Hey, I'm
Suphi Cankurt
The person behind AppSec Santa
I work at Invicti Security and have spent over a decade in application security. I got tired of the confusing landscape of security tools. Dozens of vendors, marketing buzzwords, and feature matrices that all blur together. So I built AppSec Santa to organize what I've learned and share it with the community.
Why I Built This
Anyone interested in application security faces the same challenge: there are hundreds of tools out there, and making sense of them all feels overwhelming.
I've been there. Reading marketing pages that all sound the same. Trying to figure out what a tool actually does versus what it claims to do.
AppSec Santa started as my personal notes. A simple spreadsheet to keep track of tools I came across. Friends started asking for it. Then people on Twitter.
So I turned it into a proper resource. No sponsored content. No affiliate links. Just organized information to help others navigate the AppSec tools landscape.
What This Site Offers
- Organized information — Tools categorized and compared in a clear format
- Honest descriptions — Straightforward information about what each tool does
- Regularly updated — The AppSec market moves fast. I try to keep things current
- Free forever — This resource will always be free to use
What I Cover
Tools across the entire application security lifecycle
Get in Touch
Have a question? Want to suggest a tool? Found an error? I'd love to hear from you.