Open-Awesome
CategoriesAlternativesStacksSelf-HostedExplore
Open-Awesome

© 2026 Open-Awesome. Curated for the developer elite.

TermsPrivacyAboutGitHubRSS
  1. Home
  2. Tags
  3. Security

Security

1288 projects

Showing 36 of 1288 projects

gowitness
gowitnessGo

A Golang command-line utility that uses Chrome Headless to capture website screenshots and gather web data.

#reporting#chrome#screenshot
Stars4.5k
Forks448
Last commit4 months ago
Buttercup Desktop
Buttercup DesktopTypeScript

A free, open-source, cross-platform password manager that securely encrypts credentials in vault files.

#desktop-application#vault#encryption
Stars4.4k
Forks341
Last commit1 year ago
Awesome Pentest Cheat Sheets
Awesome Pentest Cheat Sheets

A curated collection of cheat sheets and resources for penetration testing and security assessments.

#vulnerability-assessment#pentest#penetration-testing
Stars4.4k
Forks791
Last commit2 years ago
Hubble
HubbleMakefile

A fully distributed networking and security observability platform for Kubernetes, built on Cilium and eBPF.

#tracing#observability#cilium
Stars4.3k
Forks296
Last commit4 days ago
ssh-audit
ssh-auditPython

A security auditing tool for SSH server and client configurations, analyzing algorithms, vulnerabilities, and policy compliance.

#python-tool#ssh-security#compliance-checking
Stars4.3k
Forks225
Last commit1 month ago
mythril
mythrilPython

A symbolic-execution-based security analysis tool for detecting vulnerabilities in Ethereum and EVM-compatible smart contracts.

#solidity#security-analysis#smart-contracts
Stars4.3k
Forks819
Last commit4 months ago
Awesome Security Talks & Videos
Awesome Security Talks & Videos

A curated collection of security conference talks and videos from events like DEF CON, Black Hat, and BSides.

#security-talks#owasp#video-library
Stars4.2k
Forks490
Last commit6 months ago
Valet
ValetSwift

A Swift library for securely storing data in the Apple Keychain across iOS, macOS, tvOS, and watchOS with a simple API.

#keychain#crypto#ios
Stars4.2k
Forks227
Last commit1 month ago
retire.js
retire.jsJavaScript

A scanner that detects JavaScript libraries with known vulnerabilities and can generate a Software Bill of Materials (SBOM).

#sbom#vulnerabilities#owasp
Stars4.2k
Forks438
Last commit5 days ago
next-iron-session
next-iron-sessionTypeScript

Secure, stateless, and cookie-based session library for Next.js and other JavaScript frameworks.

#expressjs#cookies#authentication
Stars4.1k
Forks255
Last commit4 months ago
2FAuth
2FAuthPHP

A self-hosted web app to manage your Two-Factor Authentication (2FA) accounts and generate security codes.

#totp#authentication#otp-generator
Stars4.1k
Forks296
Last commit1 month ago
IVRE
IVREPython

A self-hosted network reconnaissance framework for building alternatives to Shodan, ZoomEye, Censys, and GreyNoise.

#nmap-results-analyse#nmap#passive-dns
Stars4.1k
Forks698
Last commit23 days ago
sanitize-html
sanitize-htmlJavaScript

A fast HTML sanitizer that cleans user-submitted HTML while preserving whitelisted elements and attributes.

#user-input#web-security#html-sanitization
Stars4.1k
Forks369
Last commit6 months ago
ring
ringAssembly

A Rust cryptography library derived from BoringSSL, designed as an experimental alternative to OpenSSL.

#experimental#security#side-channel-mitigation
Stars4.1k
Forks800
Last commit1 month ago
Dockerfile best practices
Dockerfile best practicesDockerfile

A production-ready Dockerfile template with security-focused best practices for building reliable container images.

#container-security#containerization#devops
Stars4.1k
Forks154
Last commit5 years ago
NsJail
NsJailC++

A lightweight Linux process isolation tool using namespaces, cgroups, rlimits, and seccomp-bpf syscall filters for enhanced security.

#container-security#linux-namespaces#resource-limits
Stars4.1k
Forks359
Last commit1 day ago
django-guardian
django-guardianPython

Adds per-object permissions to Django's authorization system, enabling fine-grained access control.

#authentication#authorization#security
Stars3.9k
Forks594
Last commit1 day ago
Stegcloak
StegcloakJavaScript

A pure JavaScript steganography module that hides secrets inside text using invisible unicode characters, secured with passwords and encryption.

#covert-communication#functional-programming#aes-256
Stars3.9k
Forks248
Last commit1 year ago
PHP Encryption
PHP EncryptionPHP

A secure and easy-to-use PHP library for encrypting data with keys or passwords.

#library#data-protection#file-encryption
Stars3.9k
Forks314
Last commit2 years ago
Fuzzing-101
Fuzzing-101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

#fuzzer#fuzzilli#fuzzing
Stars3.8k
Forks422
Last commit2 months ago
Rizin
RizinC

A reverse engineering framework and command-line toolset for binary analysis, disassembly, debugging, and forensic tasks.

#command-line-tools#multi-architecture#scriptable
Stars3.8k
Forks599
Last commit1 day ago
node-oidc-provider
node-oidc-providerJavaScript

OpenID Certified OAuth 2.0 Authorization Server implementation for Node.js with extensive spec support.

#authorization-server#openid#openid-provider
Stars3.8k
Forks794
Last commit3 days ago
vulscan
vulscanLua

An Nmap NSE script that transforms nmap into a vulnerability scanner using offline vulnerability databases.

#vulnerability-assessment#vulnerability#nmap
Stars3.8k
Forks692
Last commit6 months ago
scans
scansJavaScript

An open-source Cloud Security Posture Management (CSPM) tool that scans AWS, Azure, GCP, Oracle, and GitHub for security misconfigurations.

#aws-security#compliance-auditing#infrastructure-security
Stars3.8k
Forks750
Last commit1 month ago
Coraza
CorazaGo

An open-source, enterprise-grade Web Application Firewall library written in Go, compatible with ModSecurity SecLang rulesets.

#reverse-proxy#waf#owasp
Stars3.8k
Forks352
Last commit2 days ago
Figaro
FigaroRuby

Simple, Heroku-friendly Rails app configuration using ENV and a single YAML file.

#rails#environment-variables#yaml
Stars3.7k
Forks278
Last commit1 year ago
sozu
sozuRust

A lightweight, fast, always-up HTTP reverse proxy built in Rust, configurable at runtime without reloading.

#http-proxy#reverse-proxy#http-server
Stars3.7k
Forks213
Last commit5 days ago
SWAG (Secure Web Application Gateway)
SWAG (Secure Web Application Gateway)Dockerfile

A Docker container providing a secure Nginx web server and reverse proxy with automated SSL certificates and fail2ban protection.

#hacktoberfest#reverse-proxy#web-server
Stars3.7k
Forks276
Last commit
bluemonday
bluemondayGo

A fast, configurable HTML sanitizer for Go that scrubs user-generated content of XSS attacks using an allowlist policy.

#sanitization#owasp#web-security
Stars3.7k
Forks195
Last commit1 year ago
JWT
JWTRuby

A Ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard for secure token encoding and decoding.

#jwt-token#oauth#authentication
Stars3.7k
Forks376
Last commit25 days ago
Chainsaw
ChainsawRust

A fast, standalone tool for rapid threat hunting and forensic analysis of Windows event logs and other forensic artefacts.

#digital-forensics#sigma-rules#forensic-timeline
Stars3.6k
Forks303
Last commit2 days ago
rage
rageRust

A Rust implementation of the age file encryption tool, offering simple, secure encryption with small explicit keys and UNIX-style composability.

#secure-by-default#unix-philosophy#curve25519
Stars3.6k
Forks160
Last commit7 days ago
emba
embaShell

An open-source firmware security analyzer for embedded Linux devices, performing extraction, static/dynamic analysis, SBOM generation, and vulnerability reporting.

#iot#sbom#embedded-systems
Stars3.6k
Forks318
Last commit3 days ago
oathkeeper
oathkeeperGo

A cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates HTTP requests.

#api-gateway#hacktoberfest#reverse-proxy
Stars3.6k
Forks415
Last commit1 month ago
rate-limiter-flexible
rate-limiter-flexibleJavaScript

Atomic and non-atomic counters and rate limiting tools for Node.js, Deno, and browsers to protect from DoS and brute force attacks.

#throttle#dos-protection#redis
Stars3.6k
Forks195
Last commit2 months ago
Bouncer
BouncerPHP

An elegant, framework-agnostic package for managing roles and abilities in Laravel using Eloquent models.

#eloquent#auth#laravel
Stars3.6k
Forks335
Last commit5 months ago
PreviousPage 7 of 36Next

Related Tags

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a projectStar on GitHub
2 days ago
#Authentication254
#Cryptography194
#Docker126
#Go122
#Encryption115
#Python104
#Security Tools101
#Devops99
#Authorization96
#Golang95
#Rust89
#Devsecops86