All tools

1Password

Password manager with Watchtower, SSH agent and developer secrets in the same vault.

9.0Security·Passwords

Bitwarden

Open-source password manager you can self-host or run as a cheap team cloud.

8.7Security·Passwords

Okta

Workforce identity — SSO, MFA, directory and the Auth0 customer-identity sibling.

8.1Security·Identity

SecLists

The security tester's companion — usernames, passwords, URLs and fuzzing lists.

Security·AppSec

Ghidra

NSA's software reverse-engineering framework. Disassembler, decompiler, debugger.

8.8Security·AppSec

Vaultwarden

Unofficial Bitwarden-compatible server written in Rust. Tiny and self-hostable.

9.0Security·Passwords

Pi-hole

A black hole for internet advertisements. Network-wide DNS sinkhole.

9.0Security·AppSec

uBlock Origin

Efficient blocker for Chromium and Firefox. Fast, lean and widely recommended.

9.4Security·AppSec

Snyk

Developer security — deps, containers, IaC and first-party code in the PR.

8.3Security·AppSec

HashiCorp Vault

Secrets, encryption and dynamic credentials for machines — the default vault.

8.5Security·Secrets

WorkOS

Drop-in enterprise features: SSO, Directory Sync, Audit Logs and RBAC APIs.

8.8Security·Identity

Semgrep

Fast SAST and secrets scanning with a rules language that security teams can own.

8.6Security·AppSec

Socket

Supply-chain scanner that flags malicious npm/PyPI before it lands in the lockfile.

8.4Security·AppSec

GitGuardian

Secrets detection for git history, PRs and the tools developers already use.

8.3Security·Secrets