#security

eBPF-based Networking, Security, and Observability

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.

Open Cyber Threat Intelligence Platform

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

Unified Policy as Code

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Spring Security

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

Find, verify, and analyze leaked credentials

OpenZeppelin Contracts is a library for secure smart contract development.

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more

Cloud Native Runtime Security

Open device management

The easiest, and most secure way to access and protect all of your infrastructure.

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

Common go library shared across sigstore services and clients

Python reference implementation of The Update Framework (TUF)

Plugins for Wazuh Dashboard

Datadog Python APM Client

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Low code web framework for real world applications, in Python and Javascript

Software Supply Chain Security Platform

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.