Open source
CodeQL
Code analysis engine that runs security queries across a codebase
Code SecuritySemantic code analysis engine
Best tools for Security engineers
9 tools in our directory are marked as best for Security engineers, from 3 sections: Security (7), Dev Utilities (1) and Monitoring & Observability (1).
Tools
Open source
Falco
Open source runtime threat detection for containers and Kubernetes
Security LoggingRuntime security detection
Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Free
JWT.io
Decode, verify and generate JSON Web Tokens in your browser
Online UtilitiesDecode and verify JWTs
Open source
ModSecurity
Open source web application firewall engine used with OWASP rules
Network DefenseOpen source WAF engine
Open source
Nuclei
Open source scanner that runs vulnerability checks from templates
Web ScanningTemplate based vuln scanner
Open source
OpenBao
Open source fork of HashiCorp Vault for managing secrets
Identity and SecretsOpen source secrets vault
Free
OWASP Foundation
Nonprofit hub for free application security projects and standards
Security LearningOpen web security community
Open source
testssl.sh
Command line tool that tests TLS and SSL server configurations
Web ScanningCommand line TLS tester
Looking for something else? Browse the full directory.