detect-secrets helps teams detect and prevent credentials from entering source code using baselines, plugins, filters and Git hooks.
Read more
detect-secrets helps teams detect and prevent credentials from entering source code using baselines, plugins, filters and Git hooks.
Read more
Fluxion is a terminal-based security auditing tool for evaluating WPA and WPA2 network exposure through controlled captive-portal testing.
Read more
Gitleaks scans Git repositories, files and standard input for passwords, API keys, tokens and other hard-coded secrets in source code.
Read more
hcxtools is a command-line suite for converting, filtering and analysing wireless captures and authentication hashes during authorised security assessments.
Read more
mCaptcha is a privacy-respecting CAPTCHA system that uses proof-of-work and adaptive difficulty to protect websites without image puzzles.
Read more
Cap is a lightweight, self-hosted CAPTCHA alternative using proof-of-work and browser instrumentation.
Read more
ALTCHA is a self-hosted, privacy-focused CAPTCHA alternative using proof-of-work to protect websites from bots, spam and abuse.
Read more
Security is paramount. Security involves defense in depth. Approaching security one step at a time, with consistency and rigour, you can mitigate threats.
Read more
Linux has a good range of port scanners that help administrators identify and rectify weaknesses in a system.
Read more
Vulnerability scanning is an essential activity for enterprise security. We recommend the best free and open source vulnerability detection tools.
Read more
We recommend free and open source firewall tools.
Read more
Single Sign-On is an authentication process that allows users to log in to multiple independent applications with a single set of credentials.
Read more
An intrusion detection system is a device or software application that monitors a network or systems for malicious activity or policy violations.
Read more
Passive OS Fingerprinting Tools rely on sniffing techniques to analyze the information sent in normal network traffic.
Read more
This article recommends open source software that employ different techniques to make it harder for a server running SSH to be compromised.
Read more
A password manager is a utility which helps users store and retrieve passwords and other data. We make our open source recommendations.
Read more
Keep your data safe. There are many different useful tools that offer disk encryption. We recommend the best free and open source solutions.
Read more
Digital forensics is a specialist art. It allows investigations to be undertaken without modifying the media.
Read more
Falco is a cloud native runtime security tool that detects and alerts on abnormal behavior and potential security threats in real-time.
Read more
Let’s talk through some of the most common mistakes people make with email security and how to avoid falling into the same traps.
Read more