engine
Snort - Network intrusion detection

VPN:

OpenVPN - VPN riešenie
WireGuard - Modern VPN protocol

5. Identity & Access Management

Authentication:

FreeIPA - Identity management
Keycloak - SSO a identity management
Authelia - 2FA a SSO

Password Management:

Bitwarden - Password manager (self-hosted free)
KeePass - Offline password database

6. Security Monitoring

SIEM:

Wazuh - SIEM a XDR platform
ELK Stack - Log management
Graylog - Log management

Vulnerability Scanning:

OpenVAS - Vulnerability scanner
Nmap - Network discovery a auditing
OWASP ZAP - Web app security scanner

7. Incident Response

Forensics:

Autopsy - Digital forensics platform
Volatility - Memory forensics

Threat Intelligence:

MISP - Threat intelligence platform
TheHive - Incident response platform

Implementácia

Defense in Depth

Použi viacero vrstiev:

Perimeter (firewall, IDS)
Network (segmentation, monitoring)
Endpoint (AV, EDR, hardening)
Application (WAF, secure coding)
Data (encryption, DLP)

Začni Tu

Pre malé organizácie začni s:

✅ pfSense firewall
✅ Wazuh SIEM + EDR
✅ OpenVAS vulnerability scanning
✅ ClamAV antivirus
✅ Bitwarden password manager

Poznámky

⚠️ Free ≠ Easy: Implementácia vyžaduje technické znalosti
⚠️ Support: Community support, nie enterprise SLA
⚠️ Testing: Vždy testuj v lab prostredí prvé