Free Cybersecurity tools
124 of 292 Cybersecurity tools. See all Cybersecurity.
1Password Secrets Automation manages secrets for infrastructure.
Addy.io is a free and open-source anonymous email forwarding service that helps users protect their primary email address from spam, phishing, and data breaches.
AGG Labs SSO provides a secure and unified authentication solution, allowing users to access multiple applications and integrated third-party services with a single lo…
Anchore scans container images for vulnerabilities and policy violations before they reach production.
Aqua Security protects cloud native workloads from development to production.
Arba Security provides comprehensive protection for web applications and APIs, safeguarding them from a wide range of cyber threats.
Arctic Wolf provides an AI-enabled cybersecurity platform designed to autonomously prevent advanced threats and automate labor-intensive security workflows.
At-Bay offers an "InsurSec" platform that combines enterprise-grade cybersecurity solutions with cyber insurance.
Avast is a consumer antivirus suite sold as Avast One: free antivirus, scam blocking, privacy tools, and cleanup in one app.
Bearer offers a modern, developer-first Static Application Security Testing (SAST) solution designed to integrate seamlessly into CI/CD pipelines.
Bitwarden is an open-source password manager for individuals and teams.
Ory provides a modern and modular Identity & Access Management (IAM) solution designed for customer, B2B, agentic AI, and workforce use cases.
Burp Suite is what security professionals use to test web applications.
Buttercup is a free and open-source password manager designed to help users securely store and manage their login credentials.
Certbot gets free SSL certificates from Let's Encrypt and installs them automatically.
Chainguard provides hardened, secure, and production-ready builds of open source software components, including container images, language libraries, and virtual machi…
Checkov is an open-source static analysis tool for infrastructure as code.
CipherLock is a web-based tool that provides client-side encryption and decryption capabilities for both text and files.
ClearMesh is a comprehensive network security and optimization platform designed to provide robust protection and efficient traffic management for modern networks.
CloudSploit, by Aqua Security, is a Cloud Security Posture Management (CSPM) solution designed to provide real-time visibility and risk assessment across multi-cloud e…
CodeQL is a semantic code analysis engine that allows users to query code as if it were data.
ComplyAdvantage is an integrated, AI-powered platform designed to modernize financial crime risk management for high-performance enterprises.
Corgea is an AI-native application security platform that understands your code, business logic, and infrastructure to find real risk without noise.
Cotool Security offers a suite of tools designed to enhance the security posture of organizations by providing continuous monitoring and proactive vulnerability manage…
Conjur is an open-source secrets management solution designed to secure non-human access across various environments, including tools, applications, containers, and cl…
Darkmoon is an autonomous offensive security platform that leverages AI agents and integrated tools to conduct full penetration testing campaigns.
DCP (Decentralized Credential Provider) is an open-source, local-first permission layer designed to secure AI agents.
DeepCode AI powers the Snyk AI Security Platform, offering a robust solution for securing code, including AI-generated code.
Doppler is a secrets management platform that centralizes environment variables and secrets across applications, with automatic syncing, rotation, and team access cont…
DotBGE is a privacy-focused file encryption application designed for individuals and teams who need to secure sensitive data without relying on cloud services or compl…
Dotenvx is a drop-in replacement for dotenv that addresses the security flaw of unencrypted .env files.
DropTidy is a privacy-first tool that strips hidden metadata from photos before uploading them.
Duo Security protects access with multi-factor authentication that's actually usable.
EasyDMARC is a comprehensive platform designed to simplify DMARC, SPF, and DKIM implementation and management, enhancing email security and deliverability.
Envoy is a comprehensive workplace platform designed to streamline operations, enhance security, and improve the employee experience across single or multiple locations.
Finderlock provides professional-grade file encryption specifically for macOS users, offering AES-256 encryption and seamless integration with Touch ID.
Foil is an AI-powered security scanner designed for developers, offering 100% local code analysis to identify vulnerabilities.
FOSSA is a comprehensive open source management platform designed to help organizations maintain security, license compliance, and quality standards across all third-p…
GitGuardian is a code security platform that detects secrets, credentials, and API keys hardcoded in source code and monitors public GitHub for exposed credentials.
GpsEncrypto is an advanced encryption system that leverages geographical location data to generate unique and impenetrable encryption keys.
HashiCorp Vault is a secrets management tool that provides secure storage, dynamic secrets, data encryption, and identity-based access.
Headscale is an open-source implementation of Tailscale's control server.
hide.me is a Virtual Private Network (VPN) service designed to provide digital privacy, advanced security, and the ability to bypass internet censorship.
Infisical is an all-in-one platform for securely managing application secrets, certificates, SSH keys, and configurations across teams and infrastructure.
Intruder is a comprehensive cybersecurity platform that helps organizations stop breaches before they start by providing continuous vulnerability management, attack su…
KeePassXC is a modern, secure, and open-source password manager designed for individuals who demand robust personal data management.
Koidex helps developers check whether packages, browser extensions, and AI models are safe before installing them.
Kubescape is an open-source Kubernetes security platform that provides comprehensive, end-to-end security for Kubernetes environments.
Lakera is an AI-native security platform designed to protect generative AI applications, agents, and multi-chain applications (MCPs) for enterprise teams.
LastPass is a password manager for individuals, families, and businesses.
Lemonade Password Manager is a security tool specifically designed for developers, offering a secure and simple solution for managing not just passwords, but also sens…
Outshift Panoptica is a comprehensive cloud-native application security platform designed to provide full lifecycle protection.
LoginRadius is an Identity-as-a-Service (IdaaS) platform that provides comprehensive customer identity and access management (CIAM) solutions for businesses of all siz…
MeerCOP is a laptop anti-theft and remote monitoring application designed to help users protect their valuable devices and data.
MindFort AI deploys a fleet of autonomous security agents that continuously test products for vulnerabilities and automatically patch them, often within minutes.
Mondoo provides agentic vulnerability management across an organization's entire infrastructure, including cloud, on-premises, SaaS, endpoints, network devices, and th…
NetBird provides an open-source, WireGuard-based overlay network combined with Zero Trust Network Access.
Netfox is a native macOS application designed to provide a live, comprehensive overview of all devices connected to your home network.
NordPass Business is an enterprise-grade password manager designed to help organizations secure their digital assets and streamline access management.
Nuclei is an open-source security scanner that helps organizations discover and understand their attack surface by mapping internet-exposed assets.
OMEGA Ω™ is a comprehensive platform designed to enhance the performance, security, and overall management of digital assets.
OpenFGA is an open-source authorization system that allows developers to define and enforce fine-grained access control policies for their applications.
Pangea provides a comprehensive security platform specifically designed to protect AI applications.
Pangolin is an open-source, identity-based remote access platform that leverages WireGuard to provide secure and seamless connectivity to both private and public netwo…
PanicMode is a desktop utility designed to protect sensitive information from accidental exposure by providing an instant, local privacy overlay.
Papermark is a secure document sharing and tracking platform designed for businesses and individuals who need to share sensitive documents with control and insights.
Passbolt is an open-source, hybrid credential platform designed for modern IT teams and accessible enough for all users.
Phase is an open-source platform designed for fast-moving engineering teams to manage and deploy application secrets and environment variables securely.
PrivacyPal is a web-based tool that lets users enter any website URL to get a simplified overview of its Terms of Service and privacy policy.
Promptfoo is an AI security testing platform designed to help developers and enterprises build and deploy secure AI applications.
PropelAuth provides authentication solutions specifically designed for B2B products, aiming to simplify the integration of robust authentication features.
Proton VPN offers Swiss-based privacy protection with a strict no-logs policy and open-source apps.
Prowler is an open-source security tool for AWS, Azure, GCP, and Kubernetes security assessments.
qsa.sh is a tool that performs an external port and vulnerability scan of your own public IP address, executed directly from your terminal with a single curl command.
Reality Defender provides robust deepfake detection capabilities, enabling enterprises, platforms, and institutions to identify and stop AI-generated and manipulated m…
Refuse is an open-source shim designed to intercept package installation requests from various package managers and block those identified as vulnerable.
Scalekit provides a comprehensive authentication and authorization platform specifically designed for AI applications.
SecurityScorecard provides a Supply Chain Detection and Response (SCDR) platform designed to help Third-Party Risk Management (TPRM) and Security Operations Center (SO…
Sensity AI provides a comprehensive platform for detecting and analyzing deepfakes and other forms of AI-generated synthetic media.
Sentinel is an AI-driven platform designed to provide comprehensive intelligence for security and operational needs.
SimpleLogin is an open-source anonymous email service that allows users to create and manage email aliases to shield their real email addresses from spam, phishing, an…
Snyk is a developer-first application security platform that finds and fixes vulnerabilities in code, open-source dependencies, container images, and infrastructure-as…
Socket is a developer security platform designed to protect software supply chains by analyzing and securing open-source dependencies.
AuthZed provides authorization infrastructure, powered by SpiceDB, that enables engineering teams to implement fine-grained access control across their applications.
SSOJet is a solution designed to enable B2B SaaS companies to quickly integrate Enterprise Single Sign-On (SSO) capabilities into their products without requiring a co…
StealthHound is a Chrome extension designed to protect user privacy by detecting and blocking advanced tracking techniques like browser fingerprinting.
Sublime Security offers a next-generation email security platform that leverages autonomous AI agents to detect, adapt to, and respond to advanced email threats.
SuperTokens is an open-source authentication solution offering email/password, social login, passwordless, and MFA with both self-hosted and managed cloud options.
Suprbox provides a secure layer between your sensitive documents and autonomous AI agents.
Sym is a platform designed to automate and secure access to production infrastructure.
Tailscale is a zero-config VPN built on WireGuard that creates secure networks between devices and servers.
Tenzai provides an AI Hacker platform that actively identifies, exploits, and remediates hard-to-find vulnerabilities across enterprise software.
Terrascan is an open-source security scanner designed to detect compliance and security violations in Infrastructure as Code (IaC) configurations.
Trellix provides a comprehensive cybersecurity platform that unifies security operations across endpoints, networks, and clouds.
Trivy is an open-source vulnerability scanner for containers, filesystems, and infrastructure as code.
TunnelBear is a secure VPN service designed to encrypt your internet connection, keeping your online activity private across any network.
Turnkey provides a powerful and modular operating system for managing private keys, enabling developers to create wallets, sign transactions, track balances, and autom…
UpGuard is a comprehensive Cyber Risk Posture Management (CRPM) platform designed to provide unified, continuous, actionable, and measurable insights into an organizat…
Veeam provides a comprehensive platform for data protection, security, and resilience across diverse IT environments, including cloud, virtual, physical, SaaS, and Kub…
VibeDefend is a security platform designed specifically for AI coding agents.
Windscribe is a comprehensive VPN service designed to protect user privacy, enhance online security, and unblock internet content.
Winston AI (gowinston.ai) is a content-integrity product for educators and publishers: AI-text detection, image and deepfake scans, and plagiarism.
ZoogVPN is a comprehensive VPN service that protects your online privacy and security by encrypting your internet traffic with a highly secure VPN tunnel.