Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
80,339 visible repositories in the index
1–24 of 29 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
Find secrets with Gitleaks 🔑
- security
- security-tools
- git
- golang
Fast passive subdomain enumeration tool.
- subdomain-enumeration
- osint
- subdomains
- bugbounty
Automatically provision and manage TLS certificates in Kubernetes
- kubernetes
- letsencrypt
- tls
- certificate
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
A vulnerability scanner for container images and filesystems
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
The slightly more awesome standard unix password manager for teams
- go
- password-manager
- git
- gpg
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
- external-secrets
- kubernetes
- kubernetes-secrets
- secrets-manager
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
- gau
- wayback-machine
- hacktoberfest
- security
An OOB interaction gathering server and client library
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Quickly discover exposed hosts on the internet using multiple search engines.
- asm
- attack-surface
- bugbounty
- cli
:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
- golang
- payload
- remote-control
- hacking-tool
Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.
Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.
Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
- hacktoberfest
- authentication
- auth
- authorization
Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.
- git-hooks
- scans
- secret
- husky
Kubernetes-native security toolkit
- cloud-native
- golang
- kubernetes
- operator
A fast trading bot platform for cryptocurrency in Go (Binance)
- trading-bot
- cryptocurrency
- bot
- binance