
carbon-identity-framework
Core framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…

Core framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…

Open-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…

Collaborative Passwords Manager


Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

TrustedRouter.com repo for secure LLM proxying

Traccar GPS Tracking System

Open-source AI agent firewall that scans HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, emitting verifiable…

A durable process per agent, with memory that survives restarts

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

Distributed SIP honeypot that detects and shares fraud data on VoIP attacks. Collects bad actor IPs and phone numbers via peer-to-peer network, with…

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.


ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

OPNsense GUI, API and systems backend

Open Source Identity and Access Management For Modern Applications and Services

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…