Category

Security

Auth, secrets, scanning and threat protection.

Products
40
Size rank
#20/ 37
nexusshell.app

Nexus Shell

Nexus Shell is a native macOS SSH client built with SwiftUI for Apple silicon. It combines terminal sessions, dual-pane SFTP file management, SSH key management, Docker controls, server monitoring, encrypted local session logs, and iCloud sync in one focused workspace.An optional local Agent Bridge lets supported AI coding agents use saved connections through visible terminal tabs without exposing passwords or private keys. The bridge is available in the direct-download edition and remains disabled by default.The Free plan provides basic SSH for personal non-commercial use. Pro is a one-time purchase with no subscription.

95 upvotes

cisogenie.com

CISOGenie

CISOGenie is an AI-native, risk-led security platform for governance, risk, and compliance.CISOGenie is an AI-native, risk-led security platform for governance, risk, and compliance.

143 upvotes

aiqualityhq.com

AIQualityHQ

AIQualityHQ is a free, browser-native toolkit for AI developers, QA teams, and prompt engineers. It offers a suite of tools including a Prompt Quality Checker, Prompt Rewriter & Compiler, AI System Prompt Generator, Length & Token Optimizer, Prompt Injection Scanner, AI Jailbreak Detector, and AI Visibility & LLM Auditor.The engine is deterministic and runs entirely client-side, ensuring 100% privacy and instant results in under 10ms. It scores prompts across six dimensions: structure, memory, context, accuracy, privacy, and security.Measure, Improve, and Trust Every AI Interaction.Ideal for teams shipping LLM features, it helps validate instructions, test reliability, and harden prompts against injection and jailbreak threats before production.

64 upvotes

aiornot.tools

AI or Not

AI or Not is a multimodal AI content detection tool that identifies AI-generated content in text, images, video, and audio.Simply upload or paste content to get detection results instantly, helping content moderators, educational institutions, media professionals, and businesses determine the true origin of materials and identify risks posed by deepfakes and AI-generated content.It supports detection across multiple leading AI generation models, with fast processing and clear, intuitive results—ideal for any scenario where content authenticity needs to be verified.

165 upvotes

scam.ai

Halo by Scam AI

The person on your next video call might not be real. With Halo you don't have to guess. Halo secures your Zoom, Teams, or Google Meet call live and flags synthetic faces the moment it detects one, entirely on your device. Deepfake video calls are already being used to scam people and businesses around the world, it's just that most people have no way to tell. From confirming who you're hiring to confirming who you're wiring money to, Halo catches it before it costs you.

159 upvotes

kastra.ai

Kastra

Kastra is the runtime authorization layer for AI agents. It decides what agents can and cannot do before actions execute, enforcing policies with sub-1 ms latency across tools, prompts, inputs, and outputs. Use one control plane to govern agents and policies across Claude Code, Cursor, Codex, OpenClaw, the Anthropic SDK, the OpenAI SDK, and more. Prevent unauthorized tool use, prompt injection, and exposure of sensitive data before they become incidents. Trust the rules, not the agents.

63 upvotes

buggy.run

BuggyRun

Buggy is an automated security audit tool that finds vulnerabilities and data leaks in your web application. It uses an AI-powered crawler to explore both public and authenticated pages, capturing every request and inspecting responses for session tokens, PII, API keys, and secrets.Key features: 56+ security checks per page, real-browser network capture, AI discovery of hidden pages, and plain-English explanations of findings with exact fixes. The AI agent ranks issues by severity and allows you to ask follow-up questions or re-run audits."Find your app's vulnerabilities before attackers do."Buggy works with any stack (React, Angular, Vue, Node, Next) without SDK installation or code changes. Pricing starts at $19.99/month for one website with weekly automatic audits.

51 upvotes

shadowlock.io

ShadowLock

An AI governance platform that prevents employees from leaking sensitive data into unauthorized AI tools

61 upvotes

irongorilla.ai

Iron Gorilla

Iron Gorilla provides AI agents that start alongside your team, earning trust as they prove themselves until they can run the work independently. The platform is engineered for mission-critical certainty across industries like banking, insurance, healthcare, and defense.Trust is earned. Even by agents.Each agent is treated like a new hire, with a Behavioral Trust Score that increases as tasks are completed correctly. If an agent acts out of character, it is immediately pulled back under review. This ensures that work moves from being assisted by people to being handled outright, without added headcount.Iron Gorilla provides a single platform to see and run every agent, with built-in infrastructure for security and compliance. Agents can send emails, move money, or change records in real-time, with trust decided in the moment — not reviewed after the fact.

79 upvotes

blurmyplate.com

blurmyplate

blurmyplate automatically detects and blurs license plates in car photos before they are published online. It is built for private vehicle sellers, small dealerships, marketplace sellers, photographers, and anyone who needs clean listing-ready car images without exposing sensitive plate details. Upload a photo, review the detected plate area, apply a natural blur, strip metadata, and export an image that is ready for marketplaces, listing sites, forums, and social media. The product focuses on privacy, speed, and simple visual results instead of heavy editing workflows.

77 upvotes

tomdahne.com

OSINT Workbench

Tom's OSINT Workbench is a free, open-source intelligence investigation tool for Windows. It enables structured, offline case management for tracking people, companies, domains, social profiles, emails, phones, addresses, usernames, and IP addresses as connected entities.Key features include entity-centric case management with typed relationships and confidence levels, visual link analysis with force-directed or hierarchical graphs, and paste & extract functionality that pulls structured data from URLs using public APIs like RDAP, DNS, Shodan, and crt.sh.The app supports snapshots & diffing to track changes over time, advanced search across all entities and notes, and self-contained HTML reports with embedded graphs and timelines. It also includes a built-in OSINT directory of 94 curated tools and resources.No accounts, no cloud, no subscriptions. All data lives in a portable SQLite file on your machine.Designed for analysts, journalists, and security researchers, the tool is entirely offline and private by design, with no telemetry or analytics.

0 upvotes

istempmail.com

IsTempMail

IsTempMail provides a simple JSON API to detect and block disposable email addresses in real time. It helps prevent spam, fake registrations, and free trial abuse by checking email addresses against a database of over 124,000 known temporary email domains."Simple works best. We have one endpoint for all functionality and give you an easy to parse and human understandable JSON response."The service offers a free plan with 200 API requests per month, and paid plans starting at $5/month for 5,000 requests. It also provides a WordPress plugin for easy integration, and API libraries for JavaScript and PHP.PlanPriceRequests/monthFree$0200Standard$55,000Plus$1015,000Pro$2050,000Max$501,000,000

0 upvotes

Keep exploring