Security

Application security platform combining SAST, SCA, DAST, secrets, IaC, container and cloud scanning.

Uptime checks, heartbeats, on-call alerts and status pages, plus an eBPF Linux security agent.

Privacy audits and ongoing workflows that help teams meet GDPR and similar rules.

Certificate lifecycle tool that issues, renews and monitors SSL certs, plus CT log search.

TLS certificate monitoring that inspects the served chain on any port and alerts by email or webhook before expiry.

Reverse proxy in front of your sites providing DNS, caching, SSL, WAF and DDoS protection.

Zero-trust access, secure web gateway and device connectivity for teams.

Security scanner that detects, validates and auto-fixes vulnerable code and packages in 20+ languages.

Secrets and config manager that syncs environment values to cloud providers.

Encrypted syncing and sharing of .env files across a team.

Fraud screening API that scores orders for card payment fraud and chargeback risk.

Secrets detection that scans Git repositories for 350+ kinds of credentials and sensitive files.

Compiler that packs shell scripts into obfuscated executables with anti-debugging, an shc alternative.

Hosted vulnerability scanning for web apps, servers and networks.

Secrets management for teams, from local development through production and third-party services.

• Open source

Published audits of open-source repos grading security, maintainability, dependencies and malicious packages.

IP reputation and location lookups, plus passive DNS and CT log search.

• No sign-up

IP lookup API with strong detection of hosting and datacenter IP ranges.

• No sign-up

Risk scoring API for IPs, emails, phones, domains and devices, plus Web Bot Auth checks for AI agents.

• No card

API that flags suspicious or fraudulent sign-in attempts and alerts the affected users.

Cloud log collection and SIEM from ManageEngine for security and audit analysis.

Dependency vulnerability monitoring for JVM, JavaScript, Node.js, .NET and Ruby projects.

DNS-level firewall that blocks ads, trackers and malicious domains.

Daily certificate monitoring with expiry alerts, chain and OCSP checks and CT issuance history.

• No card

Cloud secure web gateway filtering staff internet traffic.

Website security scanner, antivirus and PHP application firewall.

IP lookup API that flags VPN users and residential proxy traffic, offered via RapidAPI.

Python dependency scanner that flags vulnerable packages and opens update pull requests.

Static analysis and dependency scanning for security bugs in code.

Signup screening API scoring the email, phone number and IP of new registrations.

• No card

Secrets manager where machines authenticate to fetch credentials.

Hosted store for application secrets and environment variables.

Encrypted environment variable store for teams, with command-line tool, Kubernetes integration and audit trail.

Dependency supply-chain scanner and CLI firewall that blocks risky or malicious packages.

SDKs and services for E2E encryption, protecting databases and securing IoT devices.

Password manager with an encrypted vault, autofill and secure sharing.

• Personal use

Search tool for public TLS certificates logged in Certificate Transparency.

Data encryption and protection platform for .NET and Java applications.

Browser tool for encoding, decoding, encrypting and analysing data through chained operations.

• Open source

CLI that validates Kubernetes manifests and Helm charts against policies to stop misconfigurations.

• Open source

Automated scanner that checks a Django site for common security misconfigurations.

Open-source dependency management covering license compliance and vulnerability scanning.

Publicly trusted wildcard SSL certificate for *.localhost.direct, for HTTPS in local development.

• No sign-up

Lookup that checks whether a secret appears among leaks found in public GitHub data.

Data breach lookup service with a REST API for checking breached accounts.

Checker for a domain's support of modern standards: IPv6, DNSSEC, HTTPS, DANE and mail security.

Open-source encrypted chat and file sharing for teams, families and communities.

• Open source

Certificate authority issuing browser-trusted TLS certificates through ACME automation.

Subdomains under localcert.net that public CAs will certify, for private network hosts.

Scanner that grades a website's security headers and configuration with fix advice.

Password manager with email aliases, 2FA codes, passkeys and sharing across all platforms.

Threat intelligence feed of indicators of compromise aimed at public cloud infrastructure, served by API.

Community edition of Qualys scanning for web app vulnerabilities and OWASP risks.

Deep analysis of a public web server's SSL/TLS setup with a letter grade.

Attack surface monitoring for subdomain takeover risk, with a DNS scanner and SARIF GitHub Action.

Remote scanner that checks a website for malware, blocklisting and known issues.

Checker for TLS servers on any protocol, covering configuration, certificates and chains.