Showing 2163 open source projects for "web security"

View related business solutions
  • Fully Managed MySQL, PostgreSQL, and SQL Server Icon
    Fully Managed MySQL, PostgreSQL, and SQL Server

    Automatic backups, patching, replication, and failover. Focus on your app, not your database.

    Cloud SQL handles your database ops end to end, so you can focus on your app.
    Start Free
  • Cut Data Warehouse Costs by 54% Icon
    Cut Data Warehouse Costs by 54%

    Easily migrate from Snowflake, Redshift, or Databricks with free tools.

    BigQuery delivers 54% lower TCO with exabyte scale and flexible pricing. Free migration tools handle the SQL translation automatically.
    Start Free
  • 1
    IVRE

    IVRE

    Open source framework for large scale network reconnaissance and analy

    ...It provides tools for both active and passive reconnaissance, enabling users to understand how networks behave and identify exposed services or infrastructure. The framework integrates with well known security and scanning tools such as Nmap, Masscan, ZGrab2, ZDNS, and Zeek to gather large amounts of network intelligence. IVRE stores the collected data in a database and offers multiple ways to explore and analyze it, including a web interface, command line tools, and a Python API. This allows security professionals to query scan results, inspect network flows, and identify patterns across large datasets. ...
    Downloads: 2 This Week
    Last Update:
    See Project
  • 2
    How To Secure A Linux Server

    How To Secure A Linux Server

    An evolving how-to guide for securing a Linux server

    How To Secure A Linux Server is a practical, evolving guide for hardening Linux servers in personal, hobby, and small-scale production environments. It focuses on step-by-step security improvements rather than abstract theory, making it accessible to administrators who need clear actions. The guide covers server setup, operating system choices, SSH hardening, firewall rules, user accounts, automatic updates, logging, intrusion prevention, and common web server considerations. It also includes dedicated material for kernel sysctl hardening and Nginx security. ...
    Downloads: 0 This Week
    Last Update:
    See Project
  • 3
    Kanidm

    Kanidm

    Kanidm: A simple, secure, and fast identity management platform

    Kanidm is a simple and secure identity management platform, allowing other applications and services to offload the challenge of authenticating and storing identities to Kanidm. The goal of this project is to be a complete identity provider, covering the broadest possible set of requirements and integrations. You should not need any other components (like Keycloak) when you use Kanidm - we already have everything you need. To achieve this we rely heavily on strict defaults, simple...
    Downloads: 12 This Week
    Last Update:
    See Project
  • 4
    QM

    QM

    Multiplayer agent harness for work

    QM is an open-source multiplayer agent harness designed for startup teams and company-wide AI work. Each person, channel, and project receives its own scoped memory, files, credentials, permissions, schedules, web apps, and durable sandbox. The same agent identity and configuration can operate through Slack or the web interface. Teams can choose among supported models and harnesses, including Pi, OpenCode, Codex, and Claude Code, without binding the deployment to one vendor. Administrators control organization settings, available models, shared skills, and security posture. ...
    Downloads: 6 This Week
    Last Update:
    See Project
  • $300 Free Credits to Build on Google Cloud Icon
    $300 Free Credits to Build on Google Cloud

    New customers can spin up VMs, build with AI, and query data at no cost.

    Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
    Start Free
  • 5
    Cloudflare Worker JWT

    Cloudflare Worker JWT

    Lightweight JWT implementation with no dependencies for Cloudflare

    cloudflare-worker-jwt is a JavaScript library for handling JSON Web Tokens (JWTs) inside Cloudflare Workers. It enables authentication, token validation, and signature verification for serverless applications.
    Downloads: 10 This Week
    Last Update:
    See Project
  • 6
    dnstwist

    dnstwist

    Detects phishing and lookalike domains using DNS fuzzing techniques

    ...The tool can output results in structured formats, making it easier to integrate with security workflows or further analyze suspicious domains.
    Downloads: 1 This Week
    Last Update:
    See Project
  • 7
    Ruffle

    Ruffle

    A Flash Player emulator written in Rust

    Ruffle is an open-source emulator for Adobe Flash Player, written primarily in Rust, and targeted at both desktop applications and web browsers via WebAssembly. Its goal is to enable legacy Flash content—animations, games, interactive media—to continue running safely and reliably after official Flash support was discontinued. On the web side, Ruffle is embedded into pages or installed as a browser extension; in the desktop version, it can open .swf files directly or embed them in applications. ...
    Downloads: 119 This Week
    Last Update:
    See Project
  • 8
    Zuul

    Zuul

    Gateway service providing dynamic routing, monitoring and more

    Zuul is an L7 application gateway that offers many capabilities, including dynamic routing, monitoring, security, resiliency and more. It is used in the backend of the Netflix streaming service as a front door for all requests from devices and web sites. Zuul is ideal for cases like this where API traffic volume and diversity can become overwhelming and cause production issues to arise suddenly and without warning. Zuul has a broad range of filters that enable it to perform multiple functions quickly and apply functionality to services like Netflix. ...
    Downloads: 9 This Week
    Last Update:
    See Project
  • 9
    reNgine

    reNgine

    Automated framework for web application reconnaissance and scanning

    reNgine is an automated reconnaissance framework designed to simplify and enhance the process of gathering information about web applications during security assessments. It provides a streamlined workflow for penetration testers, bug bounty hunters, and security teams who need to perform reconnaissance efficiently and at scale. The platform integrates multiple open-source reconnaissance tools into a unified environment with a configurable scanning engine and an intuitive web interface. reNgine focuses on improving traditional reconnaissance workflows by organizing collected data in a database and correlating results to make them easier to analyze. ...
    Downloads: 0 This Week
    Last Update:
    See Project
  • Custom VMs From 1 to 96 vCPUs With 99.95% Uptime Icon
    Custom VMs From 1 to 96 vCPUs With 99.95% Uptime

    General-purpose, compute-optimized, or GPU/TPU-accelerated. Built to your exact specs.

    Live migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
    Start Free
  • 10
    CTFd

    CTFd

    CTFs as you need them

    CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes. Create your own challenges, categories, hints, and flags from the Admin Interface. Dynamic Scoring Challenges. Unlockable challenge support. Challenge plugin architecture to create your own custom challenges. Static & Regex-based flags. Custom flag plugins. Unlockable hints. File uploads to the server or an Amazon...
    Downloads: 4 This Week
    Last Update:
    See Project
  • 11
    OAuthLib

    OAuthLib

    A generic, spec-compliant, thorough implementation of the OAuth

    A generic, spec-compliant, thorough implementation of the OAuth request-signing logic for Python 3.8+. OAuthLib is a framework which implements the logic of OAuth1 or OAuth2 without assuming a specific HTTP request object or web framework. Use it to graft OAuth client support onto your favorite HTTP library, or provide support onto your favourite web framework. If you're a maintainer of such a library, write a thin veneer on top of OAuthLib and get OAuth support for very little effort.
    Downloads: 2 This Week
    Last Update:
    See Project
  • 12
    Betterfox

    Betterfox

    Firefox user.js for optimal privacy and security

    Betterfox is an opinionated configuration profile for Mozilla Firefox designed to improve everyday web browsing by making the browser faster, more private, and more secure without relying on external add-ons or third-party code. Rather than being a separate browser, it consists of a curated set of preference tweaks (user.js settings) that users apply to their Firefox profile to optimize performance and harden privacy settings. The project focuses on a minimal-impact, maximum-effect approach, removing unnecessary background services, reducing fingerprinting, and tightening security defaults while trying to keep sites usable. ...
    Downloads: 18 This Week
    Last Update:
    See Project
  • 13
    Inventory

    Inventory

    Asset inventory dataset for public bug bounty program targets

    Trickest Inventory is an open source dataset and workflow collection designed to provide an extensive asset inventory for public bug bounty programs. The repository tracks and organizes security-relevant assets for more than 800 companies participating in public vulnerability disclosure and bug bounty initiatives. It collects information such as DNS records and web server data, helping security researchers better understand the attack surface of these programs. It aims to streamline reconnaissance for bug bounty hunters by providing ready-to-use asset information so researchers can quickly begin testing new targets. ...
    Downloads: 0 This Week
    Last Update:
    See Project
  • 14
    IronClaw

    IronClaw

    IronClaw is OpenClaw inspired but focused on privacy & security

    IronClaw is a security-first, open-source personal AI assistant built in Rust and designed to keep your data fully under your control. It operates on the principle that your AI should work for you, not external vendors, ensuring all data is stored locally, encrypted, and never shared. The platform emphasizes transparency, offering auditable code with no hidden telemetry or data harvesting.
    Downloads: 26 This Week
    Last Update:
    See Project
  • 15
    VulnClaw

    VulnClaw

    Based on AI Agent + MCP toolchain + penetration Skill orchestration

    VulnClaw is an AI-powered penetration testing agent that turns natural language security goals into structured testing workflows. It combines LLM agents, MCP toolchains, penetration testing skills, and command-line automation to support authorized security assessments. The project can guide information gathering, vulnerability discovery, validation, and report generation while keeping the workflow organized through sessions and tools. Its newer architecture uses a goal-driven solving engine...
    Downloads: 15 This Week
    Last Update:
    See Project
  • 16
    Kiro Crew

    Kiro Crew

    A persistent workspace for development work that self-improves

    ...The system supports subagents, reusable skills, MCP tools, scheduled jobs, reactive webhooks, and installable workflow-specific apps. Users can interact through a desktop app, web dashboard, CLI, or messaging services such as Slack, Discord, Telegram, Teams, and WeChat. Security controls include approvals, sandboxing, sensitive-path protection, credential redaction, deny rules, audit events, and governance policies.
    Downloads: 15 This Week
    Last Update:
    See Project
  • 17
    modrinth

    modrinth

    The Modrinth monorepo containing all code which powers Modrinth

    ...Built largely with Rust and modern web technologies, the codebase emphasizes performance, reliability, and scalable infrastructure capable of serving large modding communities. The repository acts as the central development hub where contributors can implement improvements, security updates, and new features for the Modrinth ecosystem.
    Downloads: 126 This Week
    Last Update:
    See Project
  • 18
    Merlin HTTP/2

    Merlin HTTP/2

    Merlin is a cross-platform post-exploitation HTTP/2 Command

    Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go. The Merlin server is a self-contained command line program that requires no installation. You just simply download it and run it. The command-line interface only works great if it will be used by a single operator at a time. The Merlin agent can be controlled through Mythic, which features a web-based user interface that enables multiplayer support, and a slew of other features inherent to the project.
    Downloads: 11 This Week
    Last Update:
    See Project
  • 19
    FingerprintJS

    FingerprintJS

    Browser fingerprinting library

    FingerprintJS is a source-available, client-side, browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them. Unlike cookies and local storage, a fingerprint stays the same in incognito/private mode and even when browser data is purged. Since FingerprintJS processes and generates the fingerprints from within the browser itself, the accuracy is limited (40% - 60%). For example, when 2 different users send requests using identical (i.e....
    Downloads: 13 This Week
    Last Update:
    See Project
  • 20
    Ente

    Ente

    End-to-end encrypted cloud for photos, videos and 2FA secrets

    Ente is a fully open-source, end‑to‑end encrypted cloud platform designed for securely storing and managing your photos, videos, and 2FA secrets — without needing to trust the service provider. It includes cross‑platform clients and a CLI for self‑hosting needs. Ente is a service that provides a fully open source, end-to-end encrypted platform for you to store your data in the cloud without needing to trust the service provider. On top of this platform, we have built two apps so far: Ente...
    Downloads: 7 This Week
    Last Update:
    See Project
  • 21
    Waterfox

    Waterfox

    Privacy browser built for users who value customization & control

    ...The project emphasizes speed and efficiency through optimizations and choice, letting users tweak settings or install favored extensions without being locked into ecosystem constraints. Because it’s open source and actively developed by the community, new features, security updates, and performance improvements arrive regularly to align with web standards.
    Downloads: 73 This Week
    Last Update:
    See Project
  • 22
    MaxKey

    MaxKey

    MaxKey SSO ,Leading-Edge IAM-IDaas(Identity and Access Management)

    Maxkey Single Sign On System, which means the Maximum key, Leading-Edge IAM/IDaas Identity and Access Management product, supports OAuth 2.x/OpenID Connect, SAML 2.0, JWT, CAS, SCIM, and other standard protocols, and provide Secure, Standard and Open Identity management (IDM), Access management (AM), Single Sign On (SSO), RBAC permission management and Resource management. MaxKey focuses on performance, security, and ease of use in enterprise scenarios, is widely used in industries such as...
    Downloads: 6 This Week
    Last Update:
    See Project
  • 23
    Guardian

    Guardian

    Elixir Authentication

    Guardian is a token based authentication library for use with Elixir applications. Guardian remains a functional system. It integrates with Plug but can be used outside of it. If you're implementing a TCP/UDP protocol directly or want to utilize your authentication via channels in Phoenix, Guardian can work for you. The core currency of authentication in Guardian is the token. By default JSON Web Tokens are supported out of the box but you can use any token that Has the concept of a...
    Downloads: 11 This Week
    Last Update:
    See Project
  • 24
    Full Stack FastAPI Template

    Full Stack FastAPI Template

    Full stack, modern web application template

    The Full Stack FastAPI Template is a production-ready template that combines FastAPI for the backend and React for the frontend. It provides a robust foundation for building modern web applications, incorporating best practices for security, scalability, and maintainability. The template includes Docker configurations, CI/CD setups, and more to streamline development workflows.
    Downloads: 7 This Week
    Last Update:
    See Project
  • 25
    CodeIgniter 4

    CodeIgniter 4

    Open Source PHP Framework (originally from EllisLab)

    CodeIgniter4 is a powerful PHP framework designed for building web applications. It is a next-generation version of the popular CodeIgniter framework, offering enhanced features and improved performance. CodeIgniter4 follows the MVC (Model-View-Controller) pattern and is built to be lightweight, with a focus on simplicity and speed. It comes with a rich set of libraries and tools for developing dynamic web applications.
    Downloads: 25 This Week
    Last Update:
    See Project