A simple zero-config tool to make locally trusted development certificates with any names you'd like.
- https
- tls
- certificates
- local-development
Repository Index
47,133 repositories indexed
1–24 of 24 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
ZITADEL - Identity infrastructure, simplified for you.
- saml
- authentication
- authorization
- login
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
Split your file into encrypted fragments so that you don't need to remember a passcode
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
- suricata
- parse
- security-tools
- network-security
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
K8s API Honeypot with Active Defense Capabilities
- never
- going
- to
- give
Prevent your secrets from leaking into logs, std* etc.
- go
- secrets
opa-middleware gather all the middlewares you need to use Open Policy Agent with your API
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
Real-time network traffic analysis in your terminal.
- cli
- ddos
- ddos-detection
- go
Quickly look up hashes in your terminal using the HashMob API 🔥
- data-breaches
- hash-cracking
- hash-lookup
- hashcat
Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.
👻 Simple middleware to integrate authentication to your applications
- fiber
- golang
- gothic
- middleware
Deep network visibility, powered by Suricata. Artica integrates the Suricata IDS engine directly inside your server, giving you enterprise-grade intrusion detection without the complexity. Monitor every packet in real time, detect advanced threats, and visualize malicious
- appliance
- network-monitoring
- suricata