Rocket.Chat
rocketchat/rocket.chatThe Secure CommsOS™ for mission-critical operations
api-securityauthentication-authorizationcloud-security+4
46.2k1 day ago
rocketchat/rocket.chatThe Secure CommsOS™ for mission-critical operations
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
apache/brpcIndustrial-grade C++ RPC framework for building high-performance distributed systems, supporting multiple protocols (HTTP, gRPC, Redis, Thrift) with…
apache/casbinAuthorization library enforcing ACL, RBAC, ABAC, and custom access-control models with RESTful matching and policy management APIs for applications…
semgrep/semgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.
cloudflare/cloudflaredClient for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…
owasp-modsecurity/modsecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…
cure53/dompurifyDOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…
ory/hydraOpenID Certified OAuth 2.0 and OpenID Connect provider for token issuance, client management, JWKS, and login/consent flow orchestration via headless…
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
ory/kratosAPI-first identity and user management system for cloud-native applications. Handles login, registration, MFA, recovery, and profile management with…
infobyte/faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin…
open-policy-agent/gatekeeperKubernetes policy engine with OPA-based admission control, mutation, and audit for enforcing security and compliance configurations.
elementalsouls/claude-bughunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…
corazawaf/corazaGo-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…
cerbos/cerbosAuthorization engine for context-aware access control with YAML policies, RBAC/ABAC support, check/plan APIs, and GitOps-friendly deployment.
ticarpi/jwt_tool:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens