A smaller, more honest security index.
CipherVault is a directory, not a marketplace. We link to software we would actually use, and we send you to the people who built it.
CipherVault is a hand-curated index of security software for people who test, defend and investigate systems. It is built around a simple rule: every listing should lead to the official source, and every tool should have a legitimate use.
What belongs here - Actively maintained security software with a public source or official vendor. - Tools that support authorised penetration testing, incident response, forensics or research. - Projects with clear documentation and a responsible disclosure path.
What does not - Web shells, backdoors, credential stealers or malware. - Leaked datasets, private access or “cracked” builds. - Anything designed to attack systems without consent.
How links work The download button sends you to the vendor’s own download page. CipherVault does not proxy, mirror or modify binaries. Listing a tool is not an endorsement of every use of that tool.
Link, don’t mirror
The download button is a redirect. The file comes from the vendor, not from this server. That keeps the index honest and the binaries current.
Show the context
Version, platform, licence and category are visible before you click. If we cannot verify those details, the tool does not go in.
Permission is not optional
Every listing assumes an authorised context: your own lab, a signed engagement or a defensive investigation. The tools are neutral; the use is not.
Found something wrong?
Broken link, outdated version, wrong licence or a tool that should not be listed — tell us and we will fix or remove it.
Contact the editor