Repository Index

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

• opa
• policy
• declarative
• json

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

• hacktoberfest
• abac
• access-control
• acl

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

• hids
• security
• pci-dss
• nist800-53

Manages application of security headers with many safe defaults

• secure-headers
• csp
• hsts
• referrer-policy

Authorization framework for Ruby/Rails applications

• rails
• authorization
• ruby
• hacktoberfest

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

• fastapi
• flask
• django
• content-security-policy

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

Inspektor is a protocol-aware proxy that is used to enforce access policies👮

• security
• openpolicyagent
• acl
• rust

WebAppSec Content Security Policy

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.

• data-catalog
• data-processing
• policy-enforcement
• bigquery

Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.

• golang
• observability
• opentelemetry
• policy-engine

Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor

opa-middleware gather all the middlewares you need to use Open Policy Agent with your API

An auth policy for the Pyramid Web Framework with sane defaults.

Authentication policy for pyramid using repoze.who 2.0 API

LDAP authentication policy for Pyramid

• ldap
• ldap-authentication
• pyramid
• python