Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json
Repository Index
47,133 repositories indexed
1–17 of 17 · Most stars
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
Authorization framework for Ruby/Rails applications
- rails
- authorization
- ruby
- hacktoberfest
Protect against malicious open source packages 🤖
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
- openam
- sso
- oauth
- saml
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
- security
- openpolicyagent
- acl
- rust
WebAppSec Content Security Policy
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
Data policy IN, dynamic view OUT: PACE is the Policy As Code Engine. It helps you to programatically create and apply a data policy to a processing platform like Databricks, Snowflake or BigQuery (or plain 'ol Postgres, even!) with definitions imported from Collibra, Datahub, ODD and the like.
- data-catalog
- data-processing
- policy-enforcement
- bigquery
Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.
- golang
- observability
- opentelemetry
- policy-engine
Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
Static analysis from configs → Kubernetes NetworkPolicies in seconds
Authentication policy for pyramid using repoze.who 2.0 API
LDAP authentication policy for Pyramid
- ldap
- ldap-authentication
- pyramid
- python