OWASP Top 10 — The standard awareness document for developers and web application security. Gitleaks — Scan git repos for secrets like passwords, API keys, and tokens. SQLMap — Automatic SQL injection ...