Opengrep is a community-driven, open-source SAST engine that forked from Semgrep after Semgrep locked key scanning capabilities behind a commercial license. Backed by a consortium of 10+ appsec organizations, it offers inter-procedural and cross-file analysis with SARIF/JSON output.

Kali Linux is the most widely used penetration testing distribution, maintained by Offensive Security and packed with hundreds of security and forensics tools out of the box.

DockSec is an OWASP Lab Project that bridges the gap between complex Docker security scan results and actionable fixes.

Bruno is an open-source API client for exploring and testing APIs - a privacy-focused alternative to Postman and Insomnia that stores collections directly as files on disk. Version v3.5.0 brings multi-file uploads, improved OpenAPI support, npm package management, and a wave of bug fixes.

Flameshot is an open-source screenshot utility with built-in annotation, highlighting, and sharing capabilities - available for Linux, Windows, and macOS. Version v14.0.0 is out and brings significant changes to multi-monitor support, Wayland compatibility, and a long list of bug fixes.

Opengrep is an open-source static code analysis (SAST) engine - a community-driven alternative to Semgrep, born after Semgrep moved critical scanning features behind a commercial license. It supports inter-procedural and cross-file analysis, SARIF/JSON output, and is backed by a consortium of 10+ appsec organizations. Version v1.23.0 is out with Crystal language support and several bug fixes.

pynitrokey is the official Python library and CLI tool (nitropy) for managing Nitrokey hardware security devices. Version v0.12.3 is out with a small set of improvements.

OWASP Dependency-Track is an intelligent component analysis platform that helps organizations identify and reduce software supply chain risk. It ingests Software Bill of Materials (SBOM) data, monitors components for known vulnerabilities and policy violations, and integrates with existing security and development toolchains.

Tails is a portable operating system that protects against surveillance and censorship by routing all traffic through Tor and leaving no trace on the host system.

OWASP Dependency-Track is an intelligent component analysis platform that helps organizations identify and reduce software supply chain risk. It ingests Software Bill of Materials (SBOM) data, monitors components for known vulnerabilities and policy violations, and integrates with existing security and development toolchains.

DockSec is an AI-powered Docker security scanner from OWASP that explains vulnerabilities in plain English.

oproxy is an open-source local proxy server for inspecting, replaying, and modifying HTTP, HTTPS, and SOCKS5 traffic. Built in Rust with a JavaScript frontend, it supports request breakpoints, traffic rules, Lua scripting, mock responses, DNS overrides, and an AI assistant via any OpenAI-compatible model.

oproxy is an open-source local proxy server for inspecting, replaying, and modifying HTTP, HTTPS, and SOCKS5 traffic. Built in Rust with a JavaScript frontend, it supports request breakpoints, traffic rules, Lua scripting, mock responses, DNS overrides, and an AI assistant via any OpenAI-compatible model.

Caido has released its latest version, 0.57.0. Built entirely in Rust, the tool continues to position itself as a compelling alternative to solutions like Burp Suite and OWASP ZAP.

Proxmox Virtual Environment is an open-source server virtualization platform combining KVM hypervisor, LXC containers, software-defined storage and networking — all managed through a single web interface.

HumbleBundle has released a new AI-focused bundle: the Humble Tech Book Bundle: The Claude Code Mastery Bundle by Zenva featuring (for 22,72€) 8 books in PDF and ePub format published by Zenva.

The new version 2.7.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

UPDATE

Another small patch release (v0.56.2) is out, fixing one issue:

OWASP Juice Shop is an intentionally insecure web application used for security training, CTF challenges, and awareness demos — widely regarded as the most modern and comprehensive platform of its kind.

The new version 2.7.0 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Wazuh is an open-source security platform that delivers combined XDR and SIEM functionality to safeguard endpoints and cloud workloads.

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

An updated release of Pynitrokey, the Python client for Nitrokey devices, is now available: version 0.12.0.

Kali Linux has been released in version 2026.1.

Wazuh is an open-source security solution offering integrated XDR and SIEM capabilities to protect endpoints and cloud-based workloads.

The updated version 2.6.0 of the Nitrokey-app2, the graphical application for managing and using Nitrokey 3 devices, has now been officially released.

Wazuh is an open-source security solution offering integrated XDR and SIEM capabilities to protect endpoints and cloud-based workloads.

UPDATE 2

Another bugfix release (v.0.55.3) is now available, which addresses these bugs:

UPDATE #2

Another bugfix release (v2.5.2) has been released.

This bugfix release fixes the PIN input dialogs being disabled.

A new update for Pynitrokey, the Python client for Nitrokey devices, is now available: version 0.11.3.

Wazuh is an open-source security solution offering integrated XDR and SIEM capabilities to protect endpoints and cloud-based workloads.

The graphical application to manage and use Nitrokey 3 devices called Nitrokey-app2, is now available in a new version 2.4.3.

UPDATE

Shortly after, version 0.54.1 has been released.

A small patch release to fix layout issues in scope, match & replace, SDK slots and HTTPQL usage.

ORIGINAL

Kali Linux has been released in version 2025.4.

UPDATE

Pynitrokey version 0.11.2 has also been released.

Changelog:

Allow cffi v2 dependency
Allow cryptography v46
PIV: Fix 9C key generation
Update pyscard in lock file
Add support for unauthenticated NetHSM shutdown Handle missing packages when logging package versions and release v0.11.1

UPDATE

UPDATE

Version 0.53.1 has been released shortly after, which addresses some bugs:

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

A small update (version 1.8.3) of the Nitrokey 3 firmware has been released.

Caido version 0.52.0 is now live. Built entirely in Rust, Caido is quickly establishing itself as a powerful alternative to tools like Burp Suite and OWASP Zap.

Kali Linux has been released in version 2025.3.

The summary of the changelog since the 2025.2 release from June is:

Wazuh, is an open-source security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads.

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

UPDATE

An bugfix release v0.51.1 was published.

This release fixes an issue where workflow node dialogs would not properly update.

The final version 1.8.2 of the Nitrokey 3 firmware has been released.

UPDATE

v2.4.1 was released shortly after. Now also binaries for Windows and macOS are available.

Another update to Pynitrokey, the Python client for Nitrokey devices, has been released: version 0.10.0.

Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available in a new version 2.3.5.

UPDATE 01.08.2025

Another patch, v0.50.2 was released.

This patch includes the following bug fix:

UPDATE

Meanwhile, two small bugfix releases (0.9.1 and 0.9.2) have also been published.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has just released their latest version (0.49.0).

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

Kali Linux has been released in version 2025.2.

The summary of the changelog since the 2025.1a release from March is:

UPDATE

v0.8.5 was now also released.

This release fixes a bug in nk3 secrets when handling base32 secrets if the length is a multiple of 8.

Steve McMichael from the the Simply Cyber Academy has released an Open Source CSF Profile Assessment Database.

UPDATE

Short after, version 0.48.1 has been released.

A new version 0.8.0 of Pynitrokey, the Python client for Nitrokey devices, has been released.

Kali Linux has been released in version 2025.1a.

The summary of the changelog since the 2024.4 release from December is:

Update: v0.47.1 has been released short after.

This is a patch release to fix an issue where users could not connect to remote Caido instances.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has just released their latest version (0.47.0).

A new version 0.7.4 of Pynitrokey, the Python client for Nitrokey devices, has been released.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has just released their latest version (0.46.0).

RustScan, the modern and fast port scanner, has just been released in version 2.4.1.

A security update for the firmware of the Nitrokey 3 has been released: version 1.8.1.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has now released their latest version (0.45.0).

UPDATE

Short after, Pynitrokey 0.7.3 was released to address a problem with older (<= 3.11) Python versions.

The latest version (1.3.2) of Sniffnet adds some more features and improvements:

Kali Linux has been released in version 2024.4.

The summary of the changelog since the 2024.3 release from September is:

The firmware of the Nitrokey 3 has been updated to version 1.8.0. Also a new version 0.7.1 of Pynitrokey has been released.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.7.0.

The new version 2.3.3 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available.

Caido, a growing alternative to Burp Suite or OWASP Zap, has now released their latest version (0.43.1).

The new version 2.3.2 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.5.0.

Kali Linux has been released in version 2024.3.

The summary of the changelog since the 2024.2 release from June is:

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.50.

The latest version (1.3.1) of Sniffnet has some more improvements:

The new version 2.3.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.48.

The new firmware version 1.7.2 for the Nitrokey 3 has been released and is now officially available.

Kali Linux has been released in version 2024.2.

The summary of the changelog since the 2024.1 release from February is:

The new version 1.7.0 of the Nitrokey 3 firmware and the new version 2.3.0 of the Nitrokey-app2 have been released and are now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.47.

The latest version (1.3.0) of Sniffnet has a lot of bugfixes and new features:

If you want to experiment and/or develop locally with/for AI, check out these tools:

Here you’ll find recommended Tools (online/offline) and Hardware.

This collection is not complete and in no special order. It will get updated along my way, for sure.