Security & Monitoring

Better Stack

AppFree + paid

Alerts you when your site goes down and collects your app logs.

What sets it apart: Monitoring, logs and a status page in one account.

For: Businesses and developers who want to know right away when their site goes down.

Canarytokens (Thinkst)

AppFree

Sets a trap with a fake key or document; alerts you when someone touches it.

What sets it apart: No setup needed; you create the trap on the site in a few clicks.

For: People who want to know whether someone has broken into their server or files.

CrowdSec

ServerFree · open source

Detects and blocks bot and password-guessing attacks on your server.

What sets it apart: Uses a list of bad IPs shared by thousands of servers.

For: Developers who manage their own server (VPS).

GitGuardian

AppFree + paid

Finds passwords and API keys you forgot in your code repository and alerts you.

What sets it apart: Catches leaks at commit time; with ggshield it also scans before you push.

For: Developers and small teams who keep code on GitHub.

NVIDIA OpenShell

TerminalFree · open source

Runs an AI agent in a sandbox where file, network and key access is limited by policy.

What sets it apart: Denies and logs every access not in the policy; the agent never sees the real API key.

For: Software and security teams running agents on their own computers or servers.

NVIDIA SkillSpector

TerminalFree · open source

Scans the skills and plugins you download for hidden dangers before you install them.

What sets it apart: Inspects a skill without running it; gives a 0–100 risk score and a "don't install" warning.

For: Anyone installing third-party skills for Claude Code or Codex.

SigNoz

ServerFree · open source

Shows your app's logs, errors and slow requests in one dashboard.

What sets it apart: Open source; runs free on your own server.

For: Developers running apps on their own server.

Strix

TerminalFree · open source

Looks for security vulnerabilities in your app, proves what it finds with an example and suggests fixes.

What sets it apart: Doesn't just report a vulnerability; confirms it with a working example.

For: Developers who want to check their own site or app before going live.

TruffleHog

TerminalFree · open source

Finds leaked keys in your code and git history and checks whether they still work.

What sets it apart: Verifies whether the keys it finds actually work.

For: Developers wondering whether there are forgotten keys in their repository.

Cloudflare

AppFree + paid

A protection and speed layer that filters traffic before it reaches your site.

What sets it apart: Unlimited DDoS protection and basic bot protection, even on the free plan.

For: Site owners who want to protect their site from bots and attacks.

GitHub secret scanning

AppFree + paid

Finds forgotten passwords and API keys in your code and alerts you.

What sets it apart: Automatic and free on public repositories; also scans past commits.

For: Anyone who keeps their code on GitHub.