domain: security
4787 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| secretflow/secretflow SecretFlow is a unified Python framework for privacy-preserving data analysis and machine learning. It layers cryptographic devices (MPC, H… | 68 | 2703 | active |
| doronz88/pymobiledevice3 A pure Python 3 implementation for interacting with iOS devices (iPhone, iPad) over USB and network, providing both a CLI tool and a Python… | 95 | 2702 | active |
| ihciah/shadow-tls ShadowTLS is a TLS camouflage proxy written in Rust that relays a real TLS handshake with a valid certificate of your choice to the firewal… | 30 | 2680 | active |
| szTheory/exifcleaner ExifCleaner is a free, open-source cross-platform desktop GUI app that strips EXIF and other metadata from images, videos, and PDFs using E… | 99 | 2662 | active |
| thepirat000/Audit.NET Audit.NET is an extensible .NET framework for generating audit logs of executing operations, capturing environmental data like user ID, mac… | 76 | 2647 | active |
| risesoft-y9/Digital-Infrastructure Digital-Infrastructure (数字底座) is a Java/Spring Boot + Vue 3 rapid development platform for large government and enterprise digital transfor… | 64 | 2611 | active |
| FISCO-BCOS/FISCO-BCOS FISCO BCOS is an open-source permissioned (consortium) blockchain platform written in C++, originally launched by the Financial Blockchain … | 84 | 2602 | active |
| hmgle/graftcp graftcp is a Linux command-line tool that redirects TCP, UDP, and DNS traffic of arbitrary processes to SOCKS5 or HTTP proxies using ptrace… | 96 | 2565 | active |
| graphistry/pygraphistry PyGraphistry is a Python library for loading, shaping, and visually exploring large graphs with GPU-accelerated rendering and analytics via… | 100 | 2551 | active |
| Agent-Field/agentfield AgentField is an open-source AI backend that lets you build, deploy, and govern AI agents like APIs and scale them like microservices. It p… | 80 | 2550 | active |
| enfein/mieru Mieru is a censorship-resistant socks5/HTTP/HTTPS proxy written in Go, consisting of a client (mieru) and server (mita). It uses XChaCha20-… | 99 | 2520 | active |
| brianshea2/addr.tools A collection of free DNS-based Internet utilities (dynamic DNS, public IP lookup, ACME dns-01 challenge helper, DNS resolver testing) plus … | 69 | 2473 | active |
| inference-labs-inc/subnet-2 Subnet 2 on the Bittensor network implements a Proof-of-Inference system that uses zero-knowledge machine learning (zk-ML) to cryptographic… | 88 | 2446 | active |
| dndx/phantun Phantun is a lightweight, high-performance UDP-to-TCP obfuscator written in safe Rust that disguises UDP packets as TCP streams to pass thr… | 71 | 2380 | active |
| ulule/limiter A dead-simple rate limiting middleware library for Go supporting HTTP, FastHTTP, and Gin. It uses a pluggable store approach with built-in … | 23 | 2342 | stable |
| vpnhood/VpnHood VpnHood is an open-source, cross-platform VPN client and server built entirely from scratch in C#/.NET, designed to be undetectable by deep… | 98 | 2331 | active |
| gjtorikian/html-pipeline A Ruby library providing a small framework of chainable filters for processing user-supplied content into HTML. It supports text filters, c… | 69 | 2328 | active |
| jeremyckahn/chitchatter Chitchatter is a free, open-source communication tool offering secure peer-to-peer chat, video, audio, and file sharing directly between br… | 77 | 2323 | active |
| wasmi-labs/wasmi Wasmi is an efficient, lightweight WebAssembly interpreter written in Rust, focused on constrained and embedded (no_std) environments. It o… | 100 | 2274 | active |
| wemake-services/wemake-django-template A bleeding-edge Cookiecutter template for scaffolding Django projects with a strong focus on code quality, security, and scalability. It sh… | 67 | 2271 | active |
| matrix-org/matrix-rust-sdk A collection of Rust crates implementing the Matrix Client-Server SDK, handling low-level details like encryption, syncing, and room state.… | 95 | 2270 | active |
| iText iText is a high-performance PDF library/SDK for Java and .NET that lets developers create, manipulate, inspect, sign, and secure PDF docume… | 93 | 2255 | stable |
| learnhouse/learnhouse LearnHouse is a next-generation open-source learning management system (LMS) for creating, sharing, and selling educational content. It com… | 99 | 2234 | active |
| dou-jiang/codex-console A Python-based integrated console for automating OpenAI/Codex account registration, login, token retrieval, subscription management, and up… | 72 | 2231 | active |
| AbsInt/CompCert CompCert is a formally verified C compiler whose correctness is machine-checked with the Coq proof assistant, guaranteeing generated assemb… | 88 | 2221 | active |
| OpenIPC/firmware OpenIPC is an open-source, Buildroot-based alternative firmware for IP cameras, supporting SoCs from HiSilicon, SigmaStar, Ingenic, Novatek… | 91 | 2178 | active |
| BoCloud/folib Folib is a self-hosted, all-language artifact repository manager supporting npm, Maven, PyPI, Docker, Go, Cargo, NuGet, Helm, and many othe… | 54 | 2178 | active |
| p4gefau1t/trojan-go Trojan-Go is a full-featured Trojan proxy written in Go that disguises proxy traffic as normal TLS traffic to bypass censorship systems lik… | 23 | 8386 | maintenance |
| apache/atlas Apache Atlas is an open-source metadata management and data governance framework providing a shared metadata store, data lineage, and class… | 77 | 2138 | active |
| ferronweb/ferron Ferron is a fast, memory-safe web server written in Rust with automatic TLS certificate management via Let's Encrypt. It offers static file… | 84 | 2129 | active |
| adamfisk/LittleProxy LittleProxy is a high-performance HTTP(S) proxy written in Java on top of the Netty networking library. It can be run standalone from the c… | 23 | 2127 | active |
| Faceplugin-ltd/Open-Source-Face-Recognition-SDK An open-source face recognition SDK by Faceplugin providing face detection, landmark extraction, feature embedding generation, and face tem… | 64 | 2118 | active |
| oxen-io/lokinet Lokinet is the reference implementation of LLARP, a low-latency layer 3 onion routing protocol that forms a decentralized, IP-based overlay… | 67 | 2085 | active |
| cloudflare/cloudflare-go The official Go SDK for the Cloudflare REST API, generated with Stainless and covering Cloudflare products such as zones, DNS, and Zero Tru… | 100 | 2083 | active |
| mudler/edgevpn EdgeVPN is a statically compiled, decentralized p2p VPN built on libp2p that creates private networks joined via shared tokens, with no cen… | 100 | 2073 | active |
| Shadowrocket for Android Shadowrocket for Android is an Android VPN and proxy client that supports protocols like Shadowsocks, VMess, VLESS, Trojan, and Hysteria2, … | 78 | 2062 | active |
| alibaba/anyproxy AnyProxy is a fully configurable HTTP/HTTPS proxy server built on Node.js, supporting custom rule modules to intercept, modify, and inspect… | 32 | 7902 | maintenance |
| laurentS/slowapi SlowAPI is a rate limiting library for Starlette and FastAPI, adapted from flask-limiter and built on top of the limits package. It support… | 84 | 2053 | stable |
| aiortc/aioquic aioquic is a Python library implementing the QUIC network protocol (RFC 9000/9369) with a minimal TLS 1.3 implementation and an HTTP/3 stac… | 52 | 2002 | active |
| gin-contrib/cors The official CORS (Cross-Origin Resource Sharing) middleware for the Gin web framework in Go. It provides configurable handling of allowed … | 87 | 2001 | stable |
| openlibrecommunity/olcrtc olcRTC is an encrypted TCP-over-WebRTC tunnel written in Go that disguises traffic as ordinary video calls on whitelisted meeting services … | 59 | 1996 | active |
| justcoding121/titanium-web-proxy Titanium Web Proxy is a lightweight, high-performance HTTP(S) proxy server library for .NET that can operate as a man-in-the-middle (MITM) … | 100 | 1987 | active |
| jplag/JPlag JPlag is a Java-based tool that detects plagiarism and collusion in sets of source code programs by computing pairwise similarities locally… | 78 | 1950 | active |
| spring-projects/spring-session Spring Session is a Java library providing an API and implementations for managing user session information in Spring applications. It repl… | 99 | 1938 | stable |
| nelmio/NelmioCorsBundle A Symfony bundle that adds Cross-Origin Resource Sharing (CORS) headers to responses with ACL-style per-URL configuration. It handles CORS … | 66 | 1926 | stable |
| dchapyshev/aspia Aspia is a free open-source remote desktop application with file transfer, remote terminal, system information, text chat, and video record… | 66 | 1921 | active |
| CHIZI-0618/box4magisk A Magisk/KernelSU/APatch module that deploys proxy cores such as sing-box, clash/mihomo, v2ray, xray, and hysteria on rooted Android device… | 57 | 1896 | active |
| ofdrw/ofdrw OFDRW is an open-source Java library for reading, writing, and manipulating OFD (Open Fixed-layout Document) files, a Chinese national stan… | 92 | 1859 | active |
| emweb/wt Wt is a C++ web toolkit for building highly interactive web applications using a widget-based GUI abstraction, without writing JavaScript. … | 99 | 1854 | stable |
| 188080501/JQTools JQTools is an open-source developer toolbox built with Qt/QML/C++ that bundles common small utilities: text processing, hash and encryption… | 90 | 1840 | active |
| FailproofAI/failproofai Failproof AI is an open-source observability and enforcement layer for AI agent harnesses like Claude Code, Codex, Hermes, and OpenClaw, ca… | 82 | 1837 | active |
| inference-labs-inc/inference-network Inference Network is a Proof of Inference system built on EigenLayer that provides trustless verification of AI inference results via Solid… | 50 | 1807 | active |
| x011/smtp-tunnel-proxy A Python-based covert tunneling tool that disguises TCP traffic as SMTP email sessions to evade Deep Packet Inspection firewalls. It expose… | 42 | 1787 | active |
| dreamfactorysoftware/dreamfactory DreamFactory is a self-hosted enterprise data access platform that instantly generates fully governed REST APIs from databases, file stores… | 98 | 1785 | active |
| SpatiumPortae/portal Portal is a command-line file transfer utility for sending files and folders between any two computers. It uses PAKE2 end-to-end encryption… | 23 | 1767 | active |
| standard-webhooks/standard-webhooks Standard Webhooks is an open specification plus reference libraries and tools for sending and verifying webhooks securely and consistently.… | 85 | 1739 | active |
| DanielLavrushin/b4 B4 (Bye Bye Big Bro) is a Linux service that bypasses Deep Packet Inspection (DPI) censorship by rewriting network packets via fragmentatio… | 81 | 1734 | active |
| aklivity/zilla Zilla is a stateless, multi-protocol gateway for event-driven applications and AI agents, exposing Kafka and MQTT over HTTP, SSE, gRPC, MQT… | 99 | 1731 | active |
| ballcat-projects/ballcat BallCat is a Java/Spring Boot rapid development scaffold for building enterprise-grade admin management systems, with companion frontend pr… | 84 | 1728 | active |
| wxiaoqi/Spring-Cloud-Platform A Chinese Spring Cloud microservices-based RBAC admin platform built on Spring Boot 2.4, Spring Cloud 2020.0.0 & Alibaba, with a d2-admin f… | 23 | 6402 | maintenance |
| s60sc/ESP32-CAM_MJPEG2SD An ESP32/ESP32-S3 camera application that detects motion and records JPEG frames to SD card as AVI files, optionally with WAV audio from a … | 95 | 1718 | active |
| justjake/quickjs-emscripten TypeScript bindings for the QuickJS JavaScript interpreter compiled to WebAssembly, letting you safely evaluate untrusted JavaScript inside… | 74 | 1702 | active |
| CluvexStudio/Aether Aether is a Rust-based censorship circumvention client for heavily restricted networks that discovers reachable gateways, builds encrypted … | 80 | 1699 | active |
| fruitcake/laravel-cors A Laravel package that adds Cross-Origin Resource Sharing (CORS) headers support via middleware, handling pre-flight OPTIONS requests and c… | 10 | 6236 | maintenance |
| cloudflare/foundations Foundations is Cloudflare's modular Rust library for building production-grade distributed services. It bundles logging, distributed tracin… | 61 | 1672 | stable |
| GVCoder09/NoDPI NoDPI is a Python utility that bypasses Deep Packet Inspection (DPI) censorship by running a local proxy server that fragments TLS ClientHe… | 83 | 1670 | active |
| Lozy/danted A shell script that automates installing and configuring the Dante SOCKS5 proxy server on Linux systems, with Docker support. It auto-detec… | 32 | 1670 | active |
| shadowsocksr-backup/shadowsocksr A Python port of ShadowsocksR, a fast encrypted tunnel proxy that helps users bypass firewalls and censorship. It provides a command-line s… | 32 | 6132 | maintenance |
| UniClipboard/UniClipboard UniClipboard is a privacy-first, cross-device clipboard synchronization application built with Rust and Tauri that syncs text, images, file… | 87 | 1656 | active |
| TenSunS TenSunS (formerly ConsulManager) is a Flask+Vue web-based ops platform built on Consul that provides an improved Consul management UI. It a… | 49 | 1639 | active |
| kulikov0/whitelist-bypass A Go-based tool that tunnels internet traffic through video calling platforms (VK Call, Yandex Telemost, WB Stream) to bypass government wh… | 80 | 1625 | active |
| iotexproject/iotex-core The official Go implementation of the IoTeX blockchain protocol, a modular DePIN-focused Layer-1 EVM-compatible network. It provides the fu… | 97 | 1612 | active |
| theopenco/llmgateway LLM Gateway is an open-source API gateway for large language models that sits between applications and 40+ LLM providers (OpenAI, Anthropic… | 87 | 1598 | active |
| doxx/darkflare DarkFlare is a Go command-line tool that tunnels TCP traffic over HTTPS through CDNs like Cloudflare, disguising it as ordinary web traffic… | 53 | 1596 | active |
| Kodiqa-Solutions/VaultS3 VaultS3 is a lightweight, S3-compatible object storage server written in Go, shipped as a single binary with a built-in web dashboard, encr… | 78 | 1580 | active |
| SuperDB SuperDB Desktop (Zui) is an Electron-based desktop application for exploring, searching, and transforming data, serving as the official fro… | 91 | 1567 | active |
| sharmajv/vpn A completely free Android VPN client (小三VPN / 3VPN) that requires no registration, has no speed or traffic limits, and shows no ads. It sup… | 32 | 5709 | maintenance |
| docker/mcp-gateway A Docker CLI plugin (docker-mcp) that provides the Docker MCP Gateway for securely running and deploying Model Context Protocol (MCP) serve… | 73 | 1553 | active |
| m4b/goblin Goblin is a Rust library for parsing and loading binary executable formats including ELF, Mach-O, PE, and Unix/BSD archives. It offers zero… | 77 | 1541 | stable |
| Shawn-Shan/fawkes Fawkes is a privacy protection tool from University of Chicago researchers that adds imperceptible adversarial perturbations to photos to p… | 23 | 5596 | maintenance |
| chatop2020/AKStream AKStream is a cross-platform, software-defined NVR (network video recorder) management and control platform written in C# on .NET 6, integr… | 75 | 1531 | active |
| raspberrypi/rpi-eeprom Official Raspberry Pi tooling of shell scripts and pre-compiled binaries for updating and configuring the bootloader EEPROM on Raspberry Pi… | 93 | 1522 | active |
| traceless/alist-encrypt A Node.js proxy service for Alist that adds transparent WebDAV encryption and decryption of files. It supports streaming encrypted video pl… | 74 | 1504 | active |
| stealthcopter/AndroidNetworkTools A Java library for Android providing handy networking utilities such as port scanning, subnet device discovery, ping, and Wake-on-LAN. It f… | 23 | 1489 | active |
| anytls/anytls-go anytls-go is the Go reference implementation of the AnyTLS protocol, a proxy protocol designed to mitigate TLS-in-TLS nested handshake fing… | 78 | 1487 | active |
| zama-ai/concrete-ml Concrete ML is a privacy-preserving machine learning library built on top of Zama's Concrete FHE compiler. It lets data scientists convert … | 68 | 1450 | active |
| lakekeeper/lakekeeper Lakekeeper is an Apache Iceberg REST Catalog implementation written in Rust that provides centralized access control, credential vending, a… | 92 | 1437 | active |
| algorand/go-algorand The official Go implementation of the Algorand blockchain protocol, including the algod node software and goal CLI tool. It lets users run … | 100 | 1432 | active |
| razvandimescu/numa Numa is a portable DNS resolver in a single Rust binary that provides ad blocking, local .numa service domains, hostname overrides, and pri… | 99 | 1419 | active |
| olalie/tapmap TapMap is a self-hosted desktop application that inspects local socket data, enriches IP addresses with geolocation, and visualizes your co… | 83 | 1416 | active |
| Kianmhz/GooseRelayVPN A Go-based SOCKS5 VPN client that tunnels raw TCP traffic through Google Apps Script web apps to a user-controlled VPS exit server. Traffic… | 69 | 1410 | active |
| tmoonlight/NSmartProxy NSmartProxy is an open-source NAT traversal / reverse proxy tool that creates secure tunnels from a public endpoint to services running beh… | 66 | 1386 | active |
| microsoft/fhir-server FHIR Server for Azure is an open-source .NET Core implementation of the HL7 Fast Healthcare Interoperability Resources (FHIR) specification… | 95 | 1379 | active |
| Diniboy1123/usque An open-source Go reimplementation of the Cloudflare WARP client's MASQUE mode using the Connect-IP (RFC 9484) protocol. It offers multiple… | 82 | 1374 | active |
| gladly-team/next-firebase-auth A TypeScript library that simplifies Firebase authentication in Next.js apps across all rendering strategies (SSR, static, client-side). It… | 30 | 1373 | active |
| Psiphon-Inc/psiphon Psiphon is a relay-based Internet censorship circumvention system consisting of client apps for Windows, Android, and iOS plus a server net… | 32 | 1370 | active |
| emonney/QuickApp QuickApp is an opinionated full-stack project template combining Angular 21 and ASP.NET Core 10 with pre-built authentication, authorizatio… | 82 | 1350 | active |
| littleWhiteDuck/SimpleHook SimpleHook is an Xposed/LSPosed module for Android app debugging and research, offering configurable Java/Smali hooking of methods, fields,… | 93 | 1343 | active |
| RockxyApp/Rockxy Rockxy is an open-source (AGPL-3.0) native macOS HTTP debugging proxy built in Swift/SwiftNIO that intercepts, inspects, and modifies HTTP,… | 82 | 1343 | active |
| cloudflare/terraform-provider-cloudflare The official Terraform provider plugin for Cloudflare, letting users manage Cloudflare resources (zones, DNS records, load balancers, WAF r… | 100 | 1320 | active |