crackthe.netSecurity tools: software by category and checks for your connection
Password managers, private email, antivirus, privacy and backup, website security: what each company states, side by side. Plus two checks that run in your browser.
- Tools listed
- 20
- Categories
- 6
- With a free plan
- 12
- Open source
- 5
VPN
Two checks that run in your browser: what your connection reveals to a website, and whether a website answers differently from other countries.
Password managers
A password manager creates a different strong password for every account, stores all of them encrypted, and fills them in when you log in. You remember one main password instead of many, so that one has to be long and used nowhere else.
- Company
AgileBits Inc., Canada- Free plan
- no
- Free trial
- 14 days
- Open source
- no
- Apps
- Windows, macOS, Linux, iOS, Android, browser extension, command line
- Encryption: “Our dual-key model ensures that even we can't see exactly what you've saved in 1Password.”
- Certifications it names: SOC 2 Type 2 and ISO 27001.
- You choose where your data is stored: in the United States, Canada, or the European Union.
Sources: 1password.com/pricing/password-manager, 1password.com/legal/terms-of-service, 1password.com/security, support.1password.com/regions
- Company
Bitwarden Inc., United States- Free plan
- yes
- Open source
- yes
- Apps
- Windows, macOS, Linux, iOS, Android, browser extension, web app, command line
- End-to-end encryption: “Bitwarden uses end-to-end encryption for all vault data, which only your master password can decrypt.”
- Open source, with regular security audits by third parties such as Cure53, according to Bitwarden.
- A free plan: “Get basic password management today. Always free.”
Sources: bitwarden.com/pricing, bitwarden.com/open-source, bitwarden.com/compliance, bitwarden.com/privacy
- Company
- KeePassXC Team
- Free plan
- yes
- Open source
- yes
- Apps
- Windows, macOS, Linux, browser extension
- Keeps the password database encrypted on your own device: “no data is stored on remote servers”.
- Free and open source under the GPLv3 license; a community project without a company behind it.
- Version 2.7.9 received a security visa from the French cybersecurity agency ANSSI. There are no mobile apps of its own.
Sources: keepassxc.org, keepassxc.org/docs, keepassxc.org/download
- Company
- Keeper Security, Inc., United States
- Free plan
- yes
- Free trial
- 30 days
- Open source
- partly
- Apps
- Windows, macOS, Linux, iOS, Android, browser extension, web app, command line
- “Keeper is a zero-knowledge security provider.”
- A free version, Keeper Free, limited to 10 records and one mobile device; the paid plan can be tried for 30 days.
- Names ISO 27001, 27017, and 27018 certifications and tests by firms such as NCC Group.
Sources: keepersecurity.com/free-trial-vs-free-version.html, keepersecurity.com/pricing/personal-and-family.html, keepersecurity.com/security.html, keepersecurity.com/legal/terms-of-use
The website refused automated reading on October 23, 2026, so no facts were collected.
- Company
Proton AG, Switzerland- Free plan
- yes
- Money back
- 30 days
- Open source
- yes
- Apps
- Windows, macOS, Linux, iOS, Android, browser extension, web app, command line
- End-to-end encryption: “your data is never accessible to us and only you can decrypt it using your secret password.”
- All apps are open source; Proton names audits by Cure53 (2023) and Recurity Labs (2026).
- A free plan without ads, according to Proton; paid plans come with a 30-day money-back guarantee.
Sources: proton.me/pass/pricing, proton.me/pass/security, proton.me/business/pass/security, proton.me/legal/terms
Private email
A VPN hides your connection, not your mailbox. An ordinary email provider can read every message that is not end-to-end encrypted, and so can the provider of the person you write to. The providers below say that they put privacy first; how far their encryption goes differs, as their own words show.
- Company
- Hush Communications Canada Inc., Canada
- Free plan
- no
- Money back
- 60 days
- Open source
- no
- Apps
- web app, iOS
- Encryption per email: “To encrypt an email, just click the toggle.”
- Encrypted email and e-signable forms, mainly for healthcare, legal, and small-business use; also offered for personal use.
- No free plan listed; its website offers a 14-day free trial of the healthcare plan. Servers in Vancouver and Calgary, Canada, according to its privacy policy.
Sources: hushmail.com/pricing, hushmail.com/about, hushmail.com/privacy, hushmail.com/plans/personal
- Company
Heinlein Hosting GmbH, Germany- Free plan
- no
- Free trial
- 30 days
- Open source
- partly
- Apps
- web app
- “End-to-end encryption with PGP and S/MIME and storage in our data centres in Berlin.”
- Names BSI C5 and ISO 27001 certifications.
- No free plan; every plan can be tried free for 30 days.
Sources: mailbox.org/en/prices, mailbox.org/en/why-mailbox, mailbox.org/en/legal-information
- Company
- Posteo e.K., Germany
- Free plan
- no
- Open source
- partly
- Apps
- web app
- Encrypts all email data, including content, attachments, and metadata, and names an external security audit by Cure53.
- Sign-up without name or address: “You do not have to enter any personal information during signup”.
- One account for 1 euro a month; no free accounts.
Sources: posteo.de/en/site/encryption, posteo.de/en/site/features, posteo.de/en/site/faq, posteo.de/site/impressum
- Company
- Proton AG, Switzerland
- Free plan
- yes
- Money back
- 30 days
- Open source
- yes
- Apps
- web app, Windows, macOS, Linux, iOS, Android
- End-to-end and zero-access encryption: “Zero-access encryption means we never see your inbox, on any plan.”
- A free plan: “Proton Mail will always offer a free secure email plan.”
- Run by Proton AG, which says it is incorporated and headquartered in Switzerland; the same company runs Proton VPN.
Sources: proton.me/mail/pricing, proton.me/mail/security, proton.me/legal/terms
- Company
- Tutao GmbH, Germany
- Free plan
- yes
- Open source
- yes
- Apps
- web app, Windows, macOS, Linux, iOS, Android
- “All data in Tuta is stored end-to-end encrypted on our own servers in ISO 27001 certified data centers in Germany.”
- Quantum-safe encryption: Tuta says it replaced RSA with x25519 and Kyber-1024.
- A free plan: “Tuta Mail will be free, forever.” All apps are open source.
Sources: tuta.com, tuta.com/security, tuta.com/pricing, tuta.com/imprint
Antivirus
Windows comes with an antivirus of its own, Microsoft Defender. Paid products add protection for more devices and extras such as a firewall or a VPN, and some are made for companies rather than homes, as the tags on each tile show.
- Company
Bitdefender S.R.L., Romania- Free plan
- yes
- Free trial
- 30 days
- Money back
- 30 days
- Open source
- no
- Apps
- Windows, macOS, iOS, Android
- A free version, Bitdefender Antivirus Free, for Windows only; the paid suites can be tried for 30 days.
- Points to the AV-TEST award for the best protection for consumer users in 2025.
- Products for small businesses: Ultimate Small Business Security and GravityZone Small Business Security.
Sources: bitdefender.com/en-us/consumer/free-antivirus, bitdefender.com/en-us/consumer/downloads, bitdefender.com/en-us/consumer/total-security, bitdefender.com/en-us/business/products/gravityzone-small-business-security
- Company
- CrowdStrike, Inc., United States
- Free plan
- no
- Free trial
- 15 days
- Open source
- no
- Apps
- Windows, macOS, Linux, iOS, Android
- Made for small businesses, for up to 100 devices, according to CrowdStrike.
- A 15-day free trial; no free version.
- Names 100% ransomware prevention in a test by SE Labs and SOC 2 Type II certification.
Sources: crowdstrike.com/en-us/pricing/falcon-go, crowdstrike.com/en-us/pricing, crowdstrike.com/en-us/legal/terms-conditions
- Company
- Microsoft Corporation, United States
- Free plan
- yes
- Open source
- no
- Apps
- Windows, macOS, iOS, Android
- Built in: “Your Windows 11 device comes with Microsoft Defender Antivirus built-in.” It costs nothing extra.
- Switches itself off when another antivirus program is installed, Microsoft's support pages say.
- The Defender app for Mac, iPhone, and Android comes with Microsoft 365 Personal or Family; its VPN feature ended on February 28, 2025.
Sources: microsoft.com/en-us/windows/comprehensive-security, support.microsoft.com/en-us/defender/getting-started-with-microsoft-defender, support.microsoft.com/en-us/office/protect-my-pc-from-viruses
Privacy and backup
These tools solve three different problems. A data removal service asks data brokers to delete your personal details. Encrypted storage keeps files in the cloud in a form the provider says it cannot read. A backup keeps copies of your devices, so that a broken or encrypted computer does not cost you your files.
- Company
- IDrive Inc., United States
- Free plan
- yes
- Money back
- 15 days
- Open source
- no
- Apps
- Windows, macOS, Linux, iOS, Android
- A free plan with 10 GB of storage.
- An optional private encryption key that is never stored on IDrive's servers, “which means nobody at IDrive can read your data.”
- Data centers in the United States; names SOC 2 Type 2 certification.
Sources: idrive.com/pricing, idrive.com/online-backup-security, idrive.com/terms-and-conditions, idrive.com/compliance-statement
- Company
- Optery, Inc., United States
- Free plan
- yes
- Money back
- 30 days
- Open source
- no
- Apps
- web app, iOS, Android
- Removes your home address, phone number, and other private details from Google and more than 940 sites, according to Optery.
- Free monitoring; paid plans with a 30-day money-back guarantee for individual accounts.
- Its pricing page offers plans for the United States, Canada, Australia, New Zealand, and South Africa.
Sources: optery.com, optery.com/pricing, optery.com/terms
- Company
- Tresorit AG, Switzerland
- Free plan
- yes
- Free trial
- 14 days
- Open source
- no
- Apps
- Windows, macOS, Linux, iOS, Android, web app
- Encryption: “Tresorit protects your files in the cloud with zero-knowledge end-to-end encryption.”
- Part of Swiss Post; names ISO 27001 certification and an audit by TÜV Rheinland.
- A free Basic plan with 3 GB; data can be kept in the EU or in one of 12 locations.
Sources: tresorit.com/security, tresorit.com/pricing/basic, tresorit.com/legal/privacy-policy, tresorit.com/about-us
Website security
These offers protect websites, servers, and cloud accounts rather than a single device. Cloudflare sits in front of a website and filters its traffic. Wiz checks a company's cloud accounts for risks. Calif is a team that tests systems and finds vulnerabilities as a service; it sells no software. All three took part in the response to the PHP2Shell vulnerabilities in October 2026.
- Company
- Calif, United States
- A security firm from California with “60 people and counting across five continents”, according to its website.
- Offers AI security and security engineering as services, plus discounted or free work for charities; it sells no software.
- Took part in finding the PHP2Shell vulnerabilities in PHP in 2026.
Sources: calif.io, calif.io/company, calif.io/php2shell
- Company
- Cloudflare, Inc., United States
- Free plan
- yes
- Open source
- no
- Apps
- web app, Windows, macOS, Linux, iOS, Android
- A free plan for websites with SSL, CDN, and DDoS protection.
- The free WARP app encrypts more of the traffic leaving your device: “We won't sell your data, ever.”
Sources: cloudflare.com/plans/free, one.one.one.one, cloudflare.com/website-terms
- Company
- Wiz, Inc. (Google), United States
- Free plan
- no
- Open source
- no
- A cloud security platform for companies that “connects code, cloud, and runtime into a single security graph”.
- Part of Google since March 11, 2026, when Google completed the acquisition.
- Names SOC 2 Type 2, ISO/IEC 27001:2022, and FedRAMP High; its research team found the PHP2Shell vulnerabilities in 2026.
Sources: wiz.io, wiz.io/pricing, trust.wiz.io, blog.google/innovation-and-ai/infrastructure-and-cloud/google-cloud/wiz-acquisition
From the companies' own websites, checked on October 23, 2026. This archive does not test software; the facts are what each company states.
Which check to use
Use the IP check right after you connect your VPN. It shows the address and the country that websites now see, so you can tell whether the VPN is active.
Use the geoblocking check when a website does not load or looks different where you are. It asks the same site from 12 countries at the same time and shows where the answers differ.
Both checks run in your browser and store nothing. The IP check sends one request to this site; the geoblocking check sends the domain you enter to the public measurement network Globalping.
How the software is listed
Each category lists the tools in alphabetical order, including tools without a partner program. Every fact comes from the company’s own website and carries the date it was checked. Software is not tested on this site. A partner link is marked as such next to the link; it changes nothing in the order or the facts.
Text updated October 23, 2026.