Cloudflare (Free plan) free tier and limits
Put Cloudflare's proxy and DNS in front of your domain for DDoS mitigation, a CDN and a free SSL certificate, whichever host you use.
What the free plan gives you
- DDoS mitigation and global CDN
- Free shared SSL certificate
- DNS hosting
Best for
Any app on a custom domain that wants a basic shield in front of it.
Watch out
If your host already runs its own CDN (Vercel, Netlify), read the host's docs on using Cloudflare in front of it before you turn on proxying, because caching and SSL settings can clash.
Other security options
GitHub Secret Scanning Push Protection
Blocks git pushes that contain recognized secrets (API keys, tokens, private keys) before they land in your repository.
Free Push protection for users is on by default for every GitHub.com accountGitleaks
An open-source command-line tool that scans git repositories, files and history for hardcoded secrets. Can run locally, as a pre-commit hook or in CI.
Free Open source and free to run
Snyk
Scans your dependencies (SCA), source code (SAST), infrastructure-as-code and containers for known vulnerabilities, with IDE, CLI and Git integrations.
Free Free plan for individual developers and small teams