#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
warp-tech/warpgateFully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software
chithi-dev/chithiThe next generation encrypted file sharing project
nearai/ironclawSecure, private AI agent operating system with local encrypted storage, OAuth/SSO authentication, policy-based access control, and extensible…
accuknox/agentzZero-trust agentic AI platform. Supports SaaS and OnPrem (airgapped) deployments.
the-infra-company/kcatcherCatch what's lurking in your Kafka clusters.
bitwarden/clientsBitwarden client apps (web, browser extension, desktop, and cli).
sushegaad/claude-skills-governance-risk-and-complianceInstallable Claude Skills providing expert-level compliance guidance for 30+ frameworks including ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF,…
karaaslanlabs/kl-security-keyExperimental RP2040 FIDO2/WebAuthn authenticator with packed attestation and documented Windows/Entra interoperability
nihal799/zttpZero-trust SSH bastion proxy with Vault-backed key management, RBAC policy enforcement, full session recording, and admin TUI for auditable access to…
renich/genclaveCentralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH…
dirkjanm/roadtoolsA collection of Azure AD/Entra tools for offensive and defensive security purposes
infisical/agent-vaultA HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
eugexo/security-baseline-ubuntuProduction-grade Security Baseline & Hardening Guide for Ubuntu 24.04/26.04 LTS. Kernel isolation, Emergency Panic Button, custom AppArmor/Firejail…
secure-system/insularIsolate your big brother apps https://secure-system.gitlab.io/Insular/
ylianst/meshcentralA complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on…
bp2008/dahualoginbypassChrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.
openwisp/openwisp-controllerNetwork and WiFi controller: provisioning, configuration management and updates, (pull via openwisp-config or push via SSH), x509 PKI management and…
ory/hydraOpenID Certified OAuth 2.0 and OpenID Connect provider for token issuance, client management, JWKS, and login/consent flow orchestration via headless…
