Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
- docker
- containers
- security
- seccomp
Repository Index
47,133 repositories indexed
1–24 of 36 · Most stars
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
- service-mesh
- rust
- golang
- kubernetes
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
Open device management
- osquery
- gitops
- device-management
- vulnerability-management
Tfsec is now part of Trivy
Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
Linux Runtime Security and Forensics using eBPF
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
:tophat: simple, fun and transparent SSH (and telnet) bastion server
Custom & better AppArmor profile generator for Docker containers.
- docker
- apparmor-profile
- apparmor
- containers
Program to reverse Docker images into Dockerfiles
- security-tools
- security
- docker-security
- reverse-engineering
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
Framework for running BPF programs with rules on Linux as a daemon. Container aware.
Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️
- aws
- aws-billing
- aws-cli
- aws-cost-explorer
Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops