Security tools
Scanners, sandboxes and firewalls that watch what software on your machine is doing.
308 results, page 8 of 11
Pomerium
An identity-aware reverse proxy that gives secure access to internal applications without a VPN.
Portmaster
Shows every connection each application makes and lets you block any of them, with sensible defaults already set.
Postmark DMARC Digests
Free service that turns a domain's DMARC reports into readable weekly email summaries.
privacy.sexy
Generates privacy and hardening scripts for Windows, macOS and Linux.
privacyIDEA
Open-source, self-hosted multi-factor authentication server that manages OTP and other token types.
Promptfoo
A command-line tool for testing prompts, evaluating model output and red-teaming LLM applications and agents.
Prowler
Check cloud environments for security configuration issues.
Purple Knight
A free Windows tool that assesses Active Directory, Entra ID and Okta for security weaknesses.
Qualys Community Edition
Free, cloud-based edition of the Qualys security platform for asset discovery and vulnerability assessment.
Qubes OS
Operating system that compartmentalises work into isolated virtual machines.
Quttera Website Malware Scanner
Free online scanner that checks a website's public content for malicious scripts and threats.
radare2
Command-line reverse engineering framework and binary analysis toolkit.
Radio Silence
A lightweight outbound firewall and network monitor for macOS that blocks individual apps from the internet.
RansomWhere?
A macOS utility that detects processes encrypting files like ransomware and stops them for review.
Recon-ng
Modular web reconnaissance framework with a Metasploit-style interface.
REMnux
Linux toolkit for reverse engineering and analysing malicious software.
Report URI
A hosted service that collects and analyses CSP and other browser security reports from your website.
Responder
LLMNR, NBT-NS and mDNS testing tool for internal network assessments.
RITA
A network traffic analysis framework that detects command and control communication such as beaconing.
Rizin
An open-source reverse engineering framework and command-line disassembler for analysing binaries.
Rspamd
An open-source spam and phishing filtering engine for mail servers.
SafeLine
A self-hosted web application firewall and reverse proxy that protects web apps from attacks.
Sandboxie-Plus
Runs a Windows program inside an isolated box, so whatever it writes to disk or the registry disappears afterwards.
Santa
A binary and file access authorization system for macOS that allows or blocks executables.
Scalefusion
A hosted unified endpoint management platform for Android, iOS, macOS, Windows and Linux devices.
ScubaGear
A CISA PowerShell tool that assesses a Microsoft 365 tenant's configuration against the SCuBA security baselines.
ScubaGoggles
A CISA command-line tool that checks a Google Workspace organization's settings against the SCuBA secure configuration baselines.
SecLists
Find reusable test data for authorized security assessments.
Secretive
Stores SSH keys in the Mac Secure Enclave instead of on disk.
Security Headers
A web service that analyses a site's HTTP response headers and grades them from A+ to F.
