{"id":47008757,"title":"Show HN: Infoseclist.com – Compare 90 cybersecurity tools ranked by practition","points":1,"user":"aleks5678","time":1771022041,"time_ago":"12 hours ago","type":"link","content":"

Hey HN, I built InfoSecList.com because I got tired of the way security teams evaluate tools.

Every time we needed a new DAST scanner or pentest vendor, it was the same drill: Google around, read SEO-optimized listicles written by people who never used the tools, sit through 3-5 sales demos, and hope for the best.

InfoSecList is a directory of 90+ cybersecurity tools and services across 21 categories. Every listing gets two scores from practitioners:

- Market Score (1-5): industry adoption and brand recognition\n- Value Score (1-5): actual value for money based on usage

You can browse by category (DAST, SAST, SCA, pentest services, bug bounty platforms, etc.), compare tools side-by-side, or look up alternatives to specific products.

A few things that might be interesting technically:

- Data lives in a Google Sheet, served via a PHP proxy as CSV, parsed client-side\n- Pages are dynamic SPA-style but with clean URLs for SEO\n- Each tool/alternative/category page generates its own structured data and meta tags from the CSV data at runtime\n- No framework, no build step. Plain HTML, CSS, vanilla JS

No accounts, no gated content, no pay-to-rank. Happy to answer any questions about the approach or the security tool landscape.

Stack: Apache, vanilla JS, Google Sheets as CMS, Let's Encrypt

Follow-up Comment (if asked about data/methodology)

The scores come from a combination of:\n- Gartner/Forrester positioning for Market Score\n- Community sentiment (Reddit, HN, security forums) for both scores\n- Direct practitioner feedback from CISOs and security engineers\n- Pricing transparency and free tier availability for Value Score

We deliberately keep it simple with two 1-5 scores rather than trying to build a complex weighted system. The goal is to help someone go from "I need a DAST tool" to a shortlist of 3-4 options in under 5 minutes.

Open source tools like Nmap, OWASP ZAP, and Trivy tend to score 5/5 on Value. Enterprise tools like CrowdStrike and Mandiant score 5/5 on Market but lower on Value due to pricing.

Follow-up Comment (if asked about business model)

Right now it's free with no monetization. Long term we're considering:\n- Featured listings (clearly marked, doesn't affect scores)\n- Lead gen for vendors (opt-in only, buyer initiates contact)

We won't do pay-to-rank. The scores stay independent.","url":"https://infoseclist.com/","domain":"infoseclist.com","comments":[{"id":47009669,"level":0,"user":"ramuel","time":1771027834,"time_ago":"10 hours ago","content":"

Seems pretty neat. Dealing with vendors is always fun...haha.

Any plans for ranking SIEM/SOAR/EDR or other defensive stuff?","comments":[]}],"comments_count":1}