All-in-one Android security suite — deepfake detection, antivirus, Tor VPN, breach monitoring, phishing scanner, and 50+ security tools. On-device, no API keys, open source.

MR.GADGET: Ultimate OSINT Framework | 25+ Modules for Identity, Infrastructure & Forensics (Bash/Linux)

🛠️ Build robust digital defenses with MR.GADGET, a Bash-based OSINT tool offering 25+ modules for security experts and researchers.

Have I Been Pwned comprehensive breach checker with web dashboard. Monitors email breaches, password exposures, credential stuffing, and stealer logs. Python/Flask with systemd automation.

SecuLock: Automated Cybersecurity Honeypot and Breach Response

DataShield🤺 Self-hosted service that tells a business whether its employees' data has surfaced in known breaches, with severity-based alerting and a customizable security dashboard.

Privacy-preserving credential exposure checker. Were your API keys compromised? Find out.

Cerberus Recon Engine with username, breach, and domain modules

This Password Manager is a lightweight and secure web application that helps you store and manage your passwords for various services in one place. Built with simplicity and security in mind, it uses a master password login to access your encrypted credentials and provides features like breach detection, clipboard copy, and search functionality.

Password strength analyzer with entropy calculation, pattern detection, and HIBP breach checking. Zero dependencies.

Reads a CSV of vendors, checks each domain against the free HIBP breach metadata endpoint, and writes a CSV report suitable for GRC evidence.

Email OSINT toolkit — breach checking, domain validation, reputation scoring. Uses free APIs (HIBP, Hunter, EmailRep).

Cloudflare-style password breach & strength analyzer using Web Crypto API hashing, HaveIBeenPwned K-Anonymity, entropy calculation, and advanced pattern detection — all fully client-side and privacy-preserving.

Credential exposure monitor — watches your domains for leaked credentials across breach corpora, stealer logs and dark web sources (HudsonRock and friends), and alerts on new hits

A modern web application for searching email data breaches on dark web.

Password Security Posture Management — local-first vault auditing, breach detection, AI-assisted organization, and password rotation

Privacy-preserving password breach checker using the Have I Been Pwned k-anonymity API, with a Python CLI, FastAPI service, web UI, rate limiting, and Docker deployment.

Unified cybersecurity platform integrating malware analysis, port scanning, breach detection, and AI-powered security assistance.

Email Breach Checker; can be used with test api key on test emails or on real emails with a paid tier api key. Checks if email has been included in any historic breaches.

Generic attack-simulation toolkit that validates FortiDeceptor and other deception/honeypot solutions by triggering decoys and correlating the alerts they raise. Purple-team PoC.