If you care about privacy, control, and clean engineering, OPNsense is one of those rare projects that instantly earns your respect.
No noise. No gimmicks. Just a beautifully built firewall that gives you full visibility into your network without locking you into anything.
Key Features
Stateful Firewall (IPv4 & IPv6)
Clean rule management, live traffic view, and full transparency over what’s happening on your network.
Multi‑WAN Support
Load balancing, failover, and flexible routing for resilient connectivity.
Built‑In VPN Options
Native support for WireGuard, IPsec (including route‑based), OpenVPN, and Tinc mesh networking.
Intrusion Detection & Prevention
Suricata with Emerging Threats rules, inline IPS, and optional ET Pro for deeper protection.
Hardware Failover (CARP)
High‑availability setups with synchronized states for zero‑downtime environments.
Unbound DNS & DNS Tools
Local resolver, DNSSEC, overrides, and tight integration with firewall rules.
Modern Reporting & Monitoring
NetFlow analytics, exportable graphs, and real‑time visibility into interfaces, ports, and applications.
Open Source, Actively Developed
Transparent codebase, strong community, and a development model that prioritizes trust and longevity.
AliasVault is a free, open-source tool designed to protect your digital identity. By combining password management with powerful email aliasing, it helps you stay secure, reduce spam, and control how websites see you. Perfect for anyone serious about privacy and tired of shadow profiling.
Highlights:
🛡️ End-to-End Encryption: Master password never leaves your device.
✨ Alias Generator: Unique identities for every site.
📧 Built-in Email Server: Disposable addresses, direct inbox access.
🌐 Cloud or Self-Host: Choose official service or your own server.
🆓 Open Source: AGPL-3.0 licensed, transparent and auditable.
🚫 Spam & Tracking Defense: Pinpoint which service leaks your data.
Ricochet Refresh is a free, open‑source messenger designed for private, anonymous communication. Built on Tor Onion Services v3, it eliminates reliance on central servers, ensuring that no one can monitor who you talk to or what you say.
✨ Key Features
🕵️ Metadata resistant – hides who you talk to and when
🌐 Anonymous identities – no IP or location exposure
🔗 Decentralised – peer‑to‑peer via Tor, no servers to trust or hack
📂 Native file transfer – secure sharing built into the app
🛡️ Upgraded security – improved over the original Ricochet, hardened against timing attacks
🖥️ Cross‑platform – available for Windows, macOS, Linux
Perfect for: Whistleblowers, activists, journalists, or anyone needing strong anonymity and freedom of expression.
Ghostery is a free, open‑source privacy suite that blocks ads, stops trackers, and offers private search. With over 100 million downloads, it’s trusted worldwide to enhance browsing safety and transparency.
🛡️ Tracker & Ad Blocker – hides intrusive ads, blocks hidden trackers, and prevents cookie pop‑ups
🔍 Private Search – independent of Big Tech, ad‑free, shows tracker info beside search results
🌐 WhoTracks.Me – monthly reports on global trackers, used by researchers and media
📬 Privacy Digest – newsletter with tips to stay safe online
⚡ Cross‑platform support – works on Chrome, Firefox, Safari, Opera, Edge, and Android
🔒 Neutralizes trackers by replacing personal identifiers with random values
🤝 Community‑driven, open‑source project with 15+ years of privacy advocacy
Perfect for: Users who want a transparent, ad‑free browsing experience with strong tracker protection.
Destiny is an open-source secure file transfer application built on the Magic Wormhole protocol. It allows users to send files in real time without revealing identities or storing data on servers. Key features:
🔒 End‑to‑end encryption for safe delivery
🌐 Peer‑to‑peer connections with no central storage
🧩 Short, human‑memorable codes for quick and secure transfers
🛡️ Designed with human rights organizations in mind
✅ Independently audited for security assurance
💻 Cross‑platform support: Android, iOS, Windows, macOS, Linux
Perfect for anyone who needs fast, private, and trustworthy file sharing without compromising on security.
TinyWall is a free, minimalist firewall for Windows that enhances the built-in Defender Firewall without installing drivers or kernel components. Key features include:
🛡️ Non-intrusive design: no popups, no distractions
⚙️ Tampering protection, blocklists, and boot-time filtering
🧠 Smart rules for UWP apps and temporary exceptions
🖥️ Ultra-lightweight with negligible system impact
🔒 No telemetry, no data collection, no ads—just security
Perfect for users who want robust control over their network without bloated software. A great choice for privacy-conscious Windows users.
Picocrypt-NG (New Generation) is a very small, very simple, yet highly secure file encryption utility. Designed to be the go-to tool for protecting sensitive files, it emphasizes security, simplicity, and reliability. Key features:
🛡️ Uses modern cryptography: XChaCha20 cipher + Argon2id key derivation
📦 Lightweight and portable — minimal footprint, no unnecessary complexity
🔒 Strong focus on security and reliability, with open-source transparency
⚙️ Easy to use: straightforward interface for quick encryption/decryption
🌍 Cross-platform support for everyday file protection needs
Perfect for anyone who wants fast, trustworthy encryption without bloat.
HostsMan is a freeware application that makes managing your Windows hosts file simple and efficient. It provides built-in tools to update, edit, and troubleshoot hosts entries. Key features:
🔄 Built-in hosts file updater with support for multiple sources
✏️ Integrated editor to easily add, remove, or modify entries
🛡️ Fix errors, remove duplicates, and detect possible hijacks
📦 Backup manager to save and restore previous versions
⚙️ Troubleshooter for common issues with hosts file configuration
✅ Lightweight, fast, and designed for everyday network security tasks
Perfect for anyone who wants easy control over their hosts file without manual editing.
Rethink DNS + Firewall is a free, open-source Android app that makes it easy to monitor app activity, block ads and trackers, and circumvent Internet censorship. Key features:
🛡️ Android firewall: prevent apps from connecting to the Internet over Wi-Fi or mobile data
🚫 Content blocking: ads, trackers, malware, and more
🌍 Anti-censorship: encrypts DNS requests to bypass restrictions, with presence in 200+ locations worldwide
📊 Monitoring: logs every app’s connections and data usage
⚙️ Automated reports flag suspicious connections and reveal surveillance attempts
🔒 Privacy-first design, no accounts required
Perfect for anyone who wants system-wide privacy and control over their Android device.
SimpleX Chat is a free, open-source messenger designed for maximum privacy. Unlike other messaging networks, SimpleX has no identifiers assigned to users — not even random ones. Key features:
🔒 End-to-end encryption with no usernames, phone numbers, or public keys
📱 Private connections via link or QR code for messaging and calls
🌐 Pairwise anonymous addresses hide communication metadata from servers and observers
🛡️ Option to connect via Tor for extra anonymity
💻 Cross-platform support: Android, iOS, and desktop
🌍 Community-driven, open-source transparency
Perfect for anyone who wants truly private communication without digital footprints.
Technitium DNS Server is a free, open-source authoritative and recursive DNS server that can be self-hosted for maximum privacy and control. It works out-of-the-box with minimal configuration and provides a user-friendly web console. Key features:
🔒 Supports encrypted DNS protocols: DNS-over-TLS, DNS-over-HTTPS, DNS-over-QUIC
⚡ Performance boost: local caching makes websites load faster
🛡️ Network-wide control: block domains, route DNS traffic securely
📊 DNS logs and stats for deeper insights into your network
💻 Cross-platform: Windows, Linux, macOS, Raspberry Pi
🌍 Ideal for home networks or organizations seeking independence from ISP or third-party DNS providers
Perfect for anyone who wants privacy, security, and control over DNS resolution without relying on external services.
Kicksecure is a free and open‑source Linux distribution built from the ground up with a defense‑in‑depth security design. It provides superior layered protection against malware and other threats, with safe defaults ready to use immediately after installation.
🛡️ Hardened, security‑focused operating system
🔒 Superior layered defenses against malware
⚙️ Pre‑installed applications with safe defaults
🌐 Open‑source and community‑driven project
💻 Designed for privacy‑conscious users on Linux
Perfect for: Users who want a complete operating system engineered for strong privacy and robust security.
SiteOne Crawler is a free, open‑source, cross‑platform tool that crawls and analyzes websites for SEO, security, accessibility, and performance optimization. It can also export sites offline, generate sitemaps, and produce detailed audit reports.
📊 Generate clear audit reports for SEO, performance, and accessibility
🛡️ Identify security weaknesses and best‑practice issues
🌐 Export entire websites to offline/archive form
📝 Convert sites to Markdown or JSON for integration
⚡ Command‑line and desktop app support (Windows, macOS, Linux, x64 & arm64)
📤 Share HTML reports via secure unique URLs
Perfect for: Developers, DevOps, QA engineers, SEO specialists, and website owners who want deep insights and practical tools for site optimization.
Microsoft Defender Browser Protection is a free extension that helps protect you against online threats such as phishing emails, malicious websites, and harmful downloads. It checks links in real time against Microsoft’s constantly updated list of unsafe URLs.
🔍 Real‑time protection against phishing and malicious sites
⚡ Instant warnings when visiting harmful pages
🌐 Works with Chrome and other Chromium‑based browsers
🛡️ Backed by Microsoft’s threat intelligence network
💻 Simple, lightweight, and free to use
Perfect for: Users who want an extra layer of security while browsing, especially against phishing and malware.
eroot PageScanner is a powerful browser extension that enables privacy and security compliance assessments (PCI‑DSS 4.0, HIPAA, CCPA/CPRA, GDPR). It detects web trackers and scripts that collect personal information, helping organizations stay compliant and secure.
🛡️ Perform PCI‑DSS, HIPAA, CCPA/CPRA, GDPR assessments
🔍 Detect hidden trackers and data‑collecting scripts
⚡ Easy‑to‑use, lightweight browser extension
🌐 Works across Chrome‑based browsers
📊 Provides clear visibility into privacy and security risks
Perfect for: Auditors, compliance assessors, and privacy professionals who need reliable, easy‑to‑use tools for website security and compliance checks.
Subgraph OS is a desktop computing and communications platform designed to be resistant to network‑borne exploits and malware attacks. It combines strong system‑wide attack mitigations with sandboxed applications, making it a hardened operating system for privacy and security.
🛡️ Resistant to network‑borne exploits and malware
🔒 Sandboxed applications to reduce impact of successful attacks
⚡ Strong system‑wide attack mitigations built in
🌐 Familiar, modern desktop environment despite hardened security
🧩 Includes Tor integration for anonymous communications
🤝 Open‑source project focused on privacy and resilience
Perfect for: Security‑conscious users, activists, and professionals who need a hardened Linux environment for safe computing and communications.
Eraser is an advanced security tool for Windows that allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns.
🛡️ Permanently erase files, folders, and free disk space
⚡ Multiple overwrite algorithms for maximum security
💻 Integrates with Windows Explorer for easy use
🔒 Prevents recovery of deleted files with forensic tools
🌐 Free and open‑source software
Perfect for: Windows users who need to securely delete sensitive data and ensure it cannot be recovered.
SimpleLogin is an open‑source email alias service that lets you send and receive emails anonymously. By creating aliases, you can protect your real inbox from spam, phishing, and unwanted tracking.
🔒 Protect your inbox with disposable email aliases
📧 Send and receive emails anonymously through aliases
⚡ Block spams and phishing attempts automatically
🌐 Cross‑platform support (web, browser extensions, mobile apps)
💻 Self‑hosted option for maximum privacy and control
🤝 Based in Switzerland, open‑source, and community‑driven
Perfect for: Privacy‑conscious users who want to shield their real email address while staying connected.
IPFilter Updater is a small Windows application that downloads and updates an IP filter list for use in BitTorrent clients. It helps block malicious peers, intrusive trackers, and anti‑P2P addresses to improve privacy and reliability.
🔒 Protects against malicious or intrusive peers
⚡ Updates IP filter lists automatically for supported clients
💻 Works with uTorrent, BitTorrent, qBittorrent, and more
📂 Configurable for other torrent applications
🌐 Lightweight, free, and simple to use
Perfect for: BitTorrent users who want enhanced privacy and safer peer connections.
Parrot Security OS is a free, open‑source Linux distribution designed for security experts, developers, and privacy‑conscious users. It provides a complete suite of tools for penetration testing, digital forensics, reverse engineering, and secure communications.
🛡️ Full arsenal of penetration testing and vulnerability assessment tools
🔍 Utilities for digital forensics and incident response
⚡ Lightweight, fast, and optimized for performance
💻 Includes development tools for programming and reverse engineering
🌐 Privacy‑focused environment with secure communications
🤝 Community‑driven, open‑source project with active support
Perfect for: Security professionals, ethical hackers, and privacy enthusiasts who need a powerful, flexible Linux environment.
