Directory
Published directory entries matching your search.
OpenBuckets is an online platform that enables users to find and secure open buckets in cloud storage systems. The tool supports quick searches for open buckets and targeted file type searches within identified buckets, and is designed for use by security experts, researchers, and individuals seeking to uncover exposed data.
OverTheWire is a community offering wargames intended to help people learn and practice security concepts through games. Its suggested order begins with Bandit for Unix/Linux basics, followed by a choice among Natas for web security, Krypton for cryptography or Leviathan for reverse engineering, then binary exploitation games. Each shell game uses its own SSH port.
The OWASP Cheat Sheet Series is a collection of cheat sheets on specific application security topics, created by application security professionals with expertise in those topics. The site hosts all of the project's cheat sheets and offers downloads of the site and an ATOM feed for updates.
OWASP Top 10 for LLM Applications is a security resource published by the OWASP Gen AI Security Project that outlines the 2025 top 10 risks, vulnerabilities, and corresponding mitigations for developing, deploying, and managing large language model and generative AI applications.
Oxygen is a DeFi prime brokerage service built on Solana and powered by Serum's on-chain infrastructure. It lets users earn yield, borrow from peers, trade directly out of their pools and get trading leverage against a portfolio of assets. It uses multiple uses of the same collateral, cross-collateralization and order-book-based pricing.
Rabdan Academy is a government-owned education institution established to coordinate and enhance learning outcomes for organisations and individuals in the safety, security, defence, emergency preparedness and crisis management sectors. It offers academic and vocational programs, including policing and security leadership, intelligence analysis, financial crime and systems engineering specialising in defence.
Re7 Labs is a DeFi research and advisory project. It applies in-house risk tooling and research to support DeFi protocols as a curator and advisor, and works on DeFi ecosystem design. It also offers Re7 DeFi Ratings, a risk management framework that evaluates smart contract and other DeFi risks to assign holistic ratings.
RockawayX is a venture capital and infrastructure firm working with Web3 projects, offering capital, engineering and liquidity support. It runs blockchains via validators and provides on-chain liquidity to DeFi protocols. It operates its own data centers and develops hardware for network launches.
SecLists.Org is a security mailing list archive providing web archives and RSS feeds for lists including Nmap Development, Bugtraq, Full Disclosure, Security Basics and Pen-test. It offers search capabilities and RSS feeds with message extracts, updated in real time.
Attack-surface and DNS intelligence platform for domains, subdomains, IPs, and historical records.
Snyk is an AI security platform that secures the code AI writes, the agents it runs, and the applications it builds. It offers a developer security solution available for free or from $25/month. The platform subscription is available to small teams at a flat rate, while enterprise pricing uses prepaid credits rated per capability.
Softstack is a Germany-based Web3 service partner offering smart contract audits, software development and consulting. Its services include smart contract auditing, penetration testing, dApp development and Web3 regulations consulting. The company presents itself as a service partner for software development, cybersecurity and consulting in Web3.
SpiderSuite is a web crawling and security testing platform for security professionals, penetration testers and researchers. It offers specialized crawlers, traffic interception, request crafting and fuzzing, along with source and graph views of crawl data, plus import and export in formats such as HAR, WARC, CSV and JSON.
A page from the Fake Name Generator that checks whether a US Social Security number follows Social Security Administration numbering rules. It explains how SSNs are built and how numbering changed in 2011, and provides sample SSNs for testing forms. The page notes that numbers following the rules may still never have been issued.
StarkWare develops STARK proof technology and core technology for the Starknet blockchain. The company states it was founded by co-inventors of STARKs. Its work covers scaling, privacy and quantum-resistant proofs, and the Cairo language for STARK-provable programs and Starknet smart contracts. STRK20 provides shielded balances and private transfers on Starknet.
Steakhouse Financial is a DeFi vault curator offering onchain stablecoin and yield products for fintechs, exchanges and asset managers. It curates Morpho vaults and provides build, advisory and capital-raising services. Its documentation covers a collateral risk framework, product specs, market data and disclosures. The vaults are developed and operated by Carniceria Tropical SA, a Panamanian subsidiary.
Surveillance Self-Defense is a project of the Electronic Frontier Foundation offering guides on protecting against online spying. It includes basics on how online surveillance works, tool guides for secure applications, and security scenarios for specific situations.
TAU Labs focuses on DeFi-native permissionless asset management. It designs and manages DeFi products as a vault curator, covering mechanism design, incentive optimization, token design and risk management. Its vault strategies cover stablecoins, BTC, ETH and other assets across chains, and the project states it launched DeFi's first Bond ETF using Pendle PT assets.
Tulipa Capital is a DeFi risk curator focused on lending markets and vaults. Formed by DeFi natives active since 2019 and in crypto since 2016, it began in 2020 as a proprietary fund running delta-neutral strategies around BTC, ETH and stablecoins, and launched its public-facing curation arm in summer 2024. It reports having managed vaults ranging from a few million to 250 million in assets in a single vault.
Security scanning service for checking files, URLs, domains, and hashes across many detection engines.
Wazuh is a free and open source security platform that unifies XDR and SIEM protection for endpoints and cloud workloads. It collects, aggregates, indexes and analyzes security data to detect intrusions, threats and behavioral anomalies. Capabilities include file integrity monitoring, vulnerability detection, configuration assessment and log data analysis. A managed Wazuh Cloud service is also offered.
Web Check is described as an all-in-one OSINT and security tool for revealing the inner workings of a website. It reports on items such as IP information, SSL certificates, DNS records, cookies, crawl rules and response headers.
Website.informer offers a free aggregated report on any domain, including WHOIS, visitors, IP and DNS details, competitors, and owners. It provides website statistics such as daily visitors, safety status, and global rank, plus competitor and similar-site research. It also offers IP and DNS lookup, WHOIS records, a browser extension for website analysis and security checks, and email-to-domain matching from WHOIS data.
Android Libhunt is a developer resource for coding, documentation, communities, security research, or software tools.
