Cloud Security

firezone/firezone

WireGuard-based zero-trust access platform providing secure, peer-to-peer remote access with granular policy controls, SSO authentication, and audit…

hwdsl2/setup-ipsec-vpn

Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux…

safedep/pmg

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

open-policy-agent/gatekeeper

Kubernetes policy engine with OPA-based admission control, mutation, and audit for enforcing security and compliance configurations.

fleetdm/fleet

Open-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…

google/gvisor

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

rtvkiz/minimal

Minimal CVE Hardened container image collection

kviklet/kviklet

Pull Request-like Review/Approval flow for database queries. For compliant but smooth Engineering access to production.

kyverno/kyverno

Enforce security and compliance on Kubernetes clusters via admission controls, resource mutation, background scans, and container image signature…

mindersec/minder

Software Supply Chain Security Platform

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

nvidia/nemoclaw

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

dnscontrol/dnscontrol

Infrastructure as code for DNS!

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

rocketchat/rocket.chat

The Secure CommsOS™ for mission-critical operations

mondoohq/cnspec

An open source, cloud-native security to protect everything from build to runtime