function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Anankke/SSPanel-UIM SSPanel UIM is a PHP-based multi-purpose proxy service management panel for running and administering proxy/VPN subscription services. It p… | 75 | 10414 | active |
| apache/cassandra Apache Cassandra is an open-source NoSQL distributed wide-column database written in Java, designed for linear scalability and fault tolera… | 77 | 10092 | stable |
| OpenMined/PySyft PySyft is a Python library that lets data scientists run computations on private data that stays on the data owner's server, with results s… | 75 | 10025 | active |
| s3fs-fuse/s3fs-fuse s3fs is a FUSE-based file system that lets you mount an Amazon S3 bucket (or any S3-compatible object store) as a local directory on Linux,… | 74 | 9979 | active |
| Yu9191/wloc A set of proxy-tool modules (Surge, Quantumult X, Loon, Stash, Shadowrocket) that MITM Apple's network location service (gs-loc.apple.com) … | 74 | 9966 | active |
| OpenCTI-Platform/opencti OpenCTI is an open-source platform for managing cyber threat intelligence knowledge, including observables, TTPs, and threat actor informat… | 96 | 9890 | active |
| GetBindu/Bindu Bindu is an open-source Python framework that provides the identity, communication, and payments layer for AI agents, implementing the A2A … | 82 | 9712 | active |
| cloudflare/cloudflare-os Cloudflare OS is an open-source AI productivity environment built on Cloudflare Workers, providing an agent chat UI, sandboxed app ('gadget… | 59 | 9563 | active |
| berty/berty Berty is an open-source, peer-to-peer messaging app with end-to-end encryption that works with or without internet access, using libp2p, IP… | 96 | 9290 | active |
| ermaozi/get_subscribe A Python project that automatically aggregates and republishes free proxy subscription links (Clash, V2Ray, Trojan, SSR/SR formats) that re… | 77 | 9252 | active |
| golang-jwt/jwt A Go library for creating, signing, parsing, and verifying JSON Web Tokens (JWTs) per RFC 7519. It is the community-maintained successor to… | 77 | 9216 | stable |
| pocket-id/pocket-id Pocket ID is a self-hosted, OpenID Connect Certified identity provider that lets users sign in to applications using passkeys instead of pa… | 86 | 9094 | active |
| ltaoo/wx_channels_download A small desktop application that downloads videos from WeChat Channels (视频号) by injecting a download button into the WeChat PC client via a… | 90 | 9026 | active |
| Bark Bark is a free, open-source iOS app that lets you push custom notifications to your iPhone via simple GET/POST HTTP requests, using APNs wi… | 77 | 8991 | active |
| everywall/ladder Ladder is a self-hosted Go web proxy that removes CORS and other headers (like CSP) and modifies HTML/CSS/JS in responses, serving as an al… | 88 | 8921 | active |
| BornToBeRoot/NETworkManager NETworkManager is a free, open-source Windows application that bundles 27 network management and troubleshooting tools into a unified GUI, … | 88 | 8721 | active |
| sitaramc/gitolite Gitolite is a self-hosted Git repository hosting tool for Unix servers that provides fine-grained, file-based access control over repositor… | 75 | 8591 | stable |
| PDFCraftTool/pdfcraft PDFCraft is a free, privacy-focused PDF toolkit with 90+ tools (merge, split, compress, convert, edit, secure) that runs entirely in the br… | 76 | 8408 | active |
| HariSekhon/DevOps-Bash-tools A collection of 1200+ DevOps Bash scripts covering cloud platforms (AWS, GCP, Azure), Kubernetes, Docker, CI/CD systems, databases, and pac… | 67 | 8394 | active |
| xwmx/nb nb is a command-line and local web note-taking, bookmarking, archiving, and knowledge base application implemented as a single portable she… | 98 | 8392 | stable |
| j178/prek prek is a fast Git hook manager written in Rust that runs hooks on your code before commits, on demand, or in CI, managing the tools and de… | 85 | 8368 | active |
| openclaw/gogcli gog is a single Go binary CLI that provides terminal access to Google Workspace services including Gmail, Calendar, Drive, Docs, Sheets, Sl… | 84 | 8364 | active |
| firerpa/lamda FIRERPA (lamda) is an all-in-one Android device control platform whose server runs directly on the device (root or non-root) and exposes 16… | 99 | 8269 | active |
| tinyauthapp/tinyauth Tinyauth is a lightweight, OpenID Certified™ authentication and authorization server written in Go, shipped as a single static binary. It w… | 87 | 8199 | active |
| MariaDB/server MariaDB Server is a widely deployed open-source relational database (SQL server) forked from MySQL by its original developers, licensed und… | 99 | 8173 | stable |
| vudovn/ag-kit AG Kit is a CLI-installed capability expansion kit for AI coding agents (primarily Google Antigravity) that installs a .agents workspace of… | 82 | 8168 | active |
| Graylog2/graylog2-server Graylog is a free and open log management platform for collecting, storing, searching, and analyzing log data from across IT environments, … | 77 | 8121 | stable |
| gdy666/lucky Lucky (万吉) is a Go-based all-in-one networking utility for software/hardware routers and embedded Linux devices, bundling IPv6/IPv4 TCP/UDP… | 75 | 8106 | active |
| NullClaw NullClaw is an autonomous AI assistant/agent runtime written in Zig, distributed as a tiny static binary (~678 KB, ~1 MB RAM, <2 ms startup… | 74 | 8061 | active |
| cilium/ebpf ebpf-go is a pure-Go library for loading, modifying, and attaching eBPF programs to hooks in the Linux kernel, with no dependency on libbpf… | 92 | 7942 | stable |
| datahaven-xyz/datahaven DataHaven is an EVM-compatible Substrate blockchain that provides verifiable decentralized storage, built on StorageHub and secured by Eige… | 68 | 7896 | active |
| peazip/PeaZip PeaZip is a free, open-source, cross-platform file archiver and archive manager supporting 200+ formats including 7z, RAR, ZIP, TAR, and Zs… | 93 | 7821 | stable |
| warp-tech/warpgate Warpgate is an open-source, clientless bastion host and privileged access management (PAM) tool written in Rust that transparently proxies … | 100 | 7793 | active |
| panva/jose A zero-dependency JavaScript/TypeScript library implementing JSON Object Signing and Encryption standards (JWA, JWS, JWE, JWT, JWK, JWKS). … | 100 | 7775 | stable |
| FreeRTOS The classic FreeRTOS distribution, a real-time operating system for microcontrollers and small microprocessors that submodules the FreeRTOS… | 67 | 7757 | stable |
| SimoneAvogadro/android-reverse-engineering-skill A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs an app uses, including Retrofit, OkHttp, Ktor… | 58 | 7686 | active |
| guardrails-ai/guardrails Guardrails is a Python framework for building reliable LLM applications by running Input/Output Guards that detect and mitigate risks, and … | 98 | 7350 | active |
| Yelp/dumb-init dumb-init is a minimal init system and process supervisor designed to run as PID 1 inside Linux containers such as Docker. It is a small st… | 64 | 7305 | stable |
| cloudflare/boringtun BoringTun is a Rust implementation of the WireGuard VPN protocol, provided both as a reusable library and as a userspace CLI executable (bo… | 63 | 7187 | active |
| roundcube/roundcubemail Roundcube Webmail is a browser-based, multilingual IMAP email client written in PHP with an application-like user interface. It offers full… | 99 | 7152 | stable |
| ehang-io/nps NPS is a lightweight, high-performance intranet penetration (reverse proxy/tunnel) server written in Go, supporting TCP, UDP, HTTP(S), SOCK… | 23 | 34205 | maintenance |
| sandstorm-io/sandstorm Sandstorm is a self-hostable web productivity suite implemented as a security-hardened web app package manager. It lets users install and r… | 71 | 7073 | active |
| katanemo/plano Plano is an AI-native proxy server and data plane for agentic applications, built on Envoy by its core contributors. It centralizes agent r… | 85 | 7036 | active |
| hhyo/Archery Archery is a self-hosted SQL audit and query platform built with Django. It provides SQL review, execution, querying, backup, session and a… | 82 | 7033 | active |
| netalertx/NetAlertX NetAlertX is a self-hosted network visibility and asset intelligence platform that performs continuous device discovery and monitoring acro… | 100 | 7030 | active |
| erebe/wstunnel wstunnel is a Rust CLI tool that tunnels arbitrary TCP, UDP, Unix socket, or stdio traffic over WebSocket, HTTP2, or WebTransport to bypass… | 100 | 7021 | active |
| ntop/n2n n2n is a lightweight peer-to-peer VPN written in C that creates encrypted virtual networks capable of bypassing intermediate firewalls. It … | 66 | 7009 | active |
| masterking32/MasterDnsVPN MasterDnsVPN is a DNS tunneling VPN tool written in Go for bypassing internet censorship, optimized beyond DNSTT and SlipStream. It feature… | 78 | 6960 | active |
| sysown/proxysql ProxySQL is a high-performance, protocol-aware SQL proxy for MySQL, MariaDB, Percona Server, and PostgreSQL that sits between applications … | 95 | 6909 | stable |
| Shadowsocks ShadowsocksX-NG is a macOS GUI client for the Shadowsocks proxy protocol, rewritten in Swift with ss-local running as a background Launch A… | 23 | 32882 | maintenance |
| external-secrets/external-secrets External Secrets Operator is a Kubernetes operator that synchronizes secrets from external secret management systems such as AWS Secrets Ma… | 95 | 6831 | stable |
| midudev/autoskills autoskills is a Node.js CLI tool that scans a project's package.json and config files to detect its tech stack, then auto-installs curated … | 72 | 6827 | active |
| 34306/vphone-aio A single shell script that downloads, assembles, and runs a pre-built virtualized iOS environment (vphone) on macOS, complete with a jailbr… | 59 | 6770 | active |
| processone/ejabberd ejabberd is an open-source, massively scalable real-time messaging platform written in Erlang/OTP that combines an XMPP server, MQTT broker… | 94 | 6720 | stable |
| plainhub/plain-app PlainApp is an open-source Android app that runs a local web server on your phone, letting you manage files, media, contacts, SMS, notes, a… | 100 | 6650 | active |
| cloudquery/cloudquery CloudQuery is an open-source CLI and plugin-based data pipeline tool that extracts cloud infrastructure configuration and security data fro… | 95 | 6510 | active |
| lldap/lldap lldap is a lightweight LDAP authentication server written in Rust, providing an opinionated, simplified LDAP interface for user management.… | 82 | 6483 | active |
| yadm-dev/yadm yadm is a Git-based command-line tool for managing dotfiles, keeping configuration files in place in $HOME while tracking them in a single … | 66 | 6411 | stable |
| Ed1s0nZ/CyberStrikeAI CyberStrikeAI is a Go-based AI-native cybersecurity platform that combines LLM-powered agents, MCP-native tools, RAG knowledge bases, and v… | 79 | 6342 | active |
| repowise-dev/repowise Repowise is a Python-based codebase intelligence tool that indexes code structure, call graphs, git history, tests, and architectural decis… | 78 | 6315 | active |
| dwisiswant0/apkleaks APKLeaks is a Python CLI tool that decompiles Android APK files with jadx and scans them for URIs, endpoints, and hardcoded secrets using r… | 39 | 6278 | active |
| azukaar/Cosmos-Server Cosmos-Server is a self-hosted home server platform that acts as a secure gateway and server manager for your applications. It bundles auth… | 94 | 6139 | active |
| daeuniverse/dae dae is a high-performance transparent proxy solution for Linux built on eBPF, performing traffic splitting directly in the kernel so direct… | 91 | 6139 | active |
| rmcrackan/Libation Libation is a free, open-source desktop application for downloading, decrypting (DRM removal), and managing your Audible audiobook library.… | 96 | 6131 | active |
| 1Remote/1Remote 1Remote is a modern personal remote session manager and launcher for Windows that centralizes RDP, SSH, VNC, Telnet, and (S)FTP connections… | 72 | 6064 | active |
| uditgoenka/autoresearch A Claude Code skill (also compatible with OpenCode and OpenAI Codex) that turns coding agents into autonomous goal-directed iteration loops… | 79 | 5996 | active |
| tinyproxy/tinyproxy Tinyproxy is a lightweight HTTP/HTTPS proxy daemon for POSIX operating systems, written in C. It supports connection buffering, domain/URL … | 79 | 5986 | stable |
| codeigniter4/CodeIgniter4 CodeIgniter 4 is a lightweight, full-stack PHP web framework with a small footprint, MVC architecture, and built-in security features like … | 93 | 5972 | active |
| wnlen/clash-for-linux A shell-based management platform for running Clash/Mihomo proxy on Linux, with automatic kernel download, subscription management, node se… | 75 | 5955 | active |
| ffay/lanproxy lanproxy is a self-hosted NAT traversal / reverse proxy tool that exposes machines behind a firewall to the public internet by forwarding T… | 45 | 5852 | active |
| mjl-/mox Mox is an all-in-one, secure, open source mail server written in Go, combining SMTP, IMAP4, webmail, SPF/DKIM/DMARC, DANE/MTA-STS, automati… | 93 | 5840 | active |
| Giskard-AI/giskard-oss Giskard is an open-source Python library for testing, evaluating, and red-teaming LLM-based agents and RAG systems. Its v3 rewrite provides… | 95 | 5802 | active |
| aidlearning/AidLearning-FrameWork AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 69 | 5801 | active |
| yonggekkk/argosbx ArgoSBX is a one-click, non-interactive shell script ('little cannon') that deploys proxy servers on VPS or Docker by combining Sing-box, X… | 55 | 5752 | active |
| proxysu/ProxySU A Windows WPF desktop application that provides one-click installation of proxy tools (Xray, V2ray, Trojan, Trojan-Go, NaiveProxy, Shadowso… | 72 | 5705 | active |
| LongSoft/UEFITool UEFITool is a cross-platform C++/Qt application that parses UEFI-compatible firmware images into a tree structure, verifies their integrity… | 90 | 5654 | active |
| haraka/Haraka Haraka is a fast, highly extensible, event-driven SMTP server written in Node.js with a modular plugin architecture. It is widely deployed … | 92 | 5616 | stable |
| pk910/PoWFaucet A self-hostable, modularized faucet for EVM-compatible blockchain testnets that distributes test ETH with multiple bot-protection mechanism… | 94 | 5601 | active |
| devtron-labs/devtron Devtron is an open-source, AI-native Kubernetes management platform that unifies application delivery, infrastructure management, CI/CD, an… | 98 | 5591 | active |
| vercel/streamdown Streamdown is a React component library that serves as a drop-in replacement for react-markdown, purpose-built for rendering Markdown strea… | 85 | 5583 | active |
| trustedsec/ptf The PenTesters Framework (PTF) is a Python-based modular framework that installs, compiles, and keeps penetration testing tools up to date … | 32 | 5561 | active |
| vllm-project/semantic-router vLLM Semantic Router is an open-source programmable routing and control layer for building Mixture-of-Models systems across heterogeneous L… | 76 | 5526 | active |
| doorkeeper-gem/doorkeeper Doorkeeper is a Ruby gem (Rails engine) that adds OAuth 2.0 provider functionality to Ruby on Rails or Grape applications. It implements th… | 94 | 5521 | stable |
| PurpleAILAB/Decepticon Decepticon is an autonomous AI red-team hacking agent that uses LLMs (built on LangChain/LangGraph) to plan and execute context-aware offen… | 80 | 5436 | active |
| tobychui/zoraxy Zoraxy is a general-purpose HTTP reverse proxy and forwarding tool written in Go, managed through a built-in web interface designed for hom… | 99 | 5426 | active |
| cjdelisle/cjdns Cjdns is an encrypted IPv6 networking implementation that uses public-key cryptography for address allocation and a distributed hash table … | 73 | 5409 | active |
| ory/keto Ory Keto is an open-source authorization server implementing Google's Zanzibar model for scalable, low-latency permission checks. It suppor… | 80 | 5392 | active |
| qpdf/qpdf qpdf is a command-line tool and C++ library that performs content-preserving transformations on PDF files, supporting linearization, encryp… | 99 | 5374 | stable |
| amadeusprotocol/node AmadeusD is a blockchain node daemon for the Amadeus protocol, supporting local testnets, an RPC API, and WebAssembly smart contract deploy… | 87 | 5334 | active |
| Ladon Ladon is a large-scale internal network penetration scanner written in C#, offering port scanning, service identification, network asset di… | 28 | 5322 | active |
| beclab/Olares Olares is an open-source personal cloud operating system built on Kubernetes that turns your own hardware into a self-hosted AI platform fo… | 89 | 5246 | active |
| ChrisTitusTech/linutil Linutil is a distro-agnostic Linux toolbox built in Rust that provides an interactive terminal UI (TUI) for installing applications, config… | 85 | 5245 | active |
| maziyarpanahi/openmed OpenMed is a local-first healthcare AI SDK for clinical named-entity recognition and HIPAA PII/PHI de-identification that runs entirely on-… | 85 | 5201 | active |
| XRPLF/rippled rippled (xrpld) is the core C++ server daemon implementing the XRP Ledger protocol, a decentralized cryptographic ledger secured by a Byzan… | 94 | 5188 | stable |
| braedonsaunders/codeflow CodeFlow is a browser-based tool that turns any GitHub repository URL (or local files) into an interactive architecture map showing how fil… | 61 | 5117 | active |
| tech-leads-club/agent-skills A curated, security-reviewed registry of skills (packaged instructions and resources) that extend AI coding agents like Claude Code, Cursor… | 79 | 5113 | active |
| yrutschle/sslh sslh is a protocol multiplexer daemon written in C that accepts connections on a single port and forwards them to different backend service… | 76 | 5110 | stable |
| nginx/kubernetes-ingress The official NGINX and NGINX Plus Ingress Controller for Kubernetes, maintained by the NGINX team at F5. It translates Kubernetes Ingress r… | 100 | 5072 | stable |
| ossec/ossec-hids OSSEC is an open-source host-based intrusion detection system (HIDS) that combines log analysis, file integrity monitoring, rootkit detecti… | 90 | 5054 | stable |
| torproject/tor Tor is the core implementation of the Tor anonymity network, routing internet traffic through onion circuits to hide a user's IP address an… | 32 | 5019 | active |