Zitadel
ZITADEL is a modern identity infrastructure that simplifies authentication and authorization for developers, providing advanced features like multi-factor authentication and single sign-on.
Security tools in this directory cover authentication, password vaults, and privacy-focused storage. Authelia provides SSO and multi-factor access for web apps; Bitwarden Client Apps manage vault access across web, desktop, and CLI; Ente stores photos, videos, and 2FA secrets with end-to-end encryption. Arcjet-js adds bot detection and rate limiting for Node and related runtimes.
60 tools available
ZITADEL is a modern identity infrastructure that simplifies authentication and authorization for developers, providing advanced features like multi-factor authentication and single sign-on.
Browser fingerprinting via favicon to identify and track users even in incognito mode or after clearing cookies. Demonstrates advanced tracking techniques in browsers posing privacy implications.
A collection of files designed for effective and efficient brute force attacks targeting various scenarios.
authgear-server is an open-source authentication server that serves as an alternative to Auth0 and Firebase Auth. It provides secure, flexible, and scalable user authentication and identity management for web and mobile applications.
Arcjet JS SDKs offering comprehensive solutions for bot detection, rate limiting, email validation, attack protection, and data redaction. Compatible with Node.js, Next.js, Deno, Bun, Remix, SvelteKit, and NestJS.
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
A stateless open source password manager that aims to give users control over their passwords without storing them on a central server.
Production-Ready MCP Server Framework that enables you to build, deploy, and scale secure AI agent infrastructure. It includes Authentication, Observability, Debugger, Telemetry, and Runtime components, suited for running real-world MCPs powering AI Agents.
The MetaMask browser extension is a user-friendly crypto wallet facilitating secure interaction with Ethereum blockchain-enabled sites, decentralized applications (dApps), and Web3 projects directly from your browser.
WebGoat is a deliberately insecure web application maintained by OWASP, designed to teach web application security lessons and practices through hands-on experimentation.
GHunt is an open source offensive OSINT framework focused on Google services, enabling investigators and penetration testers to extract information related to Google accounts, Gmail addresses, GSuite domains, and more.
Backend server powering the Signal Private Messenger, ensuring secure, end-to-end encrypted messaging and calling across Android, Desktop, and iOS.
Our Newsletter
Get short emails with useful security projects, releases, and repos worth watching.
Mailu is a full-featured, self-hosted email server solution that runs as Docker images, providing an insular email distribution with modern features and security controls.
OpenAuth is a universal, standards-based authentication provider designed to simplify secure authentication for applications.
The Cyber Swiss Army Knife - a powerful web app for encryption, encoding, compression, and data analysis.
A simple zero-config tool designed to create locally trusted development certificates for any domain, enhancing local SSL/TLS setup.
A privacy-focused tool to retrieve cookies.txt without sending information outside.
Ghidra is a comprehensive software reverse engineering (SRE) framework developed by the NSA, offering tools for analyzing various platforms.
Binary releases of Visual Studio Code without Microsoft branding, telemetry, and licensing.
๐ต๏ธโโ๏ธ An all-in-one OSINT tool designed for comprehensive website analysis.
Infisical is the open-source secret management platform designed to sync secrets across your team and infrastructure, prevent secret leaks, and manage internal PKI effectively.
๐ A comprehensive checklist featuring over 300 tips to enhance digital security and privacy for 2024.
Villain is an advanced stage 0/1 Command and Control (C2) framework designed to manage multiple reverse TCP and HoaxShell-based shells, enhancing their functionality with additional features, and allowing sharing among connected sibling servers running on different machines.
A secure and private messenger application available for Windows, macOS, and Linux.
A comprehensive all-in-one hacking tool designed for hackers, providing a variety of features for security testing and exploitation.
Experience email with Zero, the first open-source email app prioritizing privacy and safety.
๐ฅ OpenSign is a free and open-source alternative to DocuSign, providing a comprehensive solution for electronic document signing.
A tool for securely managing and organizing files with advanced encryption and user-friendly interface.
A comprehensive CLI tool for smart contract error tracking, monitoring, and alerting in blockchain environments.
Scribble is an instrumentation tool designed for adding and checking annotations in Solidity smart contracts, enhancing security and reliability.
Get notified about new tools and updates to existing ones.