Tools

kubeshark/kubeshark

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…

rocketchat/rocket.chat

The Secure CommsOS™ for mission-critical operations

ory/kratos

API-first identity and user management system for cloud-native applications. Handles login, registration, MFA, recovery, and profile management with…

data-privacy-stack/presidio

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports…

lxc/incus-os

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…

ory/talos

Scalable API key server for issuing, verifying, and revoking credentials with token derivation for fine-grained capability tokens. Supports…

sayanarijit/cottage

A modern git based age-encrypted secrets manager for teams.

qarait/ephemera

Self-hosted SSH Certificate Authority replacing static keys with short-lived certificates, enforcing WebAuthn MFA, RBAC, and tamper-evident audit…

alvin-alvo/safenet-soho-security-framework

A lightweight, policy-driven framework that brings Zero-Trust micro-segmentation to SOHO networks using WireGuard.

shoucheng3/apache__rocketmq_cve-2023-37582_4-9-6

Exploit for CVE-2023-37582 targeting Apache RocketMQ, a distributed messaging platform with low latency, high throughput, and support for…

shoucheng3/aws__aws-sdk-java_cve-2022-31159_1-12-2600

Java SDK for integrating with Amazon Web Services, providing secure API access to S3, DynamoDB, EC2, and more, with built-in authentication,…

mailcow/mailcow-dockerized

Dockerized mail server suite with Postfix, Dovecot, Rspamd, and ClamAV. Provides secure email hosting with integrated spam filtering, antivirus, and…

sigstore/cosign

Code signing and transparency for containers and binaries

openziti/ziti

Zero-trust networking platform that makes services invisible with cryptographic identity, policy-based access, and end-to-end encryption. Replaces…

openbmc/bmcweb

A do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC

ankane/s3tk

CLI toolkit for auditing and hardening Amazon S3 bucket security. Scans for misconfigurations, public access, and encryption gaps, then automates…

dsccommunity/certificatedsc

DSC resources to simplify administration of certificates on a Windows Server.

schroeder-sys/pantheon-souverainete

Infrastructure cloud modulaire, redondante et 100% souveraine pour s'affranchir des GAFAM. Guides techniques, architecture Zero-Trust et chiffrement…