Security

eBPF-based Networking, Security, and Observability

UNIX-like reverse engineering framework and command-line toolset

SQL powered operating system instrumentation, monitoring, and analytics.

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Simple and flexible tool for managing secrets

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Community guide to securing and improving privacy on macOS.

Weighs the soul of incoming HTTP requests to stop AI crawlers

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!

Manage your dotfiles across multiple diverse machines, securely.

🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.

Security Guide for Developers

The easiest, and most secure way to access and protect all of your infrastructure.

🤖 The Modern Port Scanner 🤖

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

open-source agentic AI data assistant for the next generation of AI + Data products.

Free and Open Source Reverse Engineering Platform powered by rizin

Get Android app updates straight from the source.

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!

Daemon to ban hosts that cause multiple authentication errors

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

A powerful obfuscator for JavaScript and Node.js

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

The ZAP by Checkmarx Core project

A collection of hacking tools, resources and references to practice ethical hacking.