Search Results for "kernel security"
Sort By:
Showing 149 open source projects for "kernel security"
View related business solutions-
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
Context for your AI agentsBuild data pipelines that feed your AI models and agents without managing infrastructure. Crawl any website, transform content, and push directly to your preferred vector store. Use 10,000+ tools for RAG applications, AI assistants, and real-time knowledge bases. Monitor site changes, trigger workflows on new data, and keep your AIs fed with fresh, structured information. Cloud-native, API-first, and free to start until you need to scale.
-
1
Linux Kernel
Linux Kernel source tree
The Linux Kernel is the core component of the Linux operating system—a free, open-source, monolithic, Unix-like system kernel initiated by Linus Torvalds in 1991 and since evolved into a foundational technology powering everything from servers and supercomputers to smartphones and embedded devices. There are various text files in the Documentation/ subdirectory, several of them using the reStructuredText markup notation. Extensive filesystem compatibility (ext4, Btrfs, FUSE, XFS, etc.) Broad... -
2
SerenityOS
The Serenity Operating System
SerenityOS is an open source Unix-like operating system project with its own custom kernel, graphical user interface, system libraries, and userland tools. It combines a nostalgic “90s UI aesthetic” with modern system capabilities: a preemptive, multi-threaded kernel, own browsers, network stack, file systems, IPC, security features, and a suite of graphical / developer applications. The project is both a hobbyist OS and a polished engineering sandbox. -
3
Tetragon
eBPF-based Security Observability and Runtime Enforcement
...Synchronous monitoring, filtering, and enforcement completely in the kernel with eBPF. -
4
MemGuard
Secure software enclave for storage of sensitive information in memory
This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Sensitive data is encrypted and authenticated in memory with XSalsa20Poly1305. The scheme used also defends against cold-boot attacks. Memory allocation bypasses the language runtime by using system calls to query the kernel for resources directly. This avoids interference from the garbage collector. Buffers that store... -
Atera all-in-one platform IT management software with AI agentsAtera’s AI agents don’t just assist, they act. From detection to resolution, they handle incidents and requests instantly, taking your IT management from automated to autonomous.
-
5
Tock OS
A secure embedded operating system for microcontrollers
Tock is a secure, embedded operating system designed for microcontrollers and low-power hardware platforms. Written in Rust, it uses a novel kernel architecture where the OS runs a minimal trusted core and all userland code, including device drivers, is sandboxed and isolated. Tock is ideal for IoT devices, wearables, and embedded research projects where reliability and safety are critical. Its capability-based security model and preemptive multitasking allow developers to safely run multiple applications on constrained devices with confidence in memory and fault isolation. -
6
ArkOS
Another rockchip Operating System
Another rockchip Operating System. This OS came about from an initial fork of The Retro Arena to support a roms folder on a NTFS partition so that the management of roms could be done by simply putting you SD card into an appropriate card reader on a Windows 10 computer. Through various upgrades and tweaks overtime, it has diverged significantly from TheRA and it's time to rebrand this distro. With suggestions provided by community members, ArkOS was chosen. -
7
syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
syzkaller is Google’s coverage-guided, feedback-driven kernel fuzzer designed to uncover reliability and security bugs in operating system kernels at scale. It automatically generates, mutates, and minimizes system call programs, then drives them through a specialized executor (syz-executor) to exercise deep kernel paths. The system integrates tightly with sanitizers such as KASAN, KMSAN, KCSAN, and UBSAN to surface memory safety, concurrency, and undefined behavior issues with actionable reports. ... -
8
Cilium
eBPF-based networking, security, and observability
Cilium is open-source software for providing, securing and observing network connectivity between container workloads, cloud-native, and fueled by the revolutionary Kernel technology eBPF. Kubernetes doesn't come with an implementation of Load Balancing. This is usually left as an exercise for your cloud provider or in private cloud environments an exercise for your networking team. Cilium can attract this traffic with BGP and accelerate leveraging XDP and eBPF. Together these technologies... -
9
Hubble
Network, Service & Security Observability for Kubernetes using eBPF
Hubble is a fully distributed networking and security observability platform for cloud native workloads. It is built on top of Cilium and eBPF to enable deep visibility into the communication and behavior of services as well as the networking infrastructure in a completely transparent manner. The Linux kernel technology eBPF is enabling visibility into systems and applications at a granularity and efficiency that was not possible before. -
Grafana: The open and composable observability platformGrafana is the open source analytics & monitoring solution for every database.
-
10
Deckhouse
Kubernetes platform from Flant
...Built-in implementation of Pod Security Standards and a ready-to-use, extensible set of recommended policies. Deckhouse automates many routine deployment, scaling, and infrastructure management operations out of the box. It manages system software on the nodes (kernel, CRI, kubelet), basic Kubernetes components (control plane, etc, certificates, etc.). -
11
Talos Linux
Talos Linux is a modern Linux distribution built for Kubernetes
Talos Linux is Linux designed for Kubernetes – secure, immutable, and minimal. Supports cloud platforms, bare metal, and virtualization platforms. All system management is done via an API. No SSH, shell or console. Production-ready supports some of the largest Kubernetes clusters in the world. Open source project from the team at Sidero Labs. It only takes 3 minutes to launch a Talos cluster on your laptop inside Docker. Talos reduces your attack surface. It's minimal, hardened and... -
12
Typhoon
Minimal and free Kubernetes distribution with Terraform
Typhoon is a minimal and free Kubernetes distribution. Minimal, stable base Kubernetes distribution. Declarative infrastructure and configuration. Free (freedom and cost) and privacy-respecting. Practical for labs, datacenters, and clouds. Typhoon distributes upstream Kubernetes, architectural conventions, and cluster addons, much like a GNU/Linux distribution provides the Linux kernel and userspace components. Typhoon provides a Terraform Module for each supported operating system and... -
13
Osquery
SQL operating system instrumentation and monitoring framework
Osquery is an operating system instrumentation framework for Windows, OS X (macOS), Linux, and FreeBSD. The tools make low-level operating system analytics and monitoring both performant and intuitive. Osquery exposes an operating system as a high-performance relational database. This allows you to write SQL queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser... -
14
Kakarot_kernel
Custom kernel for Android device
Latest kernel based on 4.14.62 ONEUI and GSI build Compiled with latest Clang 13 Removed some security Enabled all Native Governers optimized code Fixed Magisk reboot on kernel Added Separate MTP option Default compressor as LZ4 Enabled NTFS file system Disabled CRC check Added state notifier Fsync ON/OFF support Added boeffla wl blocker Added CD ROM/DVD file system Disabled default kernel debugging Added wireGuard support Enabled Deadline IO SCHED -
15
Antrea
Kubernetes networking based on Open vSwitch
...With the programmability of Open vSwitch under the hood, Antrea can be extended to support advanced network use cases like kernel bypass and network service mesh. -
16
SWUpdate
Software Update for Embedded Systems
SWUpdate is a Linux Update agent with the goal to provide an efficient and safe way to update an embedded Linux system in the field. SWUpdate supports local and OTA updates and multiple update strategies and it is designed with security in mind. To start with SWUpdate, it is suggested you look at the documentation and build for one evaluation board (or you run SWUpdate on your host for a first overview). If you plan to update your device locally or remotely, SWUpdate is the right framework... -
17
CachyOS
Blazingly Fast & Customizable Linux distribution
CachyOS - Arch Linux Based Distribution With Heavy Optimizations & Multi-Architectures For Ultimate Desktop Experience Filesystems: - btrfs - zfs - ext4 - xfs - f2fs Our installer will auto detect which micro architecture your machine got, if x86-64-v3 or x86-64-v4 is detected it will automatically use the optimized packages, which is around a 10 % performance improvement. Desktop Environments: - KDE - CuteFish - i3 - Gnome - Openbox - Wayfire - Xfce - LXQT -... -
18
Cyrethium
Cyrethium GNU/Linux Debian Based Privacy and Security Focused OS
Cyrethium is a Debian-based Linux distribution focused on privacy and security. It can route all incoming and outgoing internet traffic through the Tor network. DNSCrypt-Proxy and I2P Router are pre-configured. It provides strong protection against browser attacks with custom hardened Firefox variants. The distribution hosts a wide range of tools designed from scratch for Cyrethium and includes multi-layered hardening against cyber attacks. There are 4 different versions available: 2 core... -
19
M0n4rch Linux
M0n4rch Linux is a complete desktop based on Arch Linux.
M0n4rch Linux is a complete desktop based on Arch Linux using the LTS kernel. It is configured to use BSPWM and KDE Plasma desktops. As a long-time Arch Linux user and offensive security professional, I decided to start this project to create a ready-made distribution with the same settings I usually use on a day-to-day basis. However, the biggest motivation for this project was the possibility of studying and deepening my knowledge of Linux. -
20
BerserkArch
A bleeding-edge, security-centric Arch-based Linux distribution.
BerserkArch is a security-focused, performance-tuned Linux operating system (OS) based on Arch Linux, designed for developers, hackers, and technical users. A bleeding-edge, security-centric Arch-based Linux distribution crafted for hackers, developers, and nerds alike. Following the Arch Linux philosophy, it is designed to be highly customizable, allowing users to build their environment with only the components they need, rather than having a lot of pre-installed software like some other security distributions (e.g., Kali Linux). ... -
21
LLF-Tool-for-Linux
Low Level Format Tool for debian-based systems
This simple application performs a pseudo-low level format on your disks. It has minimal dependencies and runs on the system's own kernel modules (dd). WARNING! This process cannot be stopped! https://github.com/shampuan/LLF-Tool-for-Linux -
22
BashCore
A custom Debian live ISO with security tools, no GUI, only Bash.
BashCore is a Debian-based live ISO for security pros, networking enthusiasts, and students. Minimalist and GUI-free, it relies entirely on Bash. Lightweight, fast, GPU-ready, and now offering an optional PREEMPT_RT kernel, it provides a fresh environment on every boot, ideal for safe experimentation, learning, and diagnostics. Built with Debian live-build, MIT-licensed, no branding, telemetry, or tracking. -
23
Dimensional Rift OS
Privacy,Security Focused Distro For I2P
Dimensional Rift is a Debian-based GNU/Linux distribution focused on privacy and security. The system is built entirely around I2P (Invisible Internet Project), a peer-to-peer (P2P) anonymous communication network. I2P uses a technique called garlic routing, a form of multi-layer encryption that makes traffic analysis more difficult while also providing protection against attacks.Dimensional Rift comes with a hardened Firefox variant specifically configured for I2P. This browser can only... -
24
...Where as, arm64 builds have random reboots, especially if you have 2GB variant. Note: The ROM is not being developed anymore, only Security Patches are being updated. So, if something doesn't work don't expect it to get fixed. Also, note that some Banking apps doesn't work. Test ROM fully before using it as daily driver.
-
25
Vinari OS 5.0.0 KRYPTON
Vinari OS 5.0.0 KRYPTON - Debian 13 Trixie based 64-Bit OS
Vinari OS 5.0.0 KRYPTON represents the next stage in our Debian-based evolution, now built on the 64-bit Debian 13 “Trixie” platform. Designed for both everyday users and developers, this release delivers a polished, reliable, and cohesive experience. At its foundation, Vinari OS 5.0.0 KRYPTON features the modern GNOME desktop environment, refined with practical enhancements such as GSConnect, DashToDock, and other usability-focused extensions. Continuing our focus on simplicity and...
