Search Results for "surface"
Sort By:
Showing 27 open source projects for "surface"
View related business solutions-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
1
OWASP Amass
In-depth attack surface mapping and asset discovery
The OWASP Amass Project has developed a tool to help information security professionals perform network mapping of attack surfaces and perform external asset discovery using open source information gathering and active reconnaissance techniques. The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. All of our projects ,tools, documents, forums, and chapters are free and open to anyone interested in improving application... -
2
subfinder
Fast passive subdomain enumeration tool
...It focuses exclusively on collecting valid subdomains from a wide range of passive online sources, prioritizing accuracy and speed over intrusive scanning techniques. The project is widely used in bug bounty hunting, penetration testing, and attack surface mapping because it minimizes noise while producing actionable results. Its modular architecture allows users to enable dozens of data providers through API keys, expanding coverage as needed. Subfinder integrates easily into automation pipelines and CI workflows thanks to its clean command-line design and structured output formats. ... -
3
AndroidLibXrayLite
Lightweight Android library that bundles the Xray networking core
AndroidLibXrayLite is a lightweight Android library that bundles the Xray networking core as an embeddable component for apps. Its purpose is to provide a minimal, size-optimized build of the native core with a clear Java/Kotlin interface to start, stop, and configure network tunnels. By exposing the core as an AAR with per-ABI artifacts, it keeps application footprints small while supporting common CPU architectures. The library abstracts process management and log streaming so host apps... -
4
Talos Linux
Talos Linux is a modern Linux distribution built for Kubernetes
...Production-ready supports some of the largest Kubernetes clusters in the world. Open source project from the team at Sidero Labs. It only takes 3 minutes to launch a Talos cluster on your laptop inside Docker. Talos reduces your attack surface. It's minimal, hardened and immutable. All API access is secured with mutual TLS (mTLS) authentication. Talos eliminates configuration drift, reduces unknown factors by employing immutable infrastructure ideology, and delivers atomic updates. Talos simplifies your architecture, increases your agility, and always delivers current stable Kubernetes and Linux versions. ... -
PRTG Catches Network Issues Before They Cause DowntimeReactive troubleshooting usually means hearing about a problem from frustrated users, not your monitoring tool. PRTG sets threshold-based alerts across devices, servers and applications, notifying your team by email, SMS or push the moment a metric crosses a set limit. That means catching a failing disk or overloaded server before it becomes an outage and getting time back from firefighting. Start a free trial and set your first alerts today.
-
5
Mole
🐹 Deep clean and optimize your Mac.
...It also includes optimization routines that rebuild caches, reset network services, trim swap files, and refresh indexes to keep the system feeling responsive. An interactive disk analyzer view helps you navigate directories with the keyboard to find space hogs, while status commands surface live CPU, memory, disk, and network metrics. -
6
chat
chat web app for teams, sass with user management and ratelimit
...Its feature set includes shareable static pages generated from conversations, searchable conversation snapshots, text file uploads, multimedia file support when the model allows it, and prompt management with shortcut-based access. The repository structure also points to both web and Flutter-based mobile components, suggesting a broader product surface than a simple browser-only interface. -
7
BigQuery Emulator
BigQuery emulator server implemented in Go
...Written in Go, it can run as a standalone binary, Docker container, or embedded library within test environments, making it highly flexible for different workflows. The emulator supports a large portion of the BigQuery API surface, including dataset management, query execution, and data ingestion, allowing applications to interact with it as if it were the real service. It uses SQLite as its underlying storage engine, with options for in-memory or persistent file-based databases depending on the use case. The system also implements many features of Google Standard SQL, including hundreds of functions and advanced query constructs, enabling realistic query testing. -
8
Octelium
A next-gen FOSS self-hosted unified zero trust secure access platform
...It positions itself as more than a typical VPN; it supports zero-trust network access (ZTNA), “BeyondCorp”-style access, API/AI gateway functionality, and even serves as a PaaS-like deployment surface. One of its key strengths is identity-based, application-layer (L7) aware control, meaning access decisions are made per request, with context and policy rather than simple network-level allow/block rules. It supports both client-based (e.g., WireGuard/QUIC tunnels) and client-less access models, which makes it flexible for both human users and automated workloads. ... -
9
Cyber
Semantic non-deterministic Superintelligence consensus computer
...There are however at least 3 problems associated with the above-mentioned implementations. (1) the subjective nature of relevance, (2) difficulty in scaling consensus computers for over-sized knowledge graphs, (3) the lack of quality amongst such knowledge graphs. They are prone to various surface attacks, such as sybil attacks, and the selfish behavior of the interacting agents. In this document, we define a protocol framework for provable consensus computing of relevance, between content-addresable objects, which can be computed on GPUs. -
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
10
CLI Printing Press
Reads official API docs, studies CLI and MCP servers
...The project includes validation stages such as scorecards, dogfooding, proof-of-behavior checks, and optional live read-only smoke tests. Overall, CLI Printing Press aims to turn any useful web service into a practical automation surface for both humans and AI agents. -
11
ENScan Go
ENScan_GO is an enterprise information reconnaissance tool
...The tool targets analysts who need one-click collection and normalized output to reduce manual lookups across registries and platforms. Recent releases added a reworked task model with queueing, resumable searches via cached progress, export format options, and a public API surface for custom keyword strategies. Documentation and issues discuss operational concerns such as rate limits, verification challenges, and use of proxies to reduce bans. The project is maintained under Apache-2.0 and is positioned for both single-shot queries and batch investigations. -
12
golib
Golang packages used in frp and fft
golib is a collection of common Go packages extracted for reuse across the author’s projects, notably frp and fft. It serves as a shared foundation for IO helpers, messaging formats, and other utilities that would otherwise be copy-pasted between codebases. The repository is versioned and published as Go modules, making it easy to import stable subsets into downstream applications. Individual subpackages cover concerns like streaming IO and JSON message structures, keeping implementations... -
13
gVisor
Application Kernel for Containers
...Its key runtime, runsc, integrates seamlessly with container ecosystems such as Docker and Kubernetes, making it easy to deploy sandboxed workloads using familiar tools. By intercepting and safely handling syscalls from applications, gVisor reduces the attack surface of the host kernel, mitigating risks associated with running untrusted or potentially malicious code in containerized environments. -
14
KubeArmor
Runtime Security Enforcement System
...It uses eBPF and Linux Security Modules(LSM) for fortifying workloads based on Cloud Containers, IoT/Edge, and 5G networks. It enforces policy-based controls. KubeArmor lessens the attack surface on pods, containers, and virtual machines. For inline mitigation, it uses Linux Security Modules (LSMs) like AppArmor, BPF-LSM, and SELinux to provide security without changing the pod or container or without host-level adjustments. KubeArmor simplifies their intricacies and makes enforcing policy simple. It functions as a non-privileged daemonset and has host, pod, and container monitoring capabilities. -
15
ko
Build and deploy Go applications on Kubernetes
...This can make it a good fit for lightweight CI/CD use cases. ko also includes support for simple YAML templating which makes it a powerful tool for Kubernetes applications. ko depends on the authentication configured in your Docker config. If you can push an image with docker push, you are already authenticated for ko. Since ko doesn't require docker, ko login also provides a surface for logging in to a container image registry with a username and password, similar to docker login. Additionally, if auth is not configured in the Docker config, ko includes built-in support for authenticating container registries. -
16
syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
...It automatically generates, mutates, and minimizes system call programs, then drives them through a specialized executor (syz-executor) to exercise deep kernel paths. The system integrates tightly with sanitizers such as KASAN, KMSAN, KCSAN, and UBSAN to surface memory safety, concurrency, and undefined behavior issues with actionable reports. A distributed architecture coordinates many fuzzing VMs, collects crash signatures, deduplicates them, and bisects to the first bad commit when possible. syzkaller maintains per-kernel “syz” descriptions so it understands arguments, flags, and resources of thousands of syscalls and ioctls across Linux and other kernels. ... -
17
Docker MCP Gateway
Docker mcp CLI plugin / MCP Gateway
...Instead of having each AI client manage its own MCP server configuration, the gateway provides a unified interface so multiple clients can connect consistently to the same configured tool surface. The project emphasizes security and operational hygiene by supporting secrets management (to avoid leaking credentials via plain environment variables) and providing built-in OAuth flows for MCP servers that require authenticated service access. -
18
Tinode Instant Messaging Server
Instant messaging platform
...Other databases can be supported by writing custom adapters. Tinode is not XMPP/Jabber. It is not compatible with XMPP. It's meant as a replacement for XMPP. On the surface, it's a lot like open source WhatsApp or Telegram. Version 0.17. This is beta-quality software, feature-complete and stable but probably with a few bugs. Follow instructions to install and run or use one of the cloud services provided. -
19
XRAY
XRay for recon, mapping and OSINT gathering from public networks
...It provides a framework for writing and executing inspection modules that can parse structured data (JSON, XML, HTML), traverse graphs of endpoints, and perform intelligent probing guided by discovered surface area. XRay is typically used as a reconnaissance and vulnerability discovery engine in red-team or app-security workflows: it leverages extensible plugins to adapt to different protocols, inject payloads, and detect common bug classes such as injection flaws, misconfigurations, and unsafe endpoints. The modular architecture means users can customize or extend the engine with new analyzers, fuzzers, or output formats tailored to specific testing environments. ... -
20
dive-to-gosync-workshop
In-depth Go concurrent programming seminar
...The workshop also expands into atomic operations, lock-free thinking, distributed synchronization, channel patterns, and the Go memory model. It is best understood as a training syllabus for developers who want deeper concurrency judgment, not just surface-level goroutine examples. -
21
Bank Vaults
K8s operator, Go client with automatic token renewal
...It has many 'blades' that cut through the security problem: the Bank-Vaults operator provides automation; a Go client with automatic token renewal that provides dynamic secret generation, multiple unseal options, and more; a CLI tool to initialize, unseal and configure Vault with authentication methods and secret engines; and direct secret injection into Pods to reduce the attack surface. Automates the entire Vault lifecycle in your Kubernetes clusters. Provides seamless integration with non-Vault-aware applications without storing the decrypted secret anywhere. Vault is the de-facto standard for secret management in cloud-native environments. Bank-Vaults provides various tools for Hashicorp Vault to make its use easier. ... -
22
Hakrawler
Fast Go web crawler for discovering URLs and web app endpoints
...It is primarily used during the reconnaissance phase of security testing, bug bounty hunting, and penetration testing. It works by automatically crawling web pages and extracting links, JavaScript file locations, and other resources that may reveal additional attack surface or hidden functionality. hakrawler is implemented as a simple and efficient crawler using the Gocolly library, which allows it to perform fast and concurrent crawling of web pages. It accepts URLs through standard input, making it easy to integrate into command-line pipelines with other security tools. This workflow enables researchers to combine it with subdomain enumeration, HTTP probing, and vulnerability scanning utilities to automate reconnaissance processes. hakrawler can follow links within a website and optionally include subdomains. -
23
assetfinder
Find domains and subdomains related to a given domain
...It queries services such as certificate transparency logs, threat intelligence platforms, and passive DNS providers to build a comprehensive list of related assets. The tool is widely used in bug bounty programs and penetration testing to map an organization’s external attack surface. It supports optional filtering to return only subdomains, allowing users to focus on specific reconnaissance needs. assetfinder is lightweight and easy to use, typically requiring only a single command to produce results, making it ideal for quick enumeration tasks. Its modular design allows contributors to add new data sources, improving coverage over time. -
24
AQUATONE
A tool for domain flyovers
Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Aquatone is designed to be as easy to use as possible and to integrate with your existing toolset with no or minimal glue. Aquatone is started by piping output of a command into the tool. It doesn't really care how the piped data looks as URLs, domains, and IP addresses will be extracted with regular expression pattern matching. ... -
25
Go Graphics
Go Graphics - 2D rendering in Go with a simple API
...Use 1 to right or bottom align. DrawStringAnchored does the same for text, so you don't need to call MeasureString yourself. gg supports linear, radial and conic gradients and surface patterns. You can also implement your own patterns. It is often desired to rotate or scale about a point that is not the origin. The functions RotateAbout, ScaleAbout, ShearAbout are provided as a convenience.
