#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
ory/hydraOpenID Certified OAuth 2.0 and OpenID Connect provider for token issuance, client management, JWKS, and login/consent flow orchestration via headless…
ovh/the-bastionAuthentication, authorization, traceability and auditability for SSH accesses.
zhengxr930/apex_officialDefender framework for LLM agent security that compiles task contracts, validates capability manifests, and checks effects via PLANT/WRAP proof…
ory/oathkeeperA cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s)…
strongswan/strongswanstrongSwan - IPsec-based VPN
quarkslab/android-hardware-attestation-demoAn Android HW Attestation demo
vighnesh91/cloudgarrisonOffline browser-based multi-cloud posture workbench that simulates attack paths, audits IaC compliance, analyzes identity graphs, and maps audit logs…
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
openvpn/openvpnSecure tunneling daemon implementing VPN protocols with TLS encryption, certificate authentication, and routing/firewall configuration for private…
nolabs-ai/nonoagent runtime security - zero trust, zero setup, zero latency agent sandboxing
philippeabraxas-jpg/tbp-networkTheory and implemantation of the TBP protocol to secure networked AI in small to open web networks
horizon3ai/vcenter_saml_loginA tool to extract the IdP cert from vCenter backups and log in as Administrator
opfour/op4Terminal-based encrypted messenger with post-quantum cryptography, Double Ratchet protocol, and Tor anonymity. Features duress passphrase, deniable…
matijamiki/ranwhatFlight recorder and secret scanner for AI coding agents. Reads what Claude Code, Codex, Gemini CLI and 17 more ran, and flags risky actions and…
ustayready/thunderstormA collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a…
zentinelproxy/zentinelA security-first reverse proxy built to guard the free web.
better-auth/better-authThe most comprehensive authentication framework
cosai-oasis/ws4-secure-design-agentic-systemsRepository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems
