athenz by AthenZ

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

created at Nov. 16, 2016, 6:23 p.m.

52 +0

862 +4

272 +1

loginsrv by tarent

JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..

created at Nov. 11, 2016, 12:11 p.m.

50 +0

1,915 +1

149 -1

conjur by cyberark

CyberArk Conjur automatically secures secrets used by privileged users and machine identities

created at June 28, 2016, 9:18 p.m.

48 +0

727 +2

123 +0

oathkeeper by ory

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

created at Sept. 25, 2017, 11:04 a.m.

47 +0

3,172 +4

343 +2

logto by logto-io

🧑‍🚀 The better identity infrastructure for developers and the open-source alternative to Auth0.

created at June 19, 2021, 3:01 a.m.

40 +0

7,258 +26

351 +1

dumb-password-rules by duffn

A compilation of sites with dumb password rules.

created at Dec. 4, 2016, 2:47 p.m.

40 +0

2,975 +0

297 +0

spicedb by authzed

Open Source, Google Zanzibar-inspired permissions database to enable fine-grained access control for customer applications

created at Aug. 16, 2021, 3:32 p.m.

39 +2

4,548 +27

242 -1

roca by crocs-muni

ROCA: Infineon RSA key vulnerability

created at Oct. 13, 2017, 3:28 p.m.

39 +0

479 -1

91 +0

zitadel by zitadel

ZITADEL - Identity infrastructure, simplified for you.

created at March 16, 2020, 1:51 p.m.

39 -2

7,127 +50

425 +3

pomerium by pomerium

Pomerium is an identity and context-aware access proxy.

created at Jan. 1, 2019, 8:04 a.m.

38 +0

3,857 +13

276 +1

infisical by Infisical

♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure and prevent secret leaks.

created at Aug. 5, 2022, 1:50 p.m.

38 +0

12,339 +141

605 +15

mailchecker by FGRibreau

Cross-language temporary (disposable/throwaway) email detection library. Covers 55 734+ fake email providers.

created at March 4, 2013, 3 p.m.

37 +0

1,568 -1

239 +1

oak by project-oak

Meaningful control of data in distributed systems.

created at March 4, 2019, 6:08 p.m.

35 +1

973 +2

105 +0

metadata by nextdns

This repository contains the data behind our Security, Privacy and Parental Control features.

created at March 14, 2019, 5:43 p.m.

33 +0

631 +1

138 +0

cloudsplaining by salesforce

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

created at April 18, 2020, 2:23 p.m.

32 +0

1,864 +0

177 +1

swot by leereilly

Identify email addresses or domains names that belong to colleges or universities. Help automate the process of approving or rejecting academic discounts.

created at Jan. 31, 2012, 4 a.m.

31 +0

1,112 +1

18,939 +57

oso by osohq

Oso is a batteries-included framework for building authorization in your application.

created at May 4, 2020, 8:05 p.m.

30 +0

3,412 +9

173 +0

cerbos by cerbos

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

created at March 21, 2021, 1:23 p.m.

29 +0

2,530 +12

118 +0

MIDAS by Stream-AD

Anomaly Detection on Dynamic (time-evolving) Graphs in Real-time and Streaming manner. Detecting intrusions (DoS and DDoS attacks), frauds, fake rating anomalies.

created at Oct. 23, 2019, 3:50 a.m.

29 +0

750 +0

92 +0

PMapper by nccgroup

A tool for quickly evaluating IAM permissions in AWS.

created at May 23, 2018, 1:04 a.m.

28 +0

1,325 +2

164 +0