[opensourcedex]

best-of ranking · updated nightly

Best Open Source Application Security Tools

Ranked by GitHub stars — actual adoption, not editorial taste. All 10 are free, open source and self-hostable; license and last activity on every entry.

  1. 1
    Infisical ★ 29K

    Secure secret management for modern development teams

    NOASSERTION TypeScript pushed 2026-09-17 details →
  2. 2
    Unleash ★ 14K

    Feature flags for rapid, risk-free software deployment

    AGPL-3.0 TypeScript pushed 2026-09-17 details →
  3. 3
    GrowthBook ★ 8.4K

    Open-source A/B testing and feature flagging platform

    NOASSERTION TypeScript pushed 2026-09-17 details →
  4. 4
    Cap ★ 7.8K

    Privacy-first CAPTCHA alternative with proof-of-work

    NOASSERTION JavaScript pushed 2026-09-16 details →
  5. 5
    Flagsmith ★ 6.6K

    Feature flags and remote config for rapid deployment

    BSD-3-Clause Python pushed 2026-09-17 details →
  6. 6
    Flipt ★ 4.9K

    Git-native feature management for developers

    NOASSERTION Go pushed 2026-09-17 details →
  7. 7
    Cerbos ★ 4.6K

    Secure, policy-based access control for modern applications

    Apache-2.0 Go pushed 2026-09-17 details →
  8. 8
    Opengrep ★ 3.1K

    Open-source code security engine for developers

    LGPL-2.1 OCaml pushed 2026-09-17 details →
  9. 9
    ALTCHA ★ 2.8K

    Next-Gen CAPTCHA and Spam Protection, GDPR compliant

    MIT TypeScript pushed 2026-09-11 details →
  10. 10
    mCaptcha ★ 2.5K

    Privacy-first proof-of-work CAPTCHA without user friction

    AGPL-3.0 Rust pushed 2025-10-07 details →
method stars desc · snapshot from github api refresh nightly related Identity & Access Management (IAM), Network Security, Data Security & Privacy, Threat Detection & Response, Secrets Management, Fraud Prevention

Related best-of lists

best Identity & Access Management (IAM) →best Network Security →best Data Security & Privacy →best Threat Detection & Response →best Secrets Management →best Fraud Prevention →

last updated nightly · ranking method: github stars, live-tracked

Looking for a replacement for one specific commercial product? Browse alternatives by tool →

Frequently asked questions

What is the best open source Application Security tool in 2026?

Infisical leads the ranking with 29,296 GitHub stars, ahead of Unleash. Rankings use live GitHub star counts, refreshed nightly.

How is this list of Application Security tools ranked?

By GitHub stars — a proxy for adoption and community size. Each entry also shows its licence, primary language and last commit date, so you can judge maintenance activity rather than trusting the ranking alone.

Are the best Application Security tools free?

Every project on this list is open source and free to self-host. Some also offer paid managed hosting, but the software itself carries no licence fee.