The Best Canary Tokens Alternatives in 2026

Manage two-step verification tokens on Android with Aegis Authenticator, a free, open-source app.

Wazuh monitors systems and detects threats through an open source security platform for organizations.

Zeek analyzes network activity through an open source monitor with a flexible scripting language.

URLhaus shares URLs identified as being used to distribute malware and supports tracking those reported links.

Threat Radar displays current cyber threat intelligence on a live map, showing security activity from its data sources.

This GitHub list curates cryptography resources and links for people exploring the field.

Browse a curated collection of information security tools, links, and learning resources.

Configure network activity rules through Windows Filtering Platform with Simplewall.

Browse a cybersecurity-focused collection of links and resources in this repository.

Manage two-factor authentication codes with OTP Auth, an iOS app listed on the App Store.

Generate secure SSL configurations for selected web, database, and mail software.

Ndiff compares Nmap scan results from two XML files, showing changes such as hosts and ports appearing or disappearing.

CheckFileType identifies unknown files without extensions by analyzing their contents.

unblob extracts files from complex binary blobs and firmware images, supporting security analysis of embedded software.

Solve reverse engineering challenges published on challenges.re, a challenge-focused site.

GoPlus offers Web3 security tools including audits, APIs, a user security hub, and a browser extension.

Search the National Vulnerability Database, a public resource for vulnerability information.

WhatsMyDNS checks DNS record propagation across global resolvers for record types including A, AAAA, MX, and TXT.

View Toronto Police calls for service on a map that updates in real time, according to the supplied page description.

Add proof-of-work verification to websites with mCaptcha, a privacy-focused automated CAPTCHA system.

Use Metasploit to find security issues, verify mitigations, and manage authorized penetration testing assessments.

The Snyk Security Database provides vulnerability details and remediation guidance for packages and cloud configurations.

The URL Decoder and Encoder converts text between encoded and decoded forms, including JavaScript URLs.

Lucia was deprecated in March 2025. The website was updated in July 2026 and points to code/auth_session.ts as a single-file replacement for the NPM package and to the Auth Book for auth information.