Security

Products whose core job is keeping systems and data safe, scanning, secrets, identity and bot defense.

This hub gathers the blocks that keep products safe: authentication and authorization, secrets management, vulnerability scanning, WAFs and bot protection, and the compliance-adjacent tooling that turns security from fear into checklist.

Why it matters to an indie builder: security debt compounds silently. The recurring pattern is that almost every incident traces to one of five things, credentials in code, no MFA, unpatched dependencies, over-broad access or missing logs, and each has a cheap, boring fix listed here. Doing the basics deliberately beats buying platforms and configuring none of them.

A realistic baseline: an auth provider instead of hand-rolled passwords, a secrets manager instead of .env files in repos, dependency scanning in CI, and least-privilege access to production. Enterprise deals will eventually ask for SSO, SCIM and audit logs, which is when the enterprise-facing tools in this hub earn their price.

The trade-off is that security tooling is sold on fear and priced accordingly; most small products need the boring 20 percent, not the enterprise suite. The listings here separate the essentials from the procurement theater.