a12n-server by curveball

An open source lightweight OAuth2 server

created at Sept. 4, 2018, 1:40 p.m.

16 +0

424 +1

47 +0

kratos by ory

Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, headless, API-first. Available as a worry-free SaaS with the fairest pricing on the market!

created at May 29, 2018, 4:09 p.m.

112 -1

10,633 +30

928 -1

PMapper by nccgroup

A tool for quickly evaluating IAM permissions in AWS.

created at May 23, 2018, 1:04 a.m.

28 +0

1,330 +5

164 +0

presidio by Microsoft

Context aware, pluggable and customizable data protection and de-identification SDK for text and images

created at May 4, 2018, 11:08 a.m.

65 +1

3,130 +11

496 +3

keto by ory

Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models.

created at March 17, 2018, 10:40 a.m.

57 +0

4,628 +10

337 +2

yubikey by DataDog

YubiKey at Datadog

created at Feb. 1, 2018, 7:14 p.m.

480 +1

493 +0

35 +0

gitleaks by gitleaks

Protect and discover secrets using Gitleaks 🔑

created at Jan. 27, 2018, 6:19 p.m.

153 +0

15,336 +28

1,321 +6

country-ip-blocks by herrbischoff

CIDR country-level IP data, straight from the Regional Internet Registries, updated hourly. This is a read-only mirror.

created at Dec. 13, 2017, 6:08 p.m.

25 +1

638 +8

80 -1

CT_subdomains by internetwache

An hourly updated list of subdomains gathered from certificate transparency logs

created at Dec. 7, 2017, 12:43 p.m.

26 +0

335 +0

61 +0

roca by crocs-muni

ROCA: Infineon RSA key vulnerability

created at Oct. 13, 2017, 3:28 p.m.

39 +0

479 +0

91 +0

oathkeeper by ory

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

created at Sept. 25, 2017, 11:04 a.m.

47 +0

3,174 +2

343 +0

beyond by cogolabs

BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.

created at Aug. 13, 2017, 6:29 p.m.

9 +0

247 +1

25 +0

ja3 by salesforce

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

created at June 13, 2017, 10:54 p.m.

99 +0

2,547 +6

285 +1

policyuniverse by Netflix-Skunkworks

Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.

created at May 15, 2017, 5:51 p.m.

125 +0

416 +1

61 +0

casbin by casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

created at April 8, 2017, 7:51 a.m.

231 +1

16,932 +32

1,592 +0

trufflehog by trufflesecurity

Find and verify secrets

created at Dec. 31, 2016, 5:08 a.m.

166 +0

13,993 +38

1,520 +4

authelia by authelia

The Single Sign-On Multi-Factor portal for web apps

created at Dec. 7, 2016, 12:56 a.m.

158 +0

19,703 +60

1,034 +2

dumb-password-rules by duffn

A compilation of sites with dumb password rules.

created at Dec. 4, 2016, 2:47 p.m.

40 +0

2,975 +0

296 -1

athenz by AthenZ

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

created at Nov. 16, 2016, 6:23 p.m.

52 +0

869 +7

273 +1

loginsrv by tarent

JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..

created at Nov. 11, 2016, 12:11 p.m.

50 +0

1,915 +0

149 +0