domain: security
4787 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| zhoutaoo/SpringCloud Opensabre is a microservices development platform built on Spring Cloud 2023, integrating Spring Security, Spring Cloud Alibaba (Nacos, Sen… | 75 | 8936 | active |
| MuntashirAkon/AppManager App Manager is a full-featured open-source package manager and app inspector for Android. It lets users install, uninstall, back up, and de… | 96 | 8875 | active |
| owncloud/core ownCloud Core is the server-side component of ownCloud Classic, a self-hosted file storage, sync, and sharing platform written in PHP. It p… | 98 | 8827 | stable |
| BornToBeRoot/NETworkManager NETworkManager is a free, open-source Windows application that bundles 27 network management and troubleshooting tools into a unified GUI, … | 88 | 8721 | active |
| sitaramc/gitolite Gitolite is a self-hosted Git repository hosting tool for Unix servers that provides fine-grained, file-based access control over repositor… | 75 | 8591 | stable |
| Solid Solid is a set of open standards and tools for building decentralized web applications where users store their data in personal online data… | 10 | 8091 | active |
| cryptpad/cryptpad CryptPad is an open-source, end-to-end encrypted collaborative office suite that synchronizes documents in real time. It includes rich text… | 91 | 7880 | stable |
| SimoneAvogadro/android-reverse-engineering-skill A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs an app uses, including Retrofit, OkHttp, Ktor… | 58 | 7686 | active |
| Mailu/Mailu Mailu is a full-featured, self-hosted email server distributed as a set of Docker images, providing SMTP, IMAP, webmail, and an admin inter… | 98 | 7489 | active |
| Gozargah/Marzban Marzban is a self-hosted proxy management panel with a web GUI for managing hundreds of Xray-core-based proxy accounts (VLESS, VMess, Troja… | 72 | 7340 | active |
| ehang-io/nps NPS is a lightweight, high-performance intranet penetration (reverse proxy/tunnel) server written in Go, supporting TCP, UDP, HTTP(S), SOCK… | 23 | 34205 | maintenance |
| hhyo/Archery Archery is a self-hosted SQL audit and query platform built with Django. It provides SQL review, execution, querying, backup, session and a… | 82 | 7033 | active |
| throneproj/Throne Throne (formerly Nekoray) is a Qt-based cross-platform desktop GUI proxy client powered by the sing-box core, with additional Xray support.… | 92 | 7005 | active |
| simple-login/app SimpleLogin is an open-source email aliasing service that lets users create unique aliases to receive and send emails without exposing thei… | 94 | 6964 | active |
| masterking32/MasterDnsVPN MasterDnsVPN is a DNS tunneling VPN tool written in Go for bypassing internet censorship, optimized beyond DNSTT and SlipStream. It feature… | 78 | 6960 | active |
| sysown/proxysql ProxySQL is a high-performance, protocol-aware SQL proxy for MySQL, MariaDB, Percona Server, and PostgreSQL that sits between applications … | 95 | 6909 | stable |
| Shadowsocks ShadowsocksX-NG is a macOS GUI client for the Shadowsocks proxy protocol, rewritten in Swift with ss-local running as a background Launch A… | 23 | 32882 | maintenance |
| haproxy/haproxy HAProxy is a fast, reliable open-source reverse proxy and load balancer for TCP and HTTP-based applications, providing high availability, T… | 77 | 6828 | stable |
| fullstackhero/dotnet-starter-kit A production-grade .NET 10 starter kit template combining a modular-monolith Web API (vertical slice architecture) with two React 19 front-… | 83 | 6758 | active |
| elazarl/goproxy GoProxy is a Go library for building customized HTTP/HTTPS proxy servers as a net/http handler. It supports regular proxying, CONNECT tunne… | 98 | 6753 | stable |
| pig-mesh/pig Pig is an enterprise-grade RBAC rapid development platform built on Spring Cloud, Spring Boot 4, and OAuth2 (Spring Authorization Server), … | 85 | 6680 | active |
| standardnotes/app Standard Notes is an end-to-end encrypted note-taking application for web, desktop, and mobile with cross-device sync and optional self-hos… | 99 | 6619 | active |
| tock/tock Tock is an embedded operating system for low-power, low-memory microcontrollers that runs multiple concurrent, mutually distrustful applica… | 68 | 6433 | active |
| expressjs/cors A Node.js middleware for Express and Connect that sets CORS response headers, telling browsers which origins may read responses from your s… | 70 | 6194 | stable |
| FederatedAI/FATE FATE (Federated AI Technology Enabler) is an industrial-grade open-source federated learning framework hosted by the Linux Foundation. It e… | 23 | 6090 | active |
| foxcpp/maddy Maddy is a composable all-in-one mail server written in Go that combines an SMTP MTA/MX, IMAP storage, and email security protocols (DKIM, … | 94 | 6079 | active |
| mjl-/mox Mox is an all-in-one, secure, open source mail server written in Go, combining SMTP, IMAP4, webmail, SPF/DKIM/DMARC, DANE/MTA-STS, automati… | 93 | 5840 | active |
| Giskard-AI/giskard-oss Giskard is an open-source Python library for testing, evaluating, and red-teaming LLM-based agents and RAG systems. Its v3 rewrite provides… | 95 | 5802 | active |
| aidlearning/AidLearning-FrameWork AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 69 | 5801 | active |
| extism/extism Extism is a cross-language framework for building with WebAssembly, providing host SDKs and plugin development kits to securely load and ru… | 91 | 5754 | active |
| kgateway-dev/kgateway kgateway is a Kubernetes-native API gateway and ingress controller that implements the Kubernetes Gateway API as a control plane for Envoy … | 95 | 5682 | stable |
| Jrohy/trojan A multi-user trojan proxy management and deployment tool written in Go, offering both a web panel and a CLI for administering trojan/trojan… | 23 | 5643 | active |
| haraka/Haraka Haraka is a fast, highly extensible, event-driven SMTP server written in Node.js with a modular plugin architecture. It is widely deployed … | 92 | 5616 | stable |
| adamchainz/django-cors-headers A Django app that adds Cross-Origin Resource Sharing (CORS) headers to HTTP responses via middleware. It allows in-browser requests to a Dj… | 76 | 5586 | stable |
| ProtonMail/WebClients The official monorepo for Proton's web clients, including Proton Mail, Calendar, Drive, VPN, Pass, Wallet, and more. It is built with React… | 84 | 5570 | active |
| unkeyed/unkey Unkey is an open-source, source-available developer platform for modern APIs that combines instant deployments, a globally distributed gate… | 93 | 5428 | active |
| tobychui/zoraxy Zoraxy is a general-purpose HTTP reverse proxy and forwarding tool written in Go, managed through a built-in web interface designed for hom… | 99 | 5426 | active |
| RaspAP/raspap-webgui RaspAP is a full-featured wireless router and access point management application for Debian-based devices such as the Raspberry Pi, provid… | 97 | 5219 | active |
| vyperlang/vyper Vyper is a Pythonic smart contract language that compiles to Ethereum Virtual Machine (EVM) bytecode, emphasizing security, simplicity, and… | 75 | 5180 | active |
| xvzc/spoofdpi SpoofDPI is a lightweight, cross-platform proxy tool written in Go that circumvents Deep Packet Inspection (DPI) based internet censorship … | 90 | 5008 | active |
| iflytek/skillhub SkillHub is a self-hosted, enterprise-grade registry for AI agent skill packages, letting teams publish, version, discover, and install reu… | 82 | 4968 | active |
| dpgaspar/Flask-AppBuilder Flask-AppBuilder is a rapid application development framework built on top of Flask, providing automatic CRUD generation for SQLAlchemy mod… | 92 | 4958 | stable |
| SadeghHayeri/GreenTunnel GreenTunnel is an anti-censorship tool that bypasses ISP Deep Packet Inspection (DPI) systems by splitting TLS ClientHello packets and usin… | 98 | 4905 | active |
| lunatic-solutions/lunatic Lunatic is an Erlang-inspired runtime for WebAssembly that provides super lightweight, sandboxed processes for building fast, fault-toleran… | 29 | 4886 | active |
| anonaddy/anonaddy The self-hostable source code for addy.io (formerly AnonAddy), an open-source anonymous email forwarding service. It lets users create emai… | 100 | 4829 | active |
| zlt2000/microservices-platform An enterprise-grade, front-end/back-end separated microservices platform built on Spring Boot 3.x, Spring Cloud, and Spring Cloud Alibaba. … | 31 | 4749 | active |
| agentgateway/agentgateway Agentgateway is an open-source, Rust-based proxy and gateway for agentic AI traffic, handling LLM provider routing, MCP tool servers, and A… | 83 | 4707 | active |
| JZ-Darkal/AndroidHttpCapture AndroidHttpCapture is an Android network diagnostic and packet capture app, essentially a mobile version of Fiddler. It captures HTTP/HTTPS… | 59 | 4603 | active |
| hestiacp/hestiacp Hestia Control Panel is an open-source, lightweight web hosting control panel for Linux servers that provides a web and CLI interface for m… | 99 | 4489 | active |
| trojan-gfw/trojan Trojan is a C++ proxy server/client that disguises traffic as ordinary HTTPS over TLS to bypass the Great Firewall of China. It implements … | 23 | 19755 | maintenance |
| lwch/natpass natpass is a self-hosted host management tool written in Go that provides web-based shell access, remote desktop (VNC), and code-server int… | 67 | 4446 | active |
| denuitt1/mhr-cfw A Python-based MITM domain-fronting relay that routes HTTP traffic through Google Apps Script and Cloudflare Workers so network DPI filters… | 67 | 4406 | active |
| vaxilu/x-ui x-ui is a web-based control panel for managing Xray proxy servers, supporting multiple protocols (vmess, vless, trojan, shadowsocks, etc.) … | 23 | 19081 | maintenance |
| rocky/python-uncompyle6 uncompyle6 is a cross-version Python bytecode decompiler that translates bytecode from Python 1.0 through 3.8 back into equivalent Python s… | 61 | 4319 | active |
| archestra-ai/archestra Archestra is an open-source, self-hosted enterprise AI platform combining an agentic chat UI, agent runtime, LLM gateway/proxy, MCP gateway… | 82 | 4242 | active |
| fwupd/fwupd fwupd is a system daemon for Linux that enables session software to safely and automatically update device firmware. It provides a D-Bus in… | 98 | 4136 | stable |
| cbeuw/Cloak Cloak is a pluggable transport that masquerades proxied traffic as ordinary HTTPS web browsing to evade deep packet inspection and censorsh… | 63 | 4073 | active |
| octelium/octelium Octelium is a free, open-source, self-hosted unified zero trust secure access platform built on Kubernetes. It can operate as a remote acce… | 86 | 4034 | active |
| kumahq/kuma Kuma is a CNCF Sandbox, Envoy-based service mesh that provides L4-L7 connectivity, discovery, security (mTLS), observability, and traffic c… | 96 | 3998 | stable |
| arvin341az-glitch/RVG RVG Gateway is a self-hosted multi-protocol proxy management panel built with Python and FastAPI. It provides an admin dashboard for creati… | 58 | 3992 | active |
| cacggghp/vk-turn-proxy A Go tool that tunnels WireGuard (or Hysteria) traffic through TURN servers of VK Calls / Yandex Telemost, encrypting packets with DTLS 1.2… | 66 | 3977 | active |
| ruby/rubygems RubyGems is the package management framework for Ruby, providing the `gem` command to install, create, manage, and load gems (Ruby packages… | 95 | 3962 | stable |
| masterking32/MasterHttpRelayVPN A local HTTP/SOCKS5 proxy that tunnels browser traffic through a Google Apps Script relay using domain fronting, making the connection appe… | 53 | 3908 | active |
| 1024-lab/smart-admin SmartAdmin is a rapid development platform (scaffold/admin framework) built on SpringBoot 2/3 + Sa-Token + MyBatis-Plus for the backend and… | 85 | 3857 | active |
| jorisvink/kore Kore is an easy-to-use, scalable web application framework for writing web APIs and concurrent web processes in C or Python. It is secure b… | 68 | 3823 | stable |
| winscp/winscp WinSCP is a free, open-source file manager and transfer client for Windows supporting SFTP, FTP, FTPS, SCP, S3, WebDAV, and local-to-local … | 77 | 3816 | stable |
| sozu-proxy/sozu Sōzu is a fast, always-up HTTP and TCP reverse proxy written in Rust that can be reconfigured at runtime without reloads and upgrades itsel… | 99 | 3723 | active |
| esrrhs/pingtunnel Pingtunnel is a Go-based tool that tunnels TCP and UDP traffic over ICMP echo packets, with a client-server architecture and SOCKS5 forward… | 93 | 3713 | active |
| webhintio/hint webhint is a customizable linting engine for the web that checks sites and code for accessibility, performance, security, cross-browser com… | 65 | 3700 | active |
| pgrok/pgrok pgrok is a self-hosted, multi-tenant HTTP/TCP reverse tunnel solution that exposes local development environments to the public internet us… | 82 | 3639 | active |
| maticzav/graphql-shield GraphQL Shield is a TypeScript library that lets you build a permission layer for GraphQL servers using an intuitive rule-based API. It wor… | 68 | 3579 | stable |
| therealaleph/MasterHttpRelayVPN-RUST A Rust port of MasterHttpRelayVPN that bypasses censorship and DPI/SNI blocking by tunneling traffic through a free Google Apps Script rela… | 77 | 3574 | active |
| unitycatalog/unitycatalog Unity Catalog is an open-source, multimodal data and AI catalog that provides a unified metadata and governance layer for tables, files, fu… | 87 | 3507 | active |
| peasoft/NoMoreWalls A Python project that automatically fetches and merges publicly available proxy nodes from the internet and republishes them as Base64 and … | 77 | 3472 | active |
| tursodatabase/agentfs AgentFS is a filesystem designed for AI agents that stores an agent's entire files, state, and operation history in a single SQLite file. I… | 69 | 3388 | active |
| hufrea/byedpi ByeDPI (ciadpi) is a C program implementing various DPI (Deep Packet Inspection) bypass methods, running as a local SOCKS proxy server. It … | 67 | 3385 | active |
| model-checking/kani Kani is a bit-precise model checker for Rust that formally verifies safety and correctness properties of Rust programs. It uses proof harne… | 84 | 3380 | active |
| Lagrange-Labs/deep-prove DeepProve is a Rust framework for generating zero-knowledge proofs of neural network inference, including end-to-end proving of full LLM fo… | 59 | 3353 | active |
| google/differential-privacy Google's collection of differential privacy libraries for computing ε- and (ε, δ)-differentially private statistics over datasets. It inclu… | 78 | 3351 | active |
| hanwckf/rt-n56u A custom Padavan-based firmware for the ASUS RT-N56U and other MT7621-based routers, written in C. It gives power users full control over t… | 23 | 3345 | active |
| cyu/rack-cors Rack middleware that adds Cross-Origin Resource Sharing (CORS) support to Rack-compatible Ruby web applications, including Rails. It lets y… | 42 | 3289 | active |
| storj/storj Storj is a decentralized, S3-compatible cloud object storage network that encrypts files, splits them into pieces, and distributes them acr… | 95 | 3277 | active |
| open-policy-agent/conftest Conftest is a CLI utility for writing tests against structured configuration data using the Open Policy Agent Rego language. It validates f… | 98 | 3256 | active |
| vnt-dev/vnt VNT is a Rust-based VPN tool for quickly building virtual LANs across the internet, with NAT traversal, P2P tunnels, and point-to-network /… | 99 | 3200 | active |
| IRNova/Nova-Proxy Nova Proxy is a censorship-resistant proxy panel deployed as a single Cloudflare Worker, providing VLESS, Trojan, Shadowsocks, and WARP sub… | 81 | 3189 | active |
| crossutility/Quantumult-X Quantumult X is a network proxy and traffic manipulation tool for iOS, rebuilt from scratch with support for TUN-based traffic, HTTPS MitM … | 72 | 3167 | active |
| samber/cc-skills-golang A curated collection of 46 Go-specific agent skills (reusable instruction sets) for AI coding assistants like Claude Code, Codex, Gemini CL… | 82 | 3155 | active |
| easychen/CookieCloud CookieCloud is a browser extension plus self-hosted server that syncs browser cookies and localStorage across devices with end-to-end encry… | 92 | 3141 | active |
| Geph Geph (迷霧通) is a modular Internet censorship circumvention system designed to defeat national-level filtering such as China's Great Firewall… | 34 | 3032 | active |
| mirage/mirage MirageOS is a library operating system written in OCaml that compiles application code into fully standalone, specialized unikernels for se… | 95 | 2983 | active |
| sherlockchou86/VideoPipe VideoPipe is a C++ framework for video analysis and structuring that works like a pipeline of independent, composable nodes. It integrates … | 53 | 2934 | active |
| rs/cors rs/cors is a Go library providing a configurable net/http handler that implements the Cross Origin Resource Sharing (CORS) W3C specificatio… | 70 | 2899 | stable |
| patterniha/MITM-DomainFronting A method and configuration toolkit that intercepts unencrypted browser traffic via a man-in-the-middle local proxy and forwards it to block… | 74 | 2861 | active |
| LyricTian/gin-admin A full-featured RBAC admin scaffolding framework for Go built on Gin, GORM 2.0, Casbin 2.0, and Wire dependency injection. It ships with JW… | 34 | 2858 | active |
| didip/tollbooth Tollbooth is a Go middleware library for rate-limiting HTTP requests. It supports limiting by remote IP, path, HTTP methods, custom headers… | 32 | 2852 | stable |
| shadowsocks/v2ray-plugin A SIP003 plugin for Shadowsocks built on v2ray, tunneling traffic over WebSocket (HTTP/HTTPS) or QUIC to obfuscate proxy traffic. Written i… | 64 | 2846 | active |
| deeplethe/forkd forkd is a microVM sandbox runtime for AI agent fan-out, built on Firecracker, that forks up to 100 isolated child VMs in ~100ms from a war… | 79 | 2826 | active |
| coreboot/coreboot coreboot is an open-source firmware project that replaces proprietary BIOS/UEFI on computers, performing hardware initialization and then h… | 68 | 2779 | active |
| glados-network/GLaDOS GLaDOS is a commercial networking/VPN service (Generic Local and Destination Operating System) that helps users manage and secure their net… | 59 | 2749 | active |
| Alvin9999-newpac/fanqiang A curated collection of free censorship-circumvention tools, pre-configured one-click proxy browsers, and free proxy accounts/nodes (shadow… | 61 | 2739 | active |