Hispion Hispion
New The Hispion Blog is live — practical security guides

Your first step to stronger security

Hispion brings together a directory of 2,900+ security tools, daily cybersecurity news, hands-on guides, an interactive security knowledge map and free website security audits — all in one place.

Get a free security audit Explore 2,900+ tools
What Hispion offers

Everything you need to learn, find tools and stay secure

Free resources for students, IT teams, developers and businesses — built and maintained by the Hispion team in Erbil.

Cybersecurity Tools Directory

2,900+ hand-picked tools across 24 categories — from penetration testing and OSINT to SIEM and cloud security — with an AI Tool Finder, votes and top picks.

Browse the directory

Free Website Security Audit

Expert review of your website's security — vulnerabilities, misconfigurations and clear fixes. Your first audit is free.

Request an audit

Daily Cybersecurity News

Breaches, ransomware, zero-days and threat intelligence — explained clearly with practical advice. 12 new stories this week.

Read the news

Blog & Guides

Step-by-step tutorials on blue team, ethical hacking, cloud, Linux, networking, DFIR, privacy and careers.

  • Defending Against Agentic AI Attacks: Detection and Deception Strategies
  • Why Email Allow-Lists Fail: Auditing Overrides and Defending Against Domain Spoofing
  • A Practical Guide to Setting Up Multi-Factor Authentication for Small Businesses
Start learning

CyberMap

An interactive map of 821 cybersecurity terms and how they connect — a visual glossary for learners.

Explore the map

API Analyzer Coming soon

Scan API endpoints for injection, broken authentication, CORS and rate-limit problems, with a clear remediation report.

Learn more
Live from the directory

Tools the community rates highest

Top picks
0l4bs Cross-site scripting labsApplication SecurityCross-site scripting labs for web application security enthusiastsFree0day.today Exploit DatabaseVulnerability ManagementA comprehensive database of exploits and vulnerabilities for researchers and professionalsFree2019 BambooFox CTF Official Write Up ReverseMalware AnalysisA write-up of the reverse engineering challenge from the 2019 BambooFox CTF competitionFree@fastify/helmetApplication SecurityImportant security headers for Fastify with granular control over application routes.Free15 Best Practices for Protecting Your Email with Security GatewayMiscellaneousTop 15 recommendations to protect your business from email-borne threats with Security Gateway.Free2tearsinabucketCloud SecurityA tool to enumerate S3 buckets for a specific targetFree

Tools by category

Offensive Security: 291Malware Analysis: 263Network Security: 255Threat Management: 247Application Security: 235Digital Forensics: 228Vulnerability Management: 179Miscellaneous: 1662,963tools
Recently added jadxDirBusterAutoSploitunicornVeil
Latest cybersecurity news

What's happening in security right now

All news
Learn & protect

Guides to build your security skills

Visit the blog
Blue Team & SOCDefensive strategies and monitoring to stop threats early.
Cloud SecuritySecure AWS, Azure, Google Cloud and SaaS environments.
Ethical HackingTest systems responsibly to find and fix weaknesses.
LinuxCommand-line skills and hardening every defender needs.
Forensics & Incident ResponseInvestigate incidents and respond quickly.
NetworkingProtocols, ports and network defence fundamentals.
CyberMap

See how cybersecurity concepts connect

CyberMap is an interactive knowledge graph of 821 security terms and 2,083 connections. Click any concept to see its definition and related ideas — the fastest way to learn the language of security.

Term of the day Cross-Certification

Cross-certification is a process where two or more Certificate Authorities (CAs) mutually recognize each other's certificates. This allows users to trust certificates issued by different CAs without needing to explicitly trust each CA individually.

Open CyberMap Browse the glossary
Why Hispion

Security knowledge and tools, accessible to everyone

Free to use

The directory, news, blog and CyberMap are free. Your first website audit is free too.

Built by practitioners

Founded in Erbil in 2023 by a cybersecurity student and run by people who work in security.

Always current

New tools, stories and guides every day — with sources cited and human editors in the loop.

Privacy first

No selling of personal data. Report vulnerabilities to us any time through responsible disclosure.

Is your website secure? Let's find out — for free.

Our team checks your site for common vulnerabilities and misconfigurations and sends you a clear report with fixes.

Request my free audit

Get the security briefing

Top stories and new guides in your inbox. No spam.