Directory
Published directory entries matching your search.
Sherlock is a web3 security platform that combines private audits, audit contests, AI-assisted analysis and bug bounties. It describes an audit engine that coordinates AI security approaches into one validated result, and collaborative audits staffed by security researchers. The site states it has conducted over 1,000 audits and reports more than 11,000 security researchers.
Cyfrin is a blockchain security firm helping protocols and institutions reduce risk through smart contract audits, formal verification, penetration testing, incident response, and security and risk advisory. It also provides security research and enterprise education and certifications.
A one-step page for decoding Social Security Numbers issued prior to June 25, 2011. It points to an article on the structure of Social Security Numbers and to the Social Security Administration website for later number assignments. It also points to the Internal Revenue Service website for the structure of Individual Taxpayer Identification Numbers. The page was automatically updated monthly through June 2011 and has been static since.
Sigma Prime performs blockchain security audits and research, auditing offchain code, ZK systems, blockchain infrastructure, and smart contracts. It also offers an embedded security engineer role, security training, and blockchain infrastructure operations, and publishes audit case studies.
Exploitee.rs is a hardware security research collective that finds vulnerabilities in embedded devices, IoT products and mobile systems. It lists research areas including IoT security, entertainment systems, home automation and mobile security, and offers breakout boards, a Hacker Pager and a shop of hardware security tools.
Open Source Security Software is a developer resource for coding, documentation, communities, security research, or software tools.
Asymmetric Research helps with crypto security, portfolio tracking, auditing, risk monitoring, or asset protection.
OtterSec provides blockchain security audits and research. The firm audits Layer 1 foundations, wallets, DeFi protocols, bridges, and related infrastructure, and publishes past audits, findings, research notes, and team talks.
TracerouteVisualizer is a free browser tool that visualizes traceroute output with geographic maps. Users paste standard traceroute, tracert, flyingroutes, or MTR output, and the tool shows hop addresses, hostnames, locations, ISP and AS information, packet loss, response times and IXP detection. It is aimed at network administrators and security researchers for troubleshooting and security research.
ImHex supports reverse engineering, malware analysis, file inspection, or security research workflows.
LemmeDebug supports reverse engineering, malware analysis, file inspection, or security research workflows.
Re7 Labs is a DeFi research and advisory project. It applies in-house risk tooling and research to support DeFi protocols as a curator and advisor, and works on DeFi ecosystem design. It also offers Re7 DeFi Ratings, a risk management framework that evaluates smart contract and other DeFi risks to assign holistic ratings.
Website.informer offers a free aggregated report on any domain, including WHOIS, visitors, IP and DNS details, competitors, and owners. It provides website statistics such as daily visitors, safety status, and global rank, plus competitor and similar-site research. It also offers IP and DNS lookup, WHOIS records, a browser extension for website analysis and security checks, and email-to-domain matching from WHOIS data.
A curated GitHub list of papers and tools covering LLM threats and vulnerabilities from a security and privacy standpoint. It includes paper summaries, key takeaway points, citations in a bib file, and frameworks and taxonomies such as OWASP Top 10 for LLM Applications.
Collection of online network tools for DNS, IP lookup, email checks, and security research.
Repository of machine-checkable security models for Clawdbot, written primarily in TLA+ and checked with TLC. It functions as a security regression suite in which green models should pass and deliberately buggy red models should fail with a counterexample trace. Some checks are conformance-style, validating that the formal model matches Clawdbot's implementation constants.
Clearstar is a risk curation firm that performs due diligence and publishes risk ratings for onchain yield. It offers continuously monitored vault strategies, real-time onchain monitoring of collateral, oracles and liquidity, and research including scored protocol and asset assessments.
A curation of awesome tools, documents and projects about LLM Security.
DNSai is a collection of DNS and email security tools on one page. It covers DNS record lookups, WHOIS, blacklist checks, SPF, DKIM and DMARC builders and validators, email header analysis and bulk domain scanning. The tools return plain-English AI summaries, and each is available through an API and MCP connectors.
DNSViz is a tool for visualizing the status of a DNS zone. It was designed to help understand and troubleshoot deployment of the DNS Security Extensions, providing a visual analysis of the DNSSEC authentication chain and resolution path and listing configuration errors it detects.
Domain Recon Tool is a free online tool for security researchers and analysts that retrieves DNS records, WHOIS and RDAP data, SSL certificates, IP addresses and subdomains for a domain or URL. It supports complete DNS record analysis and WHOIS registration data retrieval.
Security research toolkit for extracting, transforming, and analyzing data during investigation workflows.
IntoDNS.AI is a DNS and mail server checker that reports on SPF, DKIM, DMARC, DNSSEC, MTA-STS, BIMI, FCrDNS and blacklists. It also offers a free public REST API for DNS and email security scans, with JSON and Markdown reports. The service states it is not affiliated with intodns.com.
OpenBuckets is an online platform that enables users to find and secure open buckets in cloud storage systems. The tool supports quick searches for open buckets and targeted file type searches within identified buckets, and is designed for use by security experts, researchers, and individuals seeking to uncover exposed data.
