You'd need a license to export to most countries and show that you have controls in place that they are not sent to countries/companies/people on a blacklist/watchlist.

This is true for anything cybersecurity related and more strict for "intrusion" tooling.

Not sure about domestic sales though...