Security & Privacy
Discover open-source Security & Privacy tools — each one community-curated and honestly ranked so you can find something dependable to build with.
20 open-source tools in this category.
VaultwardenCurated
Lightweight, self-hostable server compatible with Bitwarden clients — run your own password manager.
Metasploit FrameworkCurated
Penetration testing framework with exploit development and vulnerability verification tools.
TrivyCurated
Scanner for vulnerabilities, misconfigurations, and exposed secrets in containers, code, and cloud infrastructure.
KeycloakCurated
Identity and access management server with SSO, OAuth2, OpenID Connect, and user federation.
NucleiCurated
Vulnerability scanner that runs YAML-based templates against apps, APIs, networks, DNS and cloud configurations.
GitleaksCurated
Scans git repositories and files for hardcoded secrets like API keys and passwords.
KeePassXCCurated
Cross-platform, offline password manager; community continuation of KeePass.
ageCurated
Simple file encryption tool and Go library with small explicit keys and no configuration options.
sopsCurated
Encrypts and decrypts values in YAML, JSON, ENV, and INI files, integrating with cloud KMS providers.
WazuhCurated
Open-source security platform combining SIEM and XDR for endpoint and cloud workload monitoring.
CryptomatorCurated
Client-side, password-based encryption for your cloud files, across desktop and mobile.
OWASP ZAPCurated
Web application security scanner for finding vulnerabilities during testing and development.
DarkmoonCurated
Autonomous AI penetration-testing CLI that orchestrates specialist agents and offensive tools to find and prove vulnerabilities in apps.
DeepZeroCurated
Python pipeline engine for security researchers to run configurable, resumable analysis workflows on Windows drivers.
ShellWardCurated
Security middleware that intercepts AI agent tool calls at runtime to block prompt injection, data exfiltration and dangerous commands
VPN BypassCurated
macOS menu bar app that routes chosen domains and services around your VPN, or only those through it, and restores routes on reconnect.
AuthierCurated
Open-source password manager with browser autofill, encrypted vault sync, TOTP codes, and trusted-device approval.
Client-side toolkit to watermark images, audio and documents, and verify C2PA provenance, fingerprints and forensic signals.
NSS Security CheckCurated
Local CLI and GitHub Action that scans Next.js + Supabase + Stripe apps for leaked keys, missing RLS and unsafe webhooks.
ClonePeekCurated
Read-only CLI and GitHub Action for reviewing repository execution hooks before trusting unfamiliar source code.