Categories
A rootless Linux sandbox that isolates coding agents and third-party programs for developers.
Tracks publicly reported incidents where AI played a material role in hacking, cyber operations, or security research.
Creates disposable email aliases that forward to a real inbox and let users reply without revealing their address.
A REST API helps developers validate email addresses and domains to block disposable and risky signups.
Observes and publishes privacy-preserving telemetry about AI agent and web scraper requests.
A server-blind encrypted paste service with expiring links and read-once options.
A Linux tool that detects repeated login failures in logs and blocks offending IP addresses.
Detects coordinated AI-driven cyberattacks across business infrastructure for organizations using AWS.
Checks software packages downloaded by AI coding tools on team computers and can restore safe versions of harmful updates.
Protects developers’ API keys on Mac from unauthorized programs and AI agents.
Checks whether your public IP has been observed in a residential proxy network and suggests what to investigate.
Lets two people exchange an encrypted secret once without storing it on the server.
A Mac app that blocks ads, trackers, and other sites system-wide using customizable hosts lists.
Shows people what a web page can learn about their browser, device, and behavior, with measurements performed mostly in-browser.
Scans AI coding agent sessions for credentials and blocks risky actions involving secrets or untrusted content.
Provides anonymous, crypto-paid SOCKS5 proxy access for AI agents without accounts or activity logs.
Signs and verifies AI agent instruction files and skills so users can check their publisher and detect changes.
A desktop password manager that stores encrypted passwords, notes and 2FA codes in an image on the user's device.
Tracks whether apps use customer data to train AI models and whether users can opt out.
Provides security researchers and red teams an API to search an indexed database of observed subdomains.
A free searchable index helps security researchers compare public bug bounty programs and track scope changes.
An open email protocol that requires sender signatures and recipient encryption.
Checks text and files for AI watermarks and removes supported invisible characters and metadata.
Creates transparent warning-style redirect links for harmless pranks and authorized security awareness demos.
Continuously pentests code, APIs, web apps, infrastructure, and cloud for security teams.
Checks public websites for signs of fake stores and businesses, including suspicious reviews and unsupported claims.
Scans websites for security issues and uses an AI advisor to explain fixes.
Provides end-to-end encrypted self-destructing notes and anonymous discussion.
A free browser game that teaches players to recognize and survive AI-enabled cyber threats.
Helps enterprises govern AI agent actions by checking requests against identity-based policies and recording decisions.
A public register tracks agent-payment implementations’ retry safety and offers conformance testing.
Re-encodes images in the browser to remove embedded metadata without uploading files.
A private iPhone and iPad app combining Tor browsing, encrypted storage, offline chat, games, and on-device AI.
Provides encrypted, receive-only email inboxes with unlimited aliases for people seeking privacy.
Helps agencies and freelancers audit WordPress sites and create white-label reports covering security, performance, SEO, and site health.
Monitors public records for supplier and third-party risks and emails source-linked alerts to businesses.
A local password manager for Windows and Linux that stores passwords, 2FA codes, and recovery details in an encrypted vault.
A Mac app that detects and removes personal and health identifiers from files before sharing them.
Searches domain and certificate datasets, monitors brands, and detects typosquatting for security teams and researchers.
A server-side PHP framework that blocks bots, scrapers, and web attacks without cloud services or cookies.
Checks public links for redirect paths, final destinations, and URL warning signs before users open them.
Turns security scanner and pentest findings into reviewed pull requests and evidence reports for software teams.
An API that classifies images and videos for nudity and explicit content to help apps moderate user uploads.
Encrypts and stores files long term, then mails a certificate containing the access details and decryption key.
Provides a free format for creating and independently verifying signed evidence of AI agent runs.
Locks a Mac into a single website for unattended public displays and kiosks.
Desktop software that anonymizes sensitive text, documents, and images locally before users share them.
Tests browser fingerprinting signals locally and estimates how identifiable a browser is.
Screens cryptocurrency wallets and transactions for sanctions, scams, stolen funds, and other AML risks.
Lists known vulnerabilities across the software and hardware stack used by GPU datacenters.
Creates password-protected, AES-256 encrypted PDFs in the browser without uploading the text.
An email-checking API helps SaaS teams detect disposable addresses and prevent fake signups and trial abuse.
Scans websites for accessibility issues and prioritizes fixes in plain English for site owners.
A hosted platform that uses an autonomous AI agent to test applications for vulnerabilities and verify findings with exploits.
Provides reusable anonymous identity proofs and user-held encryption for applications.
Generates passwords in the browser without sending data elsewhere.
Demonstrates behavioral biometrics by comparing typing patterns to identify who typed a passage.
Encrypts and backs up photos and videos across devices for people who want private storage.
Blocks ads and trackers across iPhone and Android apps using on-device DNS filtering.
Checks a website’s SSL certificate validity and expiry, with ongoing monitoring available for domain owners.
Detects runtime threats in Kubernetes clusters and sends actionable alerts from a self-hosted deployment.
An offline password and digital vault app for storing passwords, payment cards, secure notes, and seed phrases locally.
Provides cryptographic policies and approvals to control AI agents’ access to digital assets and systems.
A Python command-line tool for indexing and verifying file backups across external USB drives.
Parses TPM event logs locally in a browser using WebAssembly, without uploading files.
Scans code repositories for security vulnerabilities and provides prioritized fixes for developers.
Checks network, browser, and location signals that may affect ChatGPT, Plus, Pro, and Codex access.
Helps teams turn regulations into structured requirements, assess compliance with AI agents, and verify evidence.
Helps organizations compare AI vendors on data sovereignty, compliance, and deployment options using source-linked records.
Tests what browser details and leaks a website can detect without uploading the results.
Creates encrypted, one-time secret note links that delete after opening or expiration.
Transfers files and credentials to an agent's machine through one-time upload links.
Provides a verifiable online profile and handle that people, apps, and agents can look up.
A public-interest community offering AI security education, red-team practice, workshops, events, and open resources.
Monitors GitHub organizations for security threats and suspicious activity, then alerts teams.
Scans Supabase apps and their code for security issues, then provides evidence and fixes for developers.
Provides verifiable audit receipts and replayable governance for AI agent work.
Runs uBlock Origin cosmetic filters in Chrome through a shared extension or a custom extension built from your rules.
Provides teams with monitoring, permission controls, and rollback protection for AI agents.
A free, open-source password manager for Chrome, Firefox, and Android that stores encrypted vaults on-device.
Gives AI agents separate identities, controlled access to API keys, usage limits, audit logs, and a kill switch.
Helps small teams prepare for SOC 2 and ISO 27001 by organizing tasks and collecting compliance evidence.
Scans publicly accessible websites for security issues in AI-built apps and explains how to fix them.
An open-source Python prototype for researching controls that make AI-driven business operations safer.
Provides a low-latency firewall and circuit breaker for agentic systems.
Creates watermarked, redacted copies of IDs and passports on a phone for people asked to share identity documents.