Showing 644 open source projects for "security"

View related business solutions
  • Full-stack observability with actually useful AI | Grafana Cloud Icon
    Full-stack observability with actually useful AI | Grafana Cloud

    Our generous forever free tier includes the full platform, including the AI Assistant, for 3 users with 10k metrics, 50GB logs, and 50GB traces.

    Built on open standards like Prometheus and OpenTelemetry, Grafana Cloud includes Kubernetes Monitoring, Application Observability, Incident Response, plus the AI-powered Grafana Assistant. Get started with our generous free tier today.
    Create free account
  • Stop Storing Third-Party Tokens in Your Database Icon
    Stop Storing Third-Party Tokens in Your Database

    Auth0 Token Vault handles secure token storage, exchange, and refresh for external providers so you don't have to build it yourself.

    Rolling your own OAuth token storage can be a security liability. Token Vault securely stores access and refresh tokens from federated providers and handles exchange and renewal automatically. Connected accounts, refresh exchange, and privileged worker flows included.
    Try Auth0 for Free
  • 1
    pompelmi

    pompelmi

    Minimal Node.js wrapper around ClamAV

    Pompelmi is an open-source application designed to provide a simple and efficient interface for interacting with large language models, focusing on usability and accessibility. It offers a streamlined chat-based experience where users can communicate with AI models for various tasks such as writing, analysis, and general assistance. The application emphasizes a clean and minimal interface, reducing complexity while maintaining essential functionality. It is designed to support local or...
    Downloads: 1 This Week
    Last Update:
    See Project
  • 2
    OpenPGP.js

    OpenPGP.js

    OpenPGP implementation for JavaScript

    This project aims to provide an Open Source OpenPGP library in JavaScript so it can be used on virtually every device. Instead of other implementations that are aimed at using native code, OpenPGP.js is meant to bypass this requirement (i.e. people will not have to install gpg on their machines in order to use the library). The idea is to implement all the needed OpenPGP functionality in a JavaScript library that can be reused in other projects that provide browser extensions or server...
    Downloads: 1 This Week
    Last Update:
    See Project
  • 3
    cat-catch

    cat-catch

    Cat scratch chrome resource sniffing extension

    ...Maozha is open source. Anyone can download and modify it and put it on the app store. There are already many fake Maozha with the ad code added. Please pay attention to your own data security. All installation addresses are subject to github and user documentation. Chromium kernel version 93 or later is required after version 1.0.17. If it is lower than 93, please use version 1.0.16. The extension is a general sniffing tool and has the same function as the browser DevTools. It does not decrypt any website. Any content downloaded by the user has nothing to do with the extension. ...
    Downloads: 19 This Week
    Last Update:
    See Project
  • 4
    Sysdig Inspect

    Sysdig Inspect

    A powerful opensource interface for container troubleshooting

    Sysdig Inspect is a powerful opensource interface for container troubleshooting and security investigation. Inspect's user interface is designed to intuitively navigate the data-dense sysdig captures that contain granular system, network, and application activity of a Linux system. Sysdig Inspect helps you understand trends, correlate metrics and find the needle in the haystack. It comes packed with features designed to support both performance and security investigations, with deep container introspection.
    Downloads: 0 This Week
    Last Update:
    See Project
  • AI-powered service management for IT and enterprise teams Icon
    AI-powered service management for IT and enterprise teams

    Enterprise-grade ITSM, for every business

    Give your IT, operations, and business teams the ability to deliver exceptional services—without the complexity. Maximize operational efficiency with refreshingly simple, AI-powered Freshservice.
    Try it Free
  • 5
    Live-Forensicator

    Live-Forensicator

    A suite of Tools to aid Incidence Response and Live Forensics

    Live-Forensicator is a toolkit intended for live forensic collection and initial triage on Windows machines. It automates the capture of volatile information—running processes, network connections, loaded drivers, account sessions, and in-memory artifacts—into a consistent artifact set that investigators can analyze offline. The tool tries to be non-invasive while collecting sensitive data quickly and logs the collection steps to preserve chain-of-custody details and to help auditors...
    Downloads: 3 This Week
    Last Update:
    See Project
  • 6
    ThumbmarkJS

    ThumbmarkJS

    World's best free browser fingerprinting library

    ThumbmarkJS is an MIT-licensed browser fingerprinting library that produces stable fingerprints with 90% uniqueness. It works with normal and private browsing. ThumbmarkJS is a free, open‑source browser fingerprinting JavaScript library, designed as an alternative to FingerprintJS. It generates distinct, persistent device fingerprints using web APIs like canvas, audio, fonts, WebGL, and more, enabling identification of browsers across sessions, even in incognito or cleared-cache...
    Downloads: 0 This Week
    Last Update:
    See Project
  • 7
    Pomotroid

    Pomotroid

    Simple and visually-pleasing Pomodoro timer

    ...It aims to provide a visually-pleasing and reliable way to track productivity using the Pomodoro Technique. Pomotroid provides many themes. It's also theme-able, allowing you to customize its appearance. Depending on your OS settings, you may receive a security warning upon installation. This has to do with Pomotroid being an unsigned application. You can find out more by researching code-signing for Apple and Microsoft. Customize focus, short break, long break, and rounds to fit your workflow. Pleasing chimes let you know when it’s time to take a break or start focussing. Pomotroid is simple and straightforward, making it incredibly easy to use. ...
    Downloads: 11 This Week
    Last Update:
    See Project
  • 8
    Decap

    Decap

    A Git-based CMS for Static Site Generators

    Open source content management for your Git workflow. Use Decap CMS with any static site generator for a faster and more flexible web project. Get the speed, security, and scalability of a static site, while still providing a convenient editing interface for content. Content is stored in your Git repository alongside your code for easier versioning, multi-channel publishing, and the option to handle content updates directly in Git. Decap CMS is built as a single-page React app. Create custom-styled previews, UI widgets, and editor plugins or add backends to support different Git platform APIs. ...
    Downloads: 20 This Week
    Last Update:
    See Project
  • 9
    Network Security Toolkit (NST)

    Network Security Toolkit (NST)

    A network security analysis and monitoring toolkit Linux distribution.

    Network Security Toolkit (NST) is a bootable ISO image (Live USB Flash Drive) based on Fedora 42 providing easy access to best-of-breed Open Source Network Security Applications and should run on most x86_64 systems. The main intent of developing this toolkit was to provide the security professional and network administrator with a comprehensive set of Open Source Network Security Tools.
    Leader badge
    Downloads: 176 This Week
    Last Update:
    See Project
  • MongoDB Atlas runs apps anywhere Icon
    MongoDB Atlas runs apps anywhere

    Deploy in 115+ regions with the modern database for every enterprise.

    MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
    Start Free
  • 10
    Kibana

    Kibana

    Your window into the Elastic Stack

    Kibana is a analytics and search dashboard for Elasticsearch that allows you to visualize Elasticsearch data and efficiently navigate the Elastic Stack. With Kibana you can visualize and shape your data simply and intuitively, share visualizations for greater collaboration, organize dashboards and visualizations, and so much more.
    Downloads: 7 This Week
    Last Update:
    See Project
  • 11
    Seeker

    Seeker

    Accurately Locate Smartphones using Social Engineering

    ...It can capture latitude, longitude, accuracy, altitude, direction, and even speed, with results displayed in a terminal. The project supports both manual deployment and tunneling services like Ngrok for external access. While primarily intended as an educational resource on security awareness, it highlights the risks of exposing geolocation data online. Its simplicity and effectiveness have made it a popular project in cybersecurity learning circles.
    Downloads: 14 This Week
    Last Update:
    See Project
  • 12
    OpenZeppelin Contracts

    OpenZeppelin Contracts

    OpenZeppelin Contracts is a library for secure smart contracts

    A library for secure smart contract development. Build on a solid foundation of community-vetted code. OpenZeppelin Contracts uses semantic versioning to communicate backward compatibility of its API and storage layout. To keep your system secure, you should always use the installed code as-is, and neither copy-paste it from online sources nor modify it yourself. The library is designed so that only the contracts and functions you use are deployed, so you don't need to worry about it...
    Downloads: 0 This Week
    Last Update:
    See Project
  • 13
    Kubernetes Goat

    Kubernetes Goat

    Kubernetes Goat is a "Vulnerable by Design" cluster environment

    Learn to attack or find security issues, misconfigurations, and real-world hacks within containers, Kubernetes, and cloud-native environments. Enumerate, exploit, and gain access to the workloads right from your browser. Understand how attackers think, work, and exploit security issues, and apply these learnings to detect and defend them. Also, learn best practices, defenses, and tools to mitigate, and detect in the real world.
    Downloads: 0 This Week
    Last Update:
    See Project
  • 14
    Soap

    Soap

    A SOAP client and server for node.js

    ...It also provides a server that allows you to run your own SOAP services. Very simple API Handles both RPC and Document schema types. Supports multiRef SOAP messages. Support for both synchronous and asynchronous method handlers. WS-Security UsernameToken Profile 1.0. Supports Express-based web server (body parser middleware can be used) The so called one-way (or asynchronous) calls occur when an operation is called with no output defined in WSDL. The server sends a response (defaults to status code 200 with no body) to the client disregarding the result of the operation.
    Downloads: 0 This Week
    Last Update:
    See Project
  • 15
    Netlify CMS

    Netlify CMS

    A Git-based CMS for static site generators

    Open source content management for your Git workflow. Use Netlify CMS with any static site generator for a faster and more flexible web project. Get the speed, security, and scalability of a static site, while still providing a convenient editing interface for content. Content is stored in your Git repository alongside your code for easier versioning, multi-channel publishing, and the option to handle content updates directly in Git. Netlify CMS is built as a single-page React app. Create custom-styled previews, UI widgets, and editor plugins or add backends to support different Git platform APIs. ...
    Downloads: 3 This Week
    Last Update:
    See Project
  • 16
    Cap CAPTCHA

    Cap CAPTCHA

    The privacy-first, self-hosted CAPTCHA for the modern web

    ...Cap avoids reliance on centralized providers, reducing dependency on external services and improving privacy compliance. Its design reflects a shift toward decentralized, user-respecting security mechanisms. It is particularly suited for developers who want transparent and customizable bot protection.
    Downloads: 6 This Week
    Last Update:
    See Project
  • 17
    System Prompts Leaks

    System Prompts Leaks

    Collection of extracted System Prompts from popular chatbots

    ...By aggregating these prompts, the repository serves as a valuable resource for understanding how widely different models are being guided in the wild, which helps with comparative analysis across architectures and service providers. It also helps raise awareness around prompt security, showing how exposed system instructions can lead to unintended behaviors or exploitation if not properly protected.
    Downloads: 6 This Week
    Last Update:
    See Project
  • 18
    Desktop Commander MCP

    Desktop Commander MCP

    AI-powered MCP server for desktop file and terminal automation

    Desktop Commander MCP is an advanced Model Context Protocol server designed to extend AI assistants with direct control over a user’s local machine, including the file system and terminal. It integrates with clients like Claude Desktop to enable AI-driven workflows such as editing files, executing commands, and automating development tasks from a single conversational interface. Desktop Commander MCP builds on top of an MCP filesystem server and enhances it with powerful search, replace, and...
    Downloads: 10 This Week
    Last Update:
    See Project
  • 19
    Jitsi Meet Electron

    Jitsi Meet Electron

    Jitsi Meet desktop application powered by electron

    Desktop application for Jitsi Meet built with Electron. End-to-End Encryption support (BETA). Works with any Jitsi Meet deployment. Builtin auto-updates. Remote control (currently disabled due to security issues). Always-On-Top window. A warning will show up mentioning the app is unsigned upon first install. This is expected. On macOS Catalina a warning will be displayed on first install. The app won't open unless "open" is pressed. This dialog is only shown once. Note that screen-sharing is currently not supported under Wayland, eg. the permissions prompt may loop endlessly. ...
    Downloads: 5 This Week
    Last Update:
    See Project
  • 20
    rep+

    rep+

    Burp-style HTTP Repeater for Chrome DevTools with built‑in AI

    ...It captures HTTP traffic from the inspected page without needing a proxy, allowing users to replay, modify, and analyze individual requests with fine-grained control over headers, bodies, and methods. The tool offers hierarchical grouping, tagging, and filtering of captured requests so that developers and security testers can manage complex traffic flows efficiently. It includes AI-assisted insights, where contextual explanations and attack vector suggestions help interpret request outcomes or propose modifications. Additional productivity features like exporting/importing requests, various representation modes (pretty/raw/hex), and bulk replay mechanisms make it suitable for debugging, performance checking, or security probing.
    Downloads: 0 This Week
    Last Update:
    See Project
  • 21
    Apisauce

    Apisauce

    Axios + standardized errors + request/response transforms

    Talking to APIs doesn't have to be awkward anymore. Low-fat wrapper for the amazing Axios HTTP client library. All responses follow the same flow: success and failure alike. Responses have a problem property to help guide exception flow, attach functions that get called each request, attach functions that change all request or response data. Detects connection issues (on React Native). The only required property is baseURL and it should be the starting point for your API. It can contain a...
    Downloads: 0 This Week
    Last Update:
    See Project
  • 22
    Model Context Protocol (MCP) Servers

    Model Context Protocol (MCP) Servers

    Model Context Protocol Servers

    The Model Context Protocol (MCP) is an open protocol that enables seamless integration between LLM applications and external data sources and tools. Whether you’re building an AI-powered IDE, enhancing a chat interface, or creating custom AI workflows, MCP provides a standardized way to connect LLMs with the context they need.
    Downloads: 4 This Week
    Last Update:
    See Project
  • 23
    NemoClaw

    NemoClaw

    NVIDIA plugin for secure installation of OpenClaw

    ...It installs and configures the NVIDIA OpenShell runtime, which provides a secure environment for running autonomous AI agents. NemoClaw enables users to launch sandboxed agent environments that control network access, file permissions, and inference requests through policy-based security. The platform integrates with AI models such as NVIDIA Nemotron and supports multiple inference backends including cloud APIs, local NIM deployments, and vLLM. Through its command-line interface, developers can deploy, monitor, and manage AI assistants running inside isolated sandboxes. By combining sandbox orchestration, agent management, and AI model integration, NemoClaw provides a secure foundation for building and operating autonomous AI assistants.
    Downloads: 1 This Week
    Last Update:
    See Project
  • 24
    NGINX Proxy Manager

    NGINX Proxy Manager

    Docker container for managing Nginx proxy hosts

    Expose web services on your network. Free SSL with Let's Encrypt. Designed with security in mind. Perfect for home networks. Expose your private network Web services and get connected anywhere. Based on Tabler, the interface is a pleasure to use. Configuring a server has never been so fun. Configure other users to either view or manage their own hosts. Full access permissions are available. Built as a Docker Image, Nginx Proxy Manager only requires a database.
    Downloads: 8 This Week
    Last Update:
    See Project
  • 25
    DOMPurify

    DOMPurify

    XSS sanitizer for HTML, MathML and SVG

    ...Our automated tests cover 17 different browsers right now, more to come. We also cover Node.js v14.15.1, v15.4.0, running DOMPurify on jsdom. Older Node.js versions are known to work as well. DOMPurify is written by security people who have vast background in web attacks and XSS.
    Downloads: 10 This Week
    Last Update:
    See Project
MongoDB Logo MongoDB