#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
bastillion-io/bastillionBastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.
authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
signalapp/libsignalHome to the Signal Protocol as well as other cryptographic primitives which make Signal possible.
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
softethervpn/softethervpnCross-platform multi-protocol VPN server and client supporting SSL-VPN, WireGuard, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP with AES-256…
owasp/owasp-top-10-neocloud-and-ai-data-center-security-risksOWASP framework cataloging the top 10 security risks in neocloud and AI data center infrastructure, covering hardware, networking, isolation,…
intuitem/ciso-assistant-communityGRC platform for risk management, compliance, and audit with 200+ frameworks, automatic control mapping, vulnerability management, and incident…
jatin-dot-py/instagram-private-bypassThis repository discloses a server-side authorization bypass in Instagram, which allowed unauthenticated access to private timelines; it seems likely…
zitadel/zitadelOpen-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenant access control for developers…
beemdevelopment/aegisA free, secure and open source app for Android to manage your 2-step verification tokens.
facebookincubator/bpfjailereBPF LSM based Mandatory Access Control and jailer
foxboron/atteztAn open-source TPM device-attest-01 CA server
mafifrizi/tanukiTactical Identity Operator for Linux & Hybrid Active Directory
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
rocketchat/rocket.chatThe Secure CommsOS™ for mission-critical operations
cartography-cncf/cartographyPulls infrastructure assets and their relationships from 30+ cloud, identity, and SaaS platforms into a Neo4j graph for security queries and…
bert-janp/entratraceDefensive research tool that documents observable API endpoints and user agents of offensive tooling targeting Microsoft Entra ID, supporting…
cloudflare/cloudflaredClient for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…
