Beveiliging & identiteit

ZITADEL - Identity infrastructure, simplified for you.

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

Open Source Identity and Access Management For Modern Applications and Services

An end-to-end encrypted photo-sharing platform (alternative to Google Photos, Apple Photos).

Fast, instant realtime GraphQL APIs on Postgres with fine grained access control, also trigger webhooks on database events.

Single Sign-On for Your Self-Hosted Universe

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Open-source auth gateway connecting 1500+ SaaS providers to AI agents through SDK, CLI, MCP, HTTP, and OpenAPI.

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

Scapy: the Python-based interactive packet manipulation program & library.

Identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your self-hosted websites to public Internet.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

Light LDAP implementation

Scan the devices connected to your WIFI / LAN and alert you the connection of unknown devices. It also warns if a "always connected" device disconnects. In addition, it is possible to check web services for availability. For this purpose HTTP status codes and the response time of the service are evaluated.

Spinifex – Open source AWS-compatible platform for secure edge deployments. Run EC2, VPC, S3, and EBS-like services on bare metal with full control. Built for environments where running in the cloud isn’t an option. Whether you’re deploying to edge sites, private data-centers, or operating in low-connectivity or highly contested environments.

The most comprehensive authentication framework

Secure remote access gateway that supports the WireGuard protocol. It offers a Web GUI, 1-line install script, multi-factor auth (MFA), and SSO.

End-to-end encrypted password manager with a built-in email alias generator and server.

Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).

EMBA - The firmware security analyzer

Backend for your next SaaS and Mobile app in one file.

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

The slightly more awesome standard unix password manager for teams

This repository contains the scanner component for Greenbone Community Edition.

OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

Tailscale Sidecar Configurations for Docker

Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

The easiest, most secure way to use WireGuard and 2FA.

Run server applications securely and with built-in privacy features. It acts as a secure gateway to your application, as well as a server manager.

Kanidm: A simple, secure, and fast identity management platform

Fully-featured, zero trust, full mesh overlay network. Includes a 2FA support out of the box, clients for all major desktop/mobile OS'es.

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

Authentication for the Web.