Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 218 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Ghidra is a software reverse engineering (SRE) framework
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Open Source Identity and Access Management For Modern Applications and Services
A tool for reverse engineering Android apk files
Free implementation of Play Services
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
An open source trusted cloud native registry project that stores, signs, and scans content.
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
General purpose TLS and crypto library
The ZAP by Checkmarx Core project
A vulnerability scanner for container images and filesystems
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Cloud Native Runtime Security
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
Automated Adversary Emulation Platform
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
eBPF-based Security Observability and Runtime Enforcement
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Secure sharing of secrets, passwords and files
Translated✨ An open-source, free, one-stop Java permission authentication framework that makes authentication and authorization simple and elegant! — Login authentication, permission authentication, distributed Session, microservice gateway authentication, SSO single sign-on, OAuth2.0 unified authentication, jwt integration, API Key authorization, API parameter signing
Automatically provision and manage TLS certificates in Kubernetes
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Scanning APK file for URIs, endpoints & secrets.
Reverse engineering and pentesting for Android applications
The FLARE team's open-source tool to identify capabilities in executable files.
the official Rust and C implementations of the BLAKE3 cryptographic hash function
Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
A Kubernetes controller and tool for one-way encrypted Secrets
CTFs as you need them
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
Prevents you from committing secrets and credentials into git repositories
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
Linux Runtime Security and Forensics using eBPF
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
Decompiler from Java bytecode to Java, used in IntelliJ IDEA.
Automate SSL/TLS certificates on Windows with ease
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET
Java JWT: JSON Web Token for Java and Android
Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖
Vulnerability Static Analysis for Containers
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Collaborative forensic timeline analysis
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
The repository host gives no description.
Minimalistic web app designed for sending private and secure notes.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
Super timeline all the things
Tools to work with android .dex and java .class files
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Splunk Security Content
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Protect against malicious open source packages 🤖
Software Supply Chain Transparency Log
Reconnaissance Swiss Army Knife
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
Open Source Cloud Native Application Protection Platform (CNAPP)
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
GRR Rapid Response: remote live forensics for incident response
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
Automating captcha solving for Playwright. Supports Cloudflare Turnstile & Interstitial, and reCAPTCHA V2 & V3 with Click-based or API (2captcha) solving. Designed for easy integration with Playwright, Patchright, and Camoufox.
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Your Everyday Threat Intelligence
A family of header-only, very fast and memory-friendly hashmap and btree containers.
Miniscule cross-platform eventing, networking & crypto for async applications
Java decompiler, assembler, and disassembler
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
A Rust implementation of the Noise Protocol Framework
A helm plugin that help manage secrets with Git workflow and store them anywhere