[opensourcedex]

category

Open Source Security & Privacy Tools

Security tooling you can audit — because it is the point

projects 56 combined stars ★ 659K refresh nightly
You cannot fully trust a security tool you cannot inspect. That is the core argument for this entire category: password managers, VPN servers, IAM systems, and secrets vaults whose source code is open to the same scrutiny they enable. The projects below range from consumer-grade (self-hosted password vaults, encrypted note stores) to enterprise-grade (SSO providers, compliance automation). The self-hosted option matters doubly here: it removes the third-party breach surface of a vendor's cloud entirely. Licensing deserves extra attention in this category — some security products ship 'source-available' code with restrictive terms. Every card lists the actual SPDX license so you can tell the difference.

All Security & Privacy tools

Puter ★ 44K

A full desktop environment that runs in your browser

rank001 licenseAGPL-3.0 written inTypeScript typeData Security & Privacy
Mattermost ★ 39K

Secure collaboration platform for mission-critical work

rank002 licenseNOASSERTION written inTypeScript typeData Security & Privacy
Keycloak ★ 37K

Secure authentication and access control made simple

rank003 licenseApache-2.0 written inJava typeIdentity & Access Management (IAM)
Tailscale ★ 37K

Zero-config VPN with WireGuard for secure networking

rank004 licenseBSD-3-Clause written inGo typeNetwork Security
HashiCorp Vault ★ 36K

Secure storage and access control for secrets and sensitive data

rank005 licenseNOASSERTION written inGo typeSecrets Management
JumpServer ★ 32K

Secure access management for modern IT infrastructure

rank006 licenseGPL-3.0 written inPython typeIdentity & Access Management (IAM)
ProjectDiscovery ★ 31K

Advanced vulnerability detection and management platform

rank007 licenseMIT written inGo typeThreat Detection & Response
Better Auth ★ 30K

Framework-agnostic authentication for TypeScript applications

rank008 licenseMIT written inTypeScript typeIdentity & Access Management (IAM)
Signal ★ 29K

Private messaging with end-to-end encryption

rank009 licenseAGPL-3.0 written inKotlin typeData Security & Privacy
Netbird ★ 29K

Zero Trust networking with WireGuard-based secure connectivity

rank010 licenseNOASSERTION written inGo typeNetwork Security
Infisical ★ 29K

Secure secret management for modern development teams

rank011 licenseNOASSERTION written inTypeScript typeApplication Security
Ente ★ 29K

Secure, private photo storage and sharing solution

rank012 licenseAGPL-3.0 written inDart typeData Security & Privacy
Authentik ★ 26K

Take control of your identity with a secure, flexible solution

rank013 licenseNOASSERTION written inPython typeIdentity & Access Management (IAM)
Pangolin ★ 23K

Zero trust network access that's better than VPN

rank014 licenseNOASSERTION written inTypeScript typeNetwork Security
SuperTokens ★ 15K

Secure, customizable authentication for your applications

rank015 licenseNOASSERTION written inJava typeIdentity & Access Management (IAM)
Zitadel ★ 15K

Secure, customizable identity infrastructure for developers

rank016 licenseAGPL-3.0 written inGo typeIdentity & Access Management (IAM)
Logto ★ 15K

Secure, seamless authentication for modern applications

rank017 licenseMPL-2.0 written inTypeScript typeIdentity & Access Management (IAM)
Ory ★ 14K

A certified and battle-tested identity solution

rank018 licenseApache-2.0 written inGo typeIdentity & Access Management (IAM)
Unleash ★ 14K

Feature flags for rapid, risk-free software deployment

rank019 licenseAGPL-3.0 written inTypeScript typeApplication Security
Element ★ 13K

Secure, decentralized messaging for teams and individuals

rank020 licenseAGPL-3.0 written inTypeScript typeData Security & Privacy
Fluxer ★ 10K

Open source messaging with privacy and community focus

rank021 licenseAGPL-3.0 written inTypeScript typeData Security & Privacy
FireZone ★ 9.1K

Fast, flexible VPN replacement with zero-trust security

rank022 licenseApache-2.0 written inElixir typeNetwork Security
GrowthBook ★ 8.4K

Open-source A/B testing and feature flagging platform

rank023 licenseNOASSERTION written inTypeScript typeApplication Security
Tuta ★ 7.9K

Secure email, calendar and contacts with end-to-end encryption

rank024 licenseGPL-3.0 written inTypeScript typeData Security & Privacy
Cap ★ 7.8K

Privacy-first CAPTCHA alternative with proof-of-work

rank025 licenseNOASSERTION written inJavaScript typeApplication Security
Hexclave ★ 6.9K

Modular auth, payments, emails, and analytics for your product

rank026 licenseNOASSERTION written inTypeScript typeIdentity & Access Management (IAM)
Flagsmith ★ 6.6K

Feature flags and remote config for rapid deployment

rank027 licenseBSD-3-Clause written inPython typeApplication Security
Permify ★ 6.0K

Build scalable authorization in minutes, not months

rank028 licenseAGPL-3.0 written inGo typeIdentity & Access Management (IAM)
UnKey ★ 5.4K

Secure, scalable API key management for developers

rank029 licenseNOASSERTION written inGo typeSecrets Management
Flipt ★ 4.9K

Git-native feature management for developers

rank030 licenseNOASSERTION written inGo typeApplication Security
Cerbos ★ 4.6K

Secure, policy-based access control for modern applications

rank031 licenseApache-2.0 written inGo typeApplication Security
Zen ★ 4.2K

System-wide ad-blocking and privacy protection, no extensions needed

rank032 licenseMIT written inGo typeData Security & Privacy
Cinny ★ 3.9K

Secure and elegant Matrix client for seamless conversations

rank033 licenseAGPL-3.0 written inTypeScript typeData Security & Privacy
Tracecat ★ 3.8K

Open source security automation platform for builders

rank034 licenseAGPL-3.0 written inPython typeThreat Detection & Response
Stoat ★ 3.3K

Group chat for friends and communities, without the baggage

rank035 licenseNOASSERTION written inRust typeData Security & Privacy
Opengrep ★ 3.1K

Open-source code security engine for developers

rank036 licenseLGPL-2.1 written inOCaml typeApplication Security
Defguard ★ 2.8K

Zero-Trust VPN with built-in 2FA/MFA and SSO capabilities

rank037 licenseNOASSERTION written inRust typeNetwork Security
ALTCHA ★ 2.8K

Next-Gen CAPTCHA and Spam Protection, GDPR compliant

rank038 licenseMIT written inTypeScript typeApplication Security
Quiet ★ 2.6K

Serverless team chat over Tor, no phone number needed

rank039 licenseGPL-3.0 written inC typeData Security & Privacy
Wire ★ 2.5K

Secure collaboration platform with end-to-end encryption

rank040 licenseGPL-3.0 written in— typeData Security & Privacy
Peergos ★ 2.5K

Secure, private, and decentralized file storage

rank041 licenseAGPL-3.0 written inJava typeData Security & Privacy
mCaptcha ★ 2.5K

Privacy-first proof-of-work CAPTCHA without user friction

rank042 licenseAGPL-3.0 written inRust typeApplication Security
Authgear ★ 2.1K

Managed identity and access management for any app

rank043 licenseApache-2.0 written inGo typeIdentity & Access Management (IAM)
FeatBit ★ 1.9K

Open-source feature flag management for seamless deployments

rank044 licenseMIT written inTypeScript typeApplication Security
Tirreno ★ 1.5K

Security framework that protects from within your product

rank045 licenseAGPL-3.0 written inPHP typeFraud Prevention
Phase ★ 923

Secure, deploy, and manage application secrets effortlessly

rank046 licenseNOASSERTION written inTypeScript typeSecrets Management
Featurevisor ★ 808

Feature management with GitOps for developers

rank047 licenseMIT written inTypeScript typeApplication Security
Keyshade ★ 768

Secure secret management with public key encryption

rank048 licenseMPL-2.0 written inTypeScript typeSecrets Management
WireGuard ★ 717

Fast, minimal VPN built on modern cryptography

rank049 licenseGPL-2.0 written inC typeNetwork Security
Marble ★ 601

Real-time fraud detection and AML compliance engine

rank050 licenseNOASSERTION written inHTML typeFraud Prevention
Procaptcha ★ 300

Decentralized CAPTCHA for enhanced web security

rank051 licenseApache-2.0 written inTypeScript typeApplication Security
Private Captcha ★ 195

GDPR-compliant bot protection without user friction

rank052 licenseNOASSERTION written inGo typeApplication Security
Werbot ★ 170

Secure, scalable server access management for DevOps

rank053 licenseNOASSERTION written inGo typeNetwork Security
Abby ★ 166

Type-safe feature flags and remote config for developers

rank054 licenseAGPL-3.0 written inTypeScript typeApplication Security
SAMA ★ 158

Secure, scalable chat server for modern applications

rank055 licenseGPL-3.0 written inJavaScript typeData Security & Privacy
Friendly Captcha ★ 33

Invisible bot protection that respects user privacy

rank056 licenseMPL-2.0 written inTypeScript typeApplication Security

Frequently asked questions

How many open source Security & Privacy tools are there?

This registry tracks 56 open source Security & Privacy projects, with 658,755 combined GitHub stars. The list is ranked by stars and refreshed nightly.

What is the most popular open source Security & Privacy project?

Puter leads this category with 43,557 GitHub stars, followed by Mattermost.

Are these Security & Privacy tools free?

Yes — every project listed here is open source. Some also offer paid hosted versions alongside the free self-hosted option; the licence for each project is shown on its card.