GitHub stars · StarDay

1GoogleChrome / lighthouseAuthor description: Automated auditing, performance metrics, and best practices for the web.JavaScriptApache-2.0 · Permissive31,023

2gravitational / teleportThe easiest, and most secure way to access and protect all of your infrastructure.GoAGPL-3.0 · Share derivative source21,073

3trimstray / the-practical-linux-hardening-guideThis guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).MIT · Permissive10,910

4open-mmlab / AmphionAmphion (/æmˈfaɪən/) is a toolkit for Audio, Music, and Speech Generation. Its purpose is to support reproducible research and help junior researchers and engineers get started in the field of audio, music, and speech generation research and development.PythonMIT · Permissive10,331

5aircrack-ng / aircrack-ngWiFi security auditing tools suiteCGPL-2.0 · Share derivative source7,875

6paper-trail-gem / paper_trailTrack changes to your rails modelsRubyMIT · Permissive7,028

7rundeck / rundeckEnable Self-Service Operations: Give specific users access to your existing tools, services, and scriptsGroovyApache-2.0 · Permissive6,365

8spatie / laravel-activitylogLog activity inside your Laravel appPHPMIT · Permissive5,912

9next-terminal / next-terminalA simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.TypeScriptApache-2.0 · Permissive5,673

10HotCakeX / Harden-Windows-SecurityHarden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨C#MIT · Permissive4,831

11intuitem / ciso-assistant-communityCISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.PythonLicense not declared4,590

12skerkour / black-hat-rustApplied offensive security with Rust - https://kerkour.com/black-hat-rustRustMIT · Permissive4,456

13collectiveidea / auditedAudited (formerly acts_as_audited) is an ORM extension that logs all changes to your Rails models.RubyMIT · Permissive3,497

14owen-it / laravel-auditingRecord the change log from models in LaravelPHPMIT · Permissive3,472

15FairwindsOps / polarisAuthor description: Validation of best practices in your Kubernetes clustersGoApache-2.0 · Permissive3,400

16nilsteampassnet / TeamPassSelf-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.PHPGPL-3.0 · Share derivative source1,887

17bytedance / g3Enterprise-oriented Generic Proxy Solutions. Maintenance mode now, please switch to use [VEY](https://github.com/VEY-OSS/vey) for new development effortsRustApache-2.0 · Permissive894

18padok-team / cognito-scannerA simple script which implements different Cognito attacks such as Account Oracle or Priviledge EscalationPythonApache-2.0 · Permissive113