
GITNUXSOFTWARE ADVICE
SecurityTop 10 Best Biometric Security Software of 2026
Ranking roundup of biometric security software for teams, with criteria and tradeoffs, including BioID, Cognitec, and Keyless.
How we ranked these tools
Gitnux editors write the brief first: the topic, the inclusion rules, and the frame for what belongs.
Agents extract product evidence with provenance, then collect written reviews and transcribe video reviews and podcasts.
Framework: Features 40% · Ease 30% · Value 30%
Gitnux may earn a commission through links on this page — this does not influence rankings. Editorial policy
BioID is the best pick if you need centrally governed biometric verification across multiple sites, while Cognitec fits access-control teams that want managed enrollment, matching, and policy enforcement through integrations and live video analysis.
Editor’s top 3 picks
Three quick recommendations before you dive into the full comparison below — each one leads on a different dimension.
BioID
Workflow-level policy control that ties biometric verification results to downstream access decisions.
Best for: Fits when access control teams need centrally governed biometric verification across multiple sites.
Cognitec
Editor pickCentralized biometric template and subject management designed to support both verification and identification workflows.
Best for: Fits when access control teams need managed biometric enrollment, matching, and policy enforcement via integration.
Keyless
Editor pickAccess-attempt workflow orchestration that connects biometric verification to policy outcomes for door-level authorization.
Best for: Fits when access control teams need biometric verification wired into door decisions with strong operational traceability.
Comparison Table
BioID
SMBCloud-based facial recognition and biometric authentication.
Workflow-level policy control that ties biometric verification results to downstream access decisions.
BioID is built around end-to-end biometric access workflows that start at enrollment and continue through 1:1 or 1:N matching based on the deployment model. The system can be configured to enforce verification thresholds and to route outcomes into downstream authorization systems. Administrative tooling supports supervising enrollment data health, verification behavior, and exception handling paths for real-world access operations.
A key tradeoff is that BioID requires careful alignment between capture hardware behavior and verification thresholds to avoid high rejection rates or unnecessary step-up. A common fit is multi-site access control where biometric verification must run consistently while access decisions remain centrally governed.
- +Configurable verification thresholds per workflow and site context
- +Supports both enrollment management and decisioning for access events
- +Policy-driven outcomes that integrate into authorization processes
- +Operational controls for supervising verification behavior over time
- –Threshold tuning needs capture-device and environment calibration
- –Automation depends on integration work for each target authorization system
- –Multi-site rollouts require disciplined configuration management
- –Usability can lag for edge case handling in high-volume shifts
Physical security engineering
Biometric gatekeeping with controlled decisions
Fewer unauthorized entries
Identity and access administrators
Central governance for multi-site enrollment
Consistent enforcement
Show 1 more scenario
System integrators
Connecting biometric capture to authorization
Reduced custom glue
BioID fits deployments where biometric outcomes must feed existing access systems.
Best for: Fits when access control teams need centrally governed biometric verification across multiple sites.
Cognitec
vertical specialistFace recognition and biometric video analysis software.
Centralized biometric template and subject management designed to support both verification and identification workflows.
Cognitec targets environments that must bind biometric enrollment and matching into access control programs, not just capture biometrics. Typical use is a hybrid flow where operators manage enrollment, then downstream systems call matching operations for login or staff authorization checks. The product supports configurable match behavior, and it aligns with common identity governance needs through event logging and controlled administration.
A key tradeoff is operational overhead when threshold tuning and enrollment quality rules must be aligned across sites and hardware types. Cognitec fits well for organizations with multiple access points that require consistent biometric policy enforcement, such as facilities using touchless face capture or workstation fingerprint collection.
- +Configurable match policies that support consistent outcomes across authentication flows
- +Audit-friendly biometric event handling for access control and identity operations
- +API-driven orchestration for connecting enrollment and matching to decision systems
- +Administrative controls that separate duties for enrollment, policy, and operations
- –Threshold and enrollment quality tuning add time during initial rollouts
- –Integration effort rises when biometric devices and identity platforms vary by site
- –Advanced workflows require careful mapping of identity attributes to biometric subjects
- –Workflow customization can depend on implementation choices beyond default tooling
Access control security teams
Gate authentication using centralized biometric checks
Consistent access decisions
Identity engineering teams
Biometric step-up authentication
Controlled step-up behavior
Show 1 more scenario
Enrollment operations teams
Multi-site enrollment with governance controls
Lower enrollment inconsistency
Admins manage enrollment, subject linking, and audit trails across distributed capture points.
Best for: Fits when access control teams need managed biometric enrollment, matching, and policy enforcement via integration.
Keyless
enterpriseZero-knowledge biometric authentication platform.
Access-attempt workflow orchestration that connects biometric verification to policy outcomes for door-level authorization.
Keyless is built for organizations that need biometric checks tied to access events such as entry, time capture, and restricted-area authorization. The product is commonly used where biometric template storage and verification must happen in a defined operational flow, with threshold behavior and policy mapping handled by the service logic. Operational governance is oriented around managing verification behavior across sites and keeping traceability for decisions made during access attempts.
A tradeoff is that Keyless becomes most effective when its verification workflow is integrated into the access control decision path, not when it is treated as a standalone identity portal. It fits best in pilot programs where a small set of doors or devices can validate template quality, fallback behavior, and operational throughput before broader rollout.
- +API-first integration for embedding biometric verification in access decisions
- +Configurable verification workflow behavior for different access scenarios
- +Operational traceability for authorization attempts and outcomes
- +Enrollment and matching flows aligned to access control usage
- –Requires careful workflow integration into existing access control logic
- –Device and deployment prerequisites can add implementation overhead
- –Admin configuration depth can slow early rollouts for small teams
- –Limited fit for teams needing only user self-service authentication
Physical security teams
Door access decisions with biometric checks
Fewer unauthorized access attempts
Identity and access teams
Step-up verification for restricted areas
Consistent step-up enforcement
Show 2 more scenarios
Operations and compliance teams
Audit-friendly access attempt reporting
Clear investigation trail
Decision outcomes are tracked for governance review of access events.
Integrators and systems teams
Embed biometric checks via APIs
Lower integration friction
Existing access control systems can call verification flows through programmatic interfaces.
Best for: Fits when access control teams need biometric verification wired into door decisions with strong operational traceability.
Aware
enterpriseBiometric identification and authentication software for enterprise.
Policy-driven access decisioning that links biometric match results to approval and audit workflows.
Aware pairs biometric recognition with access control workflows focused on identity verification at the point of entry. The system supports enrollment, template management, and policy-based matching across common biometric modalities used for physical and logical access.
Admin controls emphasize governance for who can enroll, who can approve access decisions, and what logs are retained for investigations. Automation and integration center on provisioning and event-driven orchestration so identity and security teams can tie matches to downstream actions.
- +Strong enrollment and template lifecycle controls for access decisions
- +Policy-driven matching tied to entry outcomes and audit trails
- +Integration hooks for provisioning workflows and downstream automation
- +Governance controls for enrollment, approvals, and investigation visibility
- –Requires careful threshold tuning to avoid user friction
- –Some integrations depend on specific deployment patterns and services
- –RBAC granularity may not match large enterprise access-control models
- –Operational overhead increases when managing multiple site device types
Best for: Fits when access-control teams need biometric enrollment governance plus audit-ready match outcomes across physical entry points.
Neurotechnology
API-firstBiometric SDKs for face, finger, and iris recognition.
Multi-modal biometric matching with embedded presentation attack detection hooks across fingerprint, face, and iris workflows.
Neurotechnology provides biometric recognition software for access control use cases, focused on matching fingerprints, faces, and irises through its SDK and engine tooling. Core capabilities center on biometric template processing, including feature extraction and matching workflows that can run on-device or on the server.
The product supports liveness and spoof-detection integration points for presentation attack controls, with application-side threshold tuning. Neurotechnology also provides integration artifacts such as SDK components and API-oriented integration patterns for embedding biometric checks into existing access control systems.
- +SDK integration supports fingerprint, face, and iris recognition in one software stack
- +Configurable matching thresholds support tuning tradeoffs for false accepts and false rejects
- +Presentation attack controls integrate into authentication workflows for spoof mitigation
- +Template handling fits deployments needing server-side or edge processing
- –Authentication orchestration and enrollment governance often require custom application work
- –Complex performance tuning can be needed to meet throughput targets at scale
- –RBAC and admin audit logging depend on the embedding system rather than the biometric engine
- –Integration depth varies by modality and may require multiple SDK components
Best for: Fits when teams need biometric recognition SDKs embedded into access control systems.
Innovatrics
enterpriseBiometric identity and face recognition software.
Built-in presentation attack detection controls integrated into the verification decision, not added as a separate workflow.
Innovatrics focuses on biometric identity capture and verification for access and identity workflows, with product modules built around facial and fingerprint recognition. The system supports template-based matching, including server-side and edge-oriented deployment patterns for on-prem and managed environments.
Innovatrics also targets liveness and spoof detection so biometric checks can account for presentation attacks instead of relying on still-image comparison alone. Integration is centered on SDK and API-oriented connectivity to existing identity and access processes.
- +Well-defined biometric verification flow with tunable matching thresholds
- +Strong face and fingerprint modality support for identity checks
- +Liveness and spoof detection controls for presentation attack resistance
- +Integration options that fit access control and identity pipelines
- –Configuration depth can require biometric tuning and governance ownership
- –Advanced automation features depend on integration work with internal systems
Best for: Fits when enterprises need biometric verification tied to access control and identity workflows with integration-heavy requirements.
Veriff
enterpriseIdentity verification platform using facial biometrics and document checks.
Document-plus-face verification workflows that return a decision payload for automated risk-based onboarding and access gating.
Veriff applies biometric identity verification with a focus on document and face checks that feed into access and onboarding decisions. The product is built around a workflow that collects evidence, runs model-based comparisons, and returns a decision payload to your systems.
It supports automation via API-driven verification sessions and configurable match behavior for different risk profiles. Veriff is most useful when identity checks must integrate into an existing account or access lifecycle.
- +API-driven verification sessions integrate identity checks into existing access workflows
- +Multimodal capture combines face verification with document evidence for higher decision coverage
- +Configurable thresholds for match acceptance support different risk profiles
- +Audit-ready decision outputs support downstream investigations and case handling
- –Less suited for on-prem, self-hosted biometric processing compared with identity vendors
- –Face recognition outcomes depend on data capture quality and lighting constraints
- –Advanced governance features can require workflow design effort across teams
- –Limited fit for purely 1:1 biometric matching inside closed enterprise gates
Best for: Fits when identity checks and fraud controls must integrate with account onboarding and access decisions through APIs.
FaceTec
API-first3D face authentication and liveness detection software.
SDK-first face verification with adjustable decision thresholds that let applications control acceptance behavior per environment.
FaceTec provides biometric face recognition for access control and identity workflows, with liveness and matching designed for enrollment-to-authentication deployments. It supports on-device capture and SDK integration so face events can be validated and then evaluated against configurable thresholds for decisioning.
Administration centers on managing identity records, defining verification behavior, and auditing authentication outcomes for operational reviews. The result is a biometric layer that can be driven through application integrations rather than only through human-centered enrollment screens.
- +Face matching driven by developer SDK integration for custom authentication flows
- +Liveness and spoof detection controls reduce risk of presentation attacks
- +Configurable decision thresholds support tuning against real-world enrollment data
- +Operational logs help correlate biometric outcomes with access control events
- –Tuning for target user populations takes measurement work and iteration
- –Integration effort is meaningful when aligning biometric decisions with existing IAM policies
- –Complex deployments can require dedicated governance for biometric enrollment records
- –Performance depends on device capture quality and network path during server checks
Best for: Fits when identity teams need face biometrics integrated into custom access workflows with measurable decision controls.
BioCatch
enterpriseBehavioral biometrics for fraud detection and authentication.
Behavior-driven risk scoring that evaluates ongoing session trust signals for dynamic authentication outcomes.
BioCatch applies behavioral biometrics to detect risky user sessions during login, not just identity proof at enrollment time. It combines device and interaction signals to support fraud and account takeover risk scoring across digital channels.
The core workflow centers on orchestrating signals, tuning risk thresholds, and routing step-up actions through relying applications. Automation and integration rely on APIs and event ingestion so access control and identity systems can consume risk decisions in near real time.
- +Session-level behavior analytics reduce reliance on single biometric events
- +Risk signals can drive step-up authentication decisions at the application layer
- +API-driven event consumption supports integration with identity and access workflows
- +Threshold tuning helps align alert rates with operational tolerance
- –High signal coverage depends on user interaction volume and channel design
- –Governance requires careful tuning to control false positives in edge cases
- –Legacy login flows may need adapter work to consume risk outputs
- –Complex deployment can slow time to stable baselines across channels
Best for: Fits when access control teams need continuous session risk scoring tied to step-up actions.
TypingDNA
API-firstTyping biometrics for authentication and fraud prevention.
Risk-based typing profile matching with configurable decision thresholds for access control gates.
TypingDNA is a biometric security solution that uses typing behavior to authenticate users through keystroke dynamics rather than device biometrics. Core capabilities center on enrollment, risk scoring, and policy thresholds that compare a live typing sample to stored behavioral profiles.
It supports server-side matching workflows for access control use cases where the authentication decision needs to integrate with existing identity systems. Configuration focuses on tuning matching thresholds and operating modes to manage false accept and false reject outcomes in production.
- +Typing-behavior authentication avoids fingerprint or camera hardware requirements
- +Threshold tuning supports controlling tradeoffs between false accepts and false rejects
- +Server-side matching fits web login and access-control decision workflows
- +Enrollment profiles enable repeatable authentication behavior checks over time
- –Performance depends on consistent input patterns and sufficient typing samples
- –Governance depth is limited compared with enterprise identity suites that offer RBAC
Best for: Fits when access-control teams need keystroke-dynamics authentication for web and app logins.
Conclusion
After evaluating 10 biometric security software, BioID stands out as our overall top pick — it scored highest across our combined criteria of features, ease of use, and value, which is why it sits at #1 in the rankings above.
Use the comparison table and detailed reviews above to validate the fit against your own requirements before committing to a tool.
How to Choose the Right Biometric Security Software
Biometric security software in access control and identity programs connects biometric capture, matching decisions, and downstream authorization outcomes through workflows that teams can govern across sites. This guide covers BioID, Cognitec, Keyless, Aware, Neurotechnology, Innovatrics, Veriff, FaceTec, BioCatch, and TypingDNA based on how each tool wires biometric verification to access control logic.
Several of these tools emphasize workflow-level decisioning and traceability, while others focus on SDK embedding for fingerprint, face, or iris recognition inside existing applications. The differences show up most clearly in how thresholds are configured, how events are audited, and how much integration work the automation layer requires.
Biometric Security Software that governs biometric verification decisions for access control and identity teams
Biometric security software handles enrollment and template lifecycle, biometric verification or identification matching, and the policy enforcement steps that turn match outcomes into access decisions. Tools such as BioID focus on tying verification results to downstream authorization workflow outcomes with configurable thresholds per site and workflow context.
Cognitec centers on centrally managed biometric templates and subject management that supports both verification and identification flows through integration-led policy enforcement. Across the set, the category splits between platforms that operationalize biometric decisioning with audit-friendly event handling and developer-leaning tools that embed biometric capture and matching into custom access logic, which changes how administrators and integration teams divide responsibilities.
Evaluation criteria for Biometric Security Software in access control and identity
Biometric security software decides what happens after a match or risk event. In access control programs, the deciding factor is how biometric verification outputs are translated into door decisions, workflow approvals, or step-up actions.
This guide emphasizes automation and control depth because threshold tuning, event traceability, and integration surfaces determine how consistently biometric decisions behave across sites and systems.
Workflow-level policy binding from biometric outcome to access decisions
BioID ties biometric verification results to downstream access decisions with centrally governed workflow policy control across multiple sites. Keyless also orchestrates access-attempt workflows that connect biometric verification to door-level authorization outcomes.
Enrollment and identity-centric template management for multi-site consistency
Cognitec provides centralized biometric template and subject management designed to support both verification and identification workflows. Aware focuses on enrollment governance with audit-ready match outcomes tied to physical entry points.
Threshold configurability and operational tuning controls tied to environments
BioID supports configurable verification thresholds per workflow and site context. FaceTec offers adjustable decision thresholds so applications control acceptance behavior per environment.
Automation and API-first integration surfaces for wiring biometric decisions into existing systems
Keyless is API-first for embedding biometric verification into access decisions, which reduces the amount of custom glue code needed. Veriff exposes API-driven verification sessions that integrate into identity checks for automated onboarding and access gating.
Presentation attack handling built into verification rather than added later
Innovatrics integrates presentation attack detection controls into the verification decision flow, which keeps spoof detection in the critical path of access authorization. Neurotechnology includes multi-modal matching with embedded presentation attack detection hooks across fingerprint, face, and iris workflows.
Decision traceability for audit workflows tied to biometric outcomes
Cognitec delivers audit-friendly biometric event handling for access control and identity operations. Aware provides policy-driven access decisioning that links match results to approval and audit workflows.
How to choose Biometric Security Software for access control and identity programs
The right choice depends on where the decision logic lives. Some platforms operationalize biometric outcomes as governed access workflows, while others embed biometric capture and matching inside custom applications.
The second major fork is whether enrollment and template lifecycle management sits in the biometric platform or remains primarily within identity tooling that integrates to biometric SDKs.
Decide whether biometric results must govern access workflows centrally
If door decisions need centrally governed biometric verification across multiple sites, BioID and Aware map match outcomes to downstream approvals with workflow-level policy control. If access attempts must be wired tightly into door-level authorization logic with API orchestration, Keyless fits the workflow-first integration model.
Pick an architecture that matches where enrollment and templates are managed
If teams want centralized biometric template and subject management for both verification and identification, Cognitec supports that identity-led lifecycle. If the priority is governance around enrollment and audit-ready match outcomes across physical entry points, Aware aligns with that access program shape.
Match integration depth to the engineering model of the access program
If integration engineering should be handled through an access-orchestration API surface, Keyless and Veriff focus on embedding verification sessions into existing access and onboarding flows. If teams expect to build biometric matching inside custom applications, Neurotechnology and FaceTec emphasize SDK integration for fingerprint, face, or iris within the software stack.
Plan for threshold tuning cost and acceptance behavior targets
If rollout success depends on configurable thresholds per workflow and site context, BioID reduces ambiguity by supporting per-context threshold configuration. If acceptance behavior must vary by environment through application-controlled thresholds, FaceTec supports developer-controlled decision thresholds.
Choose spoof-defense placement based on the decision critical path
If spoof detection must be integrated into the verification decision path rather than handled as a separate step, Innovatrics places presentation attack detection inside the decision flow. If the use case requires multimodal matching with embedded presentation attack detection hooks across fingerprint, face, and iris, Neurotechnology covers that model.
Use risk-based approaches only when session context exists at scale
If continuous session risk signals and step-up actions are available beyond a single biometric event, BioCatch fits behavior-driven risk scoring tied to dynamic authentication outcomes. If keystroke dynamics is the biometric substitute and the program can collect enough consistent typing samples, TypingDNA can drive access gates with threshold tuning tradeoffs.
Who Biometric Security Software buyers should target and why
Biometric security software aligns differently for access control engineering, identity governance teams, and application platform teams. The deciding factor is whether biometric decisions must be governed centrally for door authorization or embedded into custom authentication logic.
Tool choice should reflect how the organization handles enrollment governance, threshold tuning ownership, and the engineering workload required to connect biometric outputs to access systems.
Access control and security operations teams running multi-site authorization
BioID supports centrally governed biometric verification that ties match outcomes to workflow and access decisions across multiple sites. Aware also links match results to entry outcomes and audit workflows across physical access points.
Identity and IAM teams standardizing biometric lifecycle and audit readiness
Cognitec is built around centralized biometric template and subject management for verification and identification flows with audit-friendly biometric event handling. Aware supports enrollment governance plus policy-driven audit-ready match outcomes for entry points.
Application teams embedding biometric verification inside custom login or access software
Neurotechnology provides SDK integration that supports fingerprint, face, and iris recognition within a single software stack with embedded presentation attack detection hooks. FaceTec focuses on SDK-first face verification so applications control acceptance behavior through adjustable decision thresholds.
Risk and fraud teams tying identity checks to onboarding and access gating via APIs
Veriff returns decision payloads from document-plus-face verification sessions designed for automated risk-based onboarding and access gating. Keyless exposes an API-first workflow orchestration model that connects biometric verification to policy outcomes for door-level authorization.
Security teams pursuing continuous authentication beyond a single biometric event
BioCatch evaluates ongoing session trust signals through behavior-driven risk scoring that can drive step-up authentication actions at the application layer. BioCatch fits programs where user interaction volume and channel design produce reliable signal coverage.
Common pitfalls in Biometric Security Software buying and deployment
Most failures come from mismatched decision ownership. A common issue is treating biometric threshold tuning and orchestration as a one-time configuration step rather than an ongoing operational responsibility that differs by site, device, and environment.
Another frequent error is selecting an SDK-first biometric stack when the program requires centralized workflow governance and audit-ready event handling.
Assuming threshold tuning is uniform across sites and devices.
BioID supports configurable thresholds per workflow and site context, but threshold tuning still needs capture-device and environment calibration. Cognitec also requires time for threshold and enrollment quality tuning during initial rollouts.
Selecting an SDK-first tool while the program requires centralized access workflow governance.
FaceTec and Neurotechnology support developer SDK integration, which often increases custom application work for orchestration. BioID and Aware are built to bind biometric verification outputs to downstream access workflows with stronger governance control.
Treating spoof-defense as an optional add-on step instead of part of the verification decision path.
Innovatrics integrates presentation attack detection into the verification decision flow, which keeps spoof detection in the critical path. Neurotechnology also embeds presentation attack detection hooks into multimodal recognition workflows, which reduces the risk of bypassing the decision chain.
Overrelying on behavior risk scoring without enough session signal coverage.
BioCatch depends on ongoing behavior signals tied to user interaction volume and channel design, so low-activity sessions can limit signal reliability. Governance tuning is also required to control false positives in edge cases.
How We Selected and Ranked These Tools
We evaluated each tool’s workflow-level policy binding from biometric outcomes to access decisions because access control programs need deterministic results. Features accounted for 40% of the ranking weight using how each product handles enrollment or template lifecycle, threshold configurability, and audit-ready match outcomes such as BioID’s configurable thresholds per workflow and site context.
Ease and value each accounted for 30% using the integration workload surfaced by API-first orchestration in Keyless and by SDK embedding patterns in Neurotechnology and FaceTec. BioID ranked highest because it ties centrally governed biometric verification to downstream authorization outcomes with workflow-level policy control and supports both enrollment management and decisioning for access events.
Frequently Asked Questions About Biometric Security Software
How do Cisco ISE and Aware connect biometric match results to access decisions for physical entry points?
Which tools provide APIs that identity teams can use to automate biometric verification sessions?
When does server-side matching matter more than edge matching for biometric recognition workflows?
What breaks if biometric template storage uses a weak protection model without encryption and key isolation?
How do teams tune FAR and FNMR style tradeoffs when integrating liveness and spoof detection?
Which products support multimodal biometric matching in one integration path?
How do admin controls differ between BioID and Cognitec for biometric governance across multiple locations?
Where does continuous authentication fit versus step-up authentication when using biometric and behavioral signals?
What integration approach works best when the biometric decision must return a structured payload for downstream systems?
Which tool fits keystroke-dynamics authentication for web and app access control, and how does the decision model differ?
Tools reviewed
Primary sources checked during evaluation.
Referenced in the comparison table and product reviews above.
- Top 10 Best Fire Detection Software of 2026
- Top 10 Best Soc 2 Compliance Software of 2026
- Top 10 Best Fastest VPN Software of 2026
- Top 10 Best Fastest Remote Desktop Software of 2026
- Top 10 Best Fastest Remote Access Software of 2026
- Top 10 Best Facial Tracking Software of 2026
- Top 10 Best Facial Verification Software of 2026
- Top 10 Best Facial Similarity Software of 2026
- Top 10 Best Facial Software of 2026
- Top 10 Best Facial Recognition Security Software of 2026
- Top 10 Best Facial Recognition Software of 2026
- Top 10 Best Facial Reconition Software of 2026
- Top 10 Best Facial Recognition Photo Software of 2026
- Top 10 Best Face Similarity Software of 2026
- Top 10 Best Face Recognition Software of 2026
- Top 10 Best Face Recognition Security Software of 2026
- Top 10 Best Face Recognition Login Software of 2026
- Top 10 Best Face Recognition Camera Software of 2026
- Top 10 Best Face Login Software of 2026
- Top 10 Best Face Identification Software of 2026
Keep exploring
Comparing two specific tools?
Software Alternatives
See head-to-head software comparisons with feature breakdowns, pricing, and our recommendation for each use case.
Explore software alternatives→In this category
Security alternatives
See side-by-side comparisons of security tools and pick the right one for your stack.
Compare security tools→