Security

SQL powered operating system instrumentation, monitoring, and analytics.

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Simple and flexible tool for managing secrets

Community guide to securing and improving privacy on macOS.

The authentication glue you need.

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!

🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.

Security Guide for Developers

Weighs the soul of incoming HTTP requests to stop AI crawlers

Manage your dotfiles across multiple diverse machines, securely.

The easiest, and most secure way to access and protect all of your infrastructure.

🤖 The Modern Port Scanner 🤖

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

open-source agentic AI data assistant for the next generation of AI + Data products.

Free and Open Source Reverse Engineering Platform powered by rizin

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!

Get Android app updates straight from the source.

Daemon to ban hosts that cause multiple authentication errors

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

A powerful obfuscator for JavaScript and Node.js

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

A collection of hacking tools, resources and references to practice ethical hacking.

The ZAP by Checkmarx Core project

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

The Rogue Access Point Framework