Security & Identity

Passwords, auth, 2FA, secret management, VPN & app security scanning.

Password managers

• 1Password — Vault for teams & people.
• Bitwarden — Open-source password manager.
• Proton Pass — Encrypted password manager.
• Dashlane — Passwords & security tools.
• KeePassXC — Offline open-source vault.

Auth & identity

• Auth0 — Managed identity & login.
• Clerk — Drop-in user auth.
• Okta — Enterprise identity.
• WorkOS — Enterprise SSO/SCIM.
• Stytch — Passwordless & device auth.
• Supabase Auth — Auth on Postgres.

2FA & passkeys

• Authy — Multi-device 2FA app.
• Aegis Authenticator — Open-source Android 2FA.
• Ente Auth — E2E-encrypted 2FA.
• Hanko — Open-source passkey auth.

Secret management

• HashiCorp Vault — Centralized secrets.
• Doppler — Secrets sync for teams.
• Infisical — Open-source secrets platform.
• gitleaks — Scan repos for leaked secrets.
• TruffleHog — Find & verify leaked creds.

VPN & network

• Tailscale — Zero-config WireGuard mesh.
• WireGuard — Fast, modern VPN protocol.
• Cloudflare Zero Trust — Zero-trust access.
• Twingate — Modern remote access.
• OpenVPN — The classic open VPN.

App security

• Snyk — Dependency & code scanning.
• Semgrep — Lightweight static analysis.
• OWASP ZAP — Open-source web pentest.
• Trivy — Container & IaC scanning.
• Dependabot — Dependency updates & alerts.

Privacy & encryption

• Proton — Encrypted mail & suite.
• Signal — E2E-encrypted messaging.
• age — Simple file encryption.
• Have I Been Pwned — Check breached accounts.