Ranked by Attention Score: stars gained over the last 7 complete days
16 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
LordOS — a free, fast and secure GNU/Linux distribution based on Debian, with its own desktop environment: display server and Wayland compositor in C, a React UI engine on QuickJS, and private native apps.
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
The open-source cloud for agents & devs. Including Auth, Databases, Storage, Functions, Messaging, Hosting, Realtime, WAF and more
No-root network monitor, firewall and PCAP dumper for Android
The easiest, and most secure way to access and protect all of your infrastructure.
🏔 Love Freedom - ❌ Block Mass Surveillance
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.
WinDivert: Windows Packet Divert
🕵️♂️ TUI for sniffing network traffic using eBPF on Linux
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
Cardea is an SSH bastion server with access control, session recording, and optional TPM-backed key protection.