#Security & privacy

rustdesk

rustdesk

★ 118,485

A self-hostable open-source remote desktop application.

fatedier

frp

★ 108,244

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

home-assistant

core

★ 89,377

Home Assistant runs home automation locally, connecting devices and services while keeping control and data on the user's system.

sherlock-project

sherlock

★ 86,903

Hunt down social media accounts by username across social networks.

macrozheng

mall

★ 84,311

mall项目是一套电商系统，包括前台商城系统及后台管理系统，基于Spring Boot+MyBatis实现，采用Docker容器化部署。 前台商城系统包含首页门户、商品推荐、商品搜索、商品展示、购物车、订单流程、会员中心、客户服务、帮助中心等模块。 后台管理系统包含商品管理、订单管理、会员管理、促销管理、运营管理、内容管理、统计报表、财务管理、权限管理、设置等模块。.

caddyserver

caddy

★ 74,212

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

unionlabs

union

★ 73,889

Union is a zero-knowledge interoperability protocol for transferring data and assets between blockchains without a trusted intermediary.

NationalSecurityAgency

ghidra

★ 71,235

Ghidra, from the NSA Research Directorate, is a software reverse engineering framework with disassembly, decompilation, graphing, and scripting across many processors.

gorhill

uBlock

★ 66,438

uBlock Origin is an efficient, low-memory content blocker for Chromium and Firefox that filters ads, trackers, and other unwanted content.

WerWolv

ImHex

★ 54,258

ImHex is a hex editor for reverse engineers and programmers, with byte patching, patch management, unlimited undo/redo, and its own pattern language for binary analysis.

KeygraphHQ

shannon

★ 46,076

Shannon is an autonomous white-box AI pentester that analyzes source code, finds attack paths and runs real exploits to prove vulnerabilities pre-production.

usestrix

strix

★ 43,481

Autonomous AI penetration-testing agents that run your code, find vulnerabilities, and verify them with real proofs of concept, plugging into CI/CD pipelines.

amruthpillai

reactive-resume

★ 39,731

Reactive Resume is a self-hosted resume builder with editable layouts, PDF export, import tools, and privacy-focused local control.

openssl

openssl

★ 30,515

General purpose TLS and crypto library. Download ======== For Production Use Source code tarballs of the official releases can be downloaded from openssl-library.org/source/.

community-scripts

ProxmoxVE

★ 29,029

Proxmox VE Helper-Scripts (Community Edition). Paste a command into your Proxmox shell, answer a few prompts, and your container or VM is up and running.

authelia

authelia

★ 28,337

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

ente

ente

★ 27,981

End-to-end encrypted cloud for everything. On top of this platform, we have built three apps so far: Ente Photos (an alternative to Apple and Google Photos), Ente Locker (a safe space for your most important documents and credentials), and Ente Auth (a 2FA alternative to the deprecated Authy).

OpenZeppelin

openzeppelin-contracts

★ 27,196

OpenZeppelin Contracts is a library for secure smart contract development.

trufflesecurity

trufflehog

★ 27,134

TruffleHog scans repositories, filesystems, and cloud services for exposed credentials, then checks whether the secrets still work.

chaitin

SafeLine

★ 21,909

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

vxcontrol

pentagi

★ 21,117

PentAGI runs fully autonomous AI agents for complex penetration testing, self-hosted and configurable with OpenAI, Anthropic, Ollama, and other LLM providers.

TecharoHQ

anubis

★ 20,820

Weighs the soul of incoming HTTP requests to stop AI crawlers

apache

shardingsphere

★ 20,768

Empowering Data Intelligence with Distributed SQL for Sharding, Scalability, and Security Across All Databases.

canopy-network

canopy

★ 14,483

The official go implementation of the Canopy Network protocol. Here you'll find:** ➪ A recursive framework to build blockchains.

streetwriters

notesnook

★ 14,318

A fully open source & end-to-end encrypted note taking alternative to Evernote.

alam00000

bentopdf

★ 14,268

The Privacy First PDF Toolkit. BentoPDF BentoPDF** is a powerful, privacy-first, client-side PDF toolkit that is self hostable and allows you to manipulate, edit, merge, and process PDF files directly in your browser.

Automattic

harper

★ 13,834

Offline, privacy-first grammar checker. Fast, open-source, Rust-powered.

juice-shop

juice-shop

★ 13,537

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application.

zedeus

nitter

★ 13,328

Alternative Twitter front-end. It's impossible to use Twitter without JavaScript enabled, and as of 2024 you need to sign up.

nearai

ironclaw

★ 12,546

IronClaw is an Agent OS focused on privacy, security and extensibility.

rybbit-io

rybbit

★ 12,520

Rybbit - open-source and privacy-friendly alternative to Google Analytics that is 10x more intuitive.

future-architect

vuls

★ 12,218

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices. Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go.

BishopFox

sliver

★ 11,577

Adversary Emulation Framework. Sliver's implants support C2 over Mutual TLS (mTLS), WireGuard, HTTP(S), and DNS and are dynamically compiled with per-binary asymmetric encryption keys.

yaklang

yakit

★ 7,635

Yakit is a cybersecurity toolkit built around a modular client that supports vulnerability scanning, threat hunting, asset analysis, and operational workflows for security teams.

cilium

tetragon

★ 4,855

eBPF-based Security Observability and Runtime Enforcement. Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement.

homarr-labs

homarr

★ 4,383

A modern and easy to use dashboard. 40+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.

PurpleI2P

i2pd

★ 4,145

I2P: End-to-End encrypted and anonymous Internet. I2P allows people from all around the world to communicate and share information without restrictions.

rotki

rotki

★ 3,957

A portfolio tracking, analytics, accounting and management application that protects your privacy.

pac4j

pac4j

★ 2,521

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

int128

kubelogin

★ 2,328

kubectl plugin for Kubernetes OpenID Connect authentication (kubectl oidc-login).

antrea-io

antrea

★ 1,806

Antrea is an open-source Kubernetes networking and security project built on Open vSwitch, providing pod networking, policy enforcement, observability integration, and gateway controls for production clusters.

AdventDevInc

kudu

★ 1,701

Free Windows, Mac and Linux cleaner, scanner, and more. Kudu Free, open-source system cleaner & security scanner for Windows, macOS, and Linux.

phishdestroy

destroylist

★ 1,662

Real-time phishing & scam domain blocklist, 190k+ curated threats, 888K+ community, free API, multiple formats.

sbondCo

Watcharr

★ 1,434

Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.

suzuki-shunsuke

pinact

★ 1,148

pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their versions and verify version annotations.

kitsumed

ShizuCallRecorder

★ 1,055

ShizuCallRecorder empowers ADB through Shizuku to record phone calls on non-rooted device!

flosell

trailscraper

★ 835

A command-line tool to get valuable information out of AWS CloudTrail.

CriticalPathSecurity

Zeek-Intelligence-Feeds

★ 398

Zeek-Formatted Threat Intelligence Feeds. Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data.