Security Tools & Software

keepassxc

github

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

infisical

github

Infisical is the open-source platform for secrets, certificates, and privileged access management.

How-To-Secure-A-Linux-Server

github

An evolving how-to guide for securing a Linux server.

trufflehog

github

Find, verify, and analyze leaked credentials

maigret

github

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

radare2

github

UNIX-like reverse engineering framework and command-line toolset

API-Security-Checklist

github

Checklist of the most important security countermeasures when designing, testing, and releasing your API

social-analyzer

github

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

macOS-Security-and-Privacy-Guide

github

Community guide to securing and improving privacy on macOS.

personal-security-checklist

github

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

authentik

github

The authentication glue you need.

SafeLine

github

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

security-guide-for-developers

github

Security Guide for Developers

Atlas

github

🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.

RustScan

github

🤖 The Modern Port Scanner 🤖

chezmoi

github

Manage your dotfiles across multiple diverse machines, securely.

bettercap

github

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

anubis

github

Weighs the soul of incoming HTTP requests to stop AI crawlers

cutter

github

Free and Open Source Reverse Engineering Platform powered by rizin

fail2ban

github

Daemon to ban hosts that cause multiple authentication errors

hydra

github

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

DOMPurify

github

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Obtainium

github

Get Android app updates straight from the source.

javascript-obfuscator

github

A powerful obfuscator for JavaScript and Node.js