Tools

Infisical is the open-source platform for secrets, certificates, and privileged access management.

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

The easiest, and most secure way to access and protect all of your infrastructure.

A vulnerability scanner for container images and filesystems

Pomerium is an identity and context-aware access proxy.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

7 SQL tools (validate, format, parse, lint, security scan, metadata extraction, full analysis) over Streamable HTTP. Public remote server at mcp.gosqlx.dev - no install needed. 1.25M+ ops/sec, 6 SQL dialects.

AI-safe secrets manager with MCP integration. Run commands with credentials injected as environment variables - AI agents never see plaintext secrets. Features output sanitization, AES-256-GCM encryption, and Argon2id key derivation.

In-depth attack surface mapping and asset discovery

A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

Fully-featured, zero trust, full mesh overlay network. Includes a 2FA support out of the box, clients for all major desktop/mobile OS'es.

Honeypot framework designed to provide a highly secure environment for detecting and analyzing cyber attacks.

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend