function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| acepanel/panel AcePanel is a fully open-source, enterprise-grade server operation and maintenance management panel written in Go with a Vue 3 frontend. It… | 95 | 2942 | active |
| nextcloud/nextcloudpi NextcloudPi is a ready-to-use Nextcloud server image and build system for Raspberry Pi, Odroid, Rock64, x86 machines, VMs, and LXC/LXD cont… | 92 | 2936 | active |
| whyorean/AuroraStore Aurora Store is a free and open-source Android app store client that lets users search, browse, and download apps directly from the officia… | 76 | 2936 | active |
| kamailio/kamailio Kamailio is an open source SIP signaling server (RFC3261) written in C, designed for large-scale VoIP and real-time communication platforms… | 95 | 2934 | stable |
| google/osv.dev OSV (Open Source Vulnerabilities) is Google's open, distributed vulnerability database and triage service that aggregates security advisori… | 85 | 2909 | stable |
| frain-dev/convoy Convoy is an open-source, high-performance webhooks gateway for reliably ingesting, persisting, debugging, and delivering webhook events at… | 95 | 2862 | active |
| elastic/cloud-on-k8s Elastic Cloud on Kubernetes (ECK) is a Kubernetes operator that automates deployment, provisioning, management, and orchestration of the El… | 94 | 2846 | active |
| symfony/expression-language A Symfony PHP component providing an engine that compiles and evaluates one-line expressions with a syntax similar to PHP and Twig. It acts… | 99 | 2840 | stable |
| matthart1983/netwatch NetWatch is a zero-config terminal TUI for real-time network diagnostics, written in Rust and distributed as a single static binary. It sho… | 77 | 2823 | active |
| DefGuard/defguard Defguard is a self-hosted zero-trust access management platform combining WireGuard VPN with built-in MFA/2FA, identity and access manageme… | 100 | 2821 | active |
| acme-dns/acme-dns acme-dns is a simplified DNS server with a RESTful HTTP API designed to automate ACME DNS challenges for Let's Encrypt and other ACME certi… | 82 | 2821 | active |
| teaql/teaql-agent-kit TeaQL Agent Kit is a model-mediated harness for coding agents that inserts an inspectable, executable domain model (KSML) between requireme… | 87 | 2803 | active |
| openstack/swift OpenStack Swift is a distributed object storage system that scales from a single machine to thousands of servers, optimized for multi-tenan… | 77 | 2798 | stable |
| pedestal/pedestal Pedestal is a set of Clojure libraries for building server-side services, APIs, and web applications on the JVM. It provides an interceptor… | 63 | 2780 | active |
| ascending-llc/jarvis-registry Jarvis Registry is an open-source, enterprise-grade MCP and A2A agent gateway and workflow orchestration platform that gives AI copilots an… | 84 | 2770 | active |
| paullouisageneau/libdatachannel libdatachannel is a standalone C++17 library (with C bindings) implementing WebRTC Data Channels, WebRTC Media Transport, and WebSockets wi… | 89 | 2727 | stable |
| secretflow/secretflow SecretFlow is a unified Python framework for privacy-preserving data analysis and machine learning. It layers cryptographic devices (MPC, H… | 68 | 2703 | active |
| project-zot/zot zot is a production-ready, vendor-neutral container image and artifact registry built purely on the OCI image format and OCI Distribution S… | 94 | 2687 | active |
| openai/privacy-filter OpenAI Privacy Filter is a small bidirectional token-classification model (1.5B total, 50M active parameters) for detecting and masking per… | 49 | 2678 | active |
| 233boy/Xray A one-click installation and management shell script for the Xray proxy core on Linux servers. It automates TLS setup and lets users add, c… | 93 | 2677 | active |
| zhizhuodemao/js-reverse-mcp An MCP server that gives AI coding agents (Claude, Cursor, Copilot) tools for JavaScript reverse engineering in a headed Chrome browser, in… | 84 | 2672 | active |
| outflanknl/RedELK RedELK is a self-hosted SIEM built on the Elastic stack (Elasticsearch, Logstash, Kibana) tailored for red team operations. It aggregates a… | 58 | 2669 | active |
| szTheory/exifcleaner ExifCleaner is a free, open-source cross-platform desktop GUI app that strips EXIF and other metadata from images, videos, and PDFs using E… | 99 | 2662 | active |
| nab138/iloader iloader is a free, open-source desktop application that simplifies sideloading apps onto iOS devices, primarily by automating SideStore ins… | 83 | 2645 | active |
| projectdiscovery/vulnx vulnx is a Go-based command-line tool from ProjectDiscovery for searching, filtering, and analyzing vulnerability data such as CVEs. It sup… | 84 | 2644 | active |
| Sonatype Nexus Repository Sonatype Nexus Repository is a binary repository manager that serves as the single source of truth for internal and third-party build artif… | 100 | 2638 | stable |
| LukeSmithxyz/mutt-wizard mutt-wizard is a shell-based tool that automatically configures the neomutt terminal email client along with isync and msmtp, including IMA… | 65 | 2638 | active |
| cym1102/nginxWebUI nginxWebUI is a self-hosted web application for graphically configuring and managing Nginx, covering reverse proxy, load balancing, TCP/str… | 92 | 2623 | active |
| d0k3/GodMode9 GodMode9 is a full-access file browser for the Nintendo 3DS console, providing access to the SD card, SysNAND/EmuNAND FAT partitions, and o… | 85 | 2620 | active |
| FISCO-BCOS/FISCO-BCOS FISCO BCOS is an open-source permissioned (consortium) blockchain platform written in C++, originally launched by the Financial Blockchain … | 84 | 2602 | active |
| FreeRADIUS/freeradius-server FreeRADIUS is a high-performance, highly configurable multi-protocol policy server supporting RADIUS, DHCPv4/v6, DNS, TACACS+, and VMPS, wr… | 87 | 2580 | stable |
| oxsecurity/megalinter MegaLinter is an open-source code quality tool that runs over 50 linters and formatters covering 50 languages, 22 formats, and 21 tooling f… | 94 | 2577 | active |
| oritera/Cairn Cairn is a general-purpose AI state-space search engine built on a blackboard architecture with a fact-intent graph, where LLM agent worker… | 72 | 2573 | active |
| onekey-sec/unblob unblob is an extraction suite that parses unknown binary blobs for 78+ archive, compression, and file-system formats, recursively extractin… | 91 | 2548 | active |
| mubeng/mubeng mubeng is a fast CLI tool written in Go that checks the availability of proxies from a list and rotates your IP address per request via a l… | 73 | 2546 | active |
| Wire Wire is an open-source, end-to-end encrypted messaging and collaboration platform whose server components are written primarily in Haskell.… | 59 | 2546 | active |
| enfein/mieru Mieru is a censorship-resistant socks5/HTTP/HTTPS proxy written in Go, consisting of a client (mieru) and server (mita). It uses XChaCha20-… | 99 | 2520 | active |
| cisagov/Malcolm Malcolm is a containerized network traffic analysis tool suite that ingests full packet capture (PCAP) files, Zeek logs, and Suricata alert… | 99 | 2504 | active |
| snarktank/antfarm Antfarm is a CLI tool that installs a team of specialized AI agents (planner, developer, verifier, tester, reviewer) into OpenClaw with one… | 58 | 2498 | active |
| cloudnativelabs/kube-router Kube-router is a turnkey Kubernetes networking solution that combines pod networking (CNI), an IPVS/LVS-based service proxy, NetworkPolicy … | 99 | 2497 | active |
| VirusTotal/yara YARA is a pattern matching tool used to identify and classify malware families and other files based on textual or binary pattern rules. It… | 93 | 9847 | maintenance |
| CyberStrikeus/CyberStrike CyberStrike is an open-source AI-powered offensive security harness that runs automated penetration testing from the terminal. It orchestra… | 81 | 2479 | active |
| Peergos/Peergos Peergos is a peer-to-peer, end-to-end encrypted global filesystem with fine-grained cryptographic access control, built on IPFS/libp2p with… | 77 | 2456 | active |
| apache/activemq Apache ActiveMQ is a high-performance, multi-protocol, Java-based open source message broker supporting JMS/Jakarta Messaging, AMQP, MQTT, … | 100 | 2455 | stable |
| oneinstack/oneinstack OneinStack is a shell-based deployment tool that installs and manages full LEMP/LAMP/LNMP/LTMP web stacks (Nginx/Tengine/OpenResty/Apache, … | 68 | 2455 | active |
| dromara/domain-admin Domain Admin is a self-hosted web platform for monitoring domain and SSL certificate expiration, built with Python (Flask) and Vue3. It als… | 89 | 2444 | active |
| FullAgent/fulling Fulling is an AI-powered full-stack engineer agent platform that provides dedicated AI workspaces combining skills, files, memory, and runt… | 69 | 2441 | active |
| nz-m/SocialEcho SocialEcho is a full-featured social networking platform built on the MERN stack (MongoDB, Express.js, React.js, Node.js) with automated co… | 31 | 2435 | active |
| wasmCloud/wasmCloud wasmCloud is a CNCF incubating cloud native platform for building, deploying, and orchestrating WebAssembly component workloads across clou… | 100 | 2430 | active |
| ballerine-io/ballerine Ballerine is an open-source infrastructure and data orchestration platform for identity verification (KYC/KYB), fraud prevention, and merch… | 75 | 2427 | active |
| Shuffle/Shuffle Shuffle is an open source security automation, orchestration and response (SOAR) platform built for security professionals, with a visual w… | 100 | 2424 | active |
| lestrrat-go/jwx A comprehensive Go library implementing the full JOSE family of standards (JWA, JWE, JWK, JWS, JWT) for signing, verifying, encrypting, and… | 99 | 2420 | active |
| ArgeliusLabs/Chasing-Your-Tail-NG A Python application that monitors Wi-Fi probe requests via Kismet to detect whether a device is being physically followed. It correlates s… | 35 | 2401 | active |
| thomseddon/traefik-forward-auth A minimal forward authentication service that adds Google/OpenID Connect OAuth-based SSO login in front of any HTTP service behind the Trae… | 56 | 2391 | active |
| samugit83/redamon RedAmon is an AI-powered agentic red team framework that automates offensive security operations end-to-end, chaining reconnaissance, explo… | 81 | 2380 | active |
| EtherDream/jsproxy An online web proxy that uses browser Service Workers to intercept and rewrite requests client-side, so the nginx-based server only forward… | 32 | 9327 | maintenance |
| LadybirdBrowser/ladybird Ladybird is a truly independent web browser built on a novel engine written from scratch based on web standards, with no forks of existing … | 69 | 65996 | experimental |
| NodePassProject/Anywhere Anywhere is a native proxy client for iOS, iPadOS, macOS, and tvOS built entirely in Swift with no external proxy-core bridges. It implemen… | 66 | 2357 | active |
| Keybase Keybase is an open-source end-to-end encrypted messaging, file-sharing, and identity-verification platform with clients for macOS, Windows,… | 91 | 9246 | maintenance |
| static-web-server/static-web-server Static Web Server (SWS) is a cross-platform, high-performance asynchronous web server for serving static files, built in Rust on Hyper and … | 93 | 2345 | active |
| sddm/sddm SDDM is a QML-based display manager (login screen) for Linux supporting both X11 and Wayland sessions. It is highly themeable via QtQuick, … | 66 | 2341 | active |
| antonbabenko/terraform-skill An Agent Skills-compatible plugin that gives AI coding agents (Claude Code, Cursor, Copilot, Gemini CLI, etc.) best-practice knowledge for … | 74 | 2326 | active |
| smittix/intercept iNTERCEPT is a free, open-source, web-based signal intelligence (SIGINT) platform that unifies dozens of software-defined radio tools into … | 83 | 2295 | active |
| zakirkun/deep-eye Deep Eye is an AI-driven penetration testing CLI that orchestrates multiple LLM providers (OpenAI, Claude, Gemini, OLLAMA, Groq, and others… | 68 | 2275 | active |
| sglfree/freesky A distribution and documentation hub for free anti-censorship (circumvention) software such as Freegate, Ultrasurf, Psiphon 3, and nthLink,… | 67 | 2275 | active |
| twikoojs/twikoo Twikoo is a simple, safe, and free comment system designed for static websites, deployable via Tencent CloudBase, Vercel, or private server… | 99 | 2274 | active |
| wemake-services/wemake-django-template A bleeding-edge Cookiecutter template for scaffolding Django projects with a strong focus on code quality, security, and scalability. It sh… | 67 | 2271 | active |
| SafeGroceryStore/MDUT MDUT is a cross-platform desktop application for managing and exploiting multiple databases (MySQL, MSSQL, PostgreSQL, Oracle, Redis) built… | 94 | 2269 | active |
| linode/apl-core App Platform for LKE is a pre-built, self-hosted Kubernetes developer platform that bundles an integrated CNCF open-source stack with a sel… | 95 | 2259 | active |
| BinaryAnalysisPlatform/bap CMU Binary Analysis Platform (BAP) is a suite of OCaml libraries and a plugin-extensible CLI tool for analyzing binary programs. It lifts b… | 59 | 2254 | active |
| miekg/dns A complete DNS library for Go supporting all resource record types including DNSSEC, with both client (resolver) and server (nameserver) si… | 77 | 8765 | maintenance |
| learnhouse/learnhouse LearnHouse is a next-generation open-source learning management system (LMS) for creating, sharing, and selling educational content. It com… | 99 | 2234 | active |
| mozilla/neqo Neqo is Mozilla's Rust implementation of the QUIC transport protocol, HTTP/3, and QPACK, used in production by Firefox and usable standalon… | 100 | 2231 | active |
| FlagBrew/PKSM PKSM is a multipurpose, portable Pokemon save manager and editor for generations I through VIII, written in C++. It runs on Nintendo 3DS cu… | 99 | 2231 | active |
| greenpau/caddy-security A security app and plugin for Caddy v2 providing authentication, authorization, and accounting (AAA). It supports Form-Based, Basic, Local,… | 92 | 2230 | active |
| Kocoro-lab/Shannon Shannon is a production-oriented multi-agent orchestration framework written in Go (with Rust components) that coordinates AI agent swarms … | 78 | 2226 | active |
| EasyEngine/easyengine EasyEngine is a command-line control panel that provisions and manages Nginx-based WordPress, PHP, and HTML sites using Docker containers, … | 95 | 2178 | active |
| BoCloud/folib Folib is a self-hosted, all-language artifact repository manager supporting npm, Maven, PyPI, Docker, Go, Cargo, NuGet, Helm, and many othe… | 54 | 2178 | active |
| a16z/helios Helios is a fast, trustless multichain light client for Ethereum written in Rust that turns an untrusted centralized RPC endpoint into a ve… | 85 | 2176 | active |
| AaronL725/grok-register A Python toolkit that automates bulk registration of Grok accounts using real Chromium browser automation, with GUI, CLI, and WebUI interfa… | 59 | 2173 | active |
| cyfdecyf/cow COW is an HTTP proxy server written in Go that automatically detects blocked websites and routes only those through parent (secondary) prox… | 23 | 8412 | maintenance |
| digint/btrbk Btrbk is a Perl-based command-line backup tool for btrfs subvolumes that creates atomic snapshots and transfers them incrementally to local… | 74 | 2143 | stable |
| apache/atlas Apache Atlas is an open-source metadata management and data governance framework providing a shared metadata store, data lineage, and class… | 77 | 2138 | active |
| mcp-router/mcp-router MCP Router is a cross-platform desktop application for centrally managing Model Context Protocol (MCP) servers, with projects, workspaces, … | 82 | 2137 | active |
| ferronweb/ferron Ferron is a fast, memory-safe web server written in Rust with automatic TLS certificate management via Let's Encrypt. It offers static file… | 84 | 2129 | active |
| adamfisk/LittleProxy LittleProxy is a high-performance HTTP(S) proxy written in Java on top of the Netty networking library. It can be run standalone from the c… | 23 | 2127 | active |
| nalgeon/codapi Codapi is a lightweight Go-based sandbox server that executes code snippets in isolated Docker containers via an HTTP API, paired with a Ja… | 89 | 2126 | active |
| MinaProtocol/mina Mina is a layer-1 cryptocurrency protocol implemented in OCaml featuring a constant-sized (~22KB) blockchain built with recursive zero-know… | 96 | 2118 | active |
| Leanmcp/superview.sh A shell-based setup for the LeanMCP AI Gateway, a hosted proxy that routes Claude Code (and other AI coding tools) requests through a singl… | 48 | 2114 | active |
| pojntfx/weron weron is a Go-based tool and library that creates lean, fast, and secure overlay networks using WebRTC. It connects nodes behind NATs and f… | 30 | 2112 | active |
| PVE-Tools/PVE-Tools-9 PVE Tools Pro is an interactive Bash-based one-stop administration toolbox for Proxmox VE 9.x hosts. It wraps high-frequency and error-pron… | 84 | 2102 | active |
| benborla/mcp-server-mysql A Model Context Protocol (MCP) server that gives LLMs like Claude read-only access to MySQL databases, letting them inspect schemas and run… | 82 | 2101 | active |
| nilbuild/slim Slim is a Go CLI tool that maps localhost ports to clean HTTPS domains like myapp.test with trusted certificates, and can expose local serv… | 73 | 2094 | active |
| oxen-io/lokinet Lokinet is the reference implementation of LLARP, a low-latency layer 3 onion routing protocol that forms a decentralized, IP-based overlay… | 67 | 2085 | active |
| mudler/edgevpn EdgeVPN is a statically compiled, decentralized p2p VPN built on libp2p that creates private networks joined via shared tokens, with no cen… | 100 | 2073 | active |
| Shadowrocket for Android Shadowrocket for Android is an Android VPN and proxy client that supports protocols like Shadowsocks, VMess, VLESS, Trojan, and Hysteria2, … | 78 | 2062 | active |
| alganzory/HaramBlur HaramBlur is a browser extension that automatically detects and blurs inappropriate images and videos on web pages using on-device machine … | 18 | 2057 | active |
| Jinnrry/PMail PMail is a lightweight personal email server written in Go that ships as a single ~15MB binary with full send/receive SMTP/POP3 services an… | 95 | 2044 | active |
| pygod7/Authix Authix is an async Discord bot built with Python and FastAPI that stores Discord member tokens ('auths') to back up and restore members acr… | 38 | 2042 | active |
| zarf-dev/zarf Zarf is a free, open-source CLI package manager for declaratively packaging and deploying Kubernetes applications and cloud-native workload… | 96 | 2026 | active |