Open-source security software
4909 open-source libraries, tools and applications tagged security, ranked by how closely security is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| ECC ECC is an open‑source agent harness operating system that provides skills, agents, and security rules for LLM‑powered coding assistants. It… | 83 | 276571 | stable |
| v2rayN v2rayN is a free, open-source GUI proxy client for Windows, Linux, and macOS built in C#. It manages multiple proxy cores including Xray, s… | 98 | 117675 | stable |
| ventoy/Ventoy Ventoy is an open-source tool for creating bootable USB drives that can hold many ISO/WIM/IMG/VHD(x)/EFI image files at once. Users simply … | 94 | 79662 | stable |
| NationalSecurityAgency/ghidra Ghidra is a software reverse engineering framework built by the NSA that includes a suite of tools for disassembly, decompilation, graphing… | 93 | 79309 | stable |
| Caddy Caddy is a fast, extensible, multi-platform web server written in Go that serves HTTP/1, HTTP/2, and HTTP/3 with automatic HTTPS by default… | 94 | 77555 | stable |
| Vaultwarden Vaultwarden is an unofficial, lightweight Rust implementation of the Bitwarden server API that works with official Bitwarden clients. It is… | 99 | 68819 | stable |
| uBlock Origin uBlock Origin is a free, open‑source browser extension that blocks ads, trackers, and malicious scripts. It works on Chromium‑based browser… | 94 | 68563 | active |
| uBlock Origin uBlock Origin is an efficient, wide-spectrum content blocker browser extension for Chromium-based browsers and Firefox. It blocks ads, trac… | 94 | 68563 | active |
| Raphire/Win11Debloat Win11Debloat is a lightweight PowerShell script that removes pre-installed bloatware apps, disables telemetry, and applies various registry… | 97 | 59487 | active |
| KeygraphHQ/shannon Shannon is an autonomous AI-driven pentesting tool for web applications and APIs. It analyzes source code, discovers attack vectors, and ex… | 85 | 49090 | active |
| acme.sh acme.sh is a pure POSIX shell script ACME protocol client that automates issuing and renewing SSL/TLS certificates from Let's Encrypt, Zero… | 89 | 47780 | stable |
| mitmproxy/mitmproxy mitmproxy is an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, HTTP/3, and WebSockets, offered as a console tool (mitm… | 89 | 45113 | stable |
| juanfont/headscale Headscale is an open-source, self-hosted implementation of the Tailscale control server written in Go. It coordinates WireGuard-based mesh … | 100 | 44768 | active |
| zbezj/HEU_KMS_Activator HEU KMS Activator is a Windows utility for activating Microsoft Windows and Office products via KMS-based license bypass. It is a closed-so… | 87 | 43802 | active |
| zhaoxuya520/reverse-skill reverse-skill is an AI‑driven cybersecurity skill router that guides reverse engineering, penetration testing, and security research tasks.… | 65 | 39537 | active |
| Metasploit Framework Metasploit Framework is an open-source penetration testing platform written in Ruby. It provides a collection of exploits, payloads, and au… | 75 | 39058 | active |
| huiyadanli/RevokeMsgPatcher A Windows GUI tool that patches PC WeChat, QQ, and TIM binaries to prevent message recall (anti-revoke), and optionally enables WeChat mult… | 63 | 38967 | active |
| sqlmap sqlmap is an open‑source command‑line tool that automates detection and exploitation of SQL injection flaws. It can fingerprint databases, … | 72 | 38549 | active |
| sqlmap sqlmap is an open-source penetration testing tool that automates the detection and exploitation of SQL injection flaws and the takeover of … | 72 | 38549 | stable |
| Istio Service Mesh Istio is an open-source service mesh that provides a uniform way to connect, secure, control, and observe microservices. It runs as a contr… | 95 | 38442 | active |
| Rufus Rufus is a free, portable Windows utility for formatting USB drives and creating bootable media from ISO or disk images. It supports BIOS a… | 88 | 37748 | stable |
| Firecracker Firecracker is an open-source virtual machine monitor (VMM) that uses Linux KVM to create and manage lightweight microVMs for secure multi-… | 97 | 37354 | stable |
| Nextcloud Nextcloud is a self‑hosted cloud platform that provides file storage, synchronization, and collaborative tools. It runs on PHP and can be d… | 95 | 37162 | active |
| Tailscale Tailscale is an open‑source zero‑trust networking platform built on WireGuard that provides secure, identity‑based connectivity across devi… | 98 | 37016 | active |
| Flowseal/zapret-discord-youtube A Windows batchfile-based utility bundling bol-van's zapret and WinDivert to bypass DPI-based blocking and throttling of Discord and YouTub… | 88 | 34724 | active |
| NginxProxyManager/nginx-proxy-manager Nginx Proxy Manager is a Docker-based application that provides a web UI for managing Nginx reverse proxy hosts, redirections, streams, and… | 91 | 34206 | active |
| SerenityOS/serenity SerenityOS is a graphical Unix-like operating system for 64-bit x86, Arm, and RISC-V computers, built from scratch in C++ with a custom ker… | 76 | 33868 | active |
| Certbot Certbot is EFF's tool for obtaining TLS certificates from Let's Encrypt and optionally auto-configuring HTTPS on your server. It also works… | 93 | 33262 | active |
| mukul975/Anthropic-Cybersecurity-Skills A large open-source library of structured cybersecurity skills (Markdown files with YAML frontmatter) for AI coding agents, mapped to frame… | 73 | 33126 | active |
| Nuclei Nuclei is a fast, open-source vulnerability scanner built on a simple YAML-based template DSL, maintained by ProjectDiscovery. It uses a la… | 96 | 32091 | active |
| JumpServer JumpServer is an open-source Privileged Access Management (PAM) platform and bastion host that provides secure, audited access to SSH, RDP,… | 100 | 31794 | stable |
| Shizuku Shizuku lets normal Android apps call system APIs with elevated ADB or root privileges by running a server process via app_process and prox… | 31 | 30654 | active |
| Algo VPN Algo VPN is a set of Ansible scripts that automates deploying a personal WireGuard and IPsec (IKEv2) VPN server on common cloud providers. … | 73 | 30406 | active |
| Consul HashiCorp Consul is a distributed, highly available service networking solution providing service discovery, health checking, service mesh … | 94 | 30087 | stable |
| Deskflow Deskflow is a free, open-source application that lets you share one keyboard and mouse across multiple nearby computers, acting like a soft… | 95 | 29613 | active |
| Ente Ente is an open‑source, end‑to‑end encrypted cloud service for storing photos, documents and credentials. It provides cross‑platform client… | 95 | 29456 | active |
| NetBird NetBird is an open-source zero-trust networking platform that builds WireGuard-based peer-to-peer overlay networks with centralized access … | 92 | 29443 | active |
| Signal Messenger Signal is a free, open-source private messenger offering end-to-end encrypted text, voice, and video communication, built on the Signal Pro… | 92 | 29393 | stable |
| keepassxreboot/keepassxc KeePassXC is a modern, open‑source password manager that stores credentials in an encrypted local database. It runs on Windows, macOS and L… | 77 | 29299 | active |
| Authelia Authelia is an open-source authentication and authorization server and portal providing single sign-on (SSO) and multi-factor authenticatio… | 98 | 29294 | active |
| ifixai-ai/iFixAi iFixAi is an open-source CLI diagnostic tool that independently audits AI agents for misalignment, hallucination, manipulation, deception, … | 82 | 28773 | active |
| hwdsl2/setup-ipsec-vpn A shell script that fully automates the installation and configuration of an IPsec/L2TP/IKEv2 VPN server on supported Linux distributions. … | 76 | 28740 | active |
| ValdikSS/GoodbyeDPI GoodbyeDPI is a Windows command-line utility that bypasses Deep Packet Inspection (DPI) systems used by ISPs to block websites. It manipula… | 48 | 28689 | active |
| fingerprintjs/fingerprintjs FingerprintJS is a client‑side JavaScript library that gathers browser attributes and creates a stable hashed identifier for each visitor. … | 94 | 28571 | active |
| TruffleHog TruffleHog is an open-source secrets scanning tool that discovers, classifies, validates, and analyzes leaked credentials across Git reposi… | 93 | 28212 | active |
| alibaba/druid Alibaba Druid is a high‑performance Java database connection pool that also provides a powerful SQL parser and security firewall. It includ… | 71 | 28170 | active |
| ungoogled-chromium A set of patches, scripts, and configuration that builds Google Chromium without dependency on Google web services or prebuilt binaries. It… | 94 | 27851 | active |
| vernesong/OpenClash OpenClash is a LuCI plugin that runs the Mihomo (Clash) proxy client on OpenWrt routers. It supports protocols like Shadowsocks, VMess, Tro… | 95 | 27664 | active |
| OpenZeppelin Contracts OpenZeppelin Contracts is a widely used open‑source library of audited Solidity smart contracts for Ethereum and EVM‑compatible blockchains… | 86 | 27253 | active |
| hashcat Hashcat is a high‑performance password recovery utility that runs on CPUs, GPUs and distributed systems. It supports hundreds of hash algor… | 79 | 26999 | active |
| cloudflare/security-audit-skill A coding-agent skill from Cloudflare that turns an LLM coding agent into a security auditor via a six-phase pipeline (recon, hunting, valid… | 56 | 26974 | active |
| promptfoo/promptfoo Promptfoo is an open‑source command‑line tool and library for evaluating, testing, and red‑teaming LLM applications, agents, and RAG pipel… | 93 | 26091 | active |
| robertdavidgraham/masscan Masscan is an Internet-scale TCP port scanner written in C that transmits 10 million SYN packets per second, capable of scanning the entire… | 54 | 26042 | active |
| authentik authentik is an open-source Identity Provider (IdP) and Single Sign-On (SSO) platform supporting SAML, OAuth2/OIDC, LDAP, SCIM, RADIUS, and… | 95 | 25962 | active |
| Cilium Cilium is an eBPF‑based networking, security, and observability solution for Kubernetes clusters. It provides a flat L3 network, L7‑aware p… | 94 | 25622 | stable |
| Cilium Cilium is an open-source networking, security, and observability solution for Kubernetes and container workloads built on an eBPF-based dat… | 94 | 25622 | stable |
| LSPosed/LSPosed LSPosed is an ART hooking framework implemented as a Riru/Zygisk Magisk module that provides Xposed-compatible APIs for Android 8.1-14. It … | 67 | 25120 | active |
| zama-ai/fhevm FHEVM is a full-stack framework from Zama that enables confidential smart contracts on EVM-compatible blockchains using Fully Homomorphic E… | 82 | 24800 | active |
| dev-sidecar Dev-sidecar is an Electron desktop proxy tool that accelerates access to GitHub, Stack Overflow, and npm for developers in China by interce… | 94 | 24442 | active |
| age age is a simple, modern, and secure file encryption tool, format, and Go library with small explicit keys, no config options, and UNIX-styl… | 82 | 23906 | stable |
| validatorjs/validator.js A JavaScript library of string validators and sanitizers for Node.js and browsers. It provides dozens of checks like isEmail, isURL, and is… | 83 | 23740 | stable |
| osquery/osquery osquery is a SQL-powered operating system instrumentation, monitoring, and analytics framework that exposes OS data as a high-performance r… | 88 | 23587 | active |
| TecharoHQ/anubis Anubis is a Go‑based service that adds a proof‑of‑work challenge to incoming HTTP requests to deter AI‑driven crawlers. It acts as middlewa… | 88 | 23520 | active |
| SlimToolkit Slim (formerly DockerSlim) is an open‑source CLI toolkit that minifies container images without altering their functionality, often reducin… | 66 | 23417 | active |
| SlimToolkit SlimToolkit is a CLI tool that inspects, optimizes, and debugs container images, minifying them by up to 30x without changing the applicati… | 66 | 23417 | active |
| getsops/sops SOPS is a CLI tool for encrypting and decrypting configuration files (YAML, JSON, ENV, INI, and binary) while keeping keys and structure vi… | 95 | 23393 | stable |
| Magic Wormhole Magic Wormhole is a Python library and command-line tool for securely transferring arbitrary-sized files, directories, or short text betwee… | 77 | 23006 | stable |
| NemoClaw NVIDIA NemoClaw is an open-source reference stack for running AI coding agents such as OpenClaw, Hermes, and LangChain Deep Agents Code sec… | 69 | 22754 | active |
| SafeLine SafeLine is a self‑hosted Web Application Firewall and reverse‑proxy written in Go. It protects web services by filtering malicious HTTP tr… | 96 | 22725 | active |
| SafeLine SafeLine is a self-hosted web application firewall (WAF) that acts as an Nginx-based reverse proxy to protect web apps from attacks like SQ… | 96 | 22725 | active |
| smicallef/spiderfoot SpiderFoot is an open-source OSINT automation tool that integrates with over 200 data sources to gather and analyze intelligence about targ… | 54 | 22608 | active |
| lissy93/personal-security-checklist Personal Security Checklist is an open‑source, web‑based guide that compiles 300+ actionable tips for protecting digital security and priva… | 77 | 22581 | active |
| Unleashed Firmware Unleashed is an open‑source alternative firmware for the Flipper Zero handheld hacking tool. It adds extensive radio protocol support, a la… | 94 | 22491 | active |
| Unleashed Firmware Unleashed Firmware is an unofficial custom firmware (CFW) for the Flipper Zero multitool device, written in C. It extends the stock firmwar… | 94 | 22491 | active |
| PHPMailer/PHPMailer PHPMailer is a full-featured PHP library for creating and sending email, with integrated SMTP support, authentication, attachments, HTML/mu… | 86 | 22296 | stable |
| Frida Frida is a dynamic instrumentation toolkit that lets developers, reverse-engineers, and security researchers inject JavaScript or native li… | 95 | 22266 | active |
| opa334/TrollStore TrollStore is a permanently signed jailed iOS app that exploits an AMFI/CoreTrust bug to install any IPA with arbitrary entitlements and ro… | 63 | 22205 | active |
| MobSF/Mobile-Security-Framework-MobSF MobSF is an automated all-in-one mobile application security testing framework for Android, iOS, and Windows Mobile apps. It performs stati… | 94 | 21980 | active |
| gentilkiwi/mimikatz mimikatz is a well-known Windows security tool written in C that extracts plaintext passwords, hashes, PINs, and Kerberos tickets from memo… | 54 | 21909 | active |
| Atlas AtlasOS is an open-source, lightweight modification for Windows that applies privacy, security, and performance optimizations. It removes t… | 81 | 21852 | active |
| Atlas AtlasOS is an open-source modification to Windows that applies privacy, usability, and performance optimizations via an AME Wizard playbook… | 81 | 21852 | active |
| Teleport Teleport is an identity-aware access proxy and certificate authority that provides unified, credential-free access to SSH servers, Kubernet… | 88 | 20995 | stable |
| Apache ShardingSphere Apache ShardingSphere is an enterprise distributed database ecosystem that turns heterogeneous databases (MySQL, PostgreSQL, etc.) into a d… | 77 | 20808 | stable |
| Apache Casbin Apache Casbin is an open-source authorization library that enforces access control using models such as ACL, RBAC, ABAC, ReBAC, and MAC, de… | 96 | 20433 | stable |
| bettercap bettercap is a Go-based, all-in-one framework for network reconnaissance and man-in-the-middle attacks across WiFi, Bluetooth Low Energy, w… | 82 | 20111 | active |
| Atmosphère Atmosphère is a work-in-progress custom firmware for the Nintendo Switch, providing a modified boot process and system services. It consist… | 94 | 20042 | active |
| Atmosphère Atmosphère is a customized firmware (CFW) for the Nintendo Switch, composed of components that replace and patch the console's bootloader, … | 94 | 20042 | active |
| Universal Android Debloater A cross-platform desktop GUI application written in Rust that uses ADB to remove bloatware from non-rooted Android devices. It ships curate… | 23 | 20010 | active |
| Sandboxie Sandboxie Plus & Classic is an open‑source sandbox‑based isolation tool for Windows that lets applications run in a virtual environment wit… | 100 | 19712 | active |
| Sandboxie Sandboxie Plus and Classic are open-source sandbox-based isolation applications for Windows that run programs in isolated environments with… | 100 | 19712 | active |
| gVisor gVisor is an open‑source application kernel that provides a Linux‑compatible sandbox for containers, running entirely in userspace. It incl… | 100 | 19696 | active |
| SimpleX SimpleX Chat is an open‑source messenger that operates without any user identifiers, providing 100 % private, end‑to‑end encrypted communic… | 96 | 19495 | active |
| SimpleX SimpleX Chat is a private messaging platform and set of mobile/desktop apps that operate without any user identifiers, delivering end-to-en… | 96 | 19495 | active |
| docker-mailserver A production-ready, containerized fullstack mail server bundling Postfix (SMTP), Dovecot (IMAP/POP3), Rspamd, SpamAssassin, ClamAV, Fail2ba… | 97 | 19434 | active |
| tiann/KernelSU KernelSU is a kernel-based root solution for Android that runs inside the Linux kernel to grant root access. It provides stealthy, permissi… | 95 | 19399 | active |
| HunxByts/GhostTrack GhostTrack is a Python-based OSINT CLI tool for gathering information about IP addresses, phone numbers, and usernames across social media.… | 30 | 19087 | active |
| fail2ban/fail2ban Fail2Ban is a daemon that monitors log files for repeated authentication failures and automatically updates firewall rules to block offendi… | 85 | 18788 | active |
| ZeroNet ZeroNet is an open‑source platform that lets users create and browse decentralized websites using Bitcoin cryptography and the BitTorrent n… | 23 | 18776 | active |
| OpenCore Legacy Patcher A Python-based GUI application that builds and installs OpenCore boot configurations to run modern macOS (Big Sur through Sequoia) on unsup… | 98 | 18574 | active |
| WSABuilds WSABuilds provides prebuilt Windows Subsystem for Android (WSA) binaries for Windows 10 and 11, with optional Google Play Store (MindTheGap… | 95 | 18518 | active |
page 1 / 50 next →