Developer-focused authentication and authorization platform for apps.
FreemiumSecurityWebFreemium · See website
33 toolsPublic bookmarkCurated by Bookmarkit TeamUpdated August 2026
Best security tools
Security tools on this page are identity, secrets, endpoint, network, and application scanning products people actually bookmark. The list includes 1Password, Bitwarden, Okta, Auth0, CrowdStrike, Snyk, Tailscale, and consumer VPNs. It is not a full enterprise SOC catalog. Use it to pick controls you will operate, then hire a security review for the rest.
What are security tools on Bookmarkit?
Here, security tools are software that authenticates users, stores secrets, inspects endpoints, filters traffic, or finds vulnerabilities in code. Password managers and SSO are the usual first buys. VPNs and Zero Trust products change how people reach systems. Scanners such as Snyk sit in the repo. Chat apps such as Signal appear because people research private messaging next to security, not because a messenger is an SSO replacement.
This shortlist includes Auth0, Burp Suite, Clerk, Cloudflare WAF, Cloudflare Zero Trust, CrowdStrike, and 27 more.
Who this shortlist is for
- Founders who still share passwords in a chat and need a manager plus SSO
- Engineering leads adding Snyk or a TLS and WAF baseline
- Individuals comparing VPNs and private messengers (with clear limits)
How we picked
We include identity, secrets, endpoint, VPN, and app-sec products with a catalog profile. We do not claim this is a complete compliance program.
- Primary job is authentication, secrets, threat detection, or private connectivity
- Public product page and a pricing or license signal
- Operable by a small team or an individual
- Messengers included only when privacy is the researched job
The shortlist
Open a profile for pricing, alternatives, and a product page.
Burp Suite is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
Drop-in authentication and user management components for modern apps.
ProprietarySecurityWebFreemium · See website
Cloudflare WAF is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
Connect and protect your workforce, AI agents, and infrastructure.
ProprietarySecurityWebFreemium · See website
CrowdStrike is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
Password manager with autofill, VPN add-ons, and dark web monitoring.
ProprietarySecurityMacWindowsAndroidPaid · See website
Alternative to Bitwarden and Proton Pass and LastPass
Fast premium VPN with strong privacy defaults and simple apps.
ProprietarySecurityMacWindowsLinuxPaid · See website
Have I Been Pwned is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
EnglishCatalàČeštinaDanskDeutschGreekEspañolSuomiFrançaisעבריתMagyarBahasa IndonesiaItaliano日本語한국어PolishPortuguês do.
ProprietarySecurityWebFreemium · See website
Malwarebytes Anti-Malware is a security software that defends against online threats using artificial intelligence and machine learning.
Freemium (Subscription)SecurityMacWindowsAndroidFreemium · See website
Mullvad is a Security product used by individuals and teams who want a reliable, modern workflow.
Open Source(GPL-3.0)SecurityMacWindowsLinuxPaid · See website
Consumer VPN for private browsing, streaming access, and threat protection.
ProprietarySecurityMacWindowsLinuxPaid · See website
Norton is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
Enterprise identity platform for SSO, MFA, and workforce access control.
ProprietarySecuritySoftware as a Service (SaaS)Paid · See website
OpenVPN is a Security product used by individuals and teams who want a reliable, modern workflow.
Freemium (Subscription)SecurityMacWindowsLinuxFreemium · See website
Proton VPN is a Security product used by individuals and teams who want a reliable, modern workflow.
Freemium (Subscription)SecurityMacWindowsLinuxFreemium · See website
Private messaging with end-to-end encryption by default.
ProprietarySecurityWebFreemium · See website
Open source is awesome for boosting our productivity.
Freemium (Subscription)SecurityWebFreemium · See website
Alternative to GitHub
com is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
Tailscale is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
Fast messaging app with large groups, channels, and powerful bots.
Freemium (Subscription)SecurityMacWindowsLinuxFreemium · See website
Alternative to Signal
Tresorit is an end-to-end encrypted file synchronization and sharing solution for desktop and mobile platforms.
ProprietarySecurityMacWindowsLinuxPaid · See website
VirusTotal is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
Global messaging app for personal and business conversations.
Freemium (Subscription)SecurityMacWindowsAndroidFreemium · See website
WireGuard is a Security product used by individuals and teams who want a reliable, modern workflow.
FreeSecurityMacWindowsLinuxFree · See website
Alternative to Tailscale
1Password is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
1Password can store and agent SSH keys so developers authenticate without leaving private keys on disk unprotected.
ProprietarySecurityWebFreemium · See website
Bitwarden is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
LastPass is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
Proton Mail is a Security product used by individuals and teams who want a reliable, modern workflow.
ProprietarySecurityWebFreemium · See website
Proton Pass stores credentials with Proton’s privacy-first encryption model.
ProprietarySecurityWebFreemium · See website
Vault centralizes secrets, encryption keys, and dynamic database credentials for infrastructure.
ProprietarySecurityWebFreemium · See website
How to choose security software
Close the obvious holes first: passwords, SSO, and backups. Then add endpoint and repo scanning. A VPN does not replace those.
| If this is the job | Look at |
|---|---|
| Secrets | 1Password, Bitwarden, or Proton Pass. Vault-class tools (HashiCorp Vault) when machines need secrets too. |
| Who can log in | Okta, Auth0, or Clerk for app auth. Cloudflare Zero Trust or Tailscale for network access. |
| Code and dependencies | Snyk. Pair with review, not with a merge of every alert. |
| Endpoint | CrowdStrike or a lighter endpoint product if you have a security owner. Consumer AV is not a company program. |
Related research
Best developer tools
Editors, repos, cloud, APIs, and observability for engineering teams.
Best personal productivity tools
Tasks, calendars, launchers, and password managers for one person.
Security software
Full category directory, not this editorial shortlist.
OWASP agentic security rubric
Bookmarkit research note
Privacy features still need verification
Bookmarkit research note
Frequently asked questions
What security tools should a startup buy first?
A password manager, SSO for the apps you already pay for, disk encryption you already have on the OS, and backups you have tested. Add Snyk or similar on the main repo. Add Tailscale or Zero Trust when you need private access. A VPN subscription is not the first control.
1Password vs Bitwarden: which should I use?
Both are password managers. 1Password is a polished commercial default. Bitwarden is a common pick when you want open source and a cheaper team plan. Compare sharing, SSO, and secret automation. Moving managers is painful. Pilot with a small vault first.
Does a VPN make me anonymous?
No. A VPN moves your traffic through another operator. It can help on untrusted networks. It does not hide you from the VPN provider, the sites you log into, or a broken client. Mullvad, Proton VPN, and others publish different trust models. Read them. Pair with a password manager and updates.
Is Signal a security tool?
Signal is a messenger with strong defaults for private chat. It is on this list because people research it next to security software. It does not replace SSO, endpoint coverage, or a password manager. For team chat you may still need Slack or a smaller tool with admin controls.
Where do agent security issues fit?
If you are connecting AI agents to tools and browsers, read our OWASP agentic rubric and the agentic-browser notes. Traditional security tools still apply (SSO, secrets, logging). Agents add prompt injection and over-scoping, which a VPN will not fix.