head to head · open source
Certipy vs Tongsuo
Certipy has 3,715 GitHub stars, 490 forks, 25 open issues and last shipped 3 months ago. Tongsuo has 1,552 stars, 265 forks, 160 open issues and last shipped 10 days ago. Certipy leads on adoption by 139% (3,715 vs 1,552 stars). Certipy is written in Python under MIT; Tongsuo is written in C under Apache-2.0. Certipy has attracted 13% as many forks as stars, Tongsuo 17%. Tongsuo was the more recently maintained of the two, and both are self-hostable with no licence fee. The two share 1 topic tag (pki), so they are genuine substitutes rather than adjacent tools.
Two open source projects, one decision. Both are free and self-hostable — the differences are community size, license terms, language stack and release pace.
← all 20902 open source comparisons
Side by side
| Certipy | Tongsuo | |
|---|---|---|
| GitHub stars | ★ 3.7K | ★ 1.6K |
| License | MIT | Apache-2.0 |
| Written in | Python | C |
| Last push | 2026-07-30 | 2026-10-26 |
| Forks | ⑂ 490 | ⑂ 265 |
| Self-hosting | Yes | Yes |
| Data ownership | Your server | Your server |
pick Certipy if
- You weight community size — 3.7K stars and counting
- You want the MIT license terms
- Your stack matches Python
- You value the larger contributor base for long-term maintenance
pick Tongsuo if
- You want the Tongsuo feature set and don't need the biggest community
- You prefer the Apache-2.0 license terms
- Your stack matches C
- You evaluated both and Tongsuo fits your workflow better
About Certipy
Certipy AD CS Attack & Enumeration Toolkit Certipy is a powerful offensive and defensive toolkit for enumerating and abusing Active Directory Certificate Services (AD CS). It helps red teamers, penetration testers, and defenders assess AD CS misconfigurations including full support for identifying and exploiting all known ESC1 ESC17 attack paths. [!WARNING] Use only in environments where you have explicit authorization. Unauthorized use may be illegal. 🔍 Features 🔎 Discover Certificate Authorities and Templates 🚩 Identify misconfigurations 🔐 Request and forge certificates 🎭 Perform authentication using…
read the full Certipy overview →
About Tongsuo
OpenAtom 铜锁/Tongsuo ========================= [![tongsuo logo]][www.tongsuo.net] [![github actions ci badge]][github actions ci] ![GitHub Release][github release] [![GitHub Downloads (all assets, all releases)][github downloads]]( 铜锁/Tongsuo是一个提供现代密码学算法和安全通信协议的开源基础密码库，为存储、网络、密钥管理、隐私计算等诸多业务场景提供底层的密码学基础能力，实现数据在传输、使用、存储等过程中的私密性、完整性和可认证性，为数据生命周期中的隐私和安全提供保护能力。 铜锁获得了国家密码管理局商用密码检测中心颁发的商用密码产品认证证书，助力用户在国密改造、密评、等保等过程中，更加严谨地满足我国商用密码技术合规的要求。可在此处下载资质原始文件。 特性 ========================= 铜锁提供如下主要的功能特性： 技术合规能力 符合 GM/T 0028《密码模块安全技术要求》的"软件密码模块安全一级"资质 符合 GM/T 0005 2021《随机性检测规范》 零知识证明（ZKP） Bulletproofs range Bulletproofs R1CS 密码学算法…
read the full Tongsuo overview →
More in Security & Privacy
Related comparisons
More Data Security & Privacy projects
Compare either of these against the rest of the Data Security & Privacy field.
Frequently asked questions
Is Certipy or Tongsuo more popular?
Certipy has 3,715 GitHub stars and Tongsuo has 1,552. Certipy has the larger community by that measure.
Are Certipy and Tongsuo free?
Both are open source. Certipy is licensed under MIT and Tongsuo under Apache-2.0. Neither carries a licence fee.
What is the difference between Certipy and Tongsuo?
Certipy is written in Python and Tongsuo in C. The practical differences are community size, licence terms, language stack and release cadence — all compared in the table above.
Which should I choose, Certipy or Tongsuo?
Choose Certipy if you want the larger community (3,715 stars) or its MIT licence terms. Choose Tongsuo if its feature set, stack or Apache-2.0 licence fits better. Both are self-hostable.