Best Indie Security Tools in 2026

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination d

Open-source password manager for individuals and teams.

Deduplicating archiver with compression and encryption.

Free backup software with encryption and cloud storage support.

Zero-config VPN built on WireGuard. Mesh networking made easy.

Modern, fast VPN tunnel. Simple and cryptographically sound.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Window

CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories,

a simple password manager. encryption via age, written in portable posix shell

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance tes

WireGuard VPN installer for Linux servers

Open-source password manager with end-to-end encryption for passwords, credit cards, notes, and documents. Cross-platform sync with secure sharing capabilities.

A comprehensive collaboration platform offering end-to-end encrypted messaging, file sharing, and video calls with enterprise-grade security and compliance features.

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extrac

Set up a personal VPN in the cloud

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2

Community guide to securing and improving privacy on macOS.

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps fro

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessment

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS

Replace your VPN with zero-trust access built on WireGuard. Fast, scalable network security with simple policies and identity provider integration.

A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no con

Open-source password manager with peer-to-peer syncing, local storage, and end-to-end encryption. No cloud servers, complete privacy control across devices.

The slightly more awesome standard unix password manager for teams

API-driven secret key management

Secure secret management platform with public key encryption, automated rotation, versioning, and real-time collaboration tools for development teams.

:ice_cube: - This [InSpec][inspec] compliance profile implement the CIS Docker 1.12.0 Benchmark in an automated way to provide security best-practice tests around Docker daemon and containers in a pro

Open-source AI governance platform helping teams meet regulatory standards like EU AI Act and ISO 42001. Monitor model performance, manage risks, and maintain compliance with enterprise-grade security

- An infrastructure-as-code scanning tool, find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle. Can be extended for additional policie

The SpecterOps project management and reporting engine

OpenVPN is an open source VPN daemon

A simple, decentralized mesh VPN with WireGuard support.

- Script that checks for dozens of common best-practices around deploying Docker containers in production. By [docker][docker]

Enterprise-grade web vulnerability scanner with 60+ attack modules for penetration testing and security assessments

Bindings for Security Framework (OSX native)

A comprehensive platform for automating compliance workflows, managing security questionnaires, and maintaining security policies with full transparency.

- :yen: Securing container-based applications from Dev to Production on any platform

Encryption APIs with secret management

Vulnerability scanner for code, dependencies, containers, and infrastructure as code

Streamline role-based access control, enforce security policies, and ensure compliance for your Snowflake data warehouse

Open-source password manager built for teams.