casbin by casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

created at April 8, 2017, 7:51 a.m.

230 +0

16,900 +22

1,592 +4

pomerium by pomerium

Pomerium is an identity and context-aware access proxy.

created at Jan. 1, 2019, 8:04 a.m.

38 +0

3,857 +13

276 +1

ladon by ory

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.

created at Oct. 16, 2015, 3:21 p.m.

63 +0

2,345 +0

226 +0

gubernator by mailgun

High Performance Rate Limiting MicroService and Library

created at Jan. 24, 2019, 8:05 p.m.

66 +0

963 -1

102 +0

oathkeeper by ory

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

created at Sept. 25, 2017, 11:04 a.m.

47 +0

3,172 +4

343 +2

kratos by ory

Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, headless, API-first. Available as a worry-free SaaS with the fairest pricing on the market!

created at May 29, 2018, 4:09 p.m.

113 +0

10,603 +29

929 +2

keto by ory

Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models.

created at March 17, 2018, 10:40 a.m.

57 +0

4,618 +4

335 +0

cfssl by cloudflare

CFSSL: Cloudflare's PKI and TLS toolkit

created at July 7, 2014, 11:49 p.m.

215 +0

8,481 +17

1,086 +0

beyond by cogolabs

BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.

created at Aug. 13, 2017, 6:29 p.m.

9 +0

246 +0

25 +0

phoneinfoga by sundowndev

Information gathering framework for phone numbers

created at Oct. 25, 2018, 9:19 a.m.

656 +0

12,014 +55

3,305 +30

cerbos by cerbos

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

created at March 21, 2021, 1:23 p.m.

29 +0

2,530 +12

118 +0

authelia by authelia

The Single Sign-On Multi-Factor portal for web apps

created at Dec. 7, 2016, 12:56 a.m.

158 +0

19,643 +73

1,032 +2

casdoor by casdoor

An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, RADIUS, Google Workspace, Active Directory and Kerberos

created at Oct. 22, 2020, 2:40 p.m.

63 +0

8,659 +36

1,031 +12

trufflehog by trufflesecurity

Find and verify secrets

created at Dec. 31, 2016, 5:08 a.m.

166 -2

13,955 +62

1,516 +6

zitadel by zitadel

ZITADEL - Identity infrastructure, simplified for you.

created at March 16, 2020, 1:51 p.m.

39 -2

7,127 +50

425 +3

topaz by aserto-dev

Cloud-native authorization for modern applications and APIs

created at Oct. 23, 2022, 3:54 p.m.

11 +0

978 +6

20 +0

spicedb by authzed

Open Source, Google Zanzibar-inspired permissions database to enable fine-grained access control for customer applications

created at Aug. 16, 2021, 3:32 p.m.

39 +2

4,548 +27

242 -1

opa by open-policy-agent

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

created at Dec. 28, 2015, 10:08 p.m.

125 +0

9,156 +18

1,262 +2

gitleaks by gitleaks

Protect and discover secrets using Gitleaks 🔑

created at Jan. 27, 2018, 6:19 p.m.

153 +0

15,308 +67

1,315 +5

sops by getsops

Simple and flexible tool for managing secrets

created at Aug. 13, 2015, 10:11 p.m.

117 +0

15,173 +49

814 +2