
Guardfos Scanner is a free WordPress and WooCommerce security scanner that shows you exactly what your site exposes to the outside world - the same surface an attacker sees before they ever attempt anything.
It runs entirely externally: no plugin to install, no login, no access to your files. You enter your URL and, in under a minute, get a clear report covering the configuration and hardening signals that matter most: HTTPS/SSL setup and HTTP-to-HTTPS redirect enforcement, HSTS, security headers, XML-RPC exposure, WordPress version disclosure, accessible debug.log and readme.html files, login-page discoverability, user enumeration, web application firewall presence, mixed-content issues, and WordPress core update status.
The report is written for store owners, not just developers. For a WooCommerce store, a single exposed weakness can mean a compromised checkout, lost orders, and chargebacks - so spotting it early matters.
The scanner is guardfos's free starting point. The company itself offers fully managed WordPress and WooCommerce security - hardening, scheduled updates with monitoring, a web application firewall, off-site backups, and hands-on malware removal and incident response, handled for you at the infrastructure level rather than through another plugin. Plans are tiered, and every plan includes the guardfos trust badge for your store.
Run a free scan at guardfos.com/scanner, or see the managed plans at guardfos.com.
Guardfos Scanner is a developer tool listed on OpenHunts. The listing describes it as a free WordPress and WooCommerce security scanner that shows you exactly what your site exposes to the outside world - the same surface an attacker sees before they ever attempt anything.
Based on the OpenHunts listing, Guardfos Scanner works as a developer tool. Check the project description, screenshots, and website link before trying it.
Guardfos Scanner is listed as free on OpenHunts. Check the official website for current plan limits, trials, and billing details.
Guardfos Scanner is best for people comparing developer tools tools on OpenHunts, especially people using web platforms.
Use the related projects section and category pages on OpenHunts to compare Guardfos Scanner with other developer tools tools by platforms, pricing, and community activity.
These tools are selected from similar categories, platforms, and community activity on OpenHunts.

OpenCart security plugin protecting against SQL injection attacks. Key features include:SQL injection detection: Identifies and logs suspicious requests before they reach your OpenCart store.Flexible blocking: Choose to block malicious probes with HTTP 403, mask as HTTP 404, or log for analysis.Catalog and admin protection: Secures both your storefront and administrative backend from common exploits.Ideal for:OpenCart store owners seeking enhanced securityTechnical teams managing OpenCart websitesDevelopers needing to protect e-commerce platformsA free OpenCart security plugin offering practical protection against SQL injection probes.

A clickwrap agreement solution that simplifies and legalizes consent capture. Key features include:Secure Electronic Signatures: Capture consent with a single click, ensuring verified user identity.Version Control: Track and manage different versions of your terms and conditions.Audit Trail: Maintain a reliable audit trail to prove agreement in case of disputes.Ideal for:SaaS companiesMobile app developersBusinesses needing legally compliant consent captureClickTerm offers a simple, secure, and legally sound way to manage clickwrap agreements, saving time and reducing legal worries.

Proxed.AI is a security and management platform for AI APIs. It allows developers to secure API keys, verify device authenticity, and structure AI outputs without needing a backend. Key features include:API Key Protection: Securely lock down your AI API credentials.DeviceCheck Integration: Verify device authenticity using Apple's DeviceCheck.Structured AI Responses: Structure and manage AI outputs for better data handling.Open Source & Self-Hosting: Offers flexibility with open-source code and self-hosting options.Ideal for:iOS Developers integrating AI APIsStartups looking for cost-effective AI security solutionsDevelopers needing structured data from AI modelsProxed.AI simplifies AI API security and management, offering a no-backend solution with open-source flexibility and cost-saving features.

VaultCord is a Discord Recovery Service, that allows you to restore your Discord Server after being nuked, raided, or otherwise lost. Get started for completely FREE!Discord Backup: Securely back up your Discord server's channels, members, roles, and messages.Anti-Alt & VPN Blocker: Block alt accounts, VPNs, and bots from joining your server.Custom Verification: Create custom verification pages to welcome new members with style.Embed Message Creation: Easily create and customize embed messages for your server.Ideal for:Discord server ownersCommunity managersDiscord moderatorsVaultCord offers a comprehensive suite of tools to protect and manage Discord servers, ensuring community integrity and providing peace of mind with reliable backup and restore capabilities.

AgentFacts is an open-source SDK for verifiable AI agent metadata.Generate signed profiles with DIDs, capabilities, and provenance for LangChain, Hugging Face, and custom agents. All self-hosted, framework-agnostic, and tamper-proof.

SignalVault is an infrastructure layer that sits between your application and AI providers like OpenAI and Anthropic. Every prompt and response flows through SignalVault's proxy, where it's encrypted, scanned for violations, and logged with a complete audit trail. THE PROBLEMTeams ship AI features fast. Audit logs come later — if at all. PII and secrets slip through prompts undetected. When a security team asks "show me every prompt that contained customer data," most teams have nothing to show. SignalVault fixes that. HOW IT WORKSRoute your AI requests through SignalVault using the Python SDK, Node.js SDK, or direct proxy. Your existing OpenAI or Anthropic code works unchanged — just point at a different base URL. Every request is then:• Logged with AES-256-GCM encryption — immutable, tamper-proof audit trail • Scanned for PII — emails, SSNs, phone numbers, credit card numbers, IP addresses • Checked for secrets — API keys, bearer tokens, AWS credentials, connection strings • Evaluated against guardrail rules with configurable actions: block, warn, or redact • Tracked for token usage and costIntegration takes minutes, not days. No code rewrites, no proprietary SDK lock-in. KEY FEATURESEncrypted audit logging: Every prompt and response stored with AES-256-GCM via Cloak. API keys hashed with HMAC-SHA256. Raw keys and unencrypted payloads are never persisted. Export-ready for SOC2 and GDPR reviews.PII detection: Pattern-based detection catches emails, phone numbers, SSNs, credit card numbers, and more before they reach the AI provider. Configure rules to block the request, warn and log, or redact the sensitive content automatically.Secret scanning: Detects API keys, bearer tokens, AWS keys, private keys, and connection strings leaking through prompts. Same block/warn/redact actions.Budget controls: Set monthly cost limits and daily token caps per app. Receive alerts via email or webhook when thresholds are approaching. A budget.exceeded event fires when limits are hit.Guardrail rules: Core rules (PII, secrets, budgets) included on all plans. Growth plan adds custom rules — write your own guardrail policies with pattern matching to enforce what your AI can and can't do.Mirror Mode: Async logging that stays completely off the request path. Zero added latency. Shows what would have been caught without blocking anything. Useful for teams that want visibility before turning on enforcement.Compliance exports: One-click CSV and JSON audit exports included on all plans — not gated behind enterprise pricing. Ready for SOC2, GDPR, HIPAA, and security reviews.Email and webhook alerts: Get notified immediately when policy violations occur, budgets are exceeded, or AI errors spike. POST to Slack, Teams, Discord, or any HTTPS endpoint.Unlimited logging: No log caps on any tier. Every request is recorded, always. Competitors cap logs and stop recording when limits are hit — SignalVault never stops watching. WHAT MAKES SIGNALVAULT DIFFERENTMost AI gateways focus on routing and model switching. SignalVault focuses on trust and compliance — the part that matters when a CISO asks for an audit trail. Three things set it apart:Unlimited logging on every plan. Competitors like Portkey cap at 3M logs on their Pro tier and stop recording. SignalVault logs everything, always.Compliance exports included from day one. Other tools gate CSV/JSON audit exports behind $5K+/month enterprise plans. SignalVault includes them on all tiers.Built for reliability. The entire stack — proxy, detection engine, rule system, and dashboard — is pure Elixir running on the BEAM. No JavaScript frameworks, no Python workers. The BEAM was built for telecom-grade fault tolerance and high concurrency, which is exactly what a proxy needs. TECH STACKRuntime: Elixir / BEAMFramework: Phoenix LiveViewEncryption: AES-256-GCM via Cloak Key hashing: HMAC-SHA256 API format: OpenAI-compatible Database: PostgreSQL PRICINGPer-app subscriptions. Each app gets its own plan.Starter ($49/month): Production environment, 30-day retention, core rules, unlimited logging, compliance exports.Growth ($149/month): All environments (dev, staging, production), 90-day retention, custom rules, email + webhook alerts, Mirror Mode, priority support.Free to try with 100 requests, no credit card required.Built by a solo founder with a background in professional security tooling.