Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Ghidra is a software reverse engineering (SRE) framework

The easiest, most secure way to use WireGuard and 2FA.

Known-leaky gems verification for bundler: `bundle leak` to check your app and find leaky gems in your Gemfile 💎💧

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

A static analysis security vulnerability scanner for Ruby on Rails applications

Have fun injecting SQL into a Ruby on Rails application!

A simple vaultless password manager in Go

Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.

A tiny (118 bytes), secure, URL-friendly, unique string ID generator for JavaScript

Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy

A Rails application template with our standard defaults, optimized for deployment on Heroku.

Patch-level verification for Bundler

Inspect certificate authorities in container images

Postgres extension to allow encrypted query operations

🚀 Configurable framework agnostic plain Ruby 📨 email validator/verifier. Verify email via Regex, DNS, SMTP and even more. Be sure that email address valid and exists.

A new generation cloud backup tool

Store securely encrypted backups in the cloud!

👥 A bash-tool to store your private data inside a git repository.

Database changes log for Rails

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Log in as another user in Rails

Metasploit Framework

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git …

An authentication system generator for Rails applications.

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

Comfortably monitor your Internet traffic 🕵️‍♂️

Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.

🐶 A curated list of Web Security materials and resources.