diff --git a/README.md b/README.md
index 0e81330..d98c801 100644
--- a/README.md
+++ b/README.md
@@ -148,6 +148,7 @@ Table of Contents
    * [https://columbus.elmasy.com/](https://columbus.elmasy.com/) - Columbus Project is an advanced subdomain discovery service with fast, powerful and easy to use API.
    * [BadUSB Script To Exfiltrate Passwords](https://github.com/MarkCyber/BadUSB/blob/main/HackStuff/CredentialHarvester.txt) - Extracts all saved passwords from Chrome, Firefox, and Edge to be saved onto secondary USB for further analysis.
    * https://github.com/flibustier/jwt-online-cracker - Brute-force HS256, HS384 or HS512 JWT Token from your browser (fully client-side).
+   * [PageGuard](https://pageguard.org) - Website security audit and health check tool. Identifies configuration issues, missing security headers, and best practice violations. Free REST API.
 
 ## Cheat Sheets