Information Security

OWASP

OWASP (Open Worldwide Application Security Project) is a nonprofit foundation dedicated to improving software security through open, community-driven resources…

Zero Trust

Zero Trust is a security model built on the principle 'never trust, always verify': no user, device, or network location is trusted by default, even inside a t…

Zero Trust Architecture

Zero Trust Architecture is a security model built on the principle of "never trust, always verify" — no user, device, or network segment is trusted by default,…

Firewall

A firewall is a network security system that monitors and controls incoming and outgoing traffic based on predetermined rules, acting as a barrier between a tr…

VPN

A VPN (Virtual Private Network) creates an encrypted tunnel between a device and a remote network or gateway over the public internet, making traffic appear as…

SSL

SSL (Secure Sockets Layer) is the original cryptographic protocol for encrypting communication between a client and a server over a network, developed by Netsc…

TLS

TLS (Transport Layer Security) is the standard cryptographic protocol for securing data in transit over a network, succeeding SSL. It provides encryption, data…

Authentication

Authentication is the process of verifying that a user, device, or system is who or what it claims to be, typically before granting access to a resource. It is…

Authorization

Authorization is the process of determining what an authenticated identity is permitted to do within a system — which resources it can read, modify, or delete.…

SQL Injection

SQL Injection is a web security vulnerability where an attacker inserts malicious SQL statements into an application's input fields, tricking the backend datab…

XSS

Cross-Site Scripting (XSS) is a web security vulnerability that lets an attacker inject malicious client-side scripts into pages viewed by other users. When un…

Zitadel

Zitadel is an open-source identity and access management (IAM) platform providing authentication, authorization, and user management via OIDC, OAuth 2.0, and S…

Chainguard

Chainguard is a software supply chain security company that produces minimal, hardened, and continuously rebuilt container images designed to eliminate known v…

Clerk

Clerk is a developer-first authentication and user management platform that provides pre-built, embeddable UI components and APIs for sign-up, sign-in, user pr…

Keycloak

Keycloak is an open-source identity and access management solution that provides single sign-on, user federation, and support for standards like OAuth2 and Ope…

Bitwarden

Bitwarden is an open-source password manager that lets individuals and teams securely generate, store, and share encrypted credentials across browsers and devi…

Burp Suite

Burp Suite is an integrated platform for web application security testing, widely used by penetration testers and security researchers to discover and exploit…

Vault

Vault is HashiCorp's secrets management tool for securely storing, accessing, and rotating sensitive data such as API tokens, database credentials, and TLS cer…

Auth0

Auth0 is an identity-as-a-service platform that provides drop-in authentication and authorization for applications, supporting social logins, single sign-on (S…

Autopsy

Autopsy is an open-source digital forensics platform providing a graphical interface over The Sleuth Kit, used to analyze disk images, recover deleted files, a…

Arkose Labs

Arkose Labs is a fraud-prevention and bot-mitigation platform that uses interactive, puzzle-based challenges and risk-based signals to detect and deter automat…

Let's Encrypt

Let's Encrypt is a free, automated certificate authority (CA) that issues domain-validated TLS/SSL certificates, making HTTPS encryption accessible to any webs…

Ory

Ory is an open-source identity infrastructure project providing components for authentication, authorization, and access control, including OAuth2/OpenID Conne…

Nessus

Nessus is a widely used vulnerability scanning tool developed by Tenable that identifies security weaknesses, misconfigurations, and missing patches across net…