authelia by authelia

The Single Sign-On Multi-Factor portal for web apps

updated at Nov. 17, 2024, 2:13 p.m.

166 +1

21,750 +80

1,129 +2

casbin by casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

updated at Nov. 17, 2024, 2:12 p.m.

238 +0

17,809 +32

1,650 +5

casdoor by casdoor

An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, RADIUS, Google Workspace, Active Directory and Kerberos

updated at Nov. 17, 2024, 1:31 p.m.

72 +1

10,204 +57

1,203 +4

kratos by ory

The most scalable and customizable identity server on the market. Replace your Homegrown, Auth0, Okta, Firebase with better UX and DX. Has all the tablestakes: Passkeys, Social Sign In, Multi-Factor Auth, SMS, SAML, TOTP, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

updated at Nov. 17, 2024, 12:49 p.m.

112 +0

11,293 +26

963 -2

cfssl by cloudflare

CFSSL: Cloudflare's PKI and TLS toolkit

updated at Nov. 17, 2024, 12:26 p.m.

215 +0

8,766 +13

1,112 +1

zitadel by zitadel

ZITADEL - Identity infrastructure, simplified for you.

updated at Nov. 17, 2024, 12:11 p.m.

46 +1

8,998 +73

573 +8

pomerium by pomerium

Pomerium is an identity and context-aware access proxy.

updated at Nov. 17, 2024, 8:38 a.m.

39 +2

4,054 +7

284 +0

phoneinfoga by sundowndev

Information gathering framework for phone numbers

updated at Nov. 17, 2024, 8:12 a.m.

675 +0

13,160 +49

3,689 +16

cerbos by cerbos

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

updated at Nov. 17, 2024, 4:35 a.m.

30 +0

3,284 +129

143 +1

permify by Permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application.

updated at Nov. 17, 2024, 2:13 a.m.

26 +0

4,957 +25

224 +1

gitleaks by gitleaks

Protect and discover secrets using Gitleaks 🔑

updated at Nov. 17, 2024, 2:12 a.m.

163 +0

17,953 +114

1,469 +6

trufflehog by trufflesecurity

Find, verify, and analyze leaked credentials

updated at Nov. 17, 2024, 1:30 a.m.

175 +0

17,256 +178

1,711 +6

sops by getsops

Simple and flexible tool for managing secrets

updated at Nov. 16, 2024, 11:04 p.m.

119 +0

17,010 +50

877 -1

keto by ory

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

updated at Nov. 16, 2024, 9:56 p.m.

57 +0

4,841 +12

347 -2

warrant by warrant-dev

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

updated at Nov. 16, 2024, 7:33 p.m.

4 +0

1,163 +9

44 +0

spicedb by authzed

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

updated at Nov. 16, 2024, 6:52 p.m.

43 +0

5,137 +23

278 -1

opa by open-policy-agent

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

updated at Nov. 16, 2024, 12:12 p.m.

128 -1

9,712 +35

1,346 +3

oathkeeper by ory

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

updated at Nov. 16, 2024, 10:37 a.m.

47 +0

3,261 +6

359 -1

loginsrv by tarent

JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..

updated at Nov. 16, 2024, 2:28 a.m.

50 +0

1,920 +0

148 +0

topaz by aserto-dev

Cloud-native authorization for modern applications and APIs

updated at Nov. 16, 2024, 1:47 a.m.

11 +0

1,119 +17

26 +0