Flameshot is an open-source screenshot utility with built-in annotation, highlighting, and sharing capabilities - available for Linux, Windows, and macOS. Version v14.0.0 is out and brings significant changes to multi-monitor support, Wayland compatibility, and a long list of bug fixes.

Opengrep is an open-source static code analysis (SAST) engine - a community-driven alternative to Semgrep, born after Semgrep moved critical scanning features behind a commercial license. It supports inter-procedural and cross-file analysis, SARIF/JSON output, and is backed by a consortium of 10+ appsec organizations. Version v1.23.0 is out with Crystal language support and several bug fixes.

pynitrokey is the official Python library and CLI tool (nitropy) for managing Nitrokey hardware security devices. Version v0.12.3 is out with a small set of improvements.

OWASP Dependency-Track is an intelligent component analysis platform that helps organizations identify and reduce software supply chain risk. It ingests Software Bill of Materials (SBOM) data, monitors components for known vulnerabilities and policy violations, and integrates with existing security and development toolchains.

Tails is a portable operating system that protects against surveillance and censorship by routing all traffic through Tor and leaving no trace on the host system.

OWASP Dependency-Track is an intelligent component analysis platform that helps organizations identify and reduce software supply chain risk. It ingests Software Bill of Materials (SBOM) data, monitors components for known vulnerabilities and policy violations, and integrates with existing security and development toolchains.

DockSec is an AI-powered Docker security scanner from OWASP that explains vulnerabilities in plain English.

oproxy is an open-source local proxy server for inspecting, replaying, and modifying HTTP, HTTPS, and SOCKS5 traffic. Built in Rust with a JavaScript frontend, it supports request breakpoints, traffic rules, Lua scripting, mock responses, DNS overrides, and an AI assistant via any OpenAI-compatible model.

I just completed the Security Engineer learning path on TryHackMe - clocking in at 64 hours of content.

oproxy is an open-source local proxy server for inspecting, replaying, and modifying HTTP, HTTPS, and SOCKS5 traffic. Built in Rust with a JavaScript frontend, it supports request breakpoints, traffic rules, Lua scripting, mock responses, DNS overrides, and an AI assistant via any OpenAI-compatible model.