Repository Index

The easiest, and most secure way to access and protect all of your infrastructure.

• ssh
• go
• bastion
• teleport-binaries

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

• scanner
• security-audit
• security-tools
• vulnerability-scanner

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

• key-value
• immutable
• merkle-tree
• go

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

The most opinionated Go source code linter for code audit.

• linter
• golang
• go
• style-checker

TranslatedA SQL full-lifecycle quality management platform that supports many different types of databases, covers pre-event control, post-event supervision, and standard release scenarios, and helps you establish quality standards

• mysql
• sql-audit
• sql
• audit

TUI for viewing logs from journald, auditd, file system, Docker and Podman containers, Compose stacks and Kubernetes pods with support for log highlighting and several filtering modes.

• go
• journal
• journalctl
• tui

The missing reverse proxy for ssh scp

• ssh
• ssh-connection
• reverse-proxy
• two-factor-authentication

Vocat is an open-source web control panel and engineering toolkit for Quectel EC20/EC25-class cellular modems. It combines modem discovery, live radio status, AT and USSD terminals, SMS, WiFi Calling, eSIM management, network selection, proxy routing, notifications, audit logs, and release automation in one self-contained service.

Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS and Windows.

• acme
• ddns
• frp
• golang

Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️

• aws
• aws-billing
• aws-cli
• aws-cost-explorer

Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.

• aws
• security
• monitoring
• automation

Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.

• dependency-analysis
• reverse-dependencies
• dependency-resolution
• file-dependencies

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

• blue-team
• security-tools
• security-audit

SSH server and gateway for standard SSH clients: OIDC Device Authorization, Docker/Kubernetes sessions, verifiable audit and recording.

• bastion
• oidc
• openid-connect
• ssh

Audit and fix your Mac's security in one command. No agent, no signup, open source.

• cli
• compliance
• endpoint-security
• golang

Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.

• audit
• bastion
• firewall
• networking

Tamper-evident audit log for Go: an append-only, hash-chained, optionally Ed25519-signed log/slog handler, with offline logx verify. Built on the standard library, zero third-party dependencies. Also a full slog toolkit (colored output, JSON, rotation, fan-out, CLI).

• cli
• go
• golang
• slog