Web security and JavaScript. Express.js Helmet maintainer.
Security
Cybersecurity and infosec
Security, home automation, and self-hosting. Practical guides and projects.
Bruce Schneier's security blog. Cryptographer and security expert writing since 2004.
The legendary hacker ezine since 1985. Technical articles on security, exploitation, and hacker culture. Issue 72 in 2025.
Services, tools and knowledge to protect your privacy. Curated recommendations for privacy-respecting software.
Check if your email or phone was in a data breach. Free service by Troy Hunt, essential for security awareness.
Analyze files and URLs for malware. Scans with 70+ antivirus engines and URL/domain blocklists.
Founder of Signal. Writing on cryptography, privacy, security, and the intersection of technology and society.
Cryptographer, Go security lead. Creator of mkcert. Deep technical posts on cryptography and security.
Brian Krebs' investigative reporting on cybercrime. Breaking security news and deep dives into hacking incidents.
Matthew Green's blog on cryptography and security. Accessible explanations of complex crypto topics.
Collection of security resources. Tools, books, and resources for security professionals.
Curated list of hacking resources. CTFs, tutorials, tools, and learning paths.
Collection of inspiring lists, manuals, cheatsheets, and tools. 200K+ stars. A hacker's encyclopedia.
Test SSL/TLS configuration of any website. Industry standard for SSL analysis.
Analyze HTTP security headers of any website. Quick security audit.
ELF research group and zine. Deep technical content on binary hacking, virus writing, and Linux internals.
Proof of Concept or GTFO. Hacker journal with deeply technical essays on reverse engineering and file formats. Often a valid PDF, ZIP, and bootable OS simultaneously.
Archive of public exploits and vulnerable software. Essential resource for security researchers and penetration testers.
Massive wiki of hacking techniques for CTFs and pentesting. Privilege escalation, web attacks, and more.
Search engine for Internet-connected devices. See what's exposed on the internet. Essential for security researchers.
Deep technical reverse engineering posts. Famous for breaking down Ticketmaster's rotating barcode system.
Security researcher Alex Hope. Famous for finding Tony Abbott's passport number on Instagram.
Learn security through challenges. SSH-based hacking games.
Learn cryptography by breaking it. Programming challenges teaching crypto.
Cybersecurity education platform. CTF-style learning from ASU.
Learn cybersecurity through hands-on exercises. Guided hacking rooms.
Free web security training. Learn to find and exploit vulnerabilities.
Digital rights organization defending civil liberties online. Fighting for privacy, free speech, and innovation.
Research lab studying digital threats to civil society. Exposes government surveillance and spyware.
Privacy-focused VPN that accepts cash by mail. No accounts, no email required, just anonymous access.