OWASP WebGoat owasp.org ↗

smallwebwaf ↗Security & privacy

An alpha web application firewall reverse proxy aimed at small web and self-hosted sites.

NIST Small Business Cybersecurity Corner ↗Security & privacy

NIST's portal of cybersecurity resources aimed at small businesses.

AWS WAF ↗Security & privacy

Amazon's managed web application firewall service.

SafeScript ↗Security & privacy

A JavaScript subset and runtime for executing untrusted code that can only call injected facades.

wolfSSL ↗Security & privacy

A lightweight TLS/DTLS library aimed at embedded and resource-constrained systems.

pwn.watch ↗Security & privacy

A vulnerability tracking site with an RSS feed.

Cloudflare WAF ↗Security & privacy

Cloudflare's managed web application firewall.

WebPKI Observatory ↗Security & privacy

A website tracking data about the Web PKI and certificate authorities.

1Password ↗

A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.

YubiKey ↗

A hardware security key supporting FIDO2, PIV and OpenPGP.

NoScript ↗

A browser extension that blocks JavaScript and other active content by default.

Secretive ↗

A macOS app that stores SSH keys in the Secure Enclave and acts as an SSH agent.

Signal

An end-to-end encrypted messaging app.

Tor

An anonymity network that routes traffic through volunteer relays.

Bubblewrap ↗

An unprivileged Linux sandboxing tool built on namespaces.

Canarytokens ↗

Free service for planting tripwire tokens that alert you when they are accessed.

Cloudflare Turnstile ↗

A CAPTCHA alternative from Cloudflare that checks whether a visitor is human.

Cloudflare WAF ↗

Cloudflare's managed web application firewall.

Convergence ↗

Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.

Darknet Diaries ↗

A podcast covering true stories from the dark side of the internet, including hacking and cyber heists.