Zero Trust
Showing 23 of 23 projects
Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.
An identity-aware access proxy that provides secure connectivity, authentication, and audit for SSH, Kubernetes, databases, and web apps.
A command-line client for Cloudflare Tunnel, enabling secure proxying of traffic from Cloudflare's network to your origins without opening firewall ports.
An immutable database with built-in cryptographic proof and verification, supporting SQL, Key-Value, and Document models.
A zero-trust identity and context-aware reverse proxy for secure, clientless access to internal web apps without a VPN.
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications at scale.
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications at scale.
An open-source zero-trust networking platform that makes network services invisible to unauthorized users with cryptographic identity and end-to-end encryption.
A commercial remote browser isolation (RBI) platform that streams a full modern browser to any client with low latency and 60 FPS.
A cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates HTTP requests.
Enterprise-grade open-source VPN solution with multi-factor authentication for WireGuard connections.
A toolchain for establishing trust between software systems across diverse hosting platforms using SPIFFE IDs and SVIDs.
An AI-native microservices platform for building distributed applications with built-in auth, routing, and microfrontend support.
A curated list of resources covering Identity and Access Management (IAM) for cloud platforms, including authentication, authorization, and security.
A curated list of resources covering Identity and Access Management (IAM) for cloud platforms, including authentication, authorization, and security.
Open-source supply chain security scanner that automatically detects vulnerabilities like Log4Shell in dependencies and notifies via GitHub pull requests.
A BeyondCorp-inspired HTTPS/SSO access proxy for securing internal services during a zero-trust transition, eliminating VPN reliance.
A cloud-native Identity Aware Proxy and Access Control Decision service for authenticating, authorizing, and transforming HTTP requests.
A cross-platform, memory-safe desktop application for managing passwords, 2FA codes, and SSH keys with local encryption.
Integrates SPIFFE SVID authentication with Hashicorp Vault to enable secretless authentication and keyless operations.
A GitHub Action that integrates ZeroTier SDN into CI/CD workflows by temporarily joining runners to private virtual networks.
Tutorials demonstrating integration scenarios between Cilium and SPIRE for workload identity and network security in Kubernetes.
Extracts network dependencies from application configs and generates Kubernetes NetworkPolicies for security and CI/CD.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.