
Autonomous AI pentesting for web apps, APIs, code, infrastructure and cloud, with audit-ready reports and auto-generated fix pull requests.

A password manager and credential vault for individuals, families and businesses, with autofill, secure sharing and admin controls for teams.
40 tools ranked by relevance

Autonomous AI pentesting for web apps, APIs, code, infrastructure and cloud, with audit-ready reports and auto-generated fix pull requests.

1Password generates, stores and autofills passwords across devices, with breach alerts and secure sharing built in.

Open-source, free, cross-platform password manager.

Mainstream password manager, with a limited free version.
Encrypted password manager from Nord Security, with a free tier and per-seat business plans.

Namecheap is a domain registrar with bundled hosting, SSL and email options, known for low first-year domain prices that rise at renewal.
Centralised secret and environment variable management.
Sync and encrypt .env files across environments.
HashiCorp Vault centrally stores, distributes and rotates secrets and certificates for humans, machines and applications.
Open-source secrets, access and certificate management platform for developers, with a free self-hostable core.

Application logic layer for Webflow: APIs, auth and dynamic data.
Open-source library for adding flexible authentication to JavaScript apps.

Browser accessibility audit for spotting common WCAG issues.

Web pentest suite for proxying, scanning, and manual testing.

Authentication and user management platform with prebuilt UI, free up to 50,000 monthly retained users per app.

CDN, DNS, security, cache, and edge protection for sites and apps.
GitHub's free, built-in bot that opens pull requests to patch vulnerable or outdated dependencies.

Code scanning, secret scanning, and advanced security inside GitHub.

Free Windows screen reader for accessibility testing.

Open-source proxy and scanner for web security testing.