
SafeLine
Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

A Modern Orchestration Engine for Security

JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…

Fast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…

Open Source Identity and Access Management For Modern Applications and Services

Open-source platform to secure and manage endpoints via MDM, patch management, software deployment, and osquery-powered visibility with compliance…

A secure Python sandbox, written in Rust, for code written by AI.

Curated macOS security and privacy guide with practical instructions for threat modeling, disk encryption, firewall configuration, secure…

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of…

Secure and fast microVMs for serverless computing.

Self-hosted identity management platform providing WebAuthn passkeys, OAuth2/OIDC SSO, SSH key distribution, RADIUS and LDAP integration for modern…

Top-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…

An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags.

A free, secure and open source app for Android to manage your 2-step verification tokens.

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build…

Client for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…