GitHub stars · StarDay

1fosrl / pangolinModern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.TypeScriptLicense not declared23,336

2OpenNHP / opennhpMake your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.GoApache-2.0 · Permissive13,950

3codenotary / immudbimmudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change historyGoLicense not declared9,048

4microsoft / Security-1018 Lessons, Kick-start Your Cybersecurity Learning.HTMLCC0-1.0 · Permissive7,028

5microsoft / agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.PythonMIT · Permissive6,528

6next-terminal / next-terminalA simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.TypeScriptApache-2.0 · Permissive5,673

7pomerium / pomeriumPomerium is an identity and context-aware access proxy.GoApache-2.0 · Permissive5,091

8nolabs-ai / nonoagent runtime security - zero trust, zero setup, zero latency agent sandboxingRustApache-2.0 · Permissive4,874

9openziti / zrokSecure internet sharing made simple.GoApache-2.0 · Permissive4,801

10build-trust / ockamOrchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.RustApache-2.0 · Permissive4,639

11openziti / zitiThe parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZitiGoApache-2.0 · Permissive4,473

12octelium / octeliumA next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.GoAGPL-3.0 · Share derivative source4,155

13BrowserBox / BrowserBox💚🇺🇸🗽Secure remote browsing anywhere, any way you like it. Since 2018.ShellLicense not declared3,931

14lunasec-io / lunasecLunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/TypeScriptLicense not declared1,472

15OpenIdentityPlatform / OpenAMOpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applicationsJavaLicense not declared902

16samvallad33 / vestigeThink before doing, prove before saving. Vestige is the local-first cognitive operating system and deterministic safety kernel for autonomous AI agents. Powered by FSRS-6 causal graph memory, cryptographic Merkle-chained state ledgers, and out-of-band kernel gates bringing frontier PhD reasoning to local silicon with zero cloud token tax.RustAGPL-3.0 · Share derivative source659

17sh4den / TAuthA cross-platform, memory-safe, and easy-to-use 2FA and credentials manager for PC.TypeScriptMIT · Permissive138