Security & privacy

Nurbak is an AI-powered penetration testing tool that analyzes GitHub repositories for exploitable vulnerabilities using its own AI model without sending code to third-party AI services. It provides prioritized security findings, remediation advice, and can generate fix pull requests, all while ensuring code privacy through ephemeral infrastructure and zero retention policies.

MXGuard provides permanent anonymous email aliases with instant forwarding and anonymous reply capabilities. It is designed to prevent spam, ensure delivery of OTPs and verification codes, and maintain user privacy by hiding real email addresses.

nForms provides a single script tag solution combining bot protection and accessible form validation using Proof-of-Work instead of CAPTCHA. It ensures GDPR compliance with EU-only data storage and automatic WCAG 2.2 AA accessibility markup injection.

Nomoads is a mobile DNS ad blocker for iOS and Android that filters ads and trackers at the DNS level across every app on the device using a local VPN. It blocks ad domains locally without sending browsing data to the cloud and offers on-device stats and advanced category blocklists.

Just-In-Time (JIT) access for freelancers with time-limited tokens that auto-revoke. Lightweight browser extension that routes only protected domains through the L7 AG Node. Zero agents and zero configuration required for access.

LaunchGuard offers security scanning for live web applications to identify what a stranger can access and read without login. It provides a free scan for surface-level exposure and a paid deep scan that attempts to write, delete, and chain open doors to find deeper vulnerabilities, including 30 days of monitoring after the scan.

LumenPass is a private, KeePass-compatible password manager that supports passwords, passkeys, TOTP codes, SSH keys, and secure notes across desktop, mobile, and browser extensions. It is offline-first, zero-knowledge by design, and supports a consistent vault experience across devices with modern sign-in support and flexible sync options.

Prevent fake signups by blocking disposable email addresses during user registration. Offline npm package with 160k+ disposable domains for instant detection without network requests. Real-time DNS and MX record analysis to detect new disposable email services not in blocklists.

DoHackersKnow.Me is a free online service that scans the darknet and deep web to reveal if personal data such as passwords, phone numbers, home addresses, banking information, and social security numbers have been exposed in data breaches. It provides users with detailed information about what data is out there, which companies leaked it, and guidance on how to protect themselves from potential attacks.

Protecting elderly family members from phishing, smishing, and phone scams with real-time alerts and family dashboard. Email screening with checks for sender reputation, domain age, link destinations, and phishing signatures. SMS analysis scanning for smishing patterns, suspicious short links, and brand impersonation.

Hackerrecon offers a browser-based cybersecurity and utility platform with over 36 client-side tools including 22 cybersecurity utilities, 14 productivity and financial document generators, and 13 cyber operations simulator environments. Access is granted via a one-time payment, providing lifetime access without recurring fees or server data logging, ensuring client-side privacy.

OnceLink is a secure file and text sharing service that uses zero-knowledge encryption and password-protected, one-time access links. It supports files up to 10GB with premium plans and offers features like auto-deletion after access, global hosting regions, and a REST API for automation.

Inject.md offers a tool to test AI models for prompt injection vulnerabilities by running a battery of 46 real injection payloads across 5 attack classes. It provides scored reports, remediation guidance, and structural hardening playbooks to improve AI security against prompt injection attacks.

ContextBlur is a browser extension that allows users to blur sensitive data on their screen before sharing it in video calls, demos, or recordings. It processes all data locally without uploading content, ensuring privacy and persistent blurs across page refreshes and browser restarts.

Backup of items and other elements in their original format as retrieved from the Podio API. Backups include item comments, item tags, item excel export, all files uploaded to Podio, and linked files stored at other providers.

AttackerView is a security scanning platform that uses automated agents to test websites for real vulnerabilities with verified exploit payloads. It provides deterministic, evidence-backed findings with business impact and fix guides, scanning both public and authenticated areas of applications, and offers continuous monitoring and compliance reporting.

Audn.ai offers an autonomous cybersecurity platform that continuously tests AI agents and intelligent systems for vulnerabilities using an agentic adversarial reasoning approach. It automates red-teaming by recon, learning, exploiting, proving, patching, deploying, and retesting in authorized sandbox environments to provide audit-ready evidence and compliance reports.

Authex is an autonomous agent software that manages a company's email security by monitoring domain authentication, access, compliance, and retirement of email services. It continuously watches for configuration drift, makes approved changes, verifies results, and records evidence for compliance and security management.