pwn.watch pwn.watch ↗

Privacy Guides ↗Security & privacy

A community website recommending privacy tools, including VPN providers.

AWS WAF Security & privacy

Amazon's managed web application firewall service.

Paranoid Crypto ↗Security & privacy

Google's open-source library for detecting weaknesses in cryptographic keys and signatures.

Infisical Security & privacy

An open source secrets management platform.

OSV-Scanner ↗Security & privacy

Google's open-source scanner that checks dependencies and software against the OSV vulnerability database.

php.ini-production ↗Security & privacy

PHP's recommended production configuration file shipped in the php-src repository.

Cloudflare WAF ↗Security & privacy

Cloudflare's managed web application firewall.

Mullvad VPN ↗Security & privacy

A Swedish VPN service known for anonymous accounts and a no-logs policy.

1Password ↗

A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.

Tor

An anonymity network that routes traffic through volunteer relays.

YubiKey ↗

A hardware security key supporting FIDO2, PIV and OpenPGP.

Canarytokens ↗

Free service for planting tripwire tokens that alert you when they are accessed.

Cloudflare WAF ↗

Cloudflare's managed web application firewall.

Convergence ↗

Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.

Ente Photos

An end-to-end encrypted photo storage service.

Lockdown Mode ↗

An optional iOS hardening mode that restricts attachments, web features and connections.

Paranoid Crypto ↗

Google's open-source library for detecting weaknesses in cryptographic keys and signatures.

SELinux ↗

A Linux kernel security module for mandatory access control.

Tuta ↗

An end-to-end encrypted email service based in Germany.

ACME Renewal Information

An ACME extension that lets CAs tell clients when to renew certificates early.