Identity & Access Management (IAM)

awesome-security-hardening

decalage2/awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

defensive-toolscontainer-securityconfiguration-auditing+6

6.5k3 months ago

cosign

sigstore/cosign

Code signing and transparency for containers and binaries

authentication-authorizationcontainer-securityencryption-decryption-tools+3

6.2k1 day ago

agent-governance-toolkit

microsoft/agent-governance-toolkit

Policy enforcement, zero-trust identity, execution sandboxing, and audit logging for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10 with…

identity-managementdevsecopseducation+2

5.9k1 day ago

ziti

openziti/ziti

Zero-trust networking platform that makes services invisible with cryptographic identity, policy-based access, and end-to-end encryption. Replaces…

authentication-authorizationcontainer-securityencryption-decryption-tools+6

4.3k15h 43m ago

boundary

hashicorp/boundary

Boundary enables identity-based access management for dynamic infrastructure.

authentication-authorizationcloud-infrastructure-securitynetwork-security+1

4.1k14 days ago

BloodHound

specterops/bloodhound

Six Degrees of Domain Admin

defensive-toolsprivilege-escalationreconnaissance+4

3.3k16h 21m ago

OpenSC

opensc/opensc

Open source smart card tools and middleware. PKCS#11/MiniDriver

encryption-decryption-toolscryptographyhardware-security+2

3.1k2 days ago

squid

squid-cache/squid

Squid Web Proxy Cache - Source Code

authentication-authorizationgeneral-purpose-utilitiesweb-proxies-interception+3

3.1k6 days ago

strongswan

strongswan/strongswan

strongSwan - IPsec-based VPN

authentication-authorizationgeneral-purpose-utilitiesencryption-decryption-tools+3

2.9k24 days ago

ROADtools

dirkjanm/roadtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

cloud-infrastructure-securityreconnaissanceinformation-gathering+5

2.7k15 days ago

ScubaGear

cisagov/scubagear

Automation to assess the state of your M365 tenant against CISA's baselines

defensive-toolsconfiguration-auditingcloud-security+3

2.6k10 days ago

BurpSuite-For-Pentester

ignitetechnologies/burpsuite-for-pentester

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…

authentication-authorizationweb-vulnerability-scannersweb-proxies-interception+7

2.6k5 months ago

freeradius-server

freeradius/freeradius-server

High-performance multi-protocol AAA server for RADIUS, DHCPv4/v6, DNS, TACACS+, and VMPS, centralizing network authentication, authorization, and…

authentication-authorizationnetwork-securityidentity-access-management+1

2.6k10h 1m ago

aws-iam-authenticator

kubernetes-sigs/aws-iam-authenticator

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

authentication-authorizationcloud-infrastructure-securitycloud-security+1

2.3k20 days ago

BadBlood

davidprowe/badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is…

penetration-testingidentity-access-managementeducation+1

2.3k3 years ago

cloudsplaining

salesforce/cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

cloud-infrastructure-securityvulnerability-analysisconfiguration-auditing+3

2.2k4 days ago

policy_sentry

salesforce/policy_sentry

Generates least-privilege AWS IAM policies based on resource ARNs and access levels, automating secure policy creation for cloud infrastructure.

cloud-infrastructure-securityconfiguration-auditingcloud-security+2

2.2k4 days ago

agent-vault

infisical/agent-vault

A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.

authentication-authorizationweb-proxies-interceptioncloud-security+3

2.1k17 days ago