Security & Privacy

Passwords, encryption & privacy — keep your data safe.

Bitwarden

The most popular free password manager — sync across devices.

KeePassXC

Store passwords in a local encrypted vault — fully offline.

VeraCrypt

Create encrypted disks & folders — protect sensitive data.

Tor Browser

Browse anonymously — your privacy, encrypted and protected.

Wireshark

The world's most popular network protocol analyzer — capture and inspect live traffic packet by packet.

WireGuard

A fast, modern VPN that replaces old IPsec — leaner, simpler, and far more secure.

uBlock Origin

An efficient, lightweight blocker that kills ads, trackers, and malware sites without hogging RAM.

Pi-hole

Network-wide ad blocking at the DNS level — kill ads on every device, even your TV and phone.

Signal

Privacy-first messenger with strong end-to-end encryption — no ads, no tracking, no data mining.

Fail2ban

Scans server logs and auto-bans IPs that keep trying to brute-force your SSH and services.

Naabu

A fast, reliable port scanner — discover open TCP ports on hosts and networks, with configurable rate, service detection and JSON output for automation.

osquery

Query your operating system like a database — inspect processes, listening ports, users, packages and hardware across endpoints with SQL for security monitoring.

OWASP ZAP

The free web app security scanner — spider your site, intercept requests and find XSS, SQLi and other vulnerabilities before attackers do.

mitmproxy

An interactive HTTPS proxy — inspect, record and modify REST/gRPC/WebSocket traffic between your apps and servers, in terminal and web UIs.

Hashcat

The world's fastest password recovery tool — GPU-accelerated brute-force and dictionary attacks over 300 hash types, for auditing your own passwords.

gocryptfs

An encrypted overlay filesystem — mount a fully encrypted directory in the cloud or locally, so all files are transparently encrypted before sync.

age

A simple, modern file encryption tool — encrypt files with a passphrase or public key in one command; tiny, auditable and built on modern crypto.

ungoogled-chromium

A privacy-focused Chromium build — removes Google integration, telemetry and domain restrictions, so you get a fast, independent browser with no tracking.

Tailscale

A zero-config mesh VPN built on WireGuard — connect your laptop, phone, servers and NAS into one private network automatically, no port forwarding.

Minisign

A simple, modern tool to sign and verify files — create a small public/private key pair, sign binaries or releases, and let users verify authenticity with one command.