JumpServer is an Open-source Privileged Access Management (PAM) platform with AI-powered capabilities, providing DevOps and IT teams a unified workspace to securely access SSH, RDP, Kubernetes, databases, websites, RemoteApp, VirtualApp, and more.
Secure, Fast, and Extensible Sandbox runtime for AI agents.
Open-source, secure environment with real-world tools for enterprise-grade agents.
Perform data science on data that remains in someone else's server
Securely and anonymously share files, host websites, and chat with friends using the Tor network
GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!
Connect any AI copilot or autonomous agent to your enterprise tools — through a single, secure MCP/Agent gateway with built-in identity, access control, and full observability.
AI Search & RAG Without Moving Your Data. Get instant answers from your company's knowledge across 100+ apps while keeping data secure. Deploy in minutes, not months.
A production-ready FastAPI template for building AI agent applications with LangGraph integration. This template provides a robust foundation for building scalable, secure, and maintainable AI agent services.
Free and open source full-stack enterprise framework for agile development of secure database-driven web-based applications, written and programmable in Python.
Open-source email infrastructure for AI agents: secure inboxes, REST and MCP APIs, SMTP, human approval workflows, signed webhooks, and Python and TypeScript SDKs. Self-host with Docker and PostgreSQL.
ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
E2B Desktop Sandbox for LLMs. E2B Sandbox with desktop graphical environment that you can connect to any LLM for secure computer use.
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
StenographAI is the secure privacy-first AI notepad & notetaker for confidential conversations in government & defence sectors. On Windows, Linux & MacOS.
Enterprise-grade landing zone for AI agent applications on Azure. Deploy the secure infrastructure, the agent app, or both — built on Microsoft Foundry and Microsoft Agent Framework, with Zero-Trust networking, observability and IaC.
A Pythonic framework for threat modeling
A security-focused desktop and server linux operating system.
Formula Recognition & Office Editing | Handwriting & PDF to LaTeX/Markdown | Secure API Integrations.
Secure and persistent computer for AI agents
Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI coding assistants. Transform scattered MCP server chaos into governed, auditable tool access with Keycloak/Entra integration.
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
Cross-platform desktop app for secure remote PC control and management, featuring a lightweight built-in WebUI and API for local or remote access.
Share passwords securely
Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of every Apple endpoint. Manage that desired state as code through GitOps and Terraform.
Payments are broken for AI agents. Snaplii provides a secure, tokenized payment layer that enables AI agents to transact in the real world — without exposing users' underlying payment credentials.
A universal, distributed and secure messaging protocol for Reticulum
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
A curated database of insecure Python packages
Secure Password Hashes for Python
Backbone of the deSEC Free Secure DNS Hosting Service
A decentralized, AI-driven system accelerating the Open Mainet Pi Network, connecting global banks for secure, efficient, and autonomous transactions.
Suricata, Snort and Zeek IDS rule and pcap testing system
A system for securely splitting secrets with Shamir's Secret Sharing Scheme
AI Agent Identity and Access Management and Inference Firewall
TokenForgeLegend enables real-time, distributed data processing and dynamic token generation within a secure, decentralized system platform.
Your app is guilty until proven secure: an agent skill whose /hack-me breaks into your own running app, proves each bug with a real request, patches it, and re-verifies. Claude Code · Codex · Cursor.
An Android security research lab for analyzing client trust boundaries, insecure local state, exported components, and runtime integrity controls. Includes a purpose-built vulnerable app, static APK checks, Frida instrumentation, reproducible findings, and validated remediations.
Superproject for local scientific agents, simulation-result adapters, and secure research workflows
Agentic Orchestration & Messaging — is an open-source platform for end-to-end specification change management powered by AI agents. It enables secure Agent-to-Agent (A2A) collaboration across organisations, from idea and design through partner distribution, implementation, code generation and certification.
自托管的安全视频解析与授权媒体下载工具,基于 Next.js、FastAPI、yt-dlp、FFmpeg、Redis 和 RQ。Self-hosted secure video inspector and authorized media downloader.
Userland fan control for NVIDIA DGX Spark, with additive RPM floors, a temperature-based curve, Secure Boot signing, and DKMS support.
Secure persistent remote Chromium desktop powered by Selkies, WebRTC, WebSocket, SOCKS5 and TURN.
A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, aggressive, OS detection, vulnerability/NSE checks), interactive and non-interactive modes, strict input validation, Docker support, CI, and script-friendly flags for automation.