Security — independent software & tools
-
sub rosa by naiveHA
Program (over USB or NFC) the static password of your YubiKey
-
OTG Master
Mount VeraCrypt-encrypted USB drives on non-rooted Android
-
Link Clear
Strip tracking parameters from links. Offline, private, no permissions.
-
Password Store (Passkey Edition)
Manage your passwords
-
TapLock
Lock your screen instantly with a double tap.
-
MESH
Censorship-resisting overlay network for digital forensics
-
CryptoSafe
Offline AES-256-GCM text encryption with Argon2id
-
DNS Toggle
Easily toggle and automate Private DNS through the Quick Settings panel.
-
Fauxx - Privacy Through Noise
Poison data collection profiles by generating decoy signals.
-
Kryptos
End-to-end encryption for any messenger, over any channel
-
Banana Split
Split secrets into QR-code shards using Shamir's Secret Sharing
-
RKNHardering
Detects VPN and proxy usage on Android using RKN methodology
-
PGPony
OpenPGP encryption with hardware security keys and password-store support
-
Secure QR Share
Share passwords and links securely via encrypted QR codes.
-
1Key Password Manager
Offline password manager. 2FA + notes. No account, no network, no telemetry.
-
AppVerifier BG
Verify installed apps against shared signature hashes and databases.
-
SecureScreen
Protect selected apps from screenshots and screen recording
-
SeekPrivacy
Activist-Grade Defense Against System-Level Data Surveillance
-
SmartFind
Find your phone with an SMS from a trusted contact
-
Privamatic
Privacy score for your Android — 45+ checks, no cloud, no tracking.
-
Salty
A secure, offline-first message encryption tool for Android.
-
Truvark
A multi-vault file encryption app that respects your privacy.
-
Signet
Verify calls from family, colleagues, sources against deepfake impersonation.
-
FiSSH
SSH authentication via Fingerprint scanning over network (TLS Sockets)
-
Spectre
Radio frequency scanner with recon and offensive capabilities
-
DuressKeyboardLite
Keyboard with DuressPassword feature.
-
Pile
Organize your documents with tags. Private, offline, and built for you.
-
HiddenProtectedWorkProfile
Hidden Profile owner Android security app.
-
Haven
Isolate and run multiple instances of apps using Work Profiles
-
Keep: FROST Nostr Signer
FROST threshold signer and Nostr event signer for Android
-
Tokn - MFA / 2FA authenticator
Open-source 2FA authenticator. Encrypted on-device. No accounts.
-
Tokn - MFA / 2FA authenticator
Open-source 2FA authenticator. Encrypted on-device. No accounts.
-
LineShield
Verify phone lines registered to your name in Mexico CRT portals
-
DissPair
Bluetooth security toolkit
-
SOS Alerter
Privacy-focused emergency app with SMS location tracking and silent recording.
-
patient-zero
Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or drop into CI as a GitHub Action. Covers npm + Python + MCP agent configs. Free, MIT, no signup, no telemetry.
-
omnivault
加密的个人上下文档案袋 · 逐字段 AES-256-GCM、零知识，密钥永不离机。原生 Windows 界面 + CLI + MCP 服务，供 AI 代理按作用域安全访问个人数据（OmniVault · 万象档案袋）。
-
clauderabbit
ClaudeRabbit is a free, open-source security product protecting the open-source community from malware. We clone any public GitHub repo into an isolated sandbox, run it, and return one honest safety score.
-
aileron
Tamper-evident flight recorder for AI agents - hash-chained, signed audit log of every tool call, with MCP proxy policy enforcement and anomaly detection.
-
runbookproof
Continuously verify commands in documentation, runbooks, and AI-generated instructions.
-
niro
Security that keeps up with your developers.
-
attestral
Open-source security scanner for MCP servers and AI agents: finds prompt injection, tool poisoning, and excessive agency, and models the cloud your agents can reach. pip install attestral.
-
rails-senior-architect
Ultimate Rails CTO Toolkit 2026: Pro Opinionated Skills for Modern Apps
-
clive
Securely access your Mac terminal from your iPhone, over your LAN or direct cellular connections.
-
launchdx
Find out exactly why macOS blocked your app. Read only diagnosis of code signing, hardened runtime, notarization, Gatekeeper, quarantine, and architecture on Apple Silicon.
-
sigil
Self-hosted favicon resolver with an SSRF-hardened fetch boundary. Resolves a domain's real favicon server-side so lookups never leak to a third party.
-
vigil-tui
Monitor real-time power consumption, thermals, and clock speeds for CPU, GPU, and RAM directly in your terminal.
-
dracon-utilities
Invisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.
-
enclave
Sandbox for running AI coding agents autonomously: isolated, network-restricted, host-safe
-
themis
Audits a Debian or Ubuntu host, fixes what it finds, and keeps it fixed: check, plan, apply, rollback. Written in Go.
-
job-hunter
Automated job scraping pipeline for security engineer roles. Python + GitHub Actions + Gemini API.
-
libero
The open-source AI teammate for Slack. Self-hosted, credential-isolated, every tool call audited.
-
thesmos-governance
AI governance CLI, GitHub Action, VS Code extension & MCP server — 1,075 rules for Claude, Cursor, Copilot, Gemini, Codex.
-
tankpkg-skill-vault
Secure AI Agent Skill Manager 2026 – Tamper-Proof Package Engine for Tank
-
ironclaw
Security-first, self-hosted AI agents - isolation you can prove, not just promise.
-
action-pin-check
Audit GitHub Actions workflows for mutable or missing action pins.
-
Certance-Field
Cut your GitHub Copilot token bill, locally. Certance Field compresses oversized context before it reaches the model, redacts and scans for secrets, and exports audit evidence. No cloud, no external calls.
-
agent-core
Enterprise-grade AI agent engine. Lightweight, secure, MCP-native. Built in Rust.
-
kernel-gaze-agent
2026 Ultimate Podman AI Coding Agent – Zero-Trace, MIT Licensed GitHub Repo
-
ai-code-reviewer
🔍 AI-powered automated code review tool that analyzes syntax, performance bottlenecks, and security flaws in pull requests.