You'd need a license to export to most countries and show that you have controls in place that they are not sent to countries/companies/people on a blacklist/watchlist.
This is true for anything cybersecurity related and more strict for "intrusion" tooling.
Which "regulations" might those be?