Open-source security software

4844 open-source libraries, tools and applications tagged security, ranked by how closely security is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.

4844 products, primary matches first, then adoption-weighted; health v2 shown.

Product	Health v2	Stars	Maturity
Microsoft Activation Scripts (MAS) Microsoft Activation Scripts (MAS) is an open‑source batch/PowerShell tool that activates Windows and Microsoft Office using HWID, KMS, TSf…	88	191377	active
RustDesk RustDesk is an open‑source remote‑desktop application that lets you control computers and mobile devices over the internet. It can be self‑…	94	125074	active
Sherlock Sherlock is a Python CLI tool that hunts down social media accounts by username across 400+ social networks. It is widely used for OSINT re…	85	92935	active
koala73/worldmonitor World Monitor is an open‑source, real‑time global intelligence dashboard that aggregates news, geopolitical, maritime, aviation, and cyber …	84	88743	active
Z4nzu/hackingtool An all-in-one, menu-driven Python toolkit that aggregates 215 curated security testing tools across 21 categories such as recon, OSINT, web…	73	80077	active
NationalSecurityAgency/ghidra Ghidra is a software reverse engineering framework built by the NSA that includes a suite of tools for disassembly, decompilation, graphing…	93	79309	stable
Caddy Caddy is a fast, extensible HTTP/1‑2‑3 web server written in Go that provides automatic HTTPS by default. It can serve static sites, act as…	94	77555	active
Caddy Caddy is a fast, extensible, multi-platform web server written in Go that serves HTTP/1, HTTP/2, and HTTP/3 with automatic HTTPS by default…	94	77555	stable
unionlabs/union Union is a trust-minimized zero-knowledge bridging protocol enabling general message passing, asset transfers, NFTs, and DeFi across Cosmos…	78	73786	active
Vaultwarden Vaultwarden is an unofficial, lightweight Bitwarden-compatible server written in Rust. It provides a self‑hosted password‑manager service t…	99	68819	active
Vaultwarden Vaultwarden is an unofficial, lightweight Rust implementation of the Bitwarden server API that works with official Bitwarden clients. It is…	99	68819	stable
uBlock Origin uBlock Origin is a free, open‑source browser extension that blocks ads, trackers, and malicious scripts. It works on Chromium‑based browser…	94	68563	active
usestrix/strix Strix is an open‑source AI‑powered penetration testing platform written in Python. It runs autonomous agents that discover, exploit, and va…	85	67778	active
Pi-hole Pi-hole is an open‑source DNS sinkhole that blocks advertising and tracking domains for every device on a network. It runs on modest Linux …	93	61062	active
ImHex ImHex is a cross‑platform hex editor designed for reverse engineers, programmers, and anyone who works with binary data at odd hours. It fe…	83	54966	active
ImHex ImHex is a free, open-source hex editor built for reverse engineers, programmers, and security researchers. It offers binary analysis featu…	83	54966	active
bannedbook/fanqiang Fanqiang is a comprehensive repository of proxy tools, tutorials, and configuration scripts for bypassing internet censorship. It provides …	65	53980	active
sickcodes/Docker-OSX Docker-OSX provides a Docker image that runs a near‑native macOS virtual machine using KVM inside a container. It enables X11 forwarding, i…	52	52949	active
skylot/jadx JADX is a Dex to Java decompiler that produces readable Java source code from Android APK, dex, aar, aab, and zip files, available as both …	85	50675	active
x64dbg/x64dbg x64dbg is an open‑source user‑mode debugger for Windows that supports both 32‑bit and 64‑bit executables. It provides a graphical interface…	87	49676	active
KeygraphHQ/shannon Shannon is an autonomous AI-driven pentesting tool for web applications and APIs. It analyzes source code, discovers attack vectors, and ex…	85	49090	active
MHSanaei/3x-ui 3x-ui is an open‑source web control panel for managing Xray‑core proxy servers. It provides a graphical dashboard and REST API to configure…	98	47834	active
acme.sh acme.sh is a pure Unix shell script ACME client that automates the issuance and renewal of SSL/TLS certificates. It works across many Unix-…	89	47780	active
acme.sh acme.sh is a pure POSIX shell script ACME protocol client that automates issuing and renewing SSL/TLS certificates from Let's Encrypt, Zero…	89	47780	stable
Rocket.Chat Rocket.Chat is an open‑source, secure communications platform that provides real‑time messaging, voice, video and collaboration tools. It c…	92	46207	active
mitmproxy/mitmproxy mitmproxy is an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, HTTP/3, and WebSockets, offered as a console tool (mitm…	89	45113	stable
juanfont/headscale Headscale is an open-source, self-hosted implementation of the Tailscale control server written in Go. It coordinates WireGuard-based mesh …	100	44768	active
Xray Xray-core is a high-performance, modular proxy platform written in Go. It supports multiple protocols (VLESS, VMess, Shadowsocks, Trojan, e…	89	42060	active
GyulyVGC/sniffnet Sniffnet is a free, open-source cross-platform GUI application for monitoring and analyzing network traffic, written in Rust. It lets users…	87	41559	active
schollz/croc croc is a command‑line utility for fast, simple, and secure file transfers between computers. It uses peer‑to‑peer connections with optiona…	97	40458	active
zhaoxuya520/reverse-skill reverse-skill is an AI‑driven cybersecurity skill router that guides reverse engineering, penetration testing, and security research tasks.…	65	39537	active
Mattermost Mattermost is an open‑source, self‑hosted collaboration platform that provides secure messaging, file sharing, voice/video calls and workfl…	93	39174	active
Metasploit Framework Metasploit Framework is an open-source penetration testing platform written in Ruby. It provides a collection of exploits, payloads, and au…	75	39058	active
sqlmap sqlmap is an open‑source command‑line tool that automates detection and exploitation of SQL injection flaws. It can fingerprint databases, …	72	38549	active
sqlmap sqlmap is an open-source penetration testing tool that automates the detection and exploitation of SQL injection flaws and the takeover of …	72	38549	stable
SagerNet/sing-box sing-box is a universal proxy platform that supports a wide range of proxy protocols and can run as a service or CLI tool. It is written in…	93	38331	active
Trivy Trivy is an open‑source command‑line security scanner that detects vulnerabilities, misconfigurations, secrets, licenses and generates SBOM…	98	38274	active
soxoj/maigret Maigret is a Python‑based command‑line tool that gathers public information about a person using only a username. It checks thousands of we…	97	38084	active
Keycloak Keycloak is an open source identity and access management server that provides authentication, authorization, and user federation for moder…	100	37423	active
Firecracker Firecracker is an open-source virtual machine monitor (VMM) that uses Linux KVM to create and manage lightweight microVMs for secure multi-…	97	37354	stable
AdguardTeam/AdGuardHome AdGuard Home is a free, open‑source DNS server that blocks ads, trackers, and malicious domains across an entire network. It supports moder…	96	37244	active
Tailscale Tailscale is an open‑source zero‑trust networking platform built on WireGuard that provides secure, identity‑based connectivity across devi…	98	37016	active
Vault Vault is a HashiCorp service for secure secret storage, dynamic secret generation, and privileged access management. It provides a unified …	100	36390	active
restic backup solution restic is a fast, secure, and efficient open-source backup program written in Go. It creates encrypted, deduplicated snapshots of files and…	84	36276	stable
CyberChef CyberChef is a web-based tool that lets users perform a wide range of data manipulation tasks such as encoding, encryption, compression, ha…	98	36120	active
CyberChef CyberChef is a browser-based web application for performing a wide range of 'cyber' operations such as encryption, encoding, compression, h…	98	36120	active
Shadowsocks Shadowsocks for Windows is a C# implementation of the Shadowsocks proxy client. It provides system proxy configuration, PAC mode, and suppo…	23	33535	active
Certbot Certbot is a command‑line tool that automates the acquisition and renewal of TLS certificates from Let’s Encrypt and any ACME‑compatible ce…	93	33262	active
Certbot Certbot is EFF's tool for obtaining TLS certificates from Let's Encrypt and optionally auto-configuring HTTPS on your server. It also works…	93	33262	active
mukul975/Anthropic-Cybersecurity-Skills A large open-source library of structured cybersecurity skills (Markdown files with YAML frontmatter) for AI coding agents, mapped to frame…	73	33126	active
Nuclei Nuclei is a high‑performance, open‑source vulnerability scanner written in Go. It uses simple YAML‑based templates to detect security issue…	96	32091	active
Nuclei Nuclei is a fast, open-source vulnerability scanner built on a simple YAML-based template DSL, maintained by ProjectDiscovery. It uses a la…	96	32091	active
CloakBrowser CloakBrowser is a stealth Chromium binary with source‑level fingerprint patches that evades bot detection systems. It provides a drop‑in re…	82	32001	active
CloakBrowser CloakBrowser is a stealth Chromium distribution with 73 source-level C++ fingerprint patches that passes major bot-detection systems like C…	82	32001	active
JumpServer JumpServer is an open-source Privileged Access Management (PAM) platform that provides a unified workspace for secure access to SSH, RDP, K…	100	31794	active
JumpServer JumpServer is an open-source Privileged Access Management (PAM) platform and bastion host that provides secure, audited access to SSH, RDP,…	100	31794	stable
StevenBlack/hosts StevenBlack/hosts is a curated collection of unified hosts files that block ads, trackers, malware, and other unwanted domains. It provides…	93	31123	active
openssl/openssl OpenSSL is a robust, commercial‑grade cryptographic toolkit written in C. It provides a full‑featured implementation of TLS/SSL, DTLS, QUIC…	99	30985	active
Algo VPN Algo is a collection of Ansible scripts that automate the deployment of a personal VPN server in the cloud. It supports modern protocols li…	73	30406	active
Algo VPN Algo VPN is a set of Ansible scripts that automates deploying a personal WireGuard and IPsec (IKEv2) VPN server on common cloud providers. …	73	30406	active
Better Auth Better Auth is a framework‑agnostic authentication and authorization library for TypeScript. It provides a rich set of built‑in features an…	88	30360	active
Better Auth Better Auth is a framework-agnostic authentication and authorization framework for TypeScript that ships with comprehensive features like e…	88	30360	active
Gitleaks Gitleaks is an open‑source command‑line tool that scans Git repositories, files, and directories for secrets such as passwords, API keys, a…	87	29941	active
Infisical/infisical Infisical is an open‑source platform for managing secrets, certificates, and privileged access across environments. It provides a web UI, C…	95	29809	active
Harbor Harbor is an open‑source cloud‑native container registry that adds security, identity, and management features to Docker Distribution. It p…	99	29547	stable
Ente Ente is an open-source, end-to-end encrypted cloud platform with client apps for photos (a Google Photos alternative), document/credential …	95	29456	active
NetBird NetBird is an open‑source zero‑trust networking platform that creates a WireGuard‑based overlay network for secure private connectivity. It…	92	29443	active
NetBird NetBird is an open-source zero-trust networking platform that builds WireGuard-based peer-to-peer overlay networks with centralized access …	92	29443	active
Signal Messenger Signal is a free, open-source private messenger offering end-to-end encrypted text, voice, and video communication, built on the Signal Pro…	92	29393	stable
keepassxreboot/keepassxc KeePassXC is a modern, open‑source password manager that stores credentials in an encrypted local database. It runs on Windows, macOS and L…	77	29299	active
Authelia Authelia is an open‑source authentication and authorization server that provides single sign‑on (SSO) and multi‑factor authentication (MFA)…	98	29294	active
Authelia Authelia is an open-source authentication and authorization server and portal providing single sign-on (SSO) and multi-factor authenticatio…	98	29294	active
ifixai-ai/iFixAi iFixAi is an open-source CLI diagnostic tool that independently audits AI agents for misalignment, hallucination, manipulation, deception, …	82	28773	active
hwdsl2/setup-ipsec-vpn A shell script that fully automates the installation and configuration of an IPsec/L2TP/IKEv2 VPN server on supported Linux distributions. …	76	28740	active
fingerprintjs/fingerprintjs FingerprintJS is a client‑side JavaScript library that gathers browser attributes and creates a stable hashed identifier for each visitor. …	94	28571	active
TruffleHog TruffleHog is an open‑source command‑line tool that discovers, classifies, verifies, and analyses leaked credentials across code repositori…	93	28212	active
TruffleHog TruffleHog is an open-source secrets scanning tool that discovers, classifies, validates, and analyzes leaked credentials across Git reposi…	93	28212	active
ungoogled-chromium ungoogled-chromium is a fork of the Chromium browser that removes all dependencies on Google web services. It aims to retain the default Ch…	94	27851	active
wg-easy/wg-easy wg-easy is an all-in-one Docker application that runs a WireGuard VPN server together with a web-based admin UI for managing it. It lets ad…	95	27046	active
hashcat Hashcat is a high‑performance password recovery utility that runs on CPUs, GPUs and distributed systems. It supports hundreds of hash algor…	79	26999	active
cloudflare/security-audit-skill A coding-agent skill from Cloudflare that turns an LLM coding agent into a security auditor via a six-phase pipeline (recon, hunting, valid…	56	26974	active
robertdavidgraham/masscan Masscan is an Internet-scale TCP port scanner written in C that transmits 10 million SYN packets per second, capable of scanning the entire…	54	26042	active
authentik authentik is an open‑source identity provider and single sign‑on platform that supports SAML, OAuth2/OIDC, LDAP, RADIUS, SCIM and more. It …	95	25962	active
authentik authentik is an open-source Identity Provider (IdP) and Single Sign-On (SSO) platform supporting SAML, OAuth2/OIDC, LDAP, SCIM, RADIUS, and…	95	25962	active
Apktool Apktool is a Java‑based command‑line utility for reverse engineering Android APK files. It can decode resources, decompile dex code to smal…	90	25958	active
Apktool Apktool is a Java-based command-line tool for reverse engineering Android APK files. It decodes resources and manifest files to nearly orig…	90	25958	stable
Cilium Cilium is an open-source networking, security, and observability solution for Kubernetes and container workloads built on an eBPF-based dat…	94	25622	stable
vxcontrol/pentagi PentAGI is a Go-based autonomous AI agent system for automated penetration testing. It provides a web UI, GraphQL API, and integrates with …	76	25181	active
radare2 Radare2 is a free, open-source reverse engineering framework and command-line toolset for Unix-like systems. It provides disassembly, debug…	92	24871	active
zama-ai/fhevm FHEVM is a full-stack framework from Zama that enables confidential smart contracts on EVM-compatible blockchains using Fully Homomorphic E…	82	24800	active
heartcombo/devise Devise is a flexible, modular authentication solution for Rails applications built on top of Warden. It provides complete MVC-based user au…	90	24355	stable
qeeqbox/social-analyzer Social Analyzer is an OSINT tool available as a Web App, CLI, and API that finds and analyzes a person's profile across 1000+ social media …	57	24114	active
age age is a simple, modern, and secure file encryption tool with a companion Go library. It uses small explicit keys, offers post‑quantum supp…	82	23906	active
age age is a simple, modern, and secure file encryption tool, format, and Go library with small explicit keys, no config options, and UNIX-styl…	82	23906	stable
osquery/osquery osquery is a SQL-powered operating system instrumentation, monitoring, and analytics framework that exposes OS data as a high-performance r…	88	23587	active
Passport Passport is a lightweight authentication middleware for Node.js that works with Express. It provides a simple, extensible API and a large c…	32	23521	active
TecharoHQ/anubis Anubis is a Go‑based service that adds a proof‑of‑work challenge to incoming HTTP requests to deter AI‑driven crawlers. It acts as middlewa…	88	23520	active
SlimToolkit Slim (formerly DockerSlim) is an open‑source CLI toolkit that minifies container images without altering their functionality, often reducin…	66	23417	active
SlimToolkit SlimToolkit is a CLI tool that inspects, optimizes, and debugs container images, minifying them by up to 30x without changing the applicati…	66	23417	active
getsops/sops SOPS is a CLI tool for encrypting and decrypting configuration files (YAML, JSON, ENV, INI, and binary) while keeping keys and structure vi…	95	23393	stable