> Markdown version of [/magazine/710-the-overflow-5-security-and-privacy-tools-for-developers](https://www.wearedevelopers.com/magazine/710-the-overflow-5-security-and-privacy-tools-for-developers). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # The Overflow: 5 Security and Privacy Tools for Developers **By:** [Daniel Cranney](https://www.wearedevelopers.com/@daniel-cranney) **Published:** April 3, 2026 We’re back again with another edition of the Overflow, where we share some of the best tools we’ve found from around the web that we just couldn’t cram into the already jam-packed editions of the Dev Digest. So let’s take a look at five security and privacy tools you can pick up and run with right away. As always, watch the video below and read on for the links. https://www.youtube.com/embed/4UnZ9OoGgaI ## 1. git-secrets Each year, tens of millions of secrets get leaked on GitHub. With git-secrets, you can hook into your Git workflow and block any commit that contains something that looks like a credential, whether that’s an API key, password or other kind of potentially-sensitive data. 🔗 [https://github.com/awslabs/git-secrets](https://github.com/awslabs/git-secrets) ## 2. StatiCrypt StatiCrypt lets you encrypt a static HTML page with a password so you can host it publicly, but only people with the password can see the content. Everything is decrypted client-side in the browser with no backend required. It’s perfect for sharing sensitive documentation, internal pages, or prototypes without spinning up authentication. 🔗 [https://github.com/robinmoisson/staticrypt](https://github.com/robinmoisson/staticrypt) ## 3. Retriever Stopping leaks is one thing, but what about when you actually need to share a secret with a teammate? Don’t just paste it in Slack. Retriever lets you request credentials through an encrypted link. No server ever touches the data, and the secret is gone after it’s been accessed, making it one of the simplest secure ways to hand something sensitive off, and fast. 🔗 [https://retriever.corgea.io/](https://retriever.corgea.io/) ## 4. garak If you’re building with large language models, garak is a must. It’s NVIDIA’s open-source vulnerability scanner for LLMs that probes for prompt injection, data leakage, hallucinations, and other weaknesses. 🔗 [https://github.com/NVIDIA/garak](https://github.com/NVIDIA/garak) ## 5. Sniffnet Sniffnet is a desktop app that gives you a real-time visual dashboard of all your network traffic. You can see exactly what’s connecting, where it’s going, and filter by protocol, country, or application. Even if there’s nothing malicious going on, you might be surprised to see how much traffic is on your network. 🔗 [https://github.com/GyulyVGC/sniffnet](https://github.com/GyulyVGC/sniffnet) * * * We hope you found this article useful, and be sure to check back for the next edition soon and [send in your favourite tools for a shoutout](https://bsky.app/profile/wearedevelopers.bsky.social). ## Related Articles - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [The Overflow: 5 Tools for Developers Working with JSON](https://www.wearedevelopers.com/magazine/706-the-overflow-5-tools-for-developers-working-with-json) - [The Overflow: 4 Tools for Fast File Sharing](https://www.wearedevelopers.com/magazine/697-the-overflow-4-tools-for-fast-file-sharing) - [The Overflow: 5 Tools for Working with SVGs](https://www.wearedevelopers.com/magazine/707-the-overflow-5-tools-for-working-with-svgs) ## Related Videos - [Stop Committing Your Secrets - GIt Hooks To The Rescue!](https://www.wearedevelopers.com/videos/573-stop-committing-your-secrets-git-hooks-to-the-rescue) - [WeAreDevelopers LIVE: Scammer Payback with Python, Grok Goes Unhinged, The Future of Chromium and mo](https://www.wearedevelopers.com/videos/1288-wearedevelopers-live-scammer-payback-with-python-grok-goes-unhinged-the-future-of-chromium-and-mo) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) ## Related Jobs - [Staff Developer Advocate, GitHub Security Lab](https://www.wearedevelopers.com/jobs/ext/1921051-staff-developer-advocate-github-security-lab) at **GitHub** - [Engineer, Offensive Security Organization](https://www.wearedevelopers.com/jobs/ext/1992296-engineer-offensive-security-organization) at **Twilio** - [Senior Software Engineer](https://www.wearedevelopers.com/jobs/ext/15942-senior-software-engineer) at **GitHub** - [Principal Software Engineer, Identity](https://www.wearedevelopers.com/jobs/ext/1469181-principal-software-engineer-identity) at **GitHub** - [Staff Engineer - Offensive Security](https://www.wearedevelopers.com/jobs/ext/1226927-staff-engineer-offensive-security) at **Twilio** - [Staff Software Engineer, Database Infrastructure](https://www.wearedevelopers.com/jobs/ext/1470125-staff-software-engineer-database-infrastructure) at **GitHub**