Categories
Provides disposable public and private email inboxes for signups, verification codes, and developer workflows.
Tracks changes to MCP server and agent skill descriptions and flags risky drift for agent users.
Helps software teams scan npm lockfiles for dependency maintainers and accounts that attackers might take over.
Protects application APIs from automated abuse using rate limits, network signals, and computational challenges.
Provides an invite-only identity protocol for verifying human presence online.
Connects AI agents to report spam calls and texts and compare reports to identify patterns.
Helps organizations inspect AI agent traffic, control spending, mask sensitive data, and review risky actions.
Provides browser-based tools for inspecting payment card data, EMV, cryptography, and smart-card formats.
A public document-processing target where security researchers can earn a bitcoin bounty for achieving server code execution.
Controls AI agents' access to connected apps and requires approval for actions according to user-defined rules.
Provides agents and developers with free CVE lookups, dependency vulnerability checks, and vulnerability updates.
Helps PHP software vendors manage Cyber Resilience Act compliance, vulnerability alerts, and incident reporting.
Tracks post-quantum cryptography adoption across websites and SSH servers using signed network probes.
Controls what AI apps can do in connected accounts with approval rules and activity monitoring.
Checks domains against security and compliance standards across DNS, email, web, and registration settings.
Checks a domain or IP for exposed hosts, open ports, software versions, known vulnerabilities, and web security issues.
Tracks and ranks AI coding agents on how they handle machine and data security.
Controls what AI agents can do by enforcing policies on their actions and routing some for approval.
Helps small teams prepare for compliance audits by organizing evidence, policies, reviews, and trust center access.
A proxy client for routing traffic through protocols such as Shadowsocks, VLESS, Hysteria2, and WireGuard.
A macOS clipboard manager that detects and conceals API keys and other secrets from clipboard-reading apps.
A cybersecurity challenge that awards a bitcoin prize to whoever can steal it from the server.
Tracks actively exploited CVEs, their severity, exploitation status, and the versions that fix them.
A server security agent uses an LLM to investigate vulnerability notices and apply, verify, and report fixes.
Lets developers publish SSH public keys under usernames so others can grant server access with a command.
Helps developers create threat models with data-flow diagrams, documented threats and mitigations, a browser editor, and a CLI.
Provides secure remote access and management for Linux servers and other devices.
Monitors Mac security settings, apps, network activity, and AI agents to help users block risks.
Automates cloud security governance, threat response, and compliance across AWS accounts for security and IT teams.
A free directory that helps organizations assess AI tools against GDPR and EU AI Act requirements.
Checks SSL/TLS certificate expiry and trust, with tools and monitoring for website owners.
Checks websites for signs of PHP2Shell exposure and provides mitigation guidance for site operators.
Checks websites for exposure to PHP2Shell vulnerabilities and provides remediation steps.
Controls AI agent actions to block or hold risky operations such as data deletion, secret leaks, and purchases.
Checks public evidence about MCP servers and audits configurations for developers and AI agents.
Enforces workload-level network policies on VMs, bare metal, and cloud instances using host firewalls.
Screens AI agent prompts for attacks and provides cryptographic attestations through a hosted API.
A self-hosted dead man's switch that alerts designated contacts if a developer stops checking in.
Routes Windows apps, IPs, and subnets through selected network interfaces, including multiple VPNs.
Encodes hidden strings as downloadable visual patterns for printing or sharing.
Checks PDFs for hidden text and other redaction failures without uploading files, for anyone handling sensitive documents.
Lets individuals and teams run private networks using their own Headscale server, relays, and access policies.
Looks up IP location, network, VPN and bot signals for website owners through a web tool and JSON API.
Filters AI tool traffic for developers, teams, and everyday users through cloud or on-device options.
Generates two-factor authentication codes on iPhone and Apple Watch, with encrypted storage and optional iCloud sync.
Finds cloud and AI security risks, proposes infrastructure code fixes, and blocks risky AI agent actions.
Scans websites for trackers, consent issues, and other privacy risks, and offers tools to block them.
An interactive reference catalog of malware families from the EMBER 2018 dataset for security researchers.
Records and verifies web pages to detect silent edits and preserve evidence.
A benchmark for evaluating AI agents on reverse engineering and hacking consumer hardware.
Provides cookie consent banners and consent controls for scripts in JavaScript applications.
Removes and verifies AI provenance and private metadata in files directly in the browser.
Provides short cybersecurity news briefs and tracks CISA Known Exploited Vulnerabilities for security professionals.
A browser-based tool that adds purpose and recipient watermarks to IDs and sensitive documents without uploading them.
Checks website security and uptime, with monitoring, alerts, and detailed probes for domain owners.
Scans AI-generated app repositories for exposed API keys, missing Supabase row-level security, and unprotected routes.
Tracks whether AI tools train on prompts using dated terms and change records.
Provides an API for adding and detecting invisible forensic watermarks in images, PDFs, and videos.
Detects AI agents and crawlers on websites so developers can adapt, log, or block their behavior.
Blurs personal data on webpages before screen sharing or screenshots, locally in the browser.
Checks URLs for quishing and phishing before QR scanner apps or AI agents open them.
Helps early-stage software teams manage SOC 2 readiness, evidence, policy approvals, and auditor review packages.
Checks PDFs for text and metadata that may remain hidden beneath redactions.
Checks documents for hidden content before AI assistants or applications read them.
Finds accounts, breaches, and public identity clues linked to an email address or company domain.
Lets people approve and monitor AI agents accessing websites without sharing passwords.
Helps people find, review, and permanently remove sensitive information from PDF files.
Monitors websites for founders, checking uptime, key customer flows, security issues, and launch readiness.
Enforces release approvals, commit checks, and deployment freeze rules in GitHub Actions and GitLab CI.
Signs documents in your browser using a domain and secret, without uploading the document.
Scans container images for SBOMs, vulnerabilities, and end-of-life components without requiring signup.
Analyzes pcap and pcapng files in the browser, showing DNS, HTTP, TLS, hosts, and connections.
Captures and tests API traffic from web and Android apps for security analysis.
A hosted store for audit and compliance apps that turn routine controls into evidence packs.
Blocks malicious network traffic upstream for homelab operators and small networks using BGP blackholing.
Turns threat intelligence findings into review records and audit-ready reports for security compliance teams.
Analyzes PDF metadata and sanitizes common document information locally in the browser.
A deterministic policy engine that protects LLM agents from prompt injection and data exfiltration.
Creates local, read-only backups of Notion workspaces for offline browsing and recovery.
Provides AI agents with temporary, auditable access to machines instead of standing SSH access.
A free directory for comparing SaaS vendors’ security certifications and compliance status.
Stores encrypted files and messages for loved ones, releasing them automatically if you stop checking in.
Scans code repositories for exploitable security vulnerabilities and provides targeted fix prompts.
Provides a hosted API for encrypting and decrypting application data with managed keys.
Adds cryptographic access controls and tamper-evident auditing to AI agents used by regulated teams.
