#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
bitwarden/clientsBitwarden client apps (web, browser extension, desktop, and cli).
spiffe/spireWorkload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…
praetorian-inc/brutusFast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…
zitadel/zitadelOpen-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenant access control for developers…
blue0x1/nimrmNative Nim WinRM shell with NTLM, Kerberos, file transfer, in-memory helpers, and AD/OPSEC reporting
owasp/cheatsheetseriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
goauthentik/authentikProvides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication,…
freeradius/freeradius-serverHigh-performance multi-protocol AAA server for RADIUS, DHCPv4/v6, DNS, TACACS+, and VMPS, centralizing network authentication, authorization, and…
loadingalias/rscryptoRust crypto w/ zero default deps: BLAKE3, Ed25519/X25519, hashes, MACs, KDFs, AEADs, and checksums w/ full SIMD/ASM acceleration
tailscale/tailscaleThe easiest, most secure way to use WireGuard and 2FA.
vicanso/pingapA reverse proxy like nginx, built on pingora, simple and efficient.
domainaware/parsedmarcA Python package and CLI for parsing aggregate and forensic DMARC reports
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
pyca/cryptographycryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
keepassxreboot/keepassxcSecure offline storage of credentials with encrypted vaults, password generator, TOTP, YubiKey/OnlyKey support, browser integration, and CLI.
