Repository Index

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

• opa
• policy
• declarative
• json

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

• hacktoberfest
• abac
• access-control
• acl

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

• hids
• security
• pci-dss
• nist800-53

Manages application of security headers with many safe defaults

• secure-headers
• csp
• hsts
• referrer-policy

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

• iac
• infrastructure-as-code
• security
• appsec

IAM Least Privilege Policy Generator

• aws
• iam
• cloud
• security

Authorization framework for Ruby/Rails applications

• rails
• authorization
• ruby
• hacktoberfest

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

• fastapi
• flask
• django
• content-security-policy

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

Inspektor is a protocol-aware proxy that is used to enforce access policies👮

• security
• openpolicyagent
• acl
• rust

WebAppSec Content Security Policy

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

OpenIG is an open-source identity gateway (reverse-proxy) that secures, routes, and manages web traffic. It enables authentication, access control, and integration with identity providers, delivering single sign-on and API security for web and cloud applications.

• sso
• reverse-proxy
• rewrite
• openam

Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor

Static analysis from configs → Kubernetes NetworkPolicies in seconds

• cloud-native
• devsecops
• golang
• helm

Authentication policy for pyramid using repoze.who 2.0 API

LDAP authentication policy for Pyramid

• ldap
• ldap-authentication
• pyramid
• python