Lynis is a battle-tested, open-source security auditing tool for Linux, macOS, and Unix-based systems that has been in active development since 2007. It performs comprehensive health scans to evaluate system defences, detect vulnerabilities, and provide actionable hardening guidance. Used by system administrators, IT auditors, and security professionals worldwide, Lynis runs hundreds of individual tests across […]

Firejail is a SUID sandbox program for Linux that reduces the risk of security breaches by restricting the running environment of untrusted applications. It uses Linux kernel features like namespaces, seccomp-bpf, and capabilities to create lightweight, isolated sandboxes for any program — no virtual machines or complex configuration required. Simply prefix any command with firejail […]

Cryptomator is a free and open-source client-side encryption tool for cloud storage that encrypts your files locally before they sync to services like Dropbox, Google Drive, OneDrive, and Nextcloud. It creates encrypted vaults that appear as virtual drives on your computer, allowing you to work with your files normally while everything is transparently encrypted and […]

Proton VPN is a privacy-focused VPN service developed by Proton AG, the Swiss company behind Proton Mail. It provides encrypted internet access, IP address masking, and censorship circumvention for everyone from everyday users to journalists and activists in restrictive regimes. All client applications are open source, independently audited, and governed by a strict no-logs policy […]

OpenSSL is a robust, full-featured open-source toolkit implementing the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols, as well as a general-purpose cryptography library. It is the backbone of internet security — used by web servers, SSH, email servers, VPNs, and countless applications to encrypt communications, verify certificates, and secure data. With over […]

Nmap (Network Mapper) is a free and open-source network discovery and security auditing tool that has become the industry standard for port scanning, service detection, OS fingerprinting, and network inventory. Network administrators, security professionals, and system administrators worldwide rely on Nmap to discover hosts, identify running services, detect open ports, and assess network security posture. […]

GnuPG (GNU Privacy Guard, commonly called GPG) is a free and open-source implementation of the OpenPGP standard for encrypting and signing data and communications. It is the essential toolkit for email encryption, software signing, secure file transfers, and Git commit verification — used by developers, journalists, and organisations worldwide. GPG supports both public-key (asymmetric) and […]

Fail2ban is an intrusion prevention software framework that protects Linux servers against brute-force attacks and malicious login attempts. It scans log files (like /var/log/auth.log or /var/log/nginx/access.log) for repeated failed authentication attempts and temporarily bans offending IP addresses by updating firewall rules. It is the standard first line of defence for SSH, web servers, email services, […]

VeraCrypt is a free, open-source, on-the-fly disk encryption tool for Windows, macOS, and Linux. It builds on the legacy of TrueCrypt with enhanced security — addressing vulnerabilities in the original encryption algorithms while maintaining full compatibility with existing TrueCrypt volumes. VeraCrypt can encrypt entire system drives, create virtual encrypted disks (containers) that behave like regular […]

uBlock Origin is an efficient and lightweight browser extension for content filtering, blocking advertisements, trackers, and malware domains across websites. Created and maintained by Raymond Hill (gorhill), it uses multiple filter lists to block content before it even loads, resulting in faster page rendering, reduced bandwidth usage, and significantly improved privacy compared to other ad […]