security

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

A novel Android app store focused on security, privacy, and usability

Open-source AI-powered offensive security harness for automated penetration testing.

Share your Immich photos and albums in a safe way without exposing your Immich instance to the public.

Advanced DNS filter/blocklists for privacy, security, and clean browsing.

A simple TLS proxy with mutual authentication for securing non-TLS services.

Hacker tools on Go (Golang)

Since 2011, IPBan is the worlds most trusted, free security software to block hackers and botnets. With both Windows and Linux support, IPBan has your dedicated or cloud server protected. Upgrade to IPBan Pro today and get a discount. Learn more at ↓

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

Authentication, authorization, traceability and auditability for SSH accesses.

A secure low code deception runtime framework, leveraging AI for System Virtualization.

IAM Least Privilege Policy Generator

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

Hands on labs and code to help you learn, measure, and build using architectural best practices.

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

Collection of quality safety articles. Awesome articles.

Tool to scan for secret files on HTTP servers

DNS Takeover tool written in Go

Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.

Completely free, private, UI based Tech Documentation MCP server. Designed for coders and software developers in mind. Easily integrate into Cursor, Windsurf, Cline, Roo Code, Claude Desktop App

Guide to privacy settings for most major software and services.

Hidden parameters discovery suite

Everything about federated learning, including research papers, books, codes, tutorials, videos and beyond

A curated list of amazingly awesome Cybersecurity datasets

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

A reading list for large models safety, security, and privacy (including Awesome LLM Security, Safety, etc.).