zizmor zizmor.sh ↗

GitHub Secret Protection ↗Security & privacy

GitHub's feature for detecting committed secrets in repositories.

git-crypt ↗Security & privacy

Transparent file encryption for files in a git repository.

git-secrets ↗Security & privacy

An AWS Labs tool that prevents committing secrets into git repositories.

Infisical ↗Security & privacy

An open source secrets management platform.

Privacy Guides ↗Security & privacy

A community website recommending privacy tools, including VPN providers.

Track Awesome List ↗Dev tools

A site that tracks updates to awesome lists on GitHub.

sandbox-runtime ↗Security & privacy

Anthropic's lightweight sandbox for restricting filesystem and network access of processes.

yoloai ↗Security & privacy

A tool for running coding agents fully isolated in containers or VMs with git-based output extraction.

1Password ↗

A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.

YubiKey ↗

A hardware security key supporting FIDO2, PIV and OpenPGP.

NoScript ↗

A browser extension that blocks JavaScript and other active content by default.

Secretive ↗

A macOS app that stores SSH keys in the Secure Enclave and acts as an SSH agent.

Signal

An end-to-end encrypted messaging app.

Tor

An anonymity network that routes traffic through volunteer relays.

Bubblewrap ↗

An unprivileged Linux sandboxing tool built on namespaces.

Canarytokens ↗

Free service for planting tripwire tokens that alert you when they are accessed.

Cloudflare Turnstile ↗

A CAPTCHA alternative from Cloudflare that checks whether a visitor is human.

Cloudflare WAF ↗

Cloudflare's managed web application firewall.

Convergence ↗

Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.

Darknet Diaries ↗

A podcast covering true stories from the dark side of the internet, including hacking and cyber heists.