Start with tools that reduce repeat work.

FreeVulnerability scanning

Trivy

Scan containers, repositories, IaC, SBOMs, and dependencies, then prioritize remediation with context.

FreeDeveloper security

GitHub security features

Use branch protection, rulesets, secret scanning, Dependabot, CodeQL, and hardened Actions workflows.

FreePassword security

KeePassXC

Use a free local password manager for offline-first vault control and privacy-conscious workflows.

FreePolicy and operations

HackWednesday templates

Copy AI acceptable use, incident response, MCP review, board memo, and vendor questionnaire templates.

FreeLearning

HackWednesday incident map

Review historical incident patterns and prevention lessons through an interactive security timeline.

A free tool is only useful if it changes behavior.

Prefer free tools that fit a recurring workflow: pull request review, weekly vulnerability triage, password hygiene, AI tool approval, incident tabletop prep, or security onboarding. Bookmarking a tool is not a control; using it every week is.