Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Alternatives to Sigstore
12 tools like Sigstore, chosen by what they do. About Sigstore
Curated
Wiz
Cloud and AI security platform linking code, cloud and runtime
Cloud SecurityCloud security platform
Open source
Open source
Open Policy Agent
General-purpose policy engine that decouples policy from code
Cloud SecurityPolicy as code engine
Open source
Kubescape
Open source Kubernetes security scanner and policy checker
Cloud SecurityKubernetes security posture
Open source
Open source
TruffleHog
Open source scanner for leaked secrets, with live verification
Code SecurityFind and verify leaked secrets
Paid
YubiKey
Hardware security key for phishing-resistant two-factor sign-in
Identity and SecretsHardware security keys
Free
Let's Encrypt
Free, automated TLS certificates to enable HTTPS on your sites
Web SecurityFree HTTPS certificates
Open source
Trivy
Open source scanner for vulnerabilities and misconfigurations
Code SecurityOpen vulnerability scanner
Open source
OWASP Cheat Sheet Series
Short security guides for developers, one topic per sheet
Security LearningConcise security cheat sheets
Free trial
HashiCorp Vault
Stores and controls access to secrets, keys and certificates
Code SecuritySecrets management