#security

Python reference implementation of The Update Framework (TUF)

The CrowdStrike Falcon SDK for Python

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Kubernetes networking based on Open vSwitch

Low code web framework for real world applications, in Python and Javascript

The easiest, and most secure way to access and protect all of your infrastructure.

Keep track of failed login attempts in Django-powered sites.

Software Supply Chain Security Platform

A cross-platform CLI to interact with an OpenFGA server.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Plugins for Wazuh Dashboard

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

Zero-Trust access management with true WireGuard® 2FA/MFA

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

Weighs the soul of incoming HTTP requests to stop AI crawlers

A vulnerability scanner for container images and filesystems

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

Open source AI terminal for cloud and infrastructure management, enabling you to deploy, troubleshoot, and automate services using natural language and intelligent agents.

Simple and flexible tool for managing secrets

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

Boundary enables identity-based access management for dynamic infrastructure.

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

secureCodeBox (SCB) - continuous secure delivery out of the box

Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

Discover, govern and control access to MCP servers and agent skills across your organization