Categories
Tracks unmaintained WordPress plugins, known vulnerabilities, and affected site counts for site owners.
Enforces network, execution, and file policies for AI agents on Linux using eBPF and signed audit logs.
Provides a filterable catalogue and live previews of publicly discoverable webcams for internet researchers.
An open benchmark for comparing security scanners on real-world vulnerable code.
Shares passwords, API keys, files, and other secrets through encrypted, self-destructing links for people and agents.
Provides iOS and Android security SDKs and app audits for teams building high-stakes mobile apps.
Analyzes PDF files for malware, tampering, and content-integrity threats.
Reports and signs observed behavior of websites, servers, and bots for AI agents assessing trust.
Checks job postings and recruiter messages for scam indicators and helps job seekers verify or report them.
Lets developers inspect OAuth discovery metadata and test a live PKCE flow from a URL.
Provides teams with encrypted, audited browser-based SQL access to databases, with hosted and self-hosted deployment options.
A native macOS app that explains devices on a local network and flags exposed services.
Analyzes companies’ privacy policies and gives plain-language explanations and grades for consumers.
An open-source proxy for npm, PyPI, and Cargo that helps teams monitor and control dependencies entering their environments.
Removes AI labels, GPS, EXIF, and other hidden metadata from photos in your browser.
Provides rootless VPN access through a local proxy for containers, CI runners, and other restricted hosts.
A Chrome extension that detects credentials and personal data before they are pasted into LLM chats.
Provides cloud-managed secure connectivity between devices and services, including private networking, gateways, public URLs, and phone backups.
Provides security and observability tools with AI investigation for teams deploying in cloud, local, hybrid, or air-gapped environments.
An open map showing surveillance cameras and other surveillance devices.
Records and analyzes security camera video locally on Apple Silicon Macs, with companion iPhone, iPad, and Apple Watch apps.
Gates AI agents' access to services with OAuth, secrets, approvals, and audit logs.
Lets people share encrypted secrets through links that can only be opened in the recipient’s browser profile.
A cross-platform offline desktop app for creating and unlocking time-delayed encrypted files.
Monitors website Content Security Policy violations and helps teams build policies they can enforce.
Monitors LAN decoys for suspicious activity and sends alerts to home lab and business users.
Audits websites for anti-bot defenses and monitors changes for security and platform teams.
Automates security questionnaires and manages trust centers for businesses using their security evidence.
Lets users search local files by sending compact field signals instead of raw text.
Removes hidden metadata from photos, videos, PDFs, and documents in your browser for people sharing files.
Audits software dependencies for vulnerabilities, license conflicts, and brittle packages, then prioritizes fixes for development teams.
A local firewall blocks malicious npm and PyPI installs for developers, CI systems, and coding agents.
Tracks open-source vulnerability volumes and highlights critical supply chain security alerts.
Secures MCP-using AI agents with scoped capability tokens and deterministic runtime policies.
Lets Bitcoin users prove their OG status with zero-knowledge proofs and compare their rank on a leaderboard.
Creates AES-256 password-protected ZIP files in your browser without uploading files.
Provides honeypot-based threat intelligence lookups, feeds, and an MCP server for security teams and AI assistants.
An iPhone app that detects snatching and locks selected apps until the owner verifies with Face ID or a passcode.
Scans AWS environments and maps security evidence to SOC 2 controls for teams preparing for an audit.
Scans AI-generated code for security flaws and offers one-click fixes for developers.
Checks a domain’s email authentication DNS records for security and deliverability issues.
Tests whether PGP email encryption, key discovery, and signature verification work by sending an encrypted echo report.
A Claude plugin that evaluates agent workflows for compliance risks before deployment.
Audits a domain’s DNS and email security settings and provides findings and copyable fixes.
A Mac app that hides sensitive apps during screen sharing and supports saved profiles and Focus Mode.
Scans MCP servers for security risks before developers install or publish them.
Checks files in the browser for hidden content, metadata, personal information, secrets, links, and prompt-injection risks before AI sharing.
Locally scans browser prompts and terminal input for secrets before they reach AI tools.
Analyzes server logs to estimate AI bot bandwidth costs and generate blocking rules for website operators.
Self-hosted OAuth2 and OIDC authentication infrastructure for teams building applications.
Creates deterministic visual identities from public keys for sharing or export.
Lists BSides security conferences worldwide and archives talks by chapter and technology.
Analyzes a domain’s TLS versions, cipher suites, and certificate chain for website owners and developers.
Helps security teams inventory vulnerable cryptography and plan prioritized post-quantum migrations.
Scores and authorizes agents paying API endpoints through x402, with signed receipts and middleware.
Reviews applications, code, and Claude Code configurations for security risks and provides prioritized remediation tasks.
A Chrome extension that creates unique email addresses for signups and helps filter spam and track data sharing.
Scans files, databases, and cloud storage to help organizations measure privacy risk and regulatory exposure.
Helps teams scan apps, repositories, binaries, and authenticated flows, then triage and remediate security findings.
Scans code for hidden Unicode characters and malicious payload patterns before developers use or deploy it.
Shows live honeypot login attempts and provides attacker IP blocklists and an API for server operators.
Protects Kubernetes secrets by replacing placeholders with credentials in HTTPS traffic using eBPF.
Generates Ethereum wallets for AI agents through an unauthenticated HTTP API.
Checks a business domain's email and website security settings and provides plain-language reports.
Provided confidential virtual machines with hardware-sealed privacy, SSH root access, and confidential-mode GPU support.
A prototype that lets developers run AI agents with narrowly scoped, sandboxed capabilities.
Controls and audits engineering teams’ production database access with scoped queries and immutable logs.
Ranks AI coding assistants by how well they resist generating insecure code under conversational pressure.
Analyzes touch and pointer signals to estimate whether interactions resemble human input.
A browser extension for inspecting, editing, and testing Content Security Policies during web development.
Scans prompts and other inputs for prompt injection risks before they reach AI systems.
A desktop app for managing PGP keys and encrypting, signing, decrypting, and verifying messages locally.
Checks AI agent tool calls against rules to block or gate risky actions.
Tracks malicious and policy-violating browser extensions for security analysts and organizations.
Continuously red-teams customer-facing AI agents to find security vulnerabilities.
Redacts sensitive information in PDF files locally in a browser without uploading them.
Manages AI agents’ access to SaaS tools with human approvals, encrypted credentials, and audit logs.
Runs OpenClaw and Hermes in an isolated VM with token protection and access controls.
Provides an external allow-or-deny boundary that evaluates automated and AI-driven actions before execution.
An open specification and validator that lets site owners set machine-readable policies for AI agents accessing their content.
Controls AI agents’ access to systems by enforcing permissions and auditing their actions.
A proxy that tokenizes sensitive data before sending prompts to LLM providers and restores it in responses.
Provides browser-based IP, network, and security tools alongside guides and free courses for internet users.