Compare 52 free security tools, free tiers, and developer deals. 1 requires an application or qualification. We could not confirm today's terms for 32 of them: on 26 the page we cite did not answer, and on 6 our own read did not confirm them. Each row says why.
What this name holds: Code and dependency scanning, threat intel and network access control — the broad security suites, including 1Password.
3 other names here answer “who is allowed in, and where are the secrets kept”, and each holds a different list: Auth (31), Password Managers (7), Secrets Management (4).
We track 52 security services with a free tier we hold as current and 2 without. This category has seen some movement — 11 pricing changes recorded across vendors.
| Vendor | Tier | Description | Read / catalogue date |
|---|---|---|---|
| Snyk | Free | Developer security scanning. Free: up to 5 projects, with 200 Snyk Open Source (SCA) tests, 100 Snyk Code (SAST) tests, 300 IaC tests and 100 Container tests a month (Snyk's usage docs say 400 Open Source tests). Team is $25/month for teams of up to 10 developers, with 100 projects and 1,000 Snyk Code tests a month. Snyk Evo (AI pentesting, coding-agent security) needs an Enterprise subscription. | 2026-10-24 |
| Fingerprint | Free | Device identification and fraud prevention — Free: Web and mobile device identification. $0 /month up to 1,000 API calls per month. Includes: 14 day free trial of Pro Plus plan, Fingerprint Identification, Android Smart Signals, 500k Android API calls/mo | 2026-10-31 |
| SonarQube Cloud | Free | Code quality and security analysis, free for open-source projects and for private projects up to 50k lines of code: SonarSource lists the "SonarQube Team Plan, free for your private projects up to 50k LOC. No card, no expiry." 40+ languages and frameworks, CI/CD integration. Formerly SonarCloud. | 2026-11-08 / 2026-08-23 |
| 1Password | OSS Teams | Free Teams account for open source projects — includes full platform access (Mac, Windows, iOS, Android, Linux, browser), SSH key management, Git commit signing, and secrets management. Non-expiring membershipRestricted to oss (1Password for Open Source Projects) applicants — not generally available.Eligibility: Active open source project; Project 30+ days old and actively maintained; Uses permissive open source licenseThe page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-09, so we cannot confirm these terms today. | 2026-10-09 / 2026-08-23 |
| Socket.dev | Free | Socket.dev is a supply chain security tool for open source dependencies. The Free plan includes 1 dev seat, unlimited dashboard users and repositories, 1,000 scans a month, and 500 API requests an hour. Team starts at $25 per dev seat a month from 5 seats. Open-source projects can ask for a free Team account.Our read on 2026-11-10 found the page different from the terms we hold, and we hold no confirmation of the terms we publish. | 2026-11-10 / 2026-10-19 |
| GitGuardian | Free | Secrets detection for up to 25 developers — 550+ secret types, unlimited real-time scanning, 500 historical scan detections, CLI (ggshield) for pre-commit hooks, VSCode extension, 10K API calls/month | 2026-11-07 / 2026-10-15 |
| FOSSA | Free | Open source license compliance and software composition analysis (SCA). Free tier: 5 projects, 10 contributing developers, 1 release group, 5 dependency levels for scans, 1 quality check (outdated packages), 5 imported SBOMs, container scanning, SBOM export, API accessOur read on 2026-11-09 found the page different from the terms we hold, and we hold no confirmation of the terms we publish. | 2026-11-09 / 2026-10-19 |
| Twingate | Free | Zero trust network access — Starter plan is free and includes up to 5 users and up to 50 Resources. | 2026-11-07 |
| Tailscale | Personal | Mesh VPN with WireGuard — 6 users, unlimited devices, MagicDNS, exit nodes, subnet routing. Free Personal plan.
|
2026-10-28 |
| Semgrep | Free | Static analysis (SAST) and software composition analysis (SCA) — Free Edition: Cross-file analysis with Pro rules, AI-powered detection, triage, and remediation, 60 AI credits included, Fast CI/CD deploy via Semgrep infrastructure, Scan up to 10 repositories, Maximum 10 contributors, Authentication via GitHub/GitLabOur read on 2026-10-26 found the page different from the terms we hold, and we hold no confirmation of the terms we publish. | 2026-10-26 / 2026-10-03 |
| URLscan.io | Free | URL and website security scanner API — free tier: 50 private scans/day, 1,000 unlisted scans/day, 5,000 public scans/day, 1,000 search requests/day, 10,000 result requests/day | 2026-11-06 |
| VirusTotal | Community (Free) | Malware and URL analysis API (Google) — free community tier: 500 requests/day, 4 requests/minute. Scan files, URLs, domains, IPs against 70+ antivirus engines. Non-commercial use onlyWe could not read the page we cite for this offer when we last looked, on 2026-11-09, so we cannot confirm these terms today. | 2026-08-25 · tried 2026-11-09, no read |
| FraudLabs Pro | Free | Screen an order transaction for credit card payment fraud. This REST API will detect all possible fraud traits based on the input parameters of an order. The Free Micro plan has 500 transactions per month.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-10, so we cannot confirm these terms today. | 2026-10-10 / 2026-07-06 |
| LoginLlama | Free | A login security API to detect fraudulent and suspicious logins and notify your customers. Free for 1,000 logins per month. | 2026-10-25 |
| aikido.dev | Free | All-in-one appsec platform covering SCA, SAST, CSPM, DAST, Secrets, IaC, Malware, Container scanning, EOL,... Free plan includes two users, scanning of 10 repos, 1 cloud, 2 containers & 1 domain. | 2026-11-11 |
| CertKit | Free | CertKit automates SSL/TLS certificate issuance and renewal, deploys certificates through an agent, monitors domains' SSL certificates, and searches Certificate Transparency logs. The Homelab plan is free for personal, non-commercial use only, with 2 certificates, 1 agent, 1 seat and 3 domain SSL monitors. Businesses evaluating CertKit get a free 30-day trial instead, with no credit card. Homelab allows one account per person or organization. | 2026-11-08 |
| Corgea | Free | Free autonomous security platform that finds, validates and fixes insecure code and packages across +20 languages and frameworks. Free plan for up to 2 team members and 10 repositories, with 10 PR scans a month and 10 SAST auto fixes. Features: AI SAST, Logic/Auth Scanning, Dependency Scanning, Secrets Detection, Container Scanning, IaC Scanning.Our read on 2026-11-12 found the page different from the terms we hold, and we hold no confirmation of the terms we publish. | 2026-11-12 / 2026-09-25 |
| crypteron.com | Free | Cloud-first, developer-friendly security platform prevents data breaches in .NET and Java applicationsWhen we last read the page we cite for this offer, on 2026-11-04, we found no earlier figure of ours for the page to have narrowed, so we cannot confirm these terms today. | 2026-11-04 / 2026-07-12 |
| CyberChef | Free | A simple, intuitive web app for analyzing and decoding/encoding data without dealing with complex tools or programming languages. Like a Swiss army knife of cryptography & encryption. All features are free to use, with no limit. Open source if you wish to self-host.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-11 |
| Datree | Free | Open Source CLI tool to prevent Kubernetes misconfigurations by ensuring that manifests and Helm charts follow best practices as well as your organization’s policiesWe could not read the page we cite for this offer when we last looked, on 2026-11-10, so we cannot confirm these terms today. | 2026-07-10 · tried 2026-11-10, no read |
| DJ Checkup | Free | Scan your Django site for security flaws with this free, automated checkup tool. Forked from the Pony Checkup site.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-06 |
| Dotenv | Free | Sync your .env files, quickly & securely. Stop sharing your .env files over insecure channels like Slack and email, and never lose an important .env file again. Free for up to 3 teammates.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-11 |
| Have I been pwned? | Free | REST API for fetching information on data breaches. Free web search; API requires subscription for some endpoints.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-11-02, so we cannot confirm these terms today. | 2026-11-02 / 2026-07-09 |
| Internet.nl | Free | Test for modern Internet Standards like IPv6, DNSSEC, HTTPS, DMARC, STARTTLS and DANEThe page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-11 |
| letsencrypt.org | Free | Free SSL Certificate Authority with certs trusted by all major browsers | 2026-11-10 |
| meterian.io | Free | Monitor Java, Javascript, .NET, Scala, Ruby, and NodeJS projects for security vulnerabilities in dependencies. Free for one private project, unlimited projects for open source.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-06 |
| Mozilla Observatory | Free | HTTP security header testing tool. Now integrated into MDN as HTTP Observatory.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-10 |
| Public Cloud Threat Intelligence | Free | High confidence Indicator of Compromise(IOC) targeting public cloud infrastructure, A portion is available on github (https://github.com/unknownhad/AWSAttacks). Full list is available via APIThe page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-11 |
| Safety | Free | AI-powered development security platform (rebranded from PyUp). Free: 1 codebase, 100 scans/month, 1 user. Safety says the free plan is "designed for non-commercial use, individual developers, and education use cases". Uses public vulnerability databases (Safety's proprietary 4x database requires paid plan). Email support with 48-hour response. | 2026-10-28 |
| qualys.com | Free | Find web app vulnerabilities, audit for OWASP RisksThe page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-08 |
| Smart Grow Vault | Free | Secure Enterprise-grade platform for managing environment variables and secrets — Free plan includes 1 organization, 3 apps per organization, 2 environments per app, 50 variables per environment, 2 secure files per environment, and 2 API keys. | 2026-10-31 |
| SOOS | Retired | There is no free tier: SOOS has shut down. Checked 2026-11-02, soos.io, app.soos.io and kb.soos.io return HTTP 410 with "SOOS.io has shut down. This site / service no longer exists." The Internet Archive has the live site on 2026-06-15 and the notice from 2026-08-27. The former offer was free, unlimited SCA scans for open-source projects.SOOS's pricing page has not resolved for us since 2026-05-23. | 2026-11-02 · tried 2026-11-10, no read |
| ssllabs.com | Free | Intense analysis of the configuration of any SSL web serverThe page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-13 |
| Sucuri SiteCheck | Free | Free website security check and malware scannerThe page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-11, so we cannot confirm these terms today. | 2026-10-11 / 2026-07-09 |
| TestTLS.com | Free | Test an SSL/TLS service for secure server configuration, certificates, chains, etc. Not limited to HTTPS.We could not read the page we cite for this offer when we last looked, on 2026-11-08, so we cannot confirm these terms today. | 2026-09-28 / 2026-07-12 · tried 2026-11-08, no read |
| Virgil Security | Free | Start free , pay $0.02/month per user beyond 250 users. | 2026-11-11 |
| Bearer | Free | Helps implement privacy by design via audits and continuous workflows so that organizations comply with GDPR and other regulations. The free tier is limited to smaller teams and the SaaS version only.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-14, so we cannot confirm these terms today. | 2026-10-14 / 2026-07-19 |
| Iubenda | Free | Privacy and cookie policies and consent management. The free tier offers limited privacy and cookie policy as well as cookie banners. | 2026-11-13 |
| Ketch | Free | Consent management and privacy framework tool — Full-Feature Consent Management at $0/month. No credit card, no limits on jurisdictions or customization. | 2026-10-29 |
| RandomKeygen | Free | A free mobile-friendly tool that offers a variety of randomly generated keys and passwords you can use to secure any application, service, or device. | 2026-11-05 |
| Pareto Security | Free | Pareto Cloud is free for up to 5 devices, with no credit card required. The free tier includes the cloud dashboard, alerts to email, Slack and Teams, and the API. Paid Team and Business plans are priced per device per month. The macOS, Linux and Windows apps are open source. | 2026-11-05 |
| Gitleaks | Open Source | Open source (MIT) secret scanner for git repositories, files, and directories. CLI tool is free with no limits. The GitHub Action needs no license key on personal accounts; repositories owned by a GitHub organization need a free license key from gitleaks.io.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-14, so we cannot confirm these terms today. | 2026-10-14 / 2026-07-30 |
| TruffleHog | Open Source | Open source (AGPL-3.0) secret scanner for git repos, Docker images, S3, Slack, and 20+ sources. Detects 800+ credential types with active API verification.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-14, so we cannot confirm these terms today. | 2026-10-14 / 2026-07-30 |
| Checkov | Open Source | Open source (Apache 2.0) IaC static analysis. Scans Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, and 10+ frameworks for misconfigurations. No usage limits.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-14, so we cannot confirm these terms today. | 2026-10-14 / 2026-07-29 |
| Trivy | Open Source | Open source (Apache 2.0) multi-target vulnerability scanner for container images, filesystems, git repos, IaC, Kubernetes, SBOMs, and cloud resources.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-14, so we cannot confirm these terms today. | 2026-10-14 / 2026-08-01 |
| Grype | Open Source | Open source (Apache 2.0) vulnerability scanner for container images and filesystems. Covers 20+ language ecosystems with daily-updated CVE database.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-14, so we cannot confirm these terms today. | 2026-10-14 / 2026-07-25 |
| OWASP ZAP | Open Source | Open source (Apache 2.0) web application security scanner. Passive/active scanning, AJAX spider, fuzzing, manual interception, CI/CD integration. No usage limits.The page we cite for this offer does not name it when we last looked, on 2026-10-14, so we cannot confirm these terms today. | 2026-10-14 / 2026-07-25 |
| Nuclei | Open Source | Open source (MIT) vulnerability scanner with YAML-based template system. 9,000+ community templates for web apps, APIs, networks, DNS, SSL. No usage limits.When we last read the page we cite for this offer, on 2026-10-24, we found the same terms as an earlier read we had declined to record, so we cannot confirm these terms today. | 2026-10-24 / 2026-07-30 |
| CodeQL | Free | GitHub semantic code analysis engine. Free for all public repositories with no scan limits. Supports JS/TS, Python, Java, C#, C/C++, Go, Ruby. Integrated into GitHub Actions.The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-14, so we cannot confirm these terms today. | 2026-10-14 / 2026-07-25 |
| Dependabot | Free | Free automated dependency updates and vulnerability alerts for all GitHub repos. Generates pull requests for updates across 30+ ecosystems (npm, pip, Maven, Go, Docker, etc.).The page we cite for this offer states no amount, tier or rate we can read when we last looked, on 2026-10-14, so we cannot confirm these terms today. | 2026-10-14 / 2026-07-24 |
| Renovate | Open Source | Open source (AGPL-3.0) automated dependency update bot. Supports 90+ package managers. Available as self-hosted CLI or free hosted GitHub/GitLab App by Mend.The page we cite for Renovate names a plan but states no amount, so these limits come from our own record rather than from that page. | 2026-11-03 |
| Probely | Free | Free plan with 5 scan hours/month for web application and API vulnerability scanning, up to 3 users, full API access. No credit card required. | 2026-10-29 |
| Falco | Open Source | CNCF Graduated (Apache 2.0) runtime security tool. Monitors Linux syscalls and Kubernetes events to detect threats in containers, hosts, and cloud environments in real time. | 2026-11-13 |
| StackHawk | Retired | Hosted DAST for CI/CD, repositioned as a security platform for AI coding agents. No free tier. stackhawk.com/pricing, read 2026-09-20, publishes two plans: Wingman at $10 per user per month, covering unlimited apps and 50 agentic scans per user per month, and StackHawk Scale on request. The page states "unlimited apps — no per-app or per-scan math", so there is no per-app rate, and every occurrence of "free" on it names a 14-day trial. | 2026-11-06 |