GitGuardian

Semgrep

Fast SAST and secrets scanning with a rules language that security teams can own.

8.6Security·AppSec

Snyk

Developer security — deps, containers, IaC and first-party code in the PR.

8.3Security·AppSec

HashiCorp Vault

Secrets, encryption and dynamic credentials for machines — the default vault.

8.5Security·Secrets

1Password

Password manager with Watchtower, SSH agent and developer secrets in the same vault.

9.0Security·Passwords

Socket

Supply-chain scanner that flags malicious npm/PyPI before it lands in the lockfile.

8.4Security·AppSec

SecLists

The security tester's companion — usernames, passwords, URLs and fuzzing lists.

Security·AppSec

Ghidra

NSA's software reverse-engineering framework. Disassembler, decompiler, debugger.

8.8Security·AppSec