keto by ory

Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models.

updated at May 11, 2024, 11:43 p.m.

57 +0

4,628 +10

337 +2

trufflehog by trufflesecurity

Find and verify secrets

updated at May 11, 2024, 11:34 p.m.

166 +0

13,993 +38

1,520 +4

supertokens-core by supertokens

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

updated at May 11, 2024, 11:31 p.m.

58 +0

11,969 +29

460 +1

a12n-server by curveball

An open source lightweight OAuth2 server

updated at May 11, 2024, 11:10 p.m.

16 +0

424 +1

47 +0

sops by getsops

Simple and flexible tool for managing secrets

updated at May 11, 2024, 8:28 p.m.

116 -1

15,209 +36

815 +1

burner-email-providers by wesbos

A list of temporary email providers

updated at May 11, 2024, 8:27 p.m.

55 +0

1,029 +1

290 +2

topaz by aserto-dev

Cloud-native authorization for modern applications and APIs

updated at May 11, 2024, 7:06 p.m.

11 +0

981 +3

20 +0

statistically-likely-usernames by insidetrust

Wordlists for creating statistically likely username lists for use in password attacks and security testing

updated at May 11, 2024, 6:27 p.m.

13 +0

809 +6

120 +1

cfssl by cloudflare

CFSSL: Cloudflare's PKI and TLS toolkit

updated at May 11, 2024, 6:17 p.m.

214 -1

8,487 +6

1,087 +1

opal by authorizon

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

updated at May 11, 2024, 6:02 p.m.

23 +0

2,305 +6

134 +0

awesome-threat-intelligence by hslatman

A curated list of Awesome Threat Intelligence resources

updated at May 11, 2024, 5:18 p.m.

550 +1

7,351 +30

1,404 +4

casdoor by casdoor

An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, RADIUS, Google Workspace, Active Directory and Kerberos

updated at May 11, 2024, 4:56 p.m.

63 +0

8,707 +48

1,042 +11

ja3 by salesforce

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

updated at May 11, 2024, 4:54 p.m.

99 +0

2,547 +6

285 +1

casbin by casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

updated at May 11, 2024, 4:23 p.m.

231 +1

16,932 +32

1,592 +0

google-cloud-4-words by priyankavergadia

The Google Cloud Developer's Cheat Sheet

updated at May 11, 2024, 12:34 p.m.

478 +2

7,759 +12

1,761 +4

PMapper by nccgroup

A tool for quickly evaluating IAM permissions in AWS.

updated at May 11, 2024, 7:01 a.m.

28 +0

1,330 +5

164 +0

opa by open-policy-agent

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

updated at May 11, 2024, 5:50 a.m.

125 +0

9,163 +7

1,266 +4

gephi by gephi

Gephi - The Open Graph Viz Platform

updated at May 11, 2024, 4:58 a.m.

256 +0

5,694 +7

1,557 +1

oathkeeper by ory

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

updated at May 11, 2024, 4:06 a.m.

47 +0

3,174 +2

343 +0

pomerium by pomerium

Pomerium is an identity and context-aware access proxy.

updated at May 11, 2024, 2:20 a.m.

38 +0

3,859 +2

277 +1