NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
An open source trusted cloud native registry project that stores, signs, and scans content.
A new AList Fork to Anti Trust Crisis
Cloudflare Tunnel client
A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. 完全开源免费的自托管 SSL 证书 ACME 工具,申请、部署、续期、监控全流程自动化可视化,支持各大主流云厂商。
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
Type-safe, distributed orchestration of agents, ML pipelines, and real-time inference on your k8s — in pure Python with async/await, also other languages (rust, go and ts)
🚀 A lightweight, framework-agnostic database migration tool.
The polyglot queue: Fast and reliable background jobs in Go, Ruby, Rust, and JS/TS on Postgres or SQLite.
A comprehensive, up-to-date collection of information about several thousands (!) of crypto tokens.
Pomerium is an identity and context-aware access proxy.
Secure internet sharing made simple.
A simple, battle-tested and generic set type for the Go language. Trusted by GoogleCloudPlatform, Docker, 1Password, Ethereum and Hashicorp.
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
Fast, Simple and a cost effective tool to replicate data from Postgres to Data Warehouses, Queues and Storage
The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)
Official implementation of IoTeX blockchain protocol in Go. An ultra-efficient EVM blockchain offering 1000 TPS with instant 1-block finality. Perfect for DeFi, DePIN tokenomics, Identities, and any trusted logic requiring Web3 composability
Self-hosted SERP API for AI, SEO & automation. Browser-rendered Google, Bing, Yandex, Baidu, DuckDuckGo and Ecosia search with page extraction 🎉
Agentic development harness for Claude Code — SPEC-driven plan/run/sync, TRUST 5 quality gates, model+effort routing, and Claude×GLM multi-LLM cost control. Single Go binary, 16 languages, zero deps.
—
Go WebAssembly runtime powered by Wasmtime
An eBPF Manager for Linux and Kubernetes
eBPF based always-on CPU/GPU profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!
🐯轻量级定时任务管理系统,支持 Python, Node.js, Go, Rust, PHP 等所有主流语言的动态安装与多版本切换,,Docker/Compose 即用。A lightweight, high-performance cron panel built with Go & Vue 3.
An egress firewall for untrusted workloads.
Snappy and configuration-free text editor/IDE for the terminal. Suitable for writing git commit messages, editing Markdown, config files, source code, man pages and for quick edit-format-compile cycles when programming. Has syntax highlighting, jump-to-error, rainbow parentheses, macros, copy/paste portals, gdb, dlv and LSP support.
Zero trust system
Vera is a trust protocol, acting as the transparency log for the Source ecosystem
Bypass llm guardrails by confusing it with fabricated tool output.
Fast-track AI innovation with a centralized, trusted, curated registry
People and organisations pool their own machines over Yggdrasil to keep files, websites, email for their own domains and messaging for alarms and alerts among themselves, with no central server and no provider holding their data. Trust can be personal or enforced. Open source to use as you want.
Community firmware for NanoKVM: 4K video, WebRTC and Direct streaming, USB virtual media and networking, VPNs and add-ons. Alpine Linux with signed updates. Independent of Sipeed.
A microVM-native, zero-trust agent harness with semantic authorization
A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone needed: https://plimsollmark.github.io/plimsoll/trainers/