#security

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

Find, verify, and analyze leaked credentials

Datadog Python APM Client

An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.

Open Cyber Threat Intelligence Platform

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

eBPF-based Networking, Security, and Observability

Unified Policy as Code

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Spring Security

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.

OpenZeppelin Contracts is a library for secure smart contract development.

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Endo is a distributed secure JavaScript sandbox, based on SES

Cloud Native Runtime Security

Open device management

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

🐊 Policy Controller for Kubernetes

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

OpenFGA SDK for node.js and JavaScript - https://www.npmjs.com/package/@openfga/sdk

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

Built-in Panther detection rules and policies

Software Supply Chain Transparency Log

Common go library shared across sigstore services and clients

A Sigstore client written in Python