The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-
Updated
Oct 6, 2026 - JavaScript
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
⚙️ NGINX config generator on steroids 💉
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
A curated list of CTF frameworks, libraries, resources and softwares
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)
ClearURLs is an add-on based on the new WebExtensions technology and will automatically remove tracking elements from URLs to help protect your privacy.
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Advanced vm/sandbox for Node.js
Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.
A microservices API Gateway built on top of Express.js
GuardRails provides continuous security feedback for modern development teams
Detect open source vulnerabilities in real time with suggested fixes for quick remediation
World's most tech-savvy GitHub backup, recovery, restore, migration & config management trusted by Fortune 500
Automated GitHub backups so you can recover fast, stay compliant, and never lose a line of code
Find, fix (and prevent!) known vulnerabilities in your code
SOC 2 Type II encrypted GitHub backups: repos, issues, PRs, LFS and more. Self-service restore, BYO storage, per-repo pricing
We help developers write clean code
Runtime Code Review
Code scanning at ludicrous speed. Find bugs and reachable dependency vulnerabilities. Enforce standards on every commit
Developer-first security platform that protects your code from both vulnerable and malicious dependencies
Dependency Automation service by Mend.io