#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
sigstore/cosignCode signing and transparency for containers and binaries
rocketchat/rocket.chatThe Secure CommsOS™ for mission-critical operations
zitadel/zitadelOpen-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenant access control for developers…
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
cisagov/scubagearAutomation to assess the state of your M365 tenant against CISA's baselines
dbeaver/dbeaverFree universal database tool and SQL client
bitwarden/clientsBitwarden client apps (web, browser extension, desktop, and cli).
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
openidentityplatform/openamOpen-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…
tuskira/ai-agent-gatewayOpen-source gateway that secures, governs, and observes AI agents' MCP tool calls and LLM traffic, with API-key authentication and an admin console…
cerbos/cerbosAuthorization engine for context-aware access control with YAML policies, RBAC/ABAC support, check/plan APIs, and GitOps-friendly deployment.
mwiede/jschfork of the popular jsch library
infisical/agent-vaultA HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
serverless/serverlessCLI framework for deploying and managing serverless applications on AWS Lambda with YAML infrastructure, local development, and multi-language…
openwisp/openwisp-controllerNetwork and WiFi controller: provisioning, configuration management and updates, (pull via openwisp-config or push via SSH), x509 PKI management and…
nolabs-ai/nonoagent runtime security - zero trust, zero setup, zero latency agent sandboxing
openvpn/openvpnSecure tunneling daemon implementing VPN protocols with TLS encryption, certificate authentication, and routing/firewall configuration for private…
