Search Results for "security audit" - Page 3
Sort By:
Showing 147 open source projects for "security audit"
View related business solutions-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
uc-recon
AI-powered codebase intelligence. Audit any repo in minutes.
UC Recon is a model-agnostic codebase intelligence tool that gives engineering teams instant visibility into any repository. Point it at a local path, run a mission, and get 6 comprehensive report artifacts in ~10 minutes — no configuration required. Designed for CTOs, security engineers, and dev leads who need answers fast. Free to download. Pro license available for teams. -
2
System Hardening Benchmark
System Hardening Compliance Auditor
This tool simulates a security compliance audit, checking system configurations against a defined benchmark (e.g., DISA STIG or CIS). -
3
kavach
Self-hosted, multi-user password manager that tells you which secrets
-
4
STAYZER
SSH Trust Analyzer for Linux Infrastructure
...It discovers who can access each machine, detects shared SSH keys, identifies potentially risky trust relationships, and generates detailed reports in both human-readable and machine-readable formats. Designed for Linux administrators, DevOps engineers, and security professionals, STAyzer makes it easy to audit SSH trust across dozens or hundreds of servers. -
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
5
Cloud Scanner of Death is a professional-grade cloud security assessment tool designed to identify vulnerabilities, misconfigurations, and compliance issues across AWS, Azure, and Google Cloud Platform (GCP) environments. The tool provides comprehensive security scanning with detailed reporting and remediation guidance.
-
6
Netdeep Secure Firewall
Next Generation Open Source Firewall
Netdeep Secure is a Linux distribution with focus on network security. Is a Next Generation Open Source Firewall, which provides virtually all perimeter security features that your company may need. It offers Web content filters, ensuring better performance of the network, allowing users to use the service efficiently and securely, providing a deep control of the use of the Web access service, blocking access to unwanted websites, Virus, Spam, Applications and intrusion attempts. Its... -
7
FluxKey
Simple Encrypted Password Generator
━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Welcome to the Official FluxKey Sourceforge — home of the sleek, local-first password manager built for people who actually care about their security. No cloud. No subscriptions. No data leaving your machine. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ✦ WHAT IS FLUXKEY? FluxKey is a fully encrypted, offline password manager built with Python. Your vault lives on your device, protected by a master password — and it looks incredible doing it. ⚡ Powerful password generator with real-time strength scoring 🔒 Auto-lock, clipboard auto-clear & full audit log 📓 Secure encrypted notes — private and always local 👤 Multi-profile & multi-vault support 🎨 Stunning dark cyberpunk UI built entirely from scratch ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ✦ JOIN DISCORD, WHY JOIN? ... -
8
Doberman-Core
Your AI's guard dog to stop it from going rogue.
...It supports AI coding agents, MCP clients and autonomous workflows while preserving useful agent autonomy instead of forcing human approval for every action. Built for developers and security teams, Doberman provides runtime policy enforcement, step-up authorization, audit logs and agent activity monitoring across tools like Claude Code, Codex, Cursor and other MCP-compatible systems. The open-source core is local-first and designed to act as a final security boundary when model-level guardrails fail. -
9
Incident Response Automation
Incident Response Automation Tool
This tool simulates automated defensive actions, such as blocking an IP address on a firewall, in response to detected threats. Quick Start To use this tool, run the responder: # Block an IP address python lab_runner.py incident-response --ip 10.10.10.xxx --reason "Malicious Activity Detected" -
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
10
XRAY
XRay for recon, mapping and OSINT gathering from public networks
XRAY is a modular security toolset that helps developers and security professionals analyze, fuzz, and test web applications, protocols, and network services for vulnerabilities. It provides a framework for writing and executing inspection modules that can parse structured data (JSON, XML, HTML), traverse graphs of endpoints, and perform intelligent probing guided by discovered surface area. XRay is typically used as a reconnaissance and vulnerability discovery engine in red-team or... -
11
tirreno
Security framework for devs and product teams
tirreno is a security framework. tirreno [tir.ˈrɛ.no] helps understand, monitor, and protect your product from threats, fraud, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse that bypasses firewalls, SIEM, WAFs, and other defenses. tirreno detects threats where they actually happen: inside your product. tirreno is a few-dependency, "low-tech" PHP/PostgreSQL application.... -
12
AAD-50
Zero-trust storage erasure. Hardware-verified data destruction.
AAD-50 is an open-source NVMe sanitization framework that closes a 15-year verification gap in Linux nvme-cli. The standard nvme sanitize command returns immediately after acceptance without confirming the drive actually completed the background erasure. AAD-50 fixes this by polling NVMe Log Page 0x81 (Sanitize Status) after every cycle and refusing to advance until SSTAT=0x1 confirms hardware completion. Implements a 50-cycle B→C→A phase matrix: 40 cycles NAND overwrite, 5 FTL block... -
13
TeamPass
cPassMan was renamed to TeamPass
TeamPass is a collaborative passwords manager. It has been created for managing passwords in a collaborative environment of use such as companies. With TeamPass it is possible to organize passwords in a tree structure, associate information to password. MORE INFORMATION ON TEAMPASS.NET website! -
14
SENTINEL
Open-source behavioral intelligence platform for detecting child groom
SENTINEL is an open-source behavioral intelligence platform for detecting child grooming on digital platforms. Released by Sentinel Foundation in April 2026, it analyzes patterns of user behavior over time rather than scanning message content for keywords, identifying grooming sequences before direct harm occurs. Key capabilities: - Behavioral scoring across four signal types: linguistic register shifts, relationship graph evolution, temporal escalation patterns, and fairness gates -... -
15
sentinel
Sentinel is a filesystem-backed document DBMS written in Rust.
Sentinel is a filesystem-backed document DBMS built in Rust that prioritizes compliance, transparency, and auditability over raw performance. Unlike traditional databases, every document is a plain JSON file, making your data immediately forensic-friendly and Git-versionable. Perfect for regulated industries requiring GDPR, SOC 2, HIPAA, or PCI-DSS compliance. Sentinel provides async operations with automatic BLAKE3 hashing and optional Ed25519 signatures for cryptographic integrity. Data... -
16
Network Enumeration Tool
Network Enumeration Tool for Host Exploration and Recon
N-ETHER (Network Enumeration Tool for Host Exploration and Reconnaissance) is a robust and highly automated Python script designed to streamline the critical initial phases of network security auditing and penetration testing. It’s core purpose is to perform fast, comprehensive, and consistent host and port discovery across single targets or large lists of IP addresses. N-ETHER functions as an intelligent, opinionated wrapper around the powerful nmap tool, bundling best-practice scanning... -
17
SecureBit.chat - P2P Encrypted Messenger
P2P encrypted messenger. No servers, no metadata, no registration.
...One protocol, two implementations. The web client is self-contained. Desktop and native mobile clients share a Rust cryptographic core. All clients are wire-compatible. Security: per-message forward secrecy with a DH ratchet, out-of-band SAS verification as the single trust-transition point, deny-by-default for control frames before verification, ECDH secrets zeroed after key derivation, view-once messages kept out of OS notifications. The threat model is published. No independent third-party audit has been performed. ... -
18
SCADA-LTS
A comprehensive Supervisory Control, Data Acquisition, and Execution
SCADA-LTS is an advanced FOSS, web-based, multi-platform environment designed to build your own Supervisory Control, Data Acquisition, and Management Execution Software - SCADA/MES. Its architecture provides a robust foundation for complex industrial automation and monitoring. Optimized for Smart Infrastructure, it is highly capable of managing industrial PV/BESS, Smart buildings, municipal Water networks or Wastewater treatment, ANPR telemetry, City-wide lighting, and other diverse data... -
19
PakOS
A resonably secure operating system from Pakistan
PakOS accepted on DistroWatch as 1st and Only Pakistani Linux Distro https://distrowatch.com/table.php?distribution=pakos PakOS Webiste at https://axitechnologies.ai/pak-os-linux/ Alternate Download Links on GitLab for Pakistani Users: https://gitlab.com/pakos-iso-archives/pakos-12-end-of-10/-/package_files/233060048/download & https://gitlab.com/pakos-iso-archives/pakos-13-hindukush/-/package_files/279461965/download All thanks to Hashir Asad, ... -
20
GoModel
The best AI Gateway 2026 - GoModel
GoModel is the last AI Gateway you'll ever try. It's the most secure, the fastest, and the most reliable AI Gateway according to self-verifiable benchmarks. The best open-source alternative to LiteLLM, GoModel provides a unified OpenAI-compatible API for OpenAI, Anthropic, Gemini, Groq, xAI, Ollama, vLLM, Amazon Bedrock, OpenRouter, and many more providers. Built in Go, it's lightweight, resource-efficient, and designed for production workloads with extremely low latency. GoModel... -
21
-
22
Zeebroo Business Solution
Zeebroo Business Solutions is an all-in-one Cloud ERP software
Zeebroo Business Solutions is an all-in-one Enterprise Resource Planning (ERP) platform designed to streamline and centralize key business operations into a single, unified system. It is built to help enterprises, retail businesses, and growing startups manage their end-to-end operations efficiently without needing multiple disconnected tools. -
23
filepilot-shell
Rust-based terminal: multi-pane SSH sync, AI CLI help, PTY replay
https://abhibagul.github.io/filepilot/shell.html FilePilot Shell is an open-source (MIT), Tauri + Rust terminal emulator built for developers and sysadmins running local shells and SSH sessions side by side. Multi-tab panes support a Unified Sync Manager, letting you group splits (A/B/C or custom) and broadcast commands across hosts in real time. Security is zero-knowledge: SSH keys and connection profiles are encrypted client-side with AES-256-GCM, with optional HashiCorp Vault... -
24
SiteOne Crawler (desktop app)
A free, feature-rich web analyzer and exporter/cloner you will love!
A free in-depth website analyzer providing audits of security, performance, SEO, accessibility and other technical aspects. Available as a desktop application for Windows/macOS/Linux and as a CLI tool for advanced users and CI/CD processes. It also includes an offline web page exporter (website clone, mirror). -
25
Monokle
Better create, understand, and deploy YAML manifests
Monokle's integrated open-source tools and cloud platform make it easy to define, manage, and enforce Kubernetes YAML configuration policies in minutes. Deploy, manage and audit policies for your teams across the entire configuration lifecycle from a centralized Dashboard. Define polices using 100+ pre-existing rules for Security, Resource Usage, and Compliance. Create your own Validation Extensions for your organization's compliance and conventions. Assess policy enforcement impact by validation reporting and insights. ...
