Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
72,862 visible repositories in the index
1–24 of 37 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- hydra
- oauth2
- openid-connect
- docker
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
A lightweight, secure, and feature-rich Discord terminal (TUI) client.
- go
- discord
- golang
- discordo
An ACME-based certificate authority, written in Go.
- boulder
- go
- acme
- certificate-authority
Linux Runtime Security and Forensics using eBPF
An JWT based API for managing users and issuing JWT tokens.
- authentication
- jwt
- production
Open source vulnerability DB and triage service.
- security
- security-tools
- vulnerability-scanners
- vulnerability-management
A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.
- golang
- go
- privacy
- go-modules
A JWT based API for managing users and issuing JWT tokens
Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy
captcha of base64 image string
- captcha
- image-captcha
- audio-captchas
- captcha-generator
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
- 2fa
- auth0
- authentication
- identity
Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
- hacktoberfest
- authentication
- auth
- authorization
goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.
- rbac
- go
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
Secure Vault for Customer PII/PHI/PCI/KYC Records
- gdpr
- pii
- piidata
- security
A simple, semantic and developer-friendly crypto package for golang
- aes
- rsa
- des
- 3des