function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| lunatic-solutions/lunatic Lunatic is an Erlang-inspired runtime for WebAssembly that provides super lightweight, sandboxed processes for building fast, fault-toleran… | 29 | 4886 | active |
| Security Onion Security Onion is a free and open Linux distribution and platform for threat hunting, enterprise security monitoring, and log management. I… | 94 | 4863 | stable |
| anonaddy/anonaddy The self-hostable source code for addy.io (formerly AnonAddy), an open-source anonymous email forwarding service. It lets users create emai… | 100 | 4829 | active |
| immunant/c2rust C2Rust is a transpiler that converts C99-compliant C code into semantically equivalent but unsafe, unidiomatic Rust code, preserving functi… | 81 | 4798 | active |
| nanomsg/nng NNG (nanomsg-next-generation) is a lightweight, broker-less messaging library in C implementing scalability protocols like pub/sub, request… | 95 | 4662 | stable |
| vaibhavpandeyvpz/apkstudio APK Studio is an open-source, cross-platform Qt6 IDE for reverse-engineering Android application packages. It bundles decompiling, recompil… | 69 | 4641 | active |
| build-trust/ockam Ockam is a Rust library and CLI toolkit for building secure-by-design distributed applications with end-to-end encryption, cryptographic id… | 61 | 4634 | active |
| JZ-Darkal/AndroidHttpCapture AndroidHttpCapture is an Android network diagnostic and packet capture app, essentially a mobile version of Fiddler. It captures HTTP/HTTPS… | 59 | 4603 | active |
| aaPanel/BaoTa BaoTa (BT Panel) is a self-hosted web-based server operations panel for Linux (and Windows) that simplifies managing websites, LAMP/LNMP st… | 70 | 4567 | active |
| ProvableHQ/snarkOS snarkOS is a decentralized operating system for zero-knowledge applications, forming the backbone of the Aleo network. It implements node s… | 99 | 4523 | active |
| mosn/mosn MOSN (Modular Open Smart Network) is a cloud-native network proxy platform written in Go, open-sourced by Ant Group and battle-tested on hu… | 64 | 4508 | stable |
| sensepost/gowitness gowitness is a Go-based command-line utility that uses Chrome Headless to take screenshots of websites, supporting scans of URL lists, CIDR… | 75 | 4499 | active |
| hestiacp/hestiacp Hestia Control Panel is an open-source, lightweight web hosting control panel for Linux servers that provides a web and CLI interface for m… | 99 | 4489 | active |
| trojan-gfw/trojan Trojan is a C++ proxy server/client that disguises traffic as ordinary HTTPS over TLS to bypass the Great Firewall of China. It implements … | 23 | 19755 | maintenance |
| apache/shiro Apache Shiro is a comprehensive Java security framework providing authentication, authorization, cryptography, and enterprise session manag… | 95 | 4455 | active |
| Waishnav/devspace DevSpace is a self-hosted MCP server and CLI that gives ChatGPT or Claude Web a secure connection to your local machine so they can read, e… | 80 | 4445 | active |
| orhun/binsider Binsider is a terminal user interface tool for analyzing ELF binaries, offering static and dynamic analysis, string inspection, linked libr… | 84 | 4413 | active |
| denuitt1/mhr-cfw A Python-based MITM domain-fronting relay that routes HTTP traffic through Google Apps Script and Cloudflare Workers so network DPI filters… | 67 | 4406 | active |
| vaxilu/x-ui x-ui is a web-based control panel for managing Xray proxy servers, supporting multiple protocols (vmess, vless, trojan, shadowsocks, etc.) … | 23 | 19081 | maintenance |
| pgbouncer/pgbouncer PgBouncer is a lightweight connection pooler for PostgreSQL that acts as a proxy server, accepting client connections and reusing a smaller… | 85 | 4344 | stable |
| JonathanSalwan/Triton Triton is a dynamic binary analysis library providing dynamic symbolic execution, taint analysis, and ISA semantics for x86, x86-64, ARM32,… | 67 | 4283 | active |
| wasi-master/13ft A self-hosted web service that bypasses paywalls on news sites by fetching pages as GoogleBot, a replacement for the defunct 12ft.io. It se… | 82 | 4270 | active |
| SteamClientHomebrew/Millennium Millennium is an open-source modding framework for the desktop Steam Client that lets users create, manage, and install custom CSS themes a… | 97 | 4268 | active |
| archestra-ai/archestra Archestra is an open-source, self-hosted enterprise AI platform combining an agentic chat UI, agent runtime, LLM gateway/proxy, MCP gateway… | 82 | 4242 | active |
| monasticacademy/httptap httptap is a static Go CLI binary that shows the HTTP and HTTPS requests made by any Linux program by running it inside an isolated network… | 63 | 4177 | active |
| Lucksi/Mr.Holmes Mr.Holmes is a Python-based OSINT (open-source intelligence) CLI tool that gathers information about usernames, domains, phone numbers, and… | 53 | 4152 | active |
| cbeuw/Cloak Cloak is a pluggable transport that masquerades proxied traffic as ordinary HTTPS web browsing to evade deep packet inspection and censorsh… | 63 | 4073 | active |
| apache/httpd The Apache HTTP Server (httpd) is a fast, reliable, and extensible open-source web server written in C, maintained by the Apache Software F… | 77 | 4053 | stable |
| varnishcache/varnish-cache Varnish Cache is a high-performance open-source HTTP accelerator and reverse caching proxy written in C, serving cached responses from memo… | 10 | 4045 | active |
| octelium/octelium Octelium is a free, open-source, self-hosted unified zero trust secure access platform built on Kubernetes. It can operate as a remote acce… | 86 | 4034 | active |
| apache/nuttx Apache NuttX is a mature, open-source real-time operating system (RTOS) for embedded systems with an emphasis on POSIX/ANSI standards compl… | 77 | 4019 | stable |
| postgresml/pgcat PgCat is a PostgreSQL connection pooler and proxy written in Rust, similar to PgBouncer, with support for sharding, load balancing, failove… | 38 | 4011 | stable |
| emitter-io/emitter Emitter is a distributed, high-performance publish-subscribe messaging platform built on the MQTT protocol, written in Go. It supports mess… | 58 | 4005 | active |
| ravendb/ravendb RavenDB is an open-source (AGPLv3) ACID NoSQL document database written in C#, featuring full-text search, vector search, time series, shar… | 95 | 3996 | stable |
| apache/guacamole-server The server-side component of Apache Guacamole, consisting of guacd (a proxy daemon), libguac (a C API), and protocol support libraries for … | 77 | 3979 | stable |
| ruby/rubygems RubyGems is the package management framework for Ruby, providing the `gem` command to install, create, manage, and load gems (Ruby packages… | 95 | 3962 | stable |
| cea-sec/miasm Miasm is a free and open source (GPLv2) reverse engineering framework written in Python for analyzing, modifying, and generating binary pro… | 67 | 3948 | active |
| KuroLabs/stegcloak StegCloak is a pure JavaScript steganography module that hides secrets inside plain text using invisible zero-width unicode characters, enc… | 23 | 3882 | stable |
| MisterTea/EternalTerminal Eternal Terminal (ET) is a secure remote shell that automatically reconnects after network outages or IP roaming without interrupting the s… | 88 | 3868 | active |
| Rizin Cutter is a free and open-source graphical reverse engineering platform built on top of the Rizin framework, a Unix-friendly command-line t… | 88 | 3844 | active |
| unikraft/unikraft Unikraft is an open-source Unikernel Development Kit for building custom, specialized operating system kernels tailored to individual appli… | 85 | 3841 | active |
| sooryathejas/METATRON METATRON is a CLI-based AI penetration testing assistant that runs a local LLM (via Ollama) entirely offline on Linux, primarily Parrot OS.… | 49 | 3833 | active |
| jorisvink/kore Kore is an easy-to-use, scalable web application framework for writing web APIs and concurrent web processes in C or Python. It is secure b… | 68 | 3823 | stable |
| helidon-io/helidon Helidon is an open-source Java framework of libraries for writing cloud-native microservices, offering both a lightweight Helidon SE API an… | 100 | 3816 | active |
| panva/node-oidc-provider A Node.js library implementing an OpenID Certified OAuth 2.0 Authorization Server with full OpenID Connect support. It is highly configurab… | 100 | 3803 | active |
| hasherezade/pe-bear PE-bear is a multiplatform GUI reversing tool for Windows PE (Portable Executable) files, built on bearparser and capstone. It gives malwar… | 78 | 3792 | active |
| TracecatHQ/tracecat Tracecat is an open-source, AI-native security automation (SOAR) platform that combines low-code workflows, tool-calling agents, case manag… | 87 | 3787 | active |
| zhom/donutbrowser Donut Browser is an open-source anti-detect desktop browser for macOS, Windows, and Linux that creates unlimited isolated browser profiles,… | 82 | 3770 | active |
| Lantern Lantern is a cross-platform internet censorship circumvention tool (proxy/VPN client) that helps users bypass firewalls such as the Great F… | 90 | 15934 | maintenance |
| yeahwu/v2ray-wss A shell script that installs and configures multiple proxy protocols on Linux VPS servers, including Shadowsocks-rust, V2Ray+Nginx+WebSocke… | 66 | 3730 | active |
| IrineSistiana/mosdns mosdns is a programmable DNS forwarder and resolver written in Go that supports DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and custom rou… | 63 | 3727 | active |
| esrrhs/pingtunnel Pingtunnel is a Go-based tool that tunnels TCP and UDP traffic over ICMP echo packets, with a client-server architecture and SOCKS5 forward… | 93 | 3713 | active |
| LimeSurvey/LimeSurvey LimeSurvey is a free, open-source online survey platform for creating questionnaires, polls, and forms with conditional logic, branching, m… | 77 | 3707 | stable |
| ibnaleem/gosearch GoSearch is a Go-based CLI OSINT tool that searches a username across 300+ websites to find a person's digital footprint, serving as a Sher… | 84 | 3645 | active |
| npmx-dev/npmx.dev npmx.dev is a fast, modern web application for browsing the npm package registry, offering instant search, source code viewing, version dif… | 82 | 3612 | active |
| UsefulSoftwareCo/executor Executor is an open-source integration layer and MCP gateway for AI agents, letting you configure MCP servers, OpenAPI specs, GraphQL APIs,… | 78 | 3607 | active |
| ory/oathkeeper Ory Oathkeeper is a cloud native Identity & Access Proxy (IAP) and Access Control Decision API written in Go that authenticates, authorizes… | 80 | 3596 | active |
| nextlevelbuilder/goclaw GoClaw is a multi-tenant AI agent platform and gateway rebuilt from OpenClaw in Go, supporting 20+ LLM providers and 7 messaging channels f… | 74 | 3584 | active |
| maticzav/graphql-shield GraphQL Shield is a TypeScript library that lets you build a permission layer for GraphQL servers using an intuitive rule-based API. It wor… | 68 | 3579 | stable |
| therealaleph/MasterHttpRelayVPN-RUST A Rust port of MasterHttpRelayVPN that bypasses censorship and DPI/SNI blocking by tunneling traffic through a free Google Apps Script rela… | 77 | 3574 | active |
| abhinavsingh/proxy.py proxy.py is a fast, lightweight, zero-dependency Python library and CLI tool for building HTTP/HTTPS proxy servers and web servers, with pl… | 74 | 3549 | active |
| modoboa/modoboa Modoboa is an open-source mail hosting and management platform with a modern web UI, built in Python/Django and Vue. It integrates Postfix,… | 98 | 3535 | stable |
| nanocurrency/nano-node The official C++ node implementation of the Nano (XNO) digital currency, a feeless, instant, and eco-friendly payment protocol. It runs a f… | 73 | 3524 | active |
| google/timesketch Timesketch is an open-source web application for collaborative forensic timeline analysis, developed by Google. It lets DFIR investigators … | 92 | 3405 | active |
| sc0tfree/updog Updog is a command-line replacement for Python's SimpleHTTPServer that serves a directory over HTTP/S with both upload and download support… | 63 | 3397 | active |
| tursodatabase/agentfs AgentFS is a filesystem designed for AI agents that stores an agent's entire files, state, and operation history in a single SQLite file. I… | 69 | 3388 | active |
| svix/svix-webhooks Svix is an open-source, enterprise-ready webhooks-as-a-service platform written in Rust that lets developers send webhooks with a single AP… | 96 | 3384 | active |
| Universal-Commerce-Protocol/ucp The Universal Commerce Protocol (UCP) is an open standard and specification for interoperable, agentic commerce, defining capabilities like… | 78 | 3353 | active |
| curl/trurl trurl is a command line tool for parsing, manipulating, and normalizing URLs, built on libcurl's URL parser. It is designed like 'tr' but f… | 68 | 3347 | active |
| AdguardTeam/dnsproxy A DNS proxy server written in Go that supports all modern encrypted DNS protocols including DNS-over-TLS, DNS-over-HTTPS, DNSCrypt, and DNS… | 100 | 3303 | active |
| gitpod-io/gitpod Gitpod Classic is a developer platform providing on-demand, pre-configured cloud development environments based on Docker and .gitpod.yml, … | 68 | 13759 | maintenance |
| conversejs/converse.js Converse.js is a browser-based, fully client-side XMPP/Jabber chat client written in JavaScript. It can run as a standalone web app, a desk… | 92 | 3292 | active |
| vouch/vouch-proxy Vouch Proxy is an SSO and OAuth/OIDC authentication proxy for Nginx that uses the auth_request module to protect upstream sites. It support… | 73 | 3283 | active |
| Tunnelblick/Tunnelblick Tunnelblick is a free, open-source graphical user interface for OpenVPN on macOS, managing both client and server connections. It is a nati… | 95 | 3274 | active |
| iqiyi/dpvs DPVS is a high-performance Layer-4 load balancer built on DPDK, derived from LVS and running entirely in user space with kernel bypass. It … | 52 | 3243 | active |
| skyhook-io/radar Radar is an open-source Kubernetes UI and visibility tool shipped as a single Go binary, offering topology, event timelines, Helm, GitOps, … | 79 | 3232 | active |
| tellerops/teller Teller is an open-source, developer-first CLI secret manager written in Rust that fetches secrets from multiple providers (HashiCorp Vault,… | 51 | 3228 | active |
| symfony/doctrine-bridge A Symfony component that provides integration between Doctrine (ORM and DBAL) and various Symfony components such as forms, validation, sec… | 95 | 3220 | stable |
| vitodeploy/vito Vito is a free, self-hosted web application for managing servers and deploying PHP applications like Laravel to production. It provides a c… | 95 | 3216 | active |
| vnt-dev/vnt VNT is a Rust-based VPN tool for quickly building virtual LANs across the internet, with NAT traversal, P2P tunnels, and point-to-network /… | 99 | 3200 | active |
| NVIDIA/skills A catalog of NVIDIA-verified Agent Skills — portable instruction sets that teach AI coding agents like Claude Code and Codex how to use NVI… | 60 | 3192 | active |
| IRNova/Nova-Proxy Nova Proxy is a censorship-resistant proxy panel deployed as a single Cloudflare Worker, providing VLESS, Trojan, Shadowsocks, and WARP sub… | 81 | 3189 | active |
| gruntwork-io/cloud-nuke cloud-nuke is a Go CLI tool that deletes all resources in a cloud account (primarily AWS, supporting 125+ resource types), designed for cle… | 95 | 3178 | active |
| nesaorg/nesa Nesa is a privacy-preserving AI inference platform that runs models like Llama, Mistral, and Stable Diffusion with end-to-end encryption us… | 23 | 3165 | active |
| xxf098/shadowsocksr-v2ray-trojan-android A fully featured Android client for the ShadowsocksR, V2Ray, and Trojan proxy protocols, written in Scala. It lets users route their device… | 23 | 3163 | active |
| samber/cc-skills-golang A curated collection of 46 Go-specific agent skills (reusable instruction sets) for AI coding assistants like Claude Code, Codex, Gemini CL… | 82 | 3155 | active |
| gorilla/sessions gorilla/sessions is a Go library providing cookie and filesystem session storage with infrastructure for custom session backends. It offers… | 23 | 3151 | stable |
| netptop/siteproxy SiteProxy is a self-hosted online reverse proxy built on Hono that lets users browse blocked sites like YouTube, Twitter, and Google throug… | 96 | 3146 | active |
| kejilion/sh KEJILION.SH is an all-in-one interactive Shell script toolbox for Linux server management, covering Docker, LDNMP website deployment, netwo… | 87 | 3122 | active |
| unidoc/unipdf UniPDF is a pure Go library for creating, reading, and processing PDF files, including report generation, form filling, digital signatures,… | 91 | 3109 | active |
| wgtunnel/android WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 97 | 3103 | active |
| outroll/vesta Vesta is an open-source (GPLv3) hosting control panel for Linux servers that manages websites, DNS, mail, databases, cron jobs, backups, an… | 66 | 3081 | active |
| ContainerSSH/ContainerSSH ContainerSSH is an SSH server written in Go that launches on-demand containers in Docker or Kubernetes for each connecting user. It support… | 79 | 3075 | active |
| projectdiscovery/proxify Proxify is a portable MITM proxy written in Go for capturing, filtering, manipulating, and replaying HTTP/HTTPS and non-HTTP traffic. It su… | 69 | 3065 | active |
| open-webui/open-terminal A self-hosted remote shell exposed over a REST API, designed to give AI agents and automation tools a dedicated environment to run commands… | 82 | 3058 | active |
| aaPanel/aaPanel aaPanel is a free, web-based hosting control panel for Linux servers that lets administrators manage websites, databases, FTP, Docker, SSL … | 88 | 3049 | active |
| GH05TCREW/pentestagent PentestAgent is a Python-based AI agent framework for black-box penetration testing that orchestrates LLM-driven security testing workflows… | 64 | 3043 | active |
| chaterm/Chaterm Chaterm is an open-source AI-native terminal application for cloud and infrastructure management, letting engineers deploy, troubleshoot, a… | 83 | 3034 | active |
| Geph Geph (迷霧通) is a modular Internet censorship circumvention system designed to defeat national-level filtering such as China's Great Firewall… | 34 | 3032 | active |
| achillean/shodan-python The official Python library and command-line interface for the Shodan search engine, which indexes Internet-connected devices and services.… | 23 | 2953 | stable |