All categories › Security & Privacy

Indie Security & Privacy tools

88 security & privacy products built by independent developers and small teams.

Looking to replace something? Auth0 · LastPass · 1Password · Dashlane · Okta · authentik · restic · Apple Hide My Email · Authy · ExpressVPN · Ghostery · Google

1Password

Password manager for families and businesses

A password manager that stores passwords, passkeys, cards and secure notes in encrypted vaults with autofill on all devices.

Paid · Web, Mac, Windows, Linux, iOS, Android, Browser extension · Website ↗

2FAS

Free, open-source two-factor authenticator

A free, open-source 2FA authenticator app for iOS and Android with a browser extension for autofilling codes.

Free · iOS, Android, Browser extension · Website ↗

ActivityWatch

Open-source, privacy-first automatic time tracker

ActivityWatch tracks which apps and websites you use, keeping all data on your own device, as an open-source alternative to cloud trackers.

Free · Windows, Mac, Linux · Website ↗

addy.io

Anonymous email forwarding with unlimited aliases

An open-source email forwarding service (formerly AnonAddy) for creating unlimited aliases to protect your real address.

Free plan · Web, Browser extension, Self-hosted · Website ↗

AdGuard

Ad blocker and privacy protection for all devices

Ad-blocking and privacy apps for desktop, mobile and browsers, plus AdGuard DNS and VPN services.

Free plan · Mac, Windows, Linux, iOS, Android, Browser extension · Website ↗

AdGuard Home

Network-wide ad and tracker blocking DNS server

AdGuard Home is an open-source DNS server that blocks ads and trackers for the whole network and supports encrypted DNS.

Free · Self-hosted, Linux, Mac, Windows · Website ↗

Aegis Authenticator

Free, open-source 2FA app for Android

An open-source Android app for managing two-factor authentication tokens in an encrypted vault.

Free · Android · Website ↗

Arq

Encrypted backup to your own cloud storage

Arq backs up Mac and Windows computers with encryption to cloud storage you choose, such as S3, Backblaze B2, Google Drive or a NAS.

Paid · Mac, Windows · Website ↗

authentik

Self-hosted identity provider and SSO

authentik is an open-source identity provider supporting OAuth2/OIDC, SAML, LDAP and proxy authentication, popular in homelabs.

Free plan · Self-hosted · Website ↗

Better Auth

Framework-agnostic authentication library for TypeScript

Better Auth is an open-source TypeScript auth library with email/password, social login, 2FA, organizations and a plugin system.

Free plan · API · Website ↗

Bitwarden

Open-source password manager

Bitwarden is an end-to-end encrypted password manager for individuals and businesses, with self-hosting and Secrets Manager.

Free plan · Web, Mac, Windows, Linux, iOS, Android, Browser extension, Self-hosted · Website ↗

BorgBackup

Deduplicating archiver with compression and encryption

BorgBackup is an open-source deduplicating backup program with authenticated encryption, often used for servers.

Free · Linux, Mac · Website ↗

Brave

Privacy browser that blocks ads and trackers by default

A Chromium-based browser that blocks ads and trackers by default, with private search, a VPN option and an AI assistant.

Free plan · Mac, Windows, Linux, iOS, Android · Website ↗

Canary Mail

Secure email client with encryption and AI

An email client with PGP encryption, read-receipt blocking, a unified inbox and AI assistance for any email provider.

Free plan · Mac, Windows, iOS, Android · Website ↗

Clerk

Drop-in authentication and user management for web apps

Clerk provides prebuilt sign-in components, user management, organizations and session handling for React, Next.js and other frameworks.

Free plan · Web, API · Website ↗

CrowdSec

Open-source, crowd-sourced intrusion prevention

CrowdSec analyzes logs to detect attacks and blocks malicious IPs, sharing threat signals across its user community.

Free plan · Self-hosted, Linux, Windows · Website ↗

Cryptomator

Client-side encryption for your cloud files

An open-source tool that encrypts files before they are uploaded to cloud storage like Dropbox, Google Drive or OneDrive.

Free plan · Mac, Windows, Linux, iOS, Android · Website ↗

CryptPad

End-to-end encrypted, open-source collaboration suite

An encrypted office suite with collaborative documents, spreadsheets, presentations, kanban, whiteboards and forms; usable on public instances or self-hosted.

Free plan · Web, Self-hosted · Website ↗

Dashlane

Password manager with passkeys and dark web monitoring

A password manager for individuals and businesses with autofill, passkeys, secure sharing and dark web monitoring.

Free plan · Web, iOS, Android, Browser extension · Website ↗

Doppler

Centralized secrets and environment variable manager

Doppler stores secrets per project and environment and syncs them to cloud providers, CI and local development.

Free plan · Web, API · Website ↗

Element

Secure, decentralized messaging on Matrix

An end-to-end encrypted messaging and collaboration app built on the open Matrix protocol, usable on public servers or self-hosted.

Free plan · Web, Mac, Windows, Linux, iOS, Android, Self-hosted · Website ↗

Enpass

Offline password manager that syncs through your own cloud

A password manager that stores your vault locally and syncs it via your own cloud storage instead of Enpass servers.

Free plan · Mac, Windows, Linux, iOS, Android, Browser extension · Website ↗

Ente Auth

Open-source 2FA authenticator with encrypted backups

A free, open-source two-factor authentication app that stores TOTP codes with end-to-end encrypted cloud backup across devices.

Free · Web, Mac, Windows, Linux, iOS, Android · Website ↗

Filen

Zero-knowledge encrypted cloud storage

A German cloud storage provider with end-to-end encryption, sync, sharing and open-source clients.

Free plan · Web, Mac, Windows, Linux, iOS, Android · Website ↗

Firefox Relay

Email and phone masks from Mozilla

A Mozilla service that creates email masks that forward to your inbox, with optional phone number masking, to keep your real contact details private.

Free plan · Web, Browser extension · Website ↗

FusionAuth

Customer identity and auth you can run anywhere

FusionAuth is a downloadable or hosted CIAM platform with login, MFA, SSO and user management APIs.

Free plan · Web, Self-hosted, API · Website ↗

Gitleaks

Find secrets in Git repositories

Gitleaks is an open-source tool that detects passwords, API keys and tokens in Git history and files.

Free · Mac, Windows, Linux · Website ↗

Hanko

Open-source passkey-first authentication

Hanko provides passkey and passwordless authentication with drop-in web components, hosted or self-hosted.

Free plan · Web, Self-hosted, API · Website ↗

Hexclave (formerly Stack Auth)

Open-source user authentication and management platform

Hexclave, formerly Stack Auth, is an open-source authentication and user-management platform with prebuilt components and a dashboard.

Free plan · Web, Self-hosted, API · Website ↗

Infisical

Open-source secrets management platform

Infisical syncs secrets and environment variables to apps and infrastructure, with PKI and secret rotation.

Free plan · Web, Self-hosted, API · Website ↗

Internxt

Open-source, encrypted cloud storage

A zero-knowledge, encrypted cloud storage service with open-source apps for files and photos.

Free plan · Web, Mac, Windows, Linux, iOS, Android · Website ↗

IVPN

Privacy-first VPN with anonymous signup

A VPN service with open-source apps, anonymous accounts, multi-hop connections and an anti-tracker.

Paid · Mac, Windows, Linux, iOS, Android · Website ↗

Kagi Search

Ad-free, private search engine

A paid, ad-free search engine that does not track users, with customizable rankings, lenses and AI tools.

Paid · Web, Browser extension · Website ↗

KeePassium

KeePass-compatible password manager for iOS and macOS

An open-source password manager for iPhone, iPad and Mac that works with KeePass databases stored where you choose.

Free plan · iOS, Mac · Website ↗

KeePassXC

Free, open-source offline password manager

KeePassXC is a cross-platform password manager that stores credentials in an encrypted local database compatible with KeePass.

Free · Windows, Mac, Linux, Browser extension · Website ↗

Keycloak

Open-source identity and access management

Keycloak is a self-hosted identity provider with single sign-on, OpenID Connect, SAML, LDAP integration and user federation.

Free · Self-hosted, Linux · Website ↗

Kinde

Auth, feature flags and billing for SaaS products

Kinde offers authentication, user management, feature flags and subscription billing for B2B and B2C apps.

Free plan · Web, API · Website ↗

Kopia

Fast, encrypted, deduplicated backups

Kopia is open-source backup software with encryption, compression and deduplication, a CLI and a desktop UI.

Free · Mac, Windows, Linux · Website ↗

LibreWolf

Privacy-hardened fork of Firefox

A free, open-source Firefox fork with telemetry removed and privacy and security settings hardened by default.

Free · Mac, Windows, Linux · Website ↗

Little Snitch

Network monitor and application firewall for Mac

A macOS firewall that shows which apps connect to the internet and lets you allow or deny each connection.

Paid · Mac · Website ↗

Logto

Open-source auth and identity for SaaS and AI apps

Logto provides sign-in experiences, OIDC, multi-tenancy, RBAC and SSO, available as cloud or self-hosted.

Free plan · Web, Self-hosted, API · Website ↗

LuLu

Free, open-source firewall for macOS

A free, open-source macOS firewall from Objective-See that blocks unknown outgoing network connections.

Free · Mac · Website ↗

mailbox.org

Secure, ad-free email and office suite from Germany

A German email provider with encrypted email, calendar, contacts, cloud storage and office tools, without ads.

Paid · Web · Website ↗

Mullvad VPN

Privacy-focused VPN with anonymous accounts

A VPN service that requires no email to sign up, uses account numbers instead, and supports WireGuard on all major platforms.

Paid · Mac, Windows, Linux, iOS, Android · Website ↗

NetBird

Open-source WireGuard mesh network with SSO

NetBird creates peer-to-peer WireGuard networks with access controls and can be fully self-hosted.

Free plan · Mac, Windows, Linux, iOS, Android, Self-hosted · Website ↗

NextDNS

DNS-level ad blocking, privacy and parental controls

A configurable DNS resolver that blocks ads, trackers and malicious domains on every device and network, with logs and parental controls.

Free plan · Web, Mac, Windows, Linux, iOS, Android · Website ↗

NordPass

Password manager from the makers of NordVPN

An encrypted password manager with autofill, passkeys, password health and data breach scanning.

Free plan · Web, Mac, Windows, Linux, iOS, Android, Browser extension · Website ↗

Notesnook

Private, end-to-end encrypted note-taking app

Notesnook is an open-source notes app that encrypts all notes end to end, with notebooks, tags, reminders and sync across devices.

Free plan · Web, Windows, Mac, Linux, iOS, Android · Website ↗

OpenBao

Open-source fork of HashiCorp Vault

OpenBao is a Linux Foundation project for managing secrets, encryption keys and certificates, forked from Vault.

Free · Self-hosted · Website ↗

Ory

Open-source identity, login and permission services

Ory develops Kratos, Hydra, Keto and Oathkeeper for identity, OAuth2/OIDC and permissions, plus the managed Ory Network.

Free plan · Web, Self-hosted, API · Website ↗

Pi-hole

Network-wide ad blocking DNS sinkhole

Pi-hole is a DNS server that blocks ads and trackers for every device on your network, often run on a Raspberry Pi.

Free · Self-hosted, Linux · Website ↗

Pocket ID

Simple self-hosted OIDC provider using passkeys

Pocket ID is a lightweight OpenID Connect provider for homelabs and small teams that signs users in with passkeys only.

Free · Self-hosted · Website ↗

Privacy Badger

Browser extension that blocks invisible trackers

A free extension from the Electronic Frontier Foundation that learns to block third-party trackers as you browse.

Free · Browser extension · Website ↗

Proton Mail

Encrypted email based in Switzerland

An end-to-end encrypted email service with apps for web, desktop and mobile, part of Proton's privacy suite.

Free plan · Web, Mac, Windows, Linux, iOS, Android · Website ↗

Proton Pass

Encrypted password manager with email aliases

An end-to-end encrypted password manager from Proton with passkeys, built-in 2FA codes and hide-my-email aliases.

Free plan · Web, Mac, Windows, Linux, iOS, Android, Browser extension · Website ↗

Proton VPN

Secure VPN with a free plan

A Swiss VPN service with open-source apps, a no-logs policy, Secure Core servers and a free tier.

Free plan · Mac, Windows, Linux, iOS, Android, Browser extension · Website ↗

restic

Fast, secure, efficient backup program

restic is an open-source command-line backup tool with encryption and deduplication to many storage backends.

Free · Mac, Windows, Linux · Website ↗

Semgrep

Static analysis for security bugs and code patterns

Semgrep scans code for vulnerabilities and custom patterns, with supply-chain and secrets scanning in its platform.

Free plan · Mac, Linux, Web · Website ↗

SimpleLogin

Email aliases to protect your real inbox

An open-source email alias service that lets you create addresses that forward to your inbox, so you can hide your real email and block spam.

Free plan · Web, iOS, Android, Browser extension · Website ↗

Snyk

Developer security for code, dependencies and containers

Snyk finds and helps fix vulnerabilities in code, open-source dependencies, containers and infrastructure as code.

Free plan · Web, API · Website ↗

Socket

Detect malicious and risky open-source dependencies

Socket analyzes npm, PyPI and other packages for supply-chain attacks and risky behavior before you install them.

Free plan · Web, API · Website ↗

SOPS

Encrypt values in YAML, JSON and env files

SOPS is a CNCF tool for editing encrypted files that keeps keys readable and encrypts values with age, PGP or cloud KMS.

Free · Mac, Windows, Linux · Website ↗

Standard Notes

End-to-end encrypted notes app

A note-taking app that encrypts all notes end to end and syncs them across devices, with extra editors for Markdown, code and spreadsheets. For privacy-conscious note takers.

Free plan · Web, Mac, Windows, Linux, iOS, Android · Website ↗

Startpage

Private search engine with Google results

A privacy-focused search engine that shows Google results without tracking or profiling users, with anonymous page viewing.

Free · Web, Browser extension · Website ↗

Strongbox

KeePass-compatible password manager for Apple devices

A native password manager for Mac, iPhone and iPad that works with KeePass and Password Safe databases.

Free plan · Mac, iOS · Website ↗

SuperTokens

Open-source authentication for your app

SuperTokens offers prebuilt login UI, session management and auth recipes that you can self-host or use managed.

Free plan · Web, Self-hosted, API · Website ↗

Sync.com

End-to-end encrypted cloud storage

A Canadian cloud storage service with end-to-end encryption, file sharing and backups.

Free plan · Web, Mac, Windows, iOS, Android · Website ↗

Syncthing

Open-source continuous file sync between your devices

Syncthing syncs folders directly between your computers and phones peer-to-peer, without a central cloud server.

Free · Windows, Mac, Linux, Android · Website ↗

Tailscale

WireGuard-based mesh VPN that just works

Tailscale connects your devices and servers in a private WireGuard mesh network with SSO and access controls.

Free plan · Mac, Windows, Linux, iOS, Android · Website ↗

Teleport

Identity-based access to servers, databases and Kubernetes

Teleport provides short-lived certificate access, session recording and audit for SSH, Kubernetes, databases and apps.

Free plan · Self-hosted, Web, Mac, Windows, Linux · Website ↗

Tor Browser

Browser for anonymous browsing over the Tor network

A free browser that routes traffic through the Tor network to protect privacy and resist tracking and censorship.

Free · Mac, Windows, Linux, Android · Website ↗

Tresorit

Encrypted cloud storage and file sharing for business

An end-to-end encrypted file sync and sharing service for businesses, with secure links and compliance features.

Paid · Web, Mac, Windows, Linux, iOS, Android · Website ↗

Trivy

Security scanner for containers, code and cloud

Trivy, from Aqua Security, scans container images, filesystems, Git repos and Kubernetes for vulnerabilities and misconfigurations.

Free · Mac, Windows, Linux · Website ↗

TruffleHog

Find, verify and analyze leaked credentials

TruffleHog scans repos, cloud storage and chat tools for secrets and checks whether found credentials are live.

Free plan · Mac, Windows, Linux · Website ↗

Tuta

Encrypted email and calendar

An end-to-end encrypted email and calendar service (formerly Tutanota) based in Germany, with open-source apps.

Free plan · Web, Mac, Windows, Linux, iOS, Android · Website ↗

uBlock Origin

Free, efficient content blocker for browsers

A free, open-source browser extension that blocks ads, trackers and malware sites with low memory use.

Free · Browser extension · Website ↗

VeraCrypt

Free, open-source disk encryption

Open-source software for creating encrypted volumes and encrypting whole disks or partitions, the successor to TrueCrypt.

Free · Windows, Mac, Linux · Website ↗

Wazuh

Open-source security platform for XDR and SIEM

Wazuh provides endpoint security monitoring, threat detection, log analysis and compliance reporting.

Free plan · Self-hosted, Linux, Windows, Mac · Website ↗

Windscribe

VPN and ad blocker with a free plan

A VPN with a free tier, built-in ad and tracker blocking, and apps for desktop, mobile, browsers and routers.

Free plan · Mac, Windows, Linux, iOS, Android, Browser extension · Website ↗

Wire

End-to-end encrypted collaboration and messaging

A secure communication platform with end-to-end encrypted messaging, calls, conferencing and file sharing for organizations.

Free plan · Web, Mac, Windows, Linux, iOS, Android · Website ↗

WorkOS

Enterprise SSO, directory sync and auth APIs

WorkOS provides APIs for SAML/OIDC SSO, SCIM directory sync, audit logs and a hosted AuthKit login for B2B SaaS.

Free plan · Web, API · Website ↗

ZeroTier

Virtual networks connecting devices anywhere

ZeroTier creates encrypted virtual Layer 2 networks so devices can connect as if on the same LAN.

Free plan · Mac, Windows, Linux, iOS, Android · Website ↗