Identity & Access
Tools for authentication, authorization, privileged access and secrets management. Password auditing as part of a broader offensive toolkit stays in Offensive Security & Pentesting; SIEM and endpoint monitoring stay in Defensive Security & Monitoring.

ScubaGear
ScubaGear is a free public-domain assessment tool used to check Microsoft 365 tenants against CISA secure configuration baselines for M365 admins.
Cloud SecurityFree
Huntress
Huntress is a managed security platform with EDR, ITDR, SIEM, and security awareness training, all backed by a 24/7 SOC for businesses of all sizes.

Zitadel
Zitadel is a free identity infrastructure platform used to run authentication, SSO, and user management for developers and IT teams building or securing apps.
Identity & AccessFreeOpen source
authentik
authentik is a freemium identity provider used to add SSO, MFA, and access policies in front of company applications for IT and security teams.
Identity & AccessFreemiumOpen source
Vaultwarden
Vaultwarden is a free unofficial Bitwarden-compatible server used to self-host password vaults for individuals and teams who want a lighter backend.
Identity & AccessFreeOpen source
PingCastle
PingCastle is a freemium Active Directory audit tool used to score domain risk and find weak settings in AD and Entra ID for IT and security teams.
Identity & AccessFreemiumOpen source
Keycloak
Keycloak is a free open-source identity and access management server used to add single sign-on and user login to apps and services for developers and IT teams.
Identity & AccessFreeOpen source
KeePassXC
KeePassXC is a free open-source offline password manager used to store passwords, keys, and notes in an encrypted local database for privacy-minded users.
Identity & AccessFreeOpen source
Cisco Duo
Cisco Duo is a freemium MFA and identity-access platform with a free tier for small teams plus paid Essentials, Advantage and Premier editions.
Identity & AccessFreemium
Auth0
Auth0 by Okta is a customer identity platform for authentication, SSO, MFA and authorization, with a Free plan up to 25,000 monthly active users.
Identity & AccessFreemium
HashiCorp Vault
HashiCorp Vault provides identity-based secrets management for keys, passwords and certificates, with free Community and paid Enterprise or HCP options.
Identity & AccessFreemium
Bitwarden
Open-source password manager with end-to-end encryption, free personal vaults, and paid plans for Premium, Families, Teams and Enterprise.
Identity & AccessFreemiumOpen source
Microsoft Entra ID
Microsoft Entra ID (formerly Azure AD) is cloud IAM for workforce SSO, MFA, Conditional Access and hybrid directory management.
Identity & AccessFreemium
Cloudflare
Cloudflare is a global connectivity and security cloud offering CDN, WAF, DDoS protection and Zero Trust access on one network edge.
Application SecurityFreemium
CrowdStrike
CrowdStrike Falcon is a cloud-delivered cybersecurity platform focused on endpoint detection, prevention and response for enterprise environments.

Okta
Cloud identity and access platform for workforce and customer SSO, MFA, lifecycle management and related IAM controls.
Identity & AccessPaid
1Password
Commercial credential vault and access platform for passwords, passkeys and secrets across individuals, families and organizations.
Identity & AccessPaid