Search open source projects

All-in-one security scanner for finding vulnerabilities, misconfigurations, exposed secrets, and license issues across container images, filesystems, repositories, and Kubernetes.

• DevOps

Security testing orchestration platform that runs multiple open-source scanners against your applications and infrastructure from one pipeline.

• Testing

Kubernetes security posture and compliance scanner that checks clusters against security frameworks and best practices.

• DevOps

Automates issuing, renewing, and managing TLS certificates for Kubernetes applications, eliminating manual certificate handling.

• DevOps

eBPF-based networking, security, and observability platform for Kubernetes that replaces traditional networking components with kernel-level performance.

• DevOps

CNCF runtime security tool that detects unexpected or malicious behavior in containers and hosts as it happens, using kernel-level monitoring.

• DevOps

CIS Kubernetes Benchmark compliance checker that audits a cluster's configuration against official security best practices.

• Testing

Kubernetes-native policy engine that lets you write and enforce policies using plain YAML instead of a separate policy language.

• DevOps

Software supply chain security toolkit for signing, verifying, and recording the provenance of software artifacts, container images, and releases.

• DevOps

Command-line tool that encrypts individual values inside YAML, JSON, and other config files, so secrets can be safely committed to git.

• DevOps

Open-source backend platform providing authentication, databases, storage, functions and realtime APIs, self-hosted or as a managed cloud service.

• Backend
• Database
• Authentication & Security

Open-source authentication library built on standard Web APIs, supporting OAuth, email/passwordless and credential-based sign-in for any JavaScript framework or runtime.

• Authentication & Security

Self-hosted single sign-on and two-factor authentication portal that sits in front of your reverse proxy to protect existing web apps.

• Authentication & Security

Open-source access-control library implementing ACL, RBAC, and ABAC authorization models, with production-ready ports for Go, Java, Python, Node.js, and more.

• Authentication & Security

Open source identity and access management solution with single sign-on, OAuth2 and OpenID Connect support.

• Authentication & Security

Relationship-based authorization engine inspired by Google Zanzibar, for modeling and enforcing fine-grained access control as a standalone service.

• Authentication & Security

API-first, headless identity and user management server for cloud-native applications, covering login, registration, recovery, and profile management.

• Authentication & Security

Open source Firebase alternative providing a Postgres database, authentication, instant APIs, edge functions, realtime subscriptions and storage.

• Backend
• Database
• Authentication & Security

Open-source, self-hosted authentication core service offering passwordless, social, and email/password login as an alternative to Auth0 or Firebase Auth.

• Authentication & Security

Cloud-native identity and access management platform with multi-tenancy, SSO, MFA, and OIDC/SAML support, usable self-hosted or as a managed service.

• Authentication & Security

The leading service mesh for Kubernetes, adding traffic management, security, and observability to microservices without changing application code.

• DevOps