Looking for something like URLhaus? Here are 24 alternatives, ranked by how closely they match it on purpose, features and platforms. Of these, 2 are free or have a free plan and 1 are open source.
URLhaus shares URLs identified as being used to distribute malware and supports tracking those reported links.
| # | Alternative | Pricing | Open source | Platforms |
|---|---|---|---|---|
| 1 | X-Force Exchange | — | Not stated | Web |
| 2 | URL Decoder/Encoder | — | Not stated | Web |
| 3 | Cover Your Tracks | — | Not stated | Web |
| 4 | Malpedia | — | Not stated | Web |
| 5 | Canary Tokens | — | Not stated | Web |
| 6 | Awesome Cryptography | — | Not stated | — |
| 7 | My Infosec Awesome | — | Yes | — |
| 8 | Awesome List | — | Not stated | — |
| 9 | Plugins | — | Not stated | Windows |
| 10 | OTP Auth | Freemium | Not stated | iOS, Web |
IBM X-Force Exchange is a threat intelligence sharing platform for researching security indicators and emerging threats.
The URL Decoder and Encoder converts text between encoded and decoded forms, including JavaScript URLs.
Test how trackers and fingerprinting systems see your browser with Cover Your Tracks from the EFF.
Fraunhofer FKIE maintains Malpedia, a reference that organizes information about malware families.
Canary Tokens creates decoy files and links that alert users when someone accesses them, helping detect unauthorized activity.
This GitHub list curates cryptography resources and links for people exploring the field.
Browse a curated collection of information security tools, links, and learning resources.
Browse a cybersecurity-focused collection of links and resources in this repository.
Browse plugins for x64dbg, a Windows debugger used for reverse engineering and malware analysis.
Manage two-factor authentication codes with OTP Auth, an iOS app listed on the App Store.
Generate secure SSL configurations for selected web, database, and mail software.
See what information a website can access from your browser with Webkay, a browser data demonstration.
CheckFileType identifies unknown files without extensions by analyzing their contents.
ZeroSSL issues online SSL certificates and supports HTTPS setup through a certificate management interface.
Solve reverse engineering challenges published on challenges.re, a challenge-focused site.
GoPlus offers Web3 security tools including audits, APIs, a user security hub, and a browser extension.
Search the National Vulnerability Database, a public resource for vulnerability information.
WhatsMyDNS checks DNS record propagation across global resolvers for record types including A, AAAA, MX, and TXT.
View Toronto Police calls for service on a map that updates in real time, according to the supplied page description.
Add proof-of-work verification to websites with mCaptcha, a privacy-focused automated CAPTCHA system.
Use Metasploit to find security issues, verify mitigations, and manage authorized penetration testing assessments.
The Snyk Security Database provides vulnerability details and remediation guidance for packages and cloud configurations.
Lucia was deprecated in March 2025. The website was updated in July 2026 and points to code/auth_session.ts as a single-file replacement for the NPM package and to the Auth Book for auth information.
DNSPerf compares the performance and uptime of enterprise and commercial DNS providers.
Alternatives are suggested from the purpose and features described in our listings. Different pages for the same product appear once. Read each description to check whether it fits your task. How we choose alternatives · Suggest an alternative
