Start free
Tools · Category

offensive security forensics, ranked by real usage_

As of 4 November 2026, Nmap leads offensive security forensics with 399 companies naming it in job postings, ahead of Metasploit at 370.

As of 4 November 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.

Leader
Nmap · 399
Runner-up
Metasploit · 370
Most hiring, 90 days
Nmap
Highest postings per company
Hopper
Catalogue
T-1.0.1-prov
2,737companies across the category
15%of them on Nmap
6,286postings naming a offensive security forensic in 90 days
28tools with enough evidence to rank
02 — Ranking

Every offensive security forensic we can measure

Companies naming the tool, and postings naming it in the last 90 days. Bars are relative to the leader.

#ToolCompaniescompaniesPostings, 90 dayspostingsper company
1
NmapInsecure.Com LLC
399
7852.0
2
MetasploitRapid7
370
6721.8
3
IDA ProHex-Rays
207
5812.8
4
GhidraNSA
190
5663.0
5
Kali LinuxOffSec
189
3772.0
6
Magnet AXIOMMagnet Forensics
179
6223.5
7
YARAVirusTotal
135
3262.4
8
FTK Forensic ToolkitExterro
118
2251.9
9
Cobalt StrikeFortra
113
2081.8
10
EnCaseOpenText
111
2462.2
11
BloodHoundSpecterOps
85
1521.8
12
VolatilityVolatility Foundation
65
1241.9
13
Binary NinjaVector 35
63
1963.1
14
X-Ways ForensicsX-Ways Software Technology
61
1322.2
15
CellebriteCellebrite
55
1342.4
16
AutopsyBasis Technology
50
671.3
17
VelociraptorRapid7
50
741.5
18
HopperCryptic Apps
39
3097.9
19
MaltegoMaltego Technologies
39
701.8
20
OllyDbgOleh Yuschuk
39
701.8
21
ShodanShodan
36
701.9
22
Process MonitorMicrosoft
33
772.3
23
ImpacketFortra
31
461.5
24
SliverBishopFox
30
521.7
25
AFL++
17
342.0
26
Binwalk
13
332.5
27
Core ImpactFortra
10
171.7
28
MimikatzBenjamin Delpy
10
212.1
03 — Head to head

Compare two tools

Same data, two columns: who chooses which by size, industry and country.

Nmap vs Metasploit399 · 370Nmap vs IDA Pro399 · 207Nmap vs Ghidra399 · 190Nmap vs Kali Linux399 · 189Nmap vs Magnet AXIOM399 · 179Metasploit vs IDA Pro370 · 207Metasploit vs Ghidra370 · 190Metasploit vs Kali Linux370 · 189Metasploit vs Magnet AXIOM370 · 179IDA Pro vs Ghidra207 · 190IDA Pro vs Kali Linux207 · 189IDA Pro vs Magnet AXIOM207 · 179Ghidra vs Kali Linux190 · 189Ghidra vs Magnet AXIOM190 · 179Kali Linux vs Magnet AXIOM189 · 179
Cite this

Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.

Nmap leads offensive security forensics with 399 companies naming it in job postings, ahead of Metasploit at 370. (Breaknorm, 4 November 2026, https://breaknorm.co/tools/category/offensive-security-forensics)
How we know

Read from the source, not self-reported

Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →

  • CatalogueBreaknorm technology catalogue T-1.0.1-prov: 6,296 tools with vendor and category, editions folded into their parent.
  • CompaniesCompanies whose own postings name the tool as the team's system, any confidence. Candidate wish-lists excluded.
  • 90-day postingsOpen postings first seen or posted in the last 90 days that name the tool.
  • Not countedTools used by teams that do not post jobs, and companies without a career site we can read.
FAQ

offensive security forensics: questions

How is this ranking made?

By the number of companies whose own job postings name the tool as the team's system, from the Breaknorm technology catalogue (version T-1.0.1-prov). No vendor paid for a position and no editor chose the order.

Why is this different from review-site rankings?

Review sites rank by reviews collected. This ranks by companies hiring people to work in the tool, which is closer to seats in use. It under-counts tools used by teams that rarely post jobs.

What about product editions?

Editions and sub-products () are counted under the parent so no company is counted twice.

Can I get the companies behind a number?

Yes: click a tool, see the first 20, and sign up for the full list with verified e-mails. Counting is free.

Companies and people

Get the companies your way

The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.

SearchCompany searchFilter on what a company actually does→SearchPeople searchDecision makers, normalized and verified→MCP and APICompanies over MCP and APICount, search and export from your agent→DatasetCompany and People datasetThe whole market in your warehouse→DataCoverage by countryCheck your market before you start→SearchLocal businessesThe same database, by category and city→

Every company on every tool,
ranked by what they say

Connect the MCP server, ask which companies run a tool, and get 1,000 records free.

Start free with 1,000 records
  1. 01Sign up, no card
  2. 02Connect Claude, ChatGPT or an API key
  3. 03Ask for your market, 1,000 records free