Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
A tool to abuse Exchange services
User-friendly OAuth2 CLI
Galah: An LLM-powered web honeypot.
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
Pure Go implementation of the NaCL set of API's
⚡️ SharePoint SDK for Go
- sharepoint
- sharepoint-online
- golang
- go
:sunglasses:Package captcha provides an easy to use, unopinionated API for captcha generation
- golang
- captcha
- captcha-generator
- image-captcha
GoDoc Live statically analyzes your Go HTTP services — extracts route definitions, request/response contracts, and authentication patterns — then generates beautiful, interactive API documentation.
Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
Package passwap provides a unified implementation between different password hashing algorithms. It allows for easy swapping between algorithms, using the same API for all of them.
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
Official CoinPaprika API Go client — coin prices, tickers, OHLCV, exchanges, and global market stats.
Golang Authentication API with Fiber MongoDB and JWT
SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lake, for billions of files! Blob store has O(1) disk seek, cloud tiering. Filer supports Cloud Drive, xDC replication, Kubernetes, POSIX FUSE mount, S3 API, S3 Gateway, Hadoop, WebDAV, encryption, Erasure Coding. Enterprise version is at seaweedfs.com.
K8s API Honeypot with Active Defense Capabilities
GitHub App authentication for Go: installation tokens, JWTs and PATs as oauth2.TokenSource, plus webhook signature verification and KMS/HSM signing
Local-first automation Agent & deterministic workflow engine — the secure control layer between AI and your data. Data stays local. Connect your own LLM / files / notes / databases via Connector API. ReAct reasoning · DAG/WAL/Saga/idempotent execution · MCP · offline-capable.