SecLists

Ghidra

NSA's software reverse-engineering framework. Disassembler, decompiler, debugger.

8.8Security·AppSec

1Password

Password manager with Watchtower, SSH agent and developer secrets in the same vault.

9.0Security·Passwords

Bitwarden

Open-source password manager you can self-host or run as a cheap team cloud.

8.7Security·Passwords

Okta

Workforce identity — SSO, MFA, directory and the Auth0 customer-identity sibling.

8.1Security·Identity

Semgrep

Fast SAST and secrets scanning with a rules language that security teams can own.

8.6Security·AppSec

Pi-hole

A black hole for internet advertisements. Network-wide DNS sinkhole.

9.0Security·AppSec

uBlock Origin

Efficient blocker for Chromium and Firefox. Fast, lean and widely recommended.

9.4Security·AppSec

Snyk

Developer security — deps, containers, IaC and first-party code in the PR.

8.3Security·AppSec

Socket

Supply-chain scanner that flags malicious npm/PyPI before it lands in the lockfile.

8.4Security·AppSec