Open source access-control projects
Every project in the registry tagged access-control, ranked by real GitHub adoption.
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Build scalable authorization in minutes, not months
Secure, policy-based access control for modern applications
Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Git
403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evi
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser e
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
A modern, feature-rich, databaseless flat-file wiki platform built with Go.
Related tags
Frequently asked questions
How many open source access-control projects are there?
This registry tracks 9 projects tagged access-control, with 41,829 GitHub stars between them. The most-adopted is casbin at 20,476 stars.
Are these access-control projects free to use?
Yes — 9 of the 9 carry an explicit open-source licence across 4 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which access-control project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these access-control projects still maintained?
9 of the 9 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.