Free
Let's Encrypt
Free, automated TLS certificates to enable HTTPS on your sites
Web SecurityFree HTTPS certificates
Security
Code scanners, secrets and password managers, and web security tools.
73 tools
Latest Tools
6 toolsCurated
Bugcrowd
Crowdsourced bug bounty and penetration testing platform
Pentest and BountyCrowdsourced security testing
Open source
Cryptomator
Open source encryption for files stored in cloud drives
Email and EncryptionEncrypt cloud files
Curated
Detectify
Cloud scanner for exposed assets, APIs and web applications
Web ScanningAttack surface scanner
Open source
Headscale
Self-hosted, open source server for a Tailscale network
Network DefenseSelf hosted Tailscale server
Open source
Klaro
Open source cookie consent manager for GDPR-focused websites
Compliance and PrivacyOpen source consent managerInactive
Cloud Security
7 toolsOpen source
Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Open source
Kubescape
Open source Kubernetes security scanner and policy checker
Cloud SecurityKubernetes security posture
Open source
Open source
Open Policy Agent
General-purpose policy engine that decouples policy from code
Cloud SecurityPolicy as code engine
Open source
Sigstore
Open source tools for signing and verifying software artifacts
Cloud SecuritySign and verify software
Curated
Wiz
Cloud and AI security platform linking code, cloud and runtime
Cloud SecurityCloud security platform
Code Security
13 toolsFreemium
Aikido
Security platform for code, dependencies, cloud and pentests
Code SecurityAll in one security for devs
Curated
Checkmarx
Enterprise platform that scans code for security flaws and risks
Code SecurityEnterprise code security
Open source
CodeQL
Code analysis engine that runs security queries across a codebase
Code SecuritySemantic code analysis engine
Curated
GitGuardian
Platform that finds exposed secrets and credentials in code
Code SecuritySecrets detection at scale
Open source
Gitleaks
Finds leaked passwords and API keys in git repositories
Code SecurityFind leaked secrets in git
Free trial
HashiCorp Vault
Stores and controls access to secrets, keys and certificates
Code SecuritySecrets management
Open source
OSV-Scanner
Finds known vulnerabilities in your project's dependencies
Code SecurityGoogle open source scanner
Open source
Semgrep
Scans source code and dependencies for security issues
Code SecurityFast code security scanning
Freemium
Snyk
Finds security risks in AI-written code, agents and apps
Code SecurityFind and fix vulnerabilities
Freemium
SonarQube
Checks code quality and security in every change, human or AI
Code SecurityCode quality and security
Open source
Trivy
Open source scanner for vulnerabilities and misconfigurations
Code SecurityOpen vulnerability scanner
Open source
TruffleHog
Open source scanner for leaked secrets, with live verification
Code SecurityFind and verify leaked secrets
Curated
Veracode
Platform for finding and fixing application security risks
Code SecurityApplication security platform
Compliance and Privacy
5 toolsFree trial
Cookiebot
Cookie consent banner and scanner for GDPR and CCPA compliance
Compliance and PrivacyCookie consent platform
Open source
CookieConsent
Lightweight vanilla JavaScript cookie consent plugin for websites
Compliance and PrivacyLightweight cookie consent
Open source
Klaro
Open source cookie consent manager for GDPR-focused websites
Compliance and PrivacyOpen source consent managerInactive
Freemium
Termly
Privacy policy generator, cookie consent and compliance tools
Compliance and PrivacyPolicies and consent banner
Paid
Vanta
Compliance automation for SOC 2, ISO 27001, HIPAA and more
Compliance and PrivacyCompliance automation
Email and Encryption
6 toolsOpen source
Cryptomator
Open source encryption for files stored in cloud drives
Email and EncryptionEncrypt cloud files
Freemium
dmarcian
DMARC management platform with free domain and record checker tools
Email and EncryptionDMARC management
Curated
MXToolbox
Online DNS, mail server and blacklist lookup tools
Email and EncryptionDNS and email diagnostics
Open source
Signal
Private encrypted messenger for text, voice and video calls
Email and EncryptionPrivate encrypted messenger
Open source
Tuta
Encrypted email, calendar and contacts with a free plan
Email and EncryptionEncrypted email and calendar
Open source
VeraCrypt
Free open source disk encryption for Windows, Mac and Linux
Email and EncryptionDisk encryption software
Identity and Secrets
5 toolsOpen source
Ente Auth
Open source 2FA authenticator with end-to-end encrypted backups
Identity and SecretsOpen source 2FA app
Open source
KeePassXC
Offline, open source password manager for Windows, Mac and Linux
Identity and SecretsOffline password manager
Open source
OpenBao
Open source fork of HashiCorp Vault for managing secrets
Identity and SecretsOpen source secrets vault
Open source
Proton Pass
End-to-end encrypted password manager with email aliases
Identity and SecretsPrivate password manager
Paid
YubiKey
Hardware security key for phishing-resistant two-factor sign-in
Identity and SecretsHardware security keys
Network Defense
16 toolsOpen source
Open source
BunkerWeb
Open source reverse proxy WAF that protects web services
Network DefenseOpen source next gen WAF
Curated
Friendly Captcha
Invisible, privacy-friendly CAPTCHA that uses proof-of-work
Network DefensePrivacy first CAPTCHA
Freemium
hCaptcha
Privacy-focused CAPTCHA and bot detection for sites and apps
Network DefensePrivacy focused CAPTCHA
Open source
Headscale
Self-hosted, open source server for a Tailscale network
Network DefenseSelf hosted Tailscale server
Curated
Open source
mCaptcha
Open source proof-of-work CAPTCHA that does not track users
Network DefenseOpen source PoW CAPTCHAInactive
Open source
ModSecurity
Open source web application firewall engine used with OWASP rules
Network DefenseOpen source WAF engine
Open source
NetBird
Open source zero trust network access built on WireGuard
Network DefenseOpen source zero trust network
Open source
OWASP Coraza
Go-based open source web application firewall with CRS support
Network DefenseGo web application firewall
Open source
Pomerium
Identity-aware access proxy for private apps, SSH and Kubernetes
Network DefenseIdentity aware access proxy
Open source
Proton VPN
VPN with a free plan, open source apps and a no-logs audit
Network DefenseSwiss privacy VPN
Popular
Paid
Sucuri
Website security service for malware cleanup and firewall
Network DefenseWebsite firewall and cleanup
Freemium
Open source
Passwords
2 tools
Pentest and Bounty
4 toolsCurated
Bugcrowd
Crowdsourced bug bounty and penetration testing platform
Pentest and BountyCrowdsourced security testing
Freemium
Burp Suite
Web security testing toolkit for manual and automated scanning
Pentest and BountyWeb security testing toolkit
Curated
HackerOne
Platform for bug bounties and vulnerability disclosure programs
Pentest and BountyBug bounty platform
Open source
Nmap
Free, open source network scanner for hosts, ports and services
Pentest and BountyNetwork discovery scanner
Security Learning
6 toolsCurated
Hack The Box
Hands-on cyber labs, challenges and training for teams and learners
Security LearningHands on hacking labs
Open source
OWASP Cheat Sheet Series
Short security guides for developers, one topic per sheet
Security LearningConcise security cheat sheets
Free
OWASP Foundation
Nonprofit hub for free application security projects and standards
Security LearningOpen web security community
Open source
OWASP Juice Shop
Deliberately insecure web app for security training and CTFs
Security LearningDeliberately insecure web app
Freemium
TryHackMe
Browser-based hands-on cyber security labs and guided paths
Security LearningGuided cyber security rooms
Free
Web Security Academy
Free online web security training with interactive labs
Security LearningFree web security training
Web Scanning
6 toolsCurated
Detectify
Cloud scanner for exposed assets, APIs and web applications
Web ScanningAttack surface scanner
Open source
Nuclei
Open source scanner that runs vulnerability checks from templates
Web ScanningTemplate based vuln scanner
Freemium
Shodan
Search engine that indexes internet-connected devices and services
Web ScanningSearch engine for devices
Curated
StackHawk
Security testing for running apps, with fixes from coding agents
Web ScanningDeveloper first DAST
Open source
testssl.sh
Command line tool that tests TLS and SSL server configurations
Web ScanningCommand line TLS tester
Freemium
Web Security
3 toolsFree
Have I Been Pwned
Check if your email or password appeared in a known data breach
Web SecurityCheck for data breaches
Free
Let's Encrypt
Free, automated TLS certificates to enable HTTPS on your sites
Web SecurityFree HTTPS certificates
Open source
Zed Attack Proxy (ZAP)
Free open source scanner for finding security flaws in web apps
Web SecurityFree web app scanner