zero-trust

Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

8 Lessons, Kick-start Your Cybersecurity Learning.

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.

Pomerium is an identity and context-aware access proxy.

Secure internet sharing made simple.

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti

Boundary enables identity-based access management for dynamic infrastructure.

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.

secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.

DockFlare: Automate Cloudflare Tunnels with Docker Labels

👤 Identity and Access Management knowledge for cloud platforms

Tailscale Sidecar Configurations for Docker

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Single Packet Authorization > Port Knocking

🚀 An 800KB RAM ultra-lightweight Cloudflare WARP SOCKS5 proxy in Docker. 仅需 800KB 内存的纯内核态 Cloudflare WARP 代理 - Docker

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

Open-Source Network Management, Monitoring, ITOM, and Security Analytics

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

Local-first, zero-trust agentic IDE for verifiable autonomous software development.

Zero trust system

Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.

A source-grounded course and architectural reference for engineers designing systems that must survive real traffic, partial failure, security review, and changing requirements, spanning enterprise system design, distributed systems, AI systems, cybersecurity, reliability, cloud, HPC, edge, and mission-critical infrastructure.