Security
Showing 36 of 1288 projects
A high-performance open-source secret scanner with live validation, blast radius mapping, and 700+ detection rules for code, Git, CI, cloud, and SaaS platforms.
A static analyzer for Java that detects code quality issues, security vulnerabilities, and bugs with over 600 rules.
A Go middleware library providing CSRF protection for web applications with support for HTML forms and JavaScript frameworks.
An extensible, strongly-typed Rust implementation of OAuth2 (RFC 6749) for building secure authentication clients.
A Terraform module to configure AWS accounts with a secure baseline aligned to CIS AWS Foundations and AWS Foundational Security Best Practices.
A modular vulnerability scanner that checks website security and automatically generates easy-to-read reports for organizations.
A ready-to-use and customizable authentication and OAuth2 management library for FastAPI applications.
A Go program that reverse engineers Docker images to reconstruct the original Dockerfile.
A command-line tool to securely configure macOS security and privacy settings with a single command.
A command-line tool to securely configure macOS security and privacy settings with a single command.
A modern, fast, privacy-respecting meta search engine written in Rust, offering a secure and ad-free search experience.
A command-line forensics tool for tracking USB device connection history on GNU/Linux systems.
A Roslyn analyzer for C# that enforces good practices in design, usage, security, performance, and style.
A Swift framework for OAuth2 authentication on Apple platforms (iOS, macOS, tvOS), supporting all standard OAuth2 flows.
A hands-on workshop for learning ASP.NET Core Authorization through step-by-step labs covering policies, roles, claims, and resource-based authorization.
A lightweight Certificate Transparency log monitor that alerts you when SSL/TLS certificates are issued for your domains.
A header-only C++11 library for creating and validating JSON Web Tokens (JWT) with comprehensive algorithm support.
A lightweight SSH-based VPN alternative that creates secure tunnels to remote networks without requiring a dedicated VPN server.
A pure Python HTML5 parser with spec-perfect parsing, built-in sanitization, CSS selectors, and zero dependencies.
An information security preparedness tool for adversarial simulation using Redis/Celery, Python, and Vagrant.
An automated, modular cryptanalysis tool for identifying and exploiting weak cryptosystems.
A secure and lightweight template engine for Java and Kotlin with intuitive syntax and blazing fast performance.
A real-time capture the flag (CTF) scoring engine and game manager for cybersecurity wargames.
A Laravel package that simplifies blocking and banning Eloquent models with support for multiple bans, soft deletes, and middleware.
A Docker-based deployment for Passbolt CE, the open-source password manager for teams.
A CLI tool for real-time malicious package detection and software supply chain security across multiple ecosystems.
A VoIP security testing toolset for auditing SIP-based systems through scanning, enumeration, and password cracking.
A container introspection tool that detects the container runtime and enumerates available security features.
A Rust cryptography library backed by BoringSSL that prioritizes misuse resistance, ergonomics, and performance.
A secure, fast, and feature-rich CBOR codec for Go, fully compliant with RFC 8949 and RFC 8742.
A command-line tool to manage multiple SSH keys with aliases, switching, backup, and agent integration.
A Symfony bundle for implementing OAuth2 server functionality in PHP applications.
A static analysis tool to identify security misconfigurations and anti-patterns in Electron applications.
A Laravel package for limiting application access using invite codes with email restrictions, usage limits, and expiry dates.
A modular, menu-driven tool for building time-delayed, distributed security event chains for Red, Blue, and Purple Team exercises.
A curated list of tools and resources for anti-forensic activities, including data hiding, encryption, steganography, and evidence removal.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.