Best Indie Security Tools in 2026

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination d

Open-source password manager for individuals and teams.

Deduplicating archiver with compression and encryption.

Free backup software with encryption and cloud storage support.

Zero-config VPN built on WireGuard. Mesh networking made easy.

Modern, fast VPN tunnel. Simple and cryptographically sound.

CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extrac

Periodic cyber security newsletters that capture the latest news, summaries of conference talks, res

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Window

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance tes

A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no con

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, c

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories,

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps fro

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessment

A simple, decentralized mesh VPN with WireGuard support.

Set up a personal VPN in the cloud

Password manager app for Android

OpenVPN is an open source VPN daemon

Community guide to securing and improving privacy on macOS.

🔐 Open source password manager with Nextcloud integration

The SpecterOps project management and reporting engine

:key: stateless open source password manager

QtPass is a multi-platform GUI for pass, the standard unix password manager.

The slightly more awesome standard unix password manager for teams

Android code for the Proton Pass application

WireGuard VPN installer for Linux servers

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2

A comprehensive collaboration platform offering end-to-end encrypted messaging, file sharing, and video calls with enterprise-grade security and compliance features.

Open-source AI governance platform helping teams meet regulatory standards like EU AI Act and ISO 42001. Monitor model performance, manage risks, and maintain compliance with enterprise-grade security

- Script that checks for dozens of common best-practices around deploying Docker containers in production. By [docker][docker]

a simple password manager. encryption via age, written in portable posix shell

Secure secret management platform with public key encryption, automated rotation, versioning, and real-time collaboration tools for development teams.

Open-source password manager with end-to-end encryption for passwords, credit cards, notes, and documents. Cross-platform sync with secure sharing capabilities.

A Quick-Start guide for AWS Lambda Security

:ice_cube: - This [InSpec][inspec] compliance profile implement the CIS Docker 1.12.0 Benchmark in an automated way to provide security best-practice tests around Docker daemon and containers in a pro

Bindings for Security Framework (OSX native)

A comprehensive platform for automating compliance workflows, managing security questionnaires, and maintaining security policies with full transparency.

- An infrastructure-as-code scanning tool, find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle. Can be extended for additional policie

Open-source password manager with peer-to-peer syncing, local storage, and end-to-end encryption. No cloud servers, complete privacy control across devices.

Encryption APIs with secret management

Enterprise-grade web vulnerability scanner with 60+ attack modules for penetration testing and security assessments

The Ten Most Critical Risks for Serverless Applications

A guide on how to use AWS Config rules for governing and securing your Lambda functions, with a free set of 4 open source rules developed in SAM

An AWS Lambda security best-practices eBook

A guide on how to use CloudTrail to improve AWS Lambda security posture

Replace your VPN with zero-trust access built on WireGuard. Fast, scalable network security with simple policies and identity provider integration.

Vulnerability scanner for code, dependencies, containers, and infrastructure as code