#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
dbeaver/dbeaverFree universal database tool and SQL client
goauthentik/authentikProvides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication,…
bitwarden/clientsBitwarden client apps (web, browser extension, desktop, and cli).
cerbos/cerbosAuthorization engine for context-aware access control with YAML policies, RBAC/ABAC support, check/plan APIs, and GitOps-friendly deployment.
microsoft/agent-governance-toolkitPolicy enforcement, zero-trust identity, execution sandboxing, and audit logging for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10 with…
jumpserver/jumpserverJumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…
freerdp/freerdpFreeRDP is a free remote desktop protocol library and clients
infisical/infisicalInfisical is the open-source platform for secrets, certificates, and privileged access management.
moltis-org/moltisA secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord,…
salesforce/cloudsplainingCloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
onecli/onecliOpen-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
firezone/firezoneWireGuard-based zero-trust access platform providing secure, peer-to-peer remote access with granular policy controls, SSO authentication, and audit…
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
signalapp/libsignalHome to the Signal Protocol as well as other cryptographic primitives which make Signal possible.
rocketchat/rocket.chatThe Secure CommsOS™ for mission-critical operations
authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
supermagnum/galdralag-firmwareA cryptographic framework for Baochip-1x .
opfour/op4Terminal-based encrypted messenger with post-quantum cryptography, Double Ratchet protocol, and Tor anonymity. Features duress passphrase, deniable…
