domain: security
4787 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| ECC ECC is an open-source 'agent harness operating system' that provides 261 skills, 64 agents, and 84 commands to optimize AI coding agents li… | 81 | 243524 | active |
| sherlock-project/sherlock Sherlock is a Python CLI tool that hunts down social media accounts by username across 400+ social networks. It is widely used for OSINT re… | 70 | 90369 | active |
| bitcoin/bitcoin Bitcoin Core is the reference full-node implementation of the Bitcoin peer-to-peer network, fully downloading and validating blocks and tra… | 93 | 90016 | stable |
| koala73/worldmonitor World Monitor is an open-source, real-time global intelligence dashboard that aggregates news, markets, military, maritime, aviation, infra… | 73 | 84360 | active |
| Z4nzu/hackingtool An all-in-one, menu-driven Python toolkit that aggregates 215 curated security testing tools across 21 categories such as recon, OSINT, web… | 77 | 79125 | active |
| caddyserver/caddy Caddy is a fast, extensible, multi-platform web server written in Go that serves HTTP/1, HTTP/2, and HTTP/3 with automatic HTTPS by default… | 91 | 75231 | stable |
| unionlabs/union Union is a trust-minimized zero-knowledge bridging protocol enabling general message passing, asset transfers, NFTs, and DeFi across Cosmos… | 83 | 73824 | active |
| NationalSecurityAgency/ghidra Ghidra is a software reverse engineering framework built by the NSA that includes a suite of tools for disassembly, decompilation, graphing… | 95 | 72873 | stable |
| dani-garcia/vaultwarden Vaultwarden is an unofficial, lightweight Rust implementation of the Bitwarden server API that works with official Bitwarden clients. It is… | 99 | 66314 | stable |
| FiloSottile/mkcert mkcert is a zero-config Go CLI tool that creates a local certificate authority and generates locally-trusted TLS certificates for developme… | 23 | 59501 | stable |
| usestrix/strix Strix is an open-source AI penetration testing tool that deploys autonomous agents to find, validate, and fix application vulnerabilities. … | 84 | 58564 | active |
| WerWolv/ImHex ImHex is a free, open-source hex editor built for reverse engineers, programmers, and security researchers. It offers binary analysis featu… | 86 | 54573 | active |
| sickcodes/Docker-OSX Docker-OSX is a Docker-based tool that runs macOS virtual machines with near-native performance using KVM and QEMU, built on top of OSX-KVM… | 55 | 52887 | active |
| skylot/jadx JADX is a Dex to Java decompiler that produces readable Java source code from Android APK, dex, aar, aab, and zip files, available as both … | 88 | 50219 | active |
| x64dbg/x64dbg x64dbg is an open-source user-mode binary debugger for Windows supporting both 32-bit and 64-bit executables. It is optimized for reverse e… | 90 | 49306 | active |
| acmesh-official/acme.sh acme.sh is a pure POSIX shell script ACME protocol client that automates issuing and renewing SSL/TLS certificates from Let's Encrypt, Zero… | 88 | 47549 | stable |
| KeygraphHQ/shannon Shannon is an open-source, autonomous AI pentester for web applications and APIs that runs locally from the command line. It analyzes sourc… | 84 | 47226 | active |
| Rocket.Chat Rocket.Chat is an open-source, MIT-licensed team communication platform built in TypeScript on Meteor, offering real-time chat, voice/video… | 95 | 46032 | stable |
| mitmproxy/mitmproxy mitmproxy is an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, HTTP/3, and WebSockets, offered as a console tool (mitm… | 89 | 44820 | stable |
| juanfont/headscale Headscale is an open-source, self-hosted implementation of the Tailscale control server written in Go. It coordinates WireGuard-based mesh … | 98 | 43205 | active |
| GyulyVGC/sniffnet Sniffnet is a free, open-source cross-platform GUI application for monitoring and analyzing network traffic, written in Rust. It lets users… | 89 | 40763 | active |
| schollz/croc croc is a Go CLI tool that lets any two computers securely transfer files and folders peer-to-peer with end-to-end encryption via PAKE, fal… | 99 | 40107 | stable |
| Metasploit Framework Metasploit Framework is the world's most widely used open-source penetration testing framework, providing a large collection of exploit, pa… | 77 | 38886 | active |
| sqlmapproject/sqlmap sqlmap is an open-source penetration testing tool that automates the detection and exploitation of SQL injection flaws and the takeover of … | 75 | 38275 | stable |
| Trivy Trivy is an all-in-one open-source security scanner that finds vulnerabilities (CVEs), IaC misconfigurations, secrets, and software license… | 98 | 37636 | stable |
| SagerNet/sing-box sing-box is a universal proxy platform written in Go that supports a wide range of proxy protocols (Shadowsocks, VLESS, Hysteria2, WireGuar… | 95 | 37302 | active |
| soxoj/maigret Maigret is a Python CLI OSINT tool that builds a dossier on a person from just a username, checking thousands of sites for accounts and ext… | 99 | 37084 | active |
| Keycloak Keycloak is an open-source identity and access management service providing single sign-on, user federation, and fine-grained authorization… | 99 | 36431 | stable |
| firecracker-microvm/firecracker Firecracker is an open-source virtual machine monitor (VMM) that uses Linux KVM to create and manage lightweight microVMs for secure multi-… | 92 | 36300 | stable |
| Vault HashiCorp Vault is a secrets management server that securely stores, generates, and controls access to credentials, certificates, and encry… | 98 | 36180 | stable |
| restic/restic restic is a fast, secure, and efficient open-source backup program written in Go. It creates encrypted, deduplicated snapshots of files and… | 87 | 35742 | stable |
| gchq/CyberChef CyberChef is a browser-based web application for performing a wide range of 'cyber' operations such as encryption, encoding, compression, h… | 98 | 35679 | active |
| Tailscale Tailscale is a Zero Trust mesh VPN built on WireGuard that connects devices, teams, and infrastructure with identity-based access control. … | 99 | 35599 | stable |
| certbot/certbot Certbot is EFF's tool for obtaining TLS certificates from Let's Encrypt and optionally auto-configuring HTTPS on your server. It also works… | 97 | 33216 | active |
| jumpserver/jumpserver JumpServer is an open-source Privileged Access Management (PAM) platform and bastion host that provides secure, audited access to SSH, RDP,… | 99 | 31455 | stable |
| mukul975/Anthropic-Cybersecurity-Skills A large open-source library of structured cybersecurity skills (Markdown files with YAML frontmatter) for AI coding agents, mapped to frame… | 78 | 31259 | active |
| projectdiscovery/nuclei Nuclei is a fast, open-source vulnerability scanner built on a simple YAML-based template DSL, maintained by ProjectDiscovery. It uses a la… | 98 | 30855 | active |
| CloakHQ/CloakBrowser CloakBrowser is a stealth Chromium distribution with 73 source-level C++ fingerprint patches that passes major bot-detection systems like C… | 81 | 30849 | active |
| openssl/openssl OpenSSL is a full-featured open-source toolkit implementing TLS, DTLS, and QUIC protocols on top of a general-purpose cryptographic library… | 95 | 30694 | stable |
| trailofbits/algo Algo VPN is a set of Ansible scripts that automates deploying a personal WireGuard and IPsec (IKEv2) VPN server on common cloud providers. … | 77 | 30365 | active |
| better-auth/better-auth Better Auth is a framework-agnostic authentication and authorization framework for TypeScript that ships with comprehensive features like e… | 87 | 29706 | active |
| zhaoxuya520/reverse-skill A cybersecurity skill router pack that directs AI coding agents (Claude Code, Cursor, Cline, Kiro) to the right reverse-engineering, penetr… | 69 | 29591 | active |
| Signal Private Messenger Signal is a free, open-source private messenger offering end-to-end encrypted text, voice, and video communication, built on the Signal Pro… | 95 | 29262 | stable |
| Harbor Harbor is an open source cloud native container registry that stores, signs, and scans container images and other OCI artifacts. It extends… | 96 | 29236 | stable |
| Infisical/infisical Infisical is an open-source platform for secrets management, certificate lifecycle management, KMS, and privileged access management, usabl… | 95 | 28981 | stable |
| authelia/authelia Authelia is an open-source authentication and authorization server and portal providing single sign-on (SSO) and multi-factor authenticatio… | 95 | 28712 | active |
| netbirdio/netbird NetBird is an open-source zero-trust networking platform that builds WireGuard-based peer-to-peer overlay networks with centralized access … | 95 | 28676 | active |
| keepassxreboot/keepassxc KeePassXC is a cross-platform, open-source password manager that stores passwords and other sensitive data in an offline, AES-256/Twofish-e… | 79 | 28549 | stable |
| ente/ente Ente is an open-source, end-to-end encrypted cloud platform with client apps for photos (a Google Photos alternative), document/credential … | 94 | 28513 | active |
| hwdsl2/setup-ipsec-vpn A set of automated shell scripts that install and configure a self-hosted IPsec VPN server (IPsec/L2TP, Cisco IPsec, and IKEv2) on Linux us… | 77 | 28390 | active |
| fingerprintjs/fingerprintjs FingerprintJS is an open-source, client-side browser fingerprinting library that queries browser attributes and computes a hashed visitor i… | 86 | 28354 | active |
| digitalocean/nginxconfig.io A web-based NGINX configuration generator that produces optimized, secure nginx.conf files from user-selected options. It supports HTTPS, H… | 32 | 28270 | stable |
| trufflesecurity/trufflehog TruffleHog is an open-source secrets scanning tool that discovers, classifies, validates, and analyzes leaked credentials across Git reposi… | 95 | 27599 | active |
| OpenZeppelin Contracts OpenZeppelin Contracts is a library of secure, community-vetted Solidity smart contracts for Ethereum and other EVM blockchains. It provide… | 89 | 27234 | stable |
| wg-easy/wg-easy wg-easy is an all-in-one Docker application that runs a WireGuard VPN server together with a web-based admin UI for managing it. It lets ad… | 99 | 26771 | active |
| hashcat Hashcat is the world's fastest and most advanced password recovery utility, supporting over 300 highly-optimized hashing algorithms across … | 80 | 26631 | active |
| robertdavidgraham/masscan Masscan is an Internet-scale TCP port scanner written in C that transmits 10 million SYN packets per second, capable of scanning the entire… | 58 | 25955 | active |
| iBotPeaches/Apktool Apktool is a Java-based command-line tool for reverse engineering Android APK files. It decodes resources and manifest files to nearly orig… | 89 | 25386 | stable |
| goauthentik/authentik authentik is an open-source Identity Provider (IdP) and Single Sign-On (SSO) platform supporting SAML, OAuth2/OIDC, LDAP, SCIM, RADIUS, and… | 95 | 25178 | active |
| cilium/cilium Cilium is an open-source networking, security, and observability solution for Kubernetes and container workloads built on an eBPF-based dat… | 95 | 25014 | stable |
| zama-ai/fhevm FHEVM is a full-stack framework from Zama that enables confidential smart contracts on EVM-compatible blockchains using Fully Homomorphic E… | 86 | 24825 | active |
| radare2 Radare2 is a libre reverse engineering framework and command-line toolset for analyzing, disassembling, debugging, emulating, and modifying… | 94 | 24652 | active |
| promptfoo/promptfoo Promptfoo is an open-source CLI and library for evaluating and red-teaming LLM applications, prompts, agents, and RAG pipelines. It support… | 92 | 24603 | active |
| heartcombo/devise Devise is a flexible, modular authentication solution for Rails applications built on top of Warden. It provides complete MVC-based user au… | 89 | 24358 | stable |
| qeeqbox/social-analyzer Social Analyzer is an OSINT tool available as a Web App, CLI, and API that finds and analyzes a person's profile across 1000+ social media … | 60 | 23835 | active |
| Passport Passport is authentication middleware for Node.js and Express that authenticates requests through a modular system of 500+ strategy plugins… | 32 | 23534 | stable |
| osquery/osquery osquery is a SQL-powered operating system instrumentation, monitoring, and analytics framework that exposes OS data as a high-performance r… | 92 | 23524 | active |
| slimtoolkit/slim SlimToolkit is a CLI tool that inspects, optimizes, and debugs container images, minifying them by up to 30x without changing the applicati… | 66 | 23408 | active |
| FiloSottile/age age is a simple, modern, and secure file encryption tool, format, and Go library with small explicit keys, no config options, and UNIX-styl… | 64 | 23335 | stable |
| getsops/sops SOPS is a CLI tool for encrypting and decrypting configuration files (YAML, JSON, ENV, INI, and binary) while keeping keys and structure vi… | 97 | 22932 | stable |
| Magic Wormhole Magic Wormhole is a Python library and command-line tool for securely transferring arbitrary-sized files, directories, or short text betwee… | 77 | 22880 | stable |
| fosrl/pangolin Pangolin is an open-source, identity-aware remote access platform built on WireGuard that combines VPN and tunneled reverse proxy capabilit… | 84 | 22501 | active |
| chaitin/SafeLine SafeLine is a self-hosted web application firewall (WAF) that acts as an Nginx-based reverse proxy to protect web apps from attacks like SQ… | 96 | 22445 | active |
| renovatebot/renovate Renovate is a cross-platform CLI tool that automatically detects outdated dependencies in repositories and creates pull requests to update … | 95 | 22349 | active |
| NVIDIA/NemoClaw NVIDIA NemoClaw is an open-source reference stack for running AI coding agents such as OpenClaw, Hermes, and LangChain Deep Agents Code sec… | 59 | 22287 | active |
| DarkFlippers/unleashed-firmware Unleashed Firmware is an unofficial custom firmware (CFW) for the Flipper Zero multitool device, written in C. It extends the stock firmwar… | 95 | 22122 | active |
| opa334/TrollStore TrollStore is a permanently signed jailed iOS app that exploits an AMFI/CoreTrust bug to install any IPA with arbitrary entitlements and ro… | 70 | 22070 | active |
| vxcontrol/pentagi PentAGI is a self-hosted, fully autonomous multi-agent AI system for performing complex penetration testing tasks, built in Go with a React… | 78 | 22033 | active |
| gentilkiwi/mimikatz mimikatz is a well-known Windows security tool written in C that extracts plaintext passwords, hashes, PINs, and Kerberos tickets from memo… | 57 | 21799 | active |
| Frida Frida is a dynamic instrumentation toolkit that lets developers, reverse-engineers, and security researchers inject JavaScript or native li… | 94 | 21752 | active |
| TecharoHQ/anubis Anubis is a Go-based web proxy middleware that weighs the 'soul' of incoming HTTP requests using proof-of-work challenges to block AI crawl… | 86 | 21742 | active |
| MobSF/Mobile-Security-Framework-MobSF MobSF is an automated all-in-one mobile application security testing framework for Android, iOS, and Windows Mobile apps. It performs stati… | 94 | 21650 | active |
| bee-san/Ciphey Ciphey is a Rust-based CLI tool and library that automatically decrypts encryptions without a known key or cipher, decodes encodings, and c… | 67 | 21580 | active |
| alibaba/open-code-review OpenCodeReview is an AI-powered code review CLI tool that combines deterministic analysis pipelines with an LLM Agent to produce precise li… | 76 | 21468 | active |
| smicallef/spiderfoot SpiderFoot is an open-source OSINT automation tool that integrates with over 200 data sources to gather and analyze intelligence about targ… | 57 | 21441 | active |
| twpayne/chezmoi chezmoi is a CLI tool for managing personal configuration files (dotfiles) across multiple machines, written in Go and distributed as a sin… | 98 | 21325 | stable |
| gravitational/teleport Teleport is an identity-aware access proxy and certificate authority that provides unified, credential-free access to SSH servers, Kubernet… | 93 | 20852 | stable |
| Nyr/openvpn-install A Bash script that installs and configures an OpenVPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minut… | 73 | 20616 | active |
| motdotla/dotenv A zero-dependency Node.js module that loads environment variables from a .env file into process.env, following the Twelve-Factor App config… | 75 | 20525 | stable |
| peass-ng/PEASS-ng PEASS-ng is a suite of privilege escalation enumeration scripts (LinPEAS for Linux/Unix/macOS and WinPEAS for Windows) that scan local syst… | 95 | 20381 | active |
| apache/casbin Apache Casbin is an open-source authorization library that enforces access control using models such as ACL, RBAC, ABAC, ReBAC, and MAC, de… | 98 | 20349 | stable |
| bee-san/RustScan RustScan is a fast, modern port scanner written in Rust that can scan all 65k ports in seconds. It includes a scripting engine (Python, Lua… | 67 | 20331 | active |
| bettercap/bettercap bettercap is a Go-based, all-in-one framework for network reconnaissance and man-in-the-middle attacks across WiFi, Bluetooth Low Energy, w… | 88 | 19865 | active |
| mxrch/GHunt GHunt is an offensive Google framework focused on OSINT, usable both as a CLI tool and as a Python library. It can gather information about… | 57 | 19425 | active |
| simplex-chat/simplex-chat SimpleX Chat is a private messaging platform and set of mobile/desktop apps that operate without any user identifiers, delivering end-to-en… | 99 | 19316 | active |
| sandboxie-plus/Sandboxie Sandboxie Plus and Classic are open-source sandbox-based isolation applications for Windows that run programs in isolated environments with… | 99 | 19260 | active |
| gVisor gVisor is an application kernel written in Go that implements a Linux-compatible syscall interface in userspace, providing strong isolation… | 88 | 19163 | stable |
| amark/gun GUN is an open-source decentralized graph database protocol and JavaScript library for syncing data peer-to-peer in realtime, with offline-… | 66 | 19127 | active |
| cheat-engine/cheat-engine Cheat Engine is a desktop development environment for modding games and applications, centered on a memory scanner that finds and edits pro… | 30 | 19055 | active |
| dromara/Sa-Token Sa-Token is a lightweight, open-source Java authentication and authorization framework covering login authentication, permission checks, di… | 95 | 19005 | stable |
page 1 / 48 next →