# App Security & Secrets

> Application and infrastructure security: secrets management, vulnerability scanning, fraud prevention, AI security.

- Parent category: [Infrastructure & Cloud](https://devshelf.io/category/infrastructure-cloud.md)
- DevShelf page: https://devshelf.io/category/app-security-secrets

## Resources (20)

- [Agent Security](https://devshelf.io/resource/agent-security.md): Knowledge hub by NeuralTrust on securing autonomous AI agents: security framework, guides, glossary, and benchmarks. (pricing: Free)
- [Cert Decoder](https://devshelf.io/resource/cert-decoder.md): A browser-based tool to decode and inspect X.509 certificates in PEM format, extracting details like issuer, subject, and validity. (pricing: Free)
- [ChatWithCloud](https://devshelf.io/resource/chatwithcloud.md): A CLI tool that enables natural language interaction with AWS infrastructure for cost analysis, security auditing, and troubleshooting. (pricing: Paid)
- [Context Data](https://devshelf.io/resource/context-data.md): InterLock: open-source (Apache 2.0) proxy between AI agents and data sources, with RBAC, redaction, approvals, and logs. In public beta. (pricing: Free)
- [CookieYes](https://devshelf.io/resource/cookieyes.md): A consent management platform that automates cookie compliance, scanning, and banner deployment for websites to meet global privacy regulations. (pricing: Freemium)
- [Croc](https://devshelf.io/resource/croc.md): croc web: browser version of croc, the tool for transferring files and folders between computers with end-to-end encryption. (pricing: Free)
- [CyberChef](https://devshelf.io/resource/cyberchef.md): Web-based application for encryption, encoding, compression, and data analysis operations. (pricing: Free)
- [Dymo](https://devshelf.io/resource/dymo.md): Cyber intelligence, OSINT, and fraud defense suite by TPEOficial: Snatch, Traceless, Dymo API, and Cerberus. (pricing: Freemium)
- [Greip](https://devshelf.io/resource/greip.md): API for real-time fraud prevention, IP geolocation, VPN/proxy detection, and user data scoring. (pricing: Paid)
- [NeuralTrust](https://devshelf.io/resource/neuraltrust.md): Centralized security and governance platform for AI agents, offering runtime protection, gateway management, and posture assessment. (pricing: Freemium)
- [OWASP Foundation](https://devshelf.io/resource/owasp-foundation.md): Open source foundation dedicated to improving software security through community-led projects, standards, tools, and educational resources. (pricing: Free)
- [ShareClean](https://devshelf.io/resource/shareclean.md): Clean logs, stack traces, config snippets, and terminal output locally to remove sensitive data before sharing. (pricing: Free)
- [Snyk](https://devshelf.io/resource/snyk.md): Developer security platform for finding and fixing vulnerabilities in code, open source dependencies, containers, and cloud infrastructure. (pricing: Freemium)
- [Socket](https://devshelf.io/resource/socket.md): Developer security platform that blocks malicious open-source packages and supply chain attacks across npm, PyPI, and other registries. (pricing: not verified)
- [Speakeasy](https://devshelf.io/resource/speakeasy.md): Enterprise AI control plane providing centralized governance, security, identity management, and real-time policy enforcement for AI agents and MCP servers. (pricing: not verified)
- [Trivy](https://devshelf.io/resource/trivy.md): Comprehensive open-source security scanner for detecting vulnerabilities, configuration issues, secrets, and software bills of materials. (pricing: Free)
- [Watch my SSL](https://devshelf.io/resource/watch-my-ssl.md): Monitor SSL certificates across multiple domains and receive expiration alerts to prevent unexpected downtime. (pricing: Freemium)
- [Weaponize.it](https://devshelf.io/resource/weaponize-it.md): Collection of security testing cheatsheets, payloads, and scripts for penetration testing and web application assessment. (pricing: Free)
- [ZAP](https://devshelf.io/resource/zap.md): Zed Attack Proxy is a widely used open source web application security scanner for finding vulnerabilities in web applications. (pricing: Free)
- [Zenlogin](https://devshelf.io/resource/zenlogin.md): Suspicious login detection API that identifies unusual sign-in attempts and notifies users via automated email alerts with map integration. (pricing: Freemium)

---

Source: DevShelf.io, the hand-reviewed catalog of dev tools and resources. Every resource is reviewed by hand before it is listed.