Showing 36 of 1290 projects
A script that checks for dozens of common best-practices around deploying Docker containers in production.
A simple OIDC provider that enables passkey-only authentication for self-hosted services.
An all-in-one, optionally distributed, multi-architecture honeypot platform with 20+ honeypots, visualization via Elastic Stack, and live attack maps.
A cloud native runtime security tool for Linux that detects abnormal behavior and security threats in real-time.
A PKI/TLS toolkit for signing, verifying, and bundling TLS certificates, available as a CLI tool and HTTP API server.
A curated list of tools and resources for digital forensics and incident response (DFIR) teams.
A curated list of tools and resources for digital forensics and incident response (DFIR) teams.
A runtime mobile exploration toolkit powered by Frida for security assessment of iOS and Android apps without jailbreak.
A secure, cross-platform Git credential helper that provides authentication to GitHub, Azure DevOps, Bitbucket, and GitLab.
A Kubernetes controller and tool for encrypting Secrets into SealedSecrets that can be safely stored in Git.
A Go implementation of JSON Web Tokens (JWT) for signing, verifying, parsing, and generating tokens.
A lightweight multi-architecture disassembly framework for binary analysis and reverse engineering.
Blazing-fast remote access
A tool for securely storing AWS credentials in your OS keystore and generating temporary credentials for development.
An open-source implementation of lightweight VMs that perform like containers but offer VM-level isolation and security.
A static analysis tool that scans Go source code for security vulnerabilities by analyzing the AST and SSA representations.
An open-source implementation of the Matter standard, a unified IP-based connectivity protocol for secure and interoperable smart home devices.
A rapid development PHP framework using MVC and design patterns to build robust web applications quickly.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
A malicious traffic detection system that monitors network traffic for blacklisted threats and suspicious activities using public feeds and heuristics.
A static analysis tool for detecting security misconfigurations and flaws in Nginx configuration files.
A minimal authorization library for Ruby on Rails using plain Ruby classes and object-oriented design.
Bandit is a tool designed to find common security issues in Python code.
A simple Swift wrapper for the iOS/macOS Keychain that provides an easy-to-use API for secure credential storage.
Free and open log management
A pure Go library for loading, compiling, debugging, and attaching eBPF programs to Linux kernel hooks.
Query APIs, cloud services, and code directly with SQL using a zero-ETL approach—no database required.
An open-source multi-cloud security auditing tool that assesses cloud environment security posture via provider APIs.
A curated collection of interesting, funny, and concerning search queries for Shodan.io to find exposed devices and services.
A native Node.js library for hashing passwords using the bcrypt algorithm with async support and security best practices.
An open-source, large-scale network packet capture, indexing, and analysis system with a web interface.
An open-source, large-scale network packet capture, indexing, and analysis system for security and network monitoring.
A PHP library for creating, parsing, and validating JSON Web Tokens (JWT) and JSON Web Signatures (JWS).
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
A static analysis security vulnerability scanner for Ruby on Rails applications.
A command-line password manager for teams, built as a drop-in replacement for pass with GPG encryption and git versioning.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.