47,133 repositories indexed
1–24 of 32 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Information gathering framework for phone numbers
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
In-depth attack surface mapping and asset discovery
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Fast passive subdomain enumeration tool.
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
Cameradar hacks its way into RTSP videosurveillance cameras
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
CSRF protection middleware for Go.
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
Software Supply Chain Transparency Log
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
Protect against malicious open source packages 🤖
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
Incident Response - Fast suspicious file finder
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
:sunglasses:Package captcha provides an easy to use, unopinionated API for captcha generation
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
Content discovery and fuzzing with HTTP/3 support (100k requests per second)