API Security

keycloak/keycloak

Open Source Identity and Access Management For Modern Applications and Services

mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

symfony/symfony

The Symfony PHP framework

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

shieldfy/api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

cilium/cilium

eBPF-based Networking, Security, and Observability

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

apache/brpc

Industrial-grade C++ RPC framework for building high-performance distributed systems, supporting multiple protocols (HTTP, gRPC, Redis, Thrift) with…

chaitin/safeline

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

apache/casbin

Authorization library enforcing ACL, RBAC, ABAC, and custom access-control models with RESTful matching and policy management APIs for applications…

gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

ffuf/ffuf

Fast web fuzzer written in Go

maurosoria/dirsearch

Web path scanner

semgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

cloudflare/cloudflared

Client for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…