Find web app vulnerabilities, audit for OWASP Risks
qualys.com
#security and pki
27 tools curated in this category — including qualys.com, pyup.io, Public Cloud Threat Intelligence
Find on mySelectas all sites and tools related to security and pki. This selection of 27 resources is reviewed and maintained by the community. The most popular include qualys.com, pyup.io, Public Cloud Threat Intelligence. Each tool comes with a review, tags, comparisons and alternatives to help you make the best choice.
Monitor Python dependencies for security vulnerabilities and update them automatically. Free for one private project, unlimited projects for open source.
getsafety.com
High confidence Indicator of Compromise(IOC) targeting public cloud infrastructure, A portion is available on github (https://github.com/unknownhad/AWSAttacks). Full list is available via API
cloudintel.himanshuanand.com
Free website security check, site antivirus, and server firewall (WAF) for PHP. Email notifications for registered users in the free tier.
protectimus.com
Find and fix security vulnerabilities in your site.
observatory.mozilla.org
Monitor Java, Javascript, .NET, Scala, Ruby, and NodeJS projects for security vulnerabilities in dependencies. Free for one private project, unlimited projects for open source.
meterian.io
DNS and email security analyzer that checks SPF, DKIM, DMARC, DNSSEC, BIMI, MTA-STS, and 40+ blacklists with AI-powered explanations and fix suggestions. 100% free, no signup required.
intodns.ai
Test for modern Internet Standards like IPv6, DNSSEC, HTTPS, DMARC, STARTTLS and DANE
internet.nl
Open source platform that lets you manage developer secrets across your team and infrastructure: everywhere from local development to staging/production 3rd-party services. Free for up to 5 developers.
infisical.com
Online vulnerability scanner for web applications, servers, and networks. Ten free scans per month.
hostedscan.com
Keep secrets out of your source code with automated secrets detection and remediation. Scan your git repos for 350+ types of secrets and sensitive files - Free for individuals and teams of 25 developers or less.
gitguardian.com
Sync your .env files, quickly & securely. Stop sharing your .env files over insecure channels like Slack and email, and never lose an important .env file again. Free for up to 3 teammates.
dotenv.org
Universal Secrets Manager for application secrets and config, with support for syncing to various cloud providers. Free for five users with basic access controls.
doppler.com
Scan your Django site for security flaws with this free, automated checkup tool. Forked from the Pony Checkup site.
djcheckup.com
Open Source CLI tool to prevent Kubernetes misconfigurations by ensuring that manifests and Helm charts follow best practices as well as your organization’s policies
datree.io
A simple, intuitive web app for analyzing and decoding/encoding data without dealing with complex tools or programming languages. Like a Swiss army knife of cryptography & encryption. All features are free to use, with no limit. Open source if you wish to self-host.
gchq.github.io
Cloud-first, developer-friendly security platform prevents data breaches in .NET and Java applications
crypteron.com
Free autonomous security platform that finds, validates and fixes insecure code and packages across +20 languages and frameworks. Free plan includes 1 user and 2 repos.
corgea.com
Manage SSL Certificate issuance, renewal, and monitoring. Search the Certificate Transparency Logs. Free for 3 certificates and 1 user after the beta.
certkit.io
All-in-one appsec platform covering SCA, SAST, CSPM, DAST, Secrets, IaC, Malware, Container scanning, EOL,... Free plan includes two users, scanning of 10 repos, 1 cloud, 2 containers & 1 domain.
aikido.dev