Open-Awesome
CategoriesAlternativesStacksSelf-HostedExplore
Open-Awesome

© 2026 Open-Awesome. Curated for the developer elite.

TermsPrivacyAboutGitHubRSS
  1. Home
  2. Tags
  3. Security

Security

1290 projects

Showing 36 of 1290 projects

opaque-ke
opaque-keRust

A Rust implementation of the OPAQUE password-authenticated key exchange protocol for secure password-based authentication.

#password-authentication#authentication-protocol#end-to-end-encryption
Stars424
Forks68
Last commit4 months ago
authoscope
authoscopeRust

A scriptable network authentication cracker for custom services, using Lua scripts to test credentials.

#cracking#lua-scripting#password-cracker
Stars420
Forks46
Last commit19 hours ago
Shhh
ShhhPython

A tiny Flask app to create encrypted secrets and share them securely, keeping sensitive info out of emails and chat logs.

#api#flask#secret-sharing
Stars420
Forks31
Last commit16 days ago
cc-oci-runtime
cc-oci-runtimeC

OCI (Open Containers Initiative) compatible runtime for Intel® Architecture

#kvm#oci#virtual-machine
Stars417
Forks55
Last commit9 years ago
Keyscope
KeyscopeRust

A Rust CLI tool to automate validation and invalidation workflows for API keys and secrets across 30+ providers.

#pentest#developer-tools#devops
Stars412
Forks113
Last commit1 year ago
share-cli
share-cliJavaScript

A command-line tool to quickly share files via encrypted, password-protected HTTP links.

#http-server#productivity#localtunnel
Stars411
Forks13
Last commit7 years ago
Substation
SubstationGo

A serverless toolkit for routing, normalizing, and enriching security event and audit logs in AWS.

#aws-serverless#observability#log-enrichment
Stars409
Forks35
Last commit1 day ago
teler-waf
teler-wafGo

A Go HTTP middleware that protects web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, and brute force attacks.

#teler-waf#bot-protection#waf
Stars406
Forks33
Last commit1 year ago
Buttercup Mobile
Buttercup MobileTypeScript

React Native mobile application for the Buttercup password manager, offering secure on-device vault management.

#hacktoberfest#ios#biometric-authentication
Stars404
Forks89
Last commit1 year ago
VisualCaptcha
VisualCaptcha

A configurable, accessible, and secure visual CAPTCHA solution with support for multiple front-end and back-end frameworks.

#jquery#web-security#anti-bot
Stars401
Forks43
Last commit5 years ago
Software Assurance Maturity Model
Software Assurance Maturity ModelJavaScript

A framework to help organizations formulate and implement a strategy for software security tailored to their specific risks.

#maturity-models#security#maturity-model
Stars401
Forks125
Last commit4 years ago
Heimdall
HeimdallSwift

A Swift wrapper around iOS Security framework for RSA/AES encryption, decryption, signing, and keychain key-pair management.

#keychain#ios#rsa-encryption
Stars399
Forks64
Last commit6 years ago
Heralding
HeraldingPython

Credentials catching honeypot

#honeypot#security#security-tools
Stars398
Forks79
Last commit2 years ago
cotp
cotpRust

A command-line TOTP/HOTP authenticator with strong encryption, import capabilities, and an interactive dashboard.

#totp#xchacha20-poly1305#authentication
Stars393
Forks28
Last commit1 day ago
EOS Smart Contract Development Security Best Practices
EOS Smart Contract Development Security Best Practices

A comprehensive guide to security best practices and known vulnerabilities for EOS smart contract developers.

#dapp-security#eos#vulnerability-analysis
Stars392
Forks72
Last commit1 year ago
HIBA
HIBAC

A flexible authorization layer for OpenSSH certificate-based authentication using host identities and grants.

#devops#openssh#authorization
Stars390
Forks19
Last commit4 days ago
TOPasscodeViewController
TOPasscodeViewControllerObjective-C

A customizable modal passcode input and validation view controller for iOS apps requiring extra security.

#ios#touch-id#authentication
Stars390
Forks93
Last commit3 years ago
github-auth
github-authRuby

A command-line tool for managing SSH keys from GitHub users to enable secure pair programming sessions.

#github-integration#developer-tools#ssh-key-management
Stars390
Forks17
Last commit8 years ago
Gorilla
GorillaRust

A versatile Rust tool for generating and mutating wordlists using patterns, web scraping, and password formats.

#cracking#hash#infosec
Stars389
Forks22
Last commit8 months ago
sshcommand
sshcommandShell

A tool that simplifies running single commands over SSH and manages authorized keys for secure remote execution.

#devops#cli-tool#security
Stars388
Forks48
Last commit12 days ago
Center for Threat Informed Defense Security Stack Mappings
Center for Threat Informed Defense Security Stack MappingsPython

A collection of native security controls for major cloud platforms mapped to MITRE ATT&CK techniques to enable threat-informed defense decisions.

#yaml#azure#security
Stars388
Forks61
Last commit
Jasmin
JasminRocq Prover

A language and compiler for writing high-assurance, high-speed cryptographic implementations.

#programming-language#compiler#coq
Stars386
Forks86
Last commit21 hours ago
crowdsec-blocklist-import
crowdsec-blocklist-importPython

Import 28+ threat intelligence feeds into CrowdSec with automatic deduplication, normalization, and real-time sync.

#self-hosted-security#security-automation#tor-exit-nodes
Stars385
Forks16
Last commit
Shisho
ShishoRust

A lightweight static analyzer for developers that finds code patterns across multiple programming languages.

#multi-language#developer-tools#terraform-security
Stars384
Forks13
Last commit3 years ago
two-factor-bundle
two-factor-bundlePHP

Two-factor authentication bundle for Symfony applications, supporting TOTP, Google Authenticator, and email codes.

#totp#authentication#two-factor-authentication
Stars384
Forks107
Last commit4 years ago
Import a GPG Key
Import a GPG KeyTypeScript

A GitHub Action to import a GPG private key into a runner's keychain for signing commits, tags, and pushes.

#actions#gnupg2#devops
Stars383
Forks93
Last commit1 month ago
Parse
ParsePHP

A static security scanner for PHP code that identifies potential vulnerabilities without executing the code.

#command-line-tool#vulnerability-detection#security
Stars379
Forks40
Last commit8 years ago
terrahelp
terrahelpGo

A command-line utility written in Go that provides encryption, decryption, and masking functionality for Terraform state and output.

#devops#vault#cli-tool
Stars378
Forks39
Last commit3 years ago
lua-lockbox
lua-lockboxLua

A collection of cryptographic primitives and protocols written in pure Lua for cross-platform reference implementations.

#encryption#security#lua-library
Stars377
Forks69
Last commit2 years ago
guardian_db
guardian_dbElixir

A Guardian extension that tracks JWT tokens in a database to enable immediate revocation and prevent replay attacks.

#database#elixir#authentication
Stars372
Forks87
Last commit1 year ago
Monban
MonbanRuby

A simple and extensible user authentication library for Ruby on Rails applications.

#warden#authentication#user-management
Stars372
Forks19
Last commit3 months ago
forbidden-apis
forbidden-apisJava

A Java bytecode analyzer that detects and blocks forbidden API calls during builds with Ant, Maven, or Gradle.

#gradle#build-tools#static-code-analysis
Stars372
Forks39
Last commit1 month ago
tfmcp
tfmcpRust

An experimental CLI tool that enables AI assistants to manage and operate Terraform environments via the Model Context Protocol (MCP).

#devops#cli-tool#security
Stars372
Forks31
Last commit4 days ago
Progpilot
ProgpilotPHP

A static application security testing (SAST) tool for PHP that detects vulnerabilities like XSS through taint analysis.

#taint-analysis#static-code-analysis#code-security
Stars371
Forks67
Last commit1 year ago
V0lt
V0ltPython

A Python toolkit for security Capture The Flag (CTF) challenges, providing utilities for crypto, shellcodes, and network connections.

#security#python3#python-toolkit
Stars370
Forks100
Last commit8 years ago
Google Cloud Security Analytics
Google Cloud Security AnalyticsPython

A community-driven collection of pre-built security analytics queries and rules for auditing and threat detection in Google Cloud.

#security-analytics#yara-l#log-analytics
Stars370
Forks75
Last commit
PreviousPage 20 of 36Next

Related Tags

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a projectStar on GitHub
2 years ago
10 days ago
2 years ago
#Authentication254
#Cryptography195
#Docker127
#Go123
#Encryption115
#Python104
#Security Tools102
#Devops100
#Golang96
#Authorization96
#Rust90
#Devsecops86