[opensourcedex]

category

Open Source Application Security Tools

Open source application security tools

projects 16 combined stars ★ 87K refresh nightly
Application Security is one of the most active slices of the open source world — the 16 projects below are ranked by GitHub stars, which makes this page roughly a community-voted shortlist rather than a vendor-curated catalogue. Every card shows the license and the last-commit date, so you can filter out the two failure modes of free software in one glance: restrictive licensing that blocks your use case, and abandonment that leaves you maintaining a fork. When two projects look comparable, prefer the one with more recent activity and the more permissive license (MIT/Apache-2.0 over AGPL) unless copyleft specifically serves your goals. Hover into any project for its full README — the documentation quality is usually the honest tell of engineering quality.

All Application Security tools

Infisical ★ 29K

Secure secret management for modern development teams

rank001 licenseNOASSERTION written inTypeScript typeApplication Security
Unleash ★ 14K

Feature flags for rapid, risk-free software deployment

rank002 licenseAGPL-3.0 written inTypeScript typeApplication Security
GrowthBook ★ 8.4K

Open-source A/B testing and feature flagging platform

rank003 licenseNOASSERTION written inTypeScript typeApplication Security
Cap ★ 7.8K

Privacy-first CAPTCHA alternative with proof-of-work

rank004 licenseNOASSERTION written inJavaScript typeApplication Security
Flagsmith ★ 6.6K

Feature flags and remote config for rapid deployment

rank005 licenseBSD-3-Clause written inPython typeApplication Security
Flipt ★ 4.9K

Git-native feature management for developers

rank006 licenseNOASSERTION written inGo typeApplication Security
Cerbos ★ 4.6K

Secure, policy-based access control for modern applications

rank007 licenseApache-2.0 written inGo typeApplication Security
Opengrep ★ 3.1K

Open-source code security engine for developers

rank008 licenseLGPL-2.1 written inOCaml typeApplication Security
ALTCHA ★ 2.8K

Next-Gen CAPTCHA and Spam Protection, GDPR compliant

rank009 licenseMIT written inTypeScript typeApplication Security
mCaptcha ★ 2.5K

Privacy-first proof-of-work CAPTCHA without user friction

rank010 licenseAGPL-3.0 written inRust typeApplication Security
FeatBit ★ 1.9K

Open-source feature flag management for seamless deployments

rank011 licenseMIT written inTypeScript typeApplication Security
Featurevisor ★ 808

Feature management with GitOps for developers

rank012 licenseMIT written inTypeScript typeApplication Security
Procaptcha ★ 300

Decentralized CAPTCHA for enhanced web security

rank013 licenseApache-2.0 written inTypeScript typeApplication Security
Private Captcha ★ 195

GDPR-compliant bot protection without user friction

rank014 licenseNOASSERTION written inGo typeApplication Security
Abby ★ 166

Type-safe feature flags and remote config for developers

rank015 licenseAGPL-3.0 written inTypeScript typeApplication Security
Friendly Captcha ★ 33

Invisible bot protection that respects user privacy

rank016 licenseMPL-2.0 written inTypeScript typeApplication Security

Frequently asked questions

How many open source Application Security tools are there?

This registry tracks 16 open source Application Security projects, with 87,068 combined GitHub stars. The list is ranked by stars and refreshed nightly.

What is the most popular open source Application Security project?

Infisical leads this category with 29,296 GitHub stars, followed by Unleash.

Are these Application Security tools free?

Yes — every project listed here is open source. Some also offer paid hosted versions alongside the free self-hosted option; the licence for each project is shown on its card.