Showing 459 open source projects for "web security"

View related business solutions
  • MongoDB Atlas runs apps anywhere Icon
    MongoDB Atlas runs apps anywhere

    Deploy in 115+ regions with the modern database for every enterprise.

    MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
    Start Free
  • Veeam Data Platform v13.1 - Get Your Free Trial Icon
    Veeam Data Platform v13.1 - Get Your Free Trial

    Secure by design, portable by default. Recover clean, fast, anywhere. Start a free trial.

    Try Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
    Try it Free
  • 1
    Thulite

    Thulite

    Web framework designed for speed, security, and SEO

    Thulite is an AI-powered search and recommendation engine that enhances search functionality in applications. It provides intelligent query processing, result ranking, and personalized recommendations.
    Downloads: 10 This Week
    Last Update:
    See Project
  • 2
    NGINX Proxy Manager

    NGINX Proxy Manager

    Docker container for managing Nginx proxy hosts

    Expose web services on your network. Free SSL with Let's Encrypt. Designed with security in mind. Perfect for home networks. Expose your private network Web services and get connected anywhere. Based on Tabler, the interface is a pleasure to use. Configuring a server has never been so fun. Configure other users to either view or manage their own hosts.
    Downloads: 12 This Week
    Last Update:
    See Project
  • 3
    Cap CAPTCHA

    Cap CAPTCHA

    The privacy-first, self-hosted CAPTCHA for the modern web

    ...It replaces invasive tracking-based CAPTCHA solutions with a lightweight approach based on proof-of-work and client-side instrumentation. The system can be deployed independently, giving developers full control over user data and verification processes. It integrates easily into web applications and focuses on maintaining usability while preventing automated abuse. Cap avoids reliance on centralized providers, reducing dependency on external services and improving privacy compliance. Its design reflects a shift toward decentralized, user-respecting security mechanisms. It is particularly suited for developers who want transparent and customizable bot protection.
    Downloads: 6 This Week
    Last Update:
    See Project
  • 4
    Seeker

    Seeker

    Accurately Locate Smartphones using Social Engineering

    ...While primarily intended as an educational resource on security awareness, it highlights the risks of exposing geolocation data online. Its simplicity and effectiveness have made it a popular project in cybersecurity learning circles.
    Downloads: 24 This Week
    Last Update:
    See Project
  • Go from Code to Production URL in Seconds Icon
    Go from Code to Production URL in Seconds

    Cloud Run deploys apps in any language instantly. Scales to zero. Pay only when code runs.

    Skip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
    Start Free
  • 5
    Network Security Toolkit (NST)

    Network Security Toolkit (NST)

    A network security analysis and monitoring toolkit Linux distribution.

    ...The majority of tools published in the article: Top 125 Security Tools by INSECURE.ORG are available in the toolkit. An advanced Web User Interface (WUI) is provided for system/network administration, navigation, automation, network monitoring, host geolocation, network analysis and configuration of many network and security applications found within the NST distribution. In the virtual world, NST can be used as a network security analysis, validation and monitoring tool on enterprise virtual servers hosting virtual machines.
    Leader badge
    Downloads: 105 This Week
    Last Update:
    See Project
  • 6
    Cabin

    Cabin

    Cabin is the best JavaScript and Node.js logging service and logging

    Cabin is the best JavaScript and Node.js logging service and logging npm package. Cabin is a drop-in replacement and the best alternative to Sentry, Timber, Airbrake, Papertrail, Loggly, Bugsnag, etc. Cabin will automatically detect and mask the following list of extremely sensitive types of data in your logs. Reduce your disk storage costs through Cabin's automatic conversion of Streams, Buffers, and ArrayBuffers to simplified, descriptive-only objects that otherwise would be unreadable...
    Downloads: 11 This Week
    Last Update:
    See Project
  • 7
    gruntwork.io website

    gruntwork.io website

    The gruntwork.io website

    The Gruntwork team deploys a Reference Architecture for you, setting you up with all the foundational pieces you need to get started with AWS and Terraform, including your Landing Zone, network topology, CI / CD pipeline, guard rails, monitoring, out-of-the-box compliance, and more. Use the Gruntwork Infrastructure as Code Library (IaC Library), a collection of reusable Terraform code that has been proven in production at hundreds of companies, to deploy the rest of your infrastructure,...
    Downloads: 8 This Week
    Last Update:
    See Project
  • 8
    markdown-it

    markdown-it

    Markdown parser, done right. 100% CommonMark support, extensions

    markdown-it is a fast and extensible JavaScript-based Markdown parser designed to convert Markdown text into HTML while maintaining strict compliance with the CommonMark specification and offering additional syntax enhancements. It is widely used in web applications, documentation tools, and content platforms due to its high performance and flexibility. The library is built with a rule-based parsing system that allows developers to customize or replace syntax rules, making it adaptable to a wide variety of use cases. It also supports plugins that extend functionality, such as adding emoji support, footnotes, or custom containers, enabling highly tailored rendering pipelines. markdown-it emphasizes security by default, ensuring that generated HTML is safe for use in web environments without introducing vulnerabilities. ...
    Downloads: 7 This Week
    Last Update:
    See Project
  • 9
    Nano ID

    Nano ID

    A secure, URL-friendly, unique string ID generator for JavaScript

    Nano ID is a library for generating random IDs. Likewise UUID, there is a probability of duplicate IDs. However, this probability is extremely small. Meanwhile, a lot of projects generate IDs in small numbers. For those projects, the ID length could be reduced without risk. This calculator aims to help you realize the extent to which the ID length can be reduced. Instead of using the unsafe Math.random(), Nano ID uses the crypto module in Node.js and the Web Crypto API in browsers. These...
    Downloads: 5 This Week
    Last Update:
    See Project
  • Train ML Models With SQL You Already Know Icon
    Train ML Models With SQL You Already Know

    BigQuery automates data prep, analysis, and predictions with built-in AI assistance.

    Build and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
    Start Free
  • 10
    Cookie Parser

    Cookie Parser

    Parse HTTP request cookies

    Parse Cookie header and populate req.cookies with an object keyed by the cookie names. Optionally you may enable signed cookie support by passing a secret string, which assigns req.secret so it may be used by other middleware. A middleware for Express.js that parses cookies from HTTP requests and makes them accessible in req.cookies.
    Downloads: 4 This Week
    Last Update:
    See Project
  • 11
    Netlify CMS

    Netlify CMS

    A Git-based CMS for static site generators

    Open source content management for your Git workflow. Use Netlify CMS with any static site generator for a faster and more flexible web project. Get the speed, security, and scalability of a static site, while still providing a convenient editing interface for content. Content is stored in your Git repository alongside your code for easier versioning, multi-channel publishing, and the option to handle content updates directly in Git. Netlify CMS is built as a single-page React app. ...
    Downloads: 5 This Week
    Last Update:
    See Project
  • 12
    Steel Browser

    Steel Browser

    Open Source Browser API for AI Agents & Apps

    Steel Browser is a privacy-focused web browser built with security and performance optimizations, designed to minimize tracking and enhance user control.
    Downloads: 2 This Week
    Last Update:
    See Project
  • 13
    fess

    fess

    Open source enterprise search server for websites, files, and data

    Fess is an open source enterprise search server designed to provide powerful full-text search capabilities across multiple data sources. It enables organizations to quickly deploy a scalable search environment without requiring deep knowledge of underlying search technologies. Fess is built on top of OpenSearch and offers an integrated solution for crawling, indexing, and searching documents from websites, file systems, and various data stores. Fess includes a built-in crawler that can...
    Downloads: 1 This Week
    Last Update:
    See Project
  • 14
    Marked

    Marked

    A markdown parser and compiler. Built for speed

    ...Available as a command-line interface (CLI) and running in client- or server-side JavaScript projects. The only completely secure system is the one that doesn't exist in the first place. Having said that, we take the security of Marked very seriously. To prevent ReDoS attacks you can run marked on a worker and terminate it when parsing takes longer than usual. Marked can be run in a worker thread on a node server, or a web worker in a browser. Only current and LTS Node.js versions are supported. End-of-life Node.js versions may become incompatible with Marked at any point in time.
    Downloads: 14 This Week
    Last Update:
    See Project
  • 15
    Vieb

    Vieb

    Vim bindings for the web by design

    Free, open source, fast and secure. Local first adblocking, auto-complete, AMP protection, custom redirects and more, all without web requests. Privacy with strict permission system, navigator overrides, custom useragent, custom WebRTC policy and more. Accessible with custom themes, full interface & fontsize scaling, page zooming, spellcheck and mouse support. Security settings with permissions, cache usage, cookie management, (auto-)download settings and more.
    Downloads: 7 This Week
    Last Update:
    See Project
  • 16
    Decap

    Decap

    A Git-based CMS for Static Site Generators

    Open source content management for your Git workflow. Use Decap CMS with any static site generator for a faster and more flexible web project. Get the speed, security, and scalability of a static site, while still providing a convenient editing interface for content. Content is stored in your Git repository alongside your code for easier versioning, multi-channel publishing, and the option to handle content updates directly in Git. Decap CMS is built as a single-page React app. ...
    Downloads: 4 This Week
    Last Update:
    See Project
  • 17
    RuoYi AI

    RuoYi AI

    Enterprise AI platform for building, deploying, and managing apps

    RuoYi AI is a full-stack enterprise-oriented AI development platform designed to help developers rapidly build, deploy, and manage intelligent applications using modern large language models and AI ecosystems. It provides a unified framework for integrating multiple AI models from different providers, allowing teams to switch or combine models through a consistent interface without vendor lock-in. RuoYi AI includes built-in support for retrieval-augmented generation, enabling organizations...
    Downloads: 12 This Week
    Last Update:
    See Project
  • 18
    DOMPurify

    DOMPurify

    XSS sanitizer for HTML, MathML and SVG

    ...Our automated tests cover 17 different browsers right now, more to come. We also cover Node.js v14.15.1, v15.4.0, running DOMPurify on jsdom. Older Node.js versions are known to work as well. DOMPurify is written by security people who have vast background in web attacks and XSS.
    Downloads: 12 This Week
    Last Update:
    See Project
  • 19
    templUI

    templUI

    A growing collection of beautifully designed UI components for Go

    templUI is a modern UI component library built specifically for Go applications using the templ templating language, offering a developer-first approach to building interfaces with strong type safety and performance. It provides a growing collection of beautifully designed, production-ready components styled with Tailwind CSS, allowing developers to construct modern web interfaces without relying on heavy frontend frameworks. One of its defining principles is code ownership, meaning developers can either import components directly or copy them into their projects using a CLI, ensuring full control over customization and long-term maintenance. The library avoids JavaScript frameworks entirely, instead relying on lightweight, vanilla implementations that prioritize speed and simplicity. templUI also emphasizes security and compliance, with features such as CSP-friendly rendering and no inline scripts, making it suitable for enterprise environments.
    Downloads: 4 This Week
    Last Update:
    See Project
  • 20
    ExpressJS.com

    ExpressJS.com

    The Express.js Website

    This repository contains the source for the Express web site and documentation, the canonical reference for developers using the Express framework. It organizes material into API reference, getting-started guides, best practices, and topic-focused explanations such as routing, middleware, error handling, templating, and performance. Versioned docs help readers match API behavior to the framework version they’re running, reducing confusion during upgrades.
    Downloads: 4 This Week
    Last Update:
    See Project
  • 21
    Neon Wallet

    Neon Wallet

    Self-custodial wallet for managing digital assets

    Neon Wallet is a self-custodial wallet for managing digital assets on desktop and mobile, supporting Neo, Ethereum, and EVM networks, with full user control. Available as a desktop wallet on Windows, Mac OS X, and Linux, the NEON wallet allows users to claim GAS on the NEO network.
    Downloads: 1 This Week
    Last Update:
    See Project
  • 22
    Evercookie

    Evercookie

    Produces persistent, respawning "super" cookies in a browser

    Evercookie is a JavaScript research project that demonstrates extremely persistent browser tracking methods. It stores identifying data across multiple browser storage mechanisms so the identifier can be recreated if only some storage locations are cleared. The project was originally useful for showing how difficult it could be for users to fully remove tracking data from older browser environments. It is now most valuable as a privacy and security education tool rather than a recommended...
    Downloads: 0 This Week
    Last Update:
    See Project
  • 23
    OrbitDB

    OrbitDB

    Peer-to-peer databases for the decentralized web

    ...OrbitDB is alpha-stage software. It means OrbitDB hasn't been security audited and programming APIs and data formats can still change. We encourage you to reach out to the maintainers if you plan to use OrbitDB in mission critical systems.
    Downloads: 0 This Week
    Last Update:
    See Project
  • 24
    Klavis AI

    Klavis AI

    MCP integration platforms for AI agents to use tools at any scale

    Klavis AI is a Y Combinator X25-backed open-source infrastructure platform that enables AI agents to reliably connect with external tools and services at scale through Model Context Protocol (MCP). Founded by ex-Google DeepMind and ex-Lyft engineers, Klavis provides 50+ production-ready MCP servers with enterprise OAuth support for GitHub, Slack, Gmail, Salesforce, Linear, Notion, and more. The flagship product Strata solves tool overload through progressive discovery, achieving +13% higher...
    Downloads: 0 This Week
    Last Update:
    See Project
  • 25
    OWASP Juice Shop

    OWASP Juice Shop

    Probably the most modern and sophisticated insecure web application

    OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools! Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications! Juice Shop is written in Node.js, Express and Angular. It was the first application written entirely in JavaScript listed in the OWASP VWA Directory. ...
    Leader badge
    Downloads: 355 This Week
    Last Update:
    See Project