Open source security projects

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Advanced vulnerability detection and management platform

The official NGINX Open Source repository.

Set up a personal VPN in the cloud

Cross-platform, secure password manager

Simple and flexible tool for managing secrets

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

open-source agentic AI data assistant for the next generation of AI + Data products.

Zero Trust VPN solutions for secure business networking

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Firefox user.js for optimal privacy and security. Your favorite browser, but better.

Fast, flexible VPN replacement with zero-trust security

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Unified Policy as Code

Gather and update all available and newest CVEs with their PoC.

Secure email, calendar and contacts with end-to-end encryption

WiFi security auditing tools suite

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata comm

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10

Secure password management for teams

Self-hosted cloud platform with automated security

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Cameradar hacks its way into RTSP videosurveillance cameras

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-ti

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

A WiFi security auditing software

secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.

Secure internet sharing made simple.

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

Knock Subdomain Scan

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Open source security automation platform for builders

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.

Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.

:lock: Memorable site for testing clients against bad SSL configs.

Pentest Report Generator

Single Sign-On for Your Self-Hosted Universe

Next-Gen CAPTCHA and Spam Protection, GDPR compliant

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious

Patch-level verification for Bundler

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS b

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

HardeningKitty and Windows Hardening Settings

ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0)

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

An NFC research toolkit application for Android

A cryptographically verifiable code review system for the cargo (Rust) package manager.

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

Get audit-ready for SOC 2, ISO 27001, HIPAA, and GDPR

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access

HardeningKitty - Checks and hardens your Windows configuration

safely install npm packages by auditing them pre-install stage

🧵 CLI tool for directly patching container images!

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

grep rough audit - source code auditing tool

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and