1.cryptomator / cryptomator
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.
+1,495 stars
from 14,918 · score 7.31
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
14 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.zaproxy / zaproxy
The ZAP by Checkmarx Core project
+1,092 stars
from 14,998 · score 7.00
3.Peergos / Peergos
A p2p, secure file storage, social network and application protocol
+157 stars
from 2,389 · score 5.06
4.Loophole-LLC / Bastillion
Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.
+100 stars
from 3,452 · score 4.62
5.find-sec-bugs / find-sec-bugs
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
+43 stars
from 2,410 · score 3.78
6.tink-crypto / tinkArchived
Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.
+42 stars
from 13,496 · score 3.76
7.tink-crypto / tink-java
Java implementation of Tink
+38 stars
from 273 · score 3.66
8.pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
+34 stars
from 2,505 · score 3.56
9.Password4j / password4j
Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.
+20 stars
from 418 · score 3.04
10.Hakky54 / ayza
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
+13 stars
from 567 · score 2.64
11.BastiaanJansen / otp-java
A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).
+10 stars
from 235 · score 2.40
12.Hakky54 / mutual-tls-ssl
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included
+8 stars
from 629 · score 2.20
13.Warxim / petep
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
+8 stars
from 225 · score 2.20
14.pac4j / vertx-pac4j
Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
+2 stars
from 133 · score 1.10