Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 102 by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface
Clone any website with one command using AI coding agents
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.
Network-wide ads & trackers blocking DNS server
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Connect your agents & product to 1,000 APIs.
Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
The open-source cloud for agents & devs. Including Auth, Databases, Storage, Functions, Messaging, Hosting, Realtime, WAF and more
The most comprehensive authentication framework
🕵️♂️ All-in-one OSINT tool for analysing any website
Open source agentic operating system
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
A modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
A fully open source & end-to-end encrypted note taking alternative to Evernote.
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
✨ AI Spreadsheet for Business
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
The AI Agent for Cyber Security.
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
Cross-platform desktop GUI app to clean image metadata
🧠 Leon is your open-source personal assistant.
A powerful obfuscator for JavaScript and Node.js
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
Think fearlessly with end-to-end encrypted notes and files. For issues, visit https://standardnotes.com/forum or https://standardnotes.com/help.
Authentication for the Web.
Enable Opencode to authenticate against Antigravity (Google's IDE) via OAuth so you can use Antigravity rate limits and access models like gemini-3-pro and claude-opus-4-5-thinking with your Google credentials.
Android Reverse-Engineering Workbench for VS Code
📈 Open source, privacy-first web analytics — a cookie-less Google Analytics alternative with built-in error tracking and performance monitoring. Self-host it or use our cloud. Get started for free!
Deprecated in favour of Video.js 10; security fixes only until January 2028. UI components and hooks for building video and audio players on the web.
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
Hey is a decentralized and permissionless social media app built with Lens Protocol 🌿
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
Help secure Express apps with various HTTP headers
Audited & minimal JS implementation of hash functions, MACs and KDFs.
Secure peer-to-peer chat that is serverless, decentralized, and ephemeral
🔥 A well-tested feature-rich modular Firebase implementation for React Native. Supports both iOS & Android platforms for all Firebase services.
Authentication, simple and clean
Audited & minimal JS implementation of elliptic curve cryptography.
Instant thought capture for macOS. One shortcut, post-it appears, type, close.
2000+ crypto svg icons for react
Sandbox for developing and testing UI components in isolation
Auditable & minimal JS implementation of public-key post-quantum cryptography
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
OpenScribe is an open-source AI scribe that records patient encounters and generates structured clinical notes automatically. You keep full control over data, workflows, and patient privacy with no vendor lock-in.
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
Open Source Cloud Native Application Protection Platform (CNAPP)
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
Audited & minimal JS implementation of Salsa20, ChaCha and AES
Efficient embeddable adblocker library
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
Security training for the apps you actually ship. Open your browser and start hacking.
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
A JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Fastest 5KB JS implementation of secp256k1 signatures and ECDH
Codesign Electron macOS apps
Fastest 5KB JS implementation of ed25519 signatures
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
A self-hosted markdown notes taking app with live preview, document encryption, multi-user support, multi-organization capabilities and more
Support for OAuth 2 and OpenId Connect (OIDC) in Angular.
AI-ready reference architecture for Angular / ASP.NET Core projects. A hardened foundation with secure authentication, authorization, role and user management, and consistent patterns designed to be safely extended by AI tools. Stop letting AI hallucinate your auth and DB logic - give it a production-grade foundation to build on.
◢ High-perfomance, self-hosted and privacy-focused web analytics service. Written in Go.
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
Authentication Providers and UI components for Microsoft Graph 🦒
Interoperable web-based DICOM slide microscopy viewer and annotation tool
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Authentication plugin for Payload CMS
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
Your users download a 4GB AI model, the connection drops at 3.8GB, verifyfetch resumes from 3.8GB and verifies every byte. Drop-in integrity verification for Transformers.js, WebLLM, and any large file in the browser.
A flexible playground for Android CTF challenges.
Typed, validated config from process.env, .env files, or any object, on Node, Bun, Deno, Cloudflare Workers, and the browser. No runtime dependencies.
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
Cross-platform desktop LLM client for OpenAI ChatGPT, DeepSeek R1, Anthropic Claude and more, with a focus on privacy and security.
Minimal JS implementation of older cryptography algorithms: RSA, DSA, DH.
File transfer solution with end-to-end encryption.
:key: Cross-Platform Passwords & Secrets Vault
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
Capacitor plugin for Google Auth. Lightweight & no dependencies.
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
Liquid Auth Service
Zero-boilerplate authentication support for Nuxt 2
A Payload CMS 3 plugin for Auth.js/NextAuth 5
A Boilerplate for deno RESTful apis
Voxel browser game inspired by Minecraft