47,133 repositories indexed
25–48 of 66 · Most stars
Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of every Apple endpoint. Manage that desired state as code through GitOps and Terraform.
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
Catch risky npm dependency changes before they merge.
Docker Scout CLI
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️
AWS Identity and Access Management Visualizer and Anomaly Finder
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
Open-source Docker infrastructure platform. One web UI — containers, security, DNS, VPN, monitoring, backups, reverse proxy, terminal, and multi-node orchestration. Replace a dozen tools with one.
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
eBPF Security Monitoring and Sandboxing Agent Based on Aya
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Hide secrets like API keys, passwords and tokens in Neovim while screen sharing or streaming. Masks .env, JSON, YAML, TOML, XML, .http, Terraform/HCL and Dockerfiles with extmarks, without changing the file. Presentation mode, screen shield, picker and terminal masking.
Distributed Honeypot
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
Community curated list of System and Network policy templates for the KubeArmor and Cilium
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️