security

Find, verify, and analyze leaked credentials

The authentication glue you need.

eBPF-based Networking, Security, and Observability

UNIX-like reverse engineering framework and command-line toolset

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)

Simple and flexible tool for managing secrets

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!

Weighs the soul of incoming HTTP requests to stop AI crawlers

Manage your dotfiles across multiple diverse machines, securely.

The easiest, and most secure way to access and protect all of your infrastructure.

🤖 The Modern Port Scanner 🤖

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

open-source agentic AI data assistant for the next generation of AI + Data products.

Get Android app updates straight from the source.

Daemon to ban hosts that cause multiple authentication errors

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

A powerful obfuscator for JavaScript and Node.js