🛡️ Awesome Cyber Security Heaven ★ View on GitHub
🛡️☁️🔐

Awesome Cyber Security Heaven

A hand-curated, license-aware map of the best free cybersecurity tools — from pentesting and bug bounty to OSINT, threat intel, DFIR, DevSecOps and AI/LLM security. Free, open-source and free-tier entries all earn their place.

🧭 1435 curated tools 🏰 14 themed realms 🗓️ 2026 edition 🆓 100% free / free-tier 🔬 license-verified 💯 no paywalls, no SaaS wrappers
Browse the Arsenal → 📄 PDF Dossiers
1435
Curated Tools
14
Themed Realms
14
PDF Dossiers
100%
Free & Open
2026
Re-verified Edition
The Realms

Fourteen worlds of free security tooling

Every realm is a deep-researched, link-verified chapter with its own PDF dossier — every tool license-checked, actively-maintained or a historically-notable classic.

⚔️PDF58 tools
The Armory
Offensive security · pentesting · bug bounty
🛡️PDF34 tools
The Bastion
Hardening · defensive infrastructure
🔭PDF19 tools
The Watchtower
Threat intelligence · feeds
🗺️PDF45 tools
The Cartographers
Recon · OSINT · attack-surface mapping
🕵️PDF40 tools
The Shadow Bureau
OSINT · public intelligence
🔑PDF18 tools
The Vault
Secrets · credentials · password security
🐳PDF33 tools
The Foundry
DevSecOps · cloud · container security
🔵PDF48 tools
The Sentinel Ops
Blue team · SOC · DFIR
🤖PDF6 tools
The Oracle's Domain
AI security · LLM security
🧠PDF23 tools
The AI Forge
AI-dependent security tools
🆓PDF31 tools
The Free Bazaar
Free cybersecurity APIs · feeds · data
🎓PDF24 tools
The Academy
Learning resources · career paths
🎯PDF71 tools
The Proving Grounds
CTF practice · labs · hacking training
🧰PDF50 tools
The Workshop
Utilities · swiss-army tools
Deep Research

📄 Realm dossiers — PDF reports

Every realm ships as a designed, printable PDF dossier — census-synced with live GitHub API stats, license mix, and the full curated inventory. Free forever, CC0.

Open the Dossier Library → 📂 Per-realm Deep Pages
Companion Engines

Scan with the same philosophy

The Heaven list is curated by the team behind two open-source scanning engines — deterministic verdicts, self-hosted, zero AI guesswork.

🔒 Website-Vulnerability-Scanner
Open-source website vulnerability scanner — 201 deterministic scanner modules: XSS, SQLi, SSRF, subdomain takeover, OWASP Top 10, WordPress, MCP & AI/LLM security. CVSS-scored evidence, HTML/PDF reports, continuous monitoring.
201 moduleszero AIself-hosted DockerApache-2.0
📧 Exposure-Check-OSINT
Is your email, username, phone or password leaked? Self-hosted keyless personal exposure checker — 25 keyless sources: breach databases, infostealer logs, COMB 11B+ credentials, HIBP k-anonymity, 150+ platform username grid.
25 keyless sources5 identifier checksone-command DockerApache-2.0
FAQ

❓ Frequently asked questions

What the list is, how tools get in, and how to use it well.

What is Awesome Cyber Security Heaven?
A hand-curated map of the 1435 best free cybersecurity tools — pentesting, bug bounty, OSINT, threat intelligence, DFIR, DevSecOps and AI/LLM security. Every entry is license-verified and sorted into 14 themed realms, from The Armory to The AI Forge.
Are all 1435 tools really free?
Yes — the editorial bar admits free and free-tier tools only: no paywalls, no SaaS wrappers. Each entry is license-checked (MIT, Apache-2.0, GPL and friends) so you know what you can use commercially before you click.
What are the realm PDF dossiers?
Every realm ships as a designed, printable PDF dossier — a deep-research report census-synced with live GitHub stats, license mix and the full curated inventory. Free forever under CC0, regenerated whenever the list changes.
How do I get a tool listed?
Open an issue or pull request on the list repository. The bar: an OSI-compatible license, real maintenance (or historical significance) and a niche the list actually needs. Every submission is researched before it lands.