Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
sfewer-r7/cve-2026-55040Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…
digicred-oss/caos-osCustomer Assurance Operating System. Answer the security questionnaires your customers send you, once.
hermetic-sys/hermeticAgent-Isolated Credential Broker for AI Agents
pilot-protocol/pilotprotocolOverlay network protocol giving AI agents permanent addresses, authenticated encrypted tunnels, and a trust model over UDP. Includes NAT traversal,…
dobybaxter127/nimbus-vestigeA forensic reconstruction engine for cloud and identity incident response.
bunnie/dc34-vaultVault app for DC34 badge
vicanso/pingapA reverse proxy like nginx, built on pingora, simple and efficient.
renich/paredLightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.
heimdal/heimdalImplementation of Kerberos, PKI, and ASN.1/DER providing authentication, authorization, and cryptographic services for secure networks.
prof.shafiei/abdal-lockboxLocal-first encrypted password vault for Android with Master Password access, Recovery Key support, Autofill integration, and portable encrypted…
pirafrank/vault-conductorAn SSH Agent that provides SSH keys stored in Bitwarden Secrets Manager
hashicorp/boundaryBoundary enables identity-based access management for dynamic infrastructure.
canyonroad/agentshExecution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.
chelof100/acp-framework-enAgent Control Protocol (ACP) — Official English specification. Cryptographically verifiable authorization architecture for autonomous AI agents.
sam00/poc-cve-2026-56164-exploitCVE-2026-56164 is a critical missing-authentication vulnerability affecting on-premises Microsoft SharePoint Server. It allows unauthenticated,…
rootsecdev/secretsstalker
mvelazc0/badzureBadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…