ChiefGyk3D / Clouds-Against-Humanity
Learn cloud security by building it! An open-source homelab teaching Zero Trust, DevSecOps, IaC, and cloud architecture from the ground up.
ChiefGyk3D / Clouds-Against-Humanity
Spectrmachina / Ztrust
Zero-trust supply-chain security for open source: detects malicious & vulnerable dependencies, typosquats, leaked secrets and unsafe GitHub Actions — and pays independent researchers in shielded Zcash via a front-running-proof bounty protocol.
netbirdio / netbird
NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
nolabs-ai / nono
agent runtime security - zero trust, zero setup, zero latency agent sandboxing
fosrl / pangolin
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
tailscale-dev / ScaleTail
Ready-to-run Docker Compose stacks for 120+ self-hosted apps, each with a Tailscale sidecar and automatic HTTPS
cloudflare / cloudflared
Cloudflare Tunnel client
CluvexStudio / Aether
A Rust userspace WARP core for censored networks, built around MASQUE over HTTP/3 and HTTP/2.
totoshko88 / RustConn
Modern cross-platform connection manager — SSH, RDP, VNC, SPICE, MOSH, Telnet, Serial, Kubernetes and Zero Trust — with a GTK4/libadwaita interface and embedded Rust clients. Linux, macOS, FreeBSD, Windows (WSLg).
strands-agents / box
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
microsoft / agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
pomerium / pomerium
Pomerium is an identity and context-aware access proxy.
openziti / ziti
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
GeorgeXie2333 / usque-app
High-performance cross-platform GUI for Cloudflare WARP client's MASQUE protocol.
OpenNHP / opennhp
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
octelium / octelium
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
next-terminal / next-terminal
A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.
DefGuard / defguard
Zero-Trust access management with true WireGuard® 2FA/MFA
kdeldycke / awesome-iam
👤 Identity and Access Management knowledge for cloud platforms
samvallad33 / vestige
Think before doing, prove before saving. Vestige is a local, deterministic safety kernel for AI agents. Every memory write and agent action is recorded in Strata, an append-only log, so you can see exactly what your agent did and why.
DrHazemAli / enterprise-system-design
A source-grounded course and architectural reference for engineers designing systems that must survive real traffic, partial failure, security review, and changing requirements, spanning enterprise system design, distributed systems, AI systems, cybersecurity, reliability, cloud, HPC, edge, and mission-critical infrastructure.
Rose22 / openlumara
handwritten harness for AI, not vibecoded, everything is a module/plugin, tailor made for use with local models, tiny system prompt (around 1k by default), support for exclusive llamacpp features, strong security, strict zero-trust-in-the-ai policy (the code hard limits the ai, no amount of prompt engineering will bypass it)
izzy-Ti / fayda-mcp
A Model Context Protocol (MCP) bridge connecting AI agents to Ethiopia's Fayda National ID (MOSIP eSignet) for zero-trust e-KYC and identity verification.
openziti / zrok
Secure internet sharing made simple.
microfeed / microfeed
an agentic cms self-hosted on cloudflare, for podcasts, blogs, photos, videos, documents, and curated urls.
lantunnel / lantunnel
Your private network, wherever you work. Peer-to-peer first, end-to-end encrypted access to your own LANs — no port forwarding, no public URLs.
iffiX / neutrino
A mini developer hub for your network access, credentials, machines, AI, storage, and remote workflow.
Azure / agent-landing-zone
Enterprise-grade landing zone for AI agent applications on Azure. Deploy the secure infrastructure, the agent app, or both — built on Microsoft Foundry and Microsoft Agent Framework, with Zero-Trust networking, observability and IaC.
carverauto / serviceradar
Open-Source Network Management, Monitoring, ITOM, and Security Analytics
OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
mereyabdenbekuly-ctrl / clodex-ide
Local-first, zero-trust agentic IDE for verifiable autonomous software development.
mrrfv / cloudflare-gateway-pihole-scripts
Use Cloudflare Gateway DNS/VPN to block ads, malware and tracking domains - free alternative to NextDNS, Pi-hole and AdGuard
pritunl / pritunl-zero
Zero trust system
theycallmehassan1 / transition-state-zero-trust-toolkit
This consolidated document combines a gap analysis with a practical toolkit. It is designed to complement NIST SP 1800-35 by explaining a narrow transition-state implementation need and then providing vendor neutral worksheets, checklists, test records, assurance reviews, and pilot artifacts that organizations can use while legacy
Sega757 / meta-core
Deterministic telemetry & control plane for multi-agent AI systems. Atomic POSIX JSONL event bus, W3C/OpenTelemetry DAG reconstruction, and circular handoff guardrails.
flankerhqd / cyvisguard
Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.
osmanonurkoc / SecureAppLocker
A robust system-level application locker for Windows. Powered by an NT Service and a modern WinUI 3 interface, it features instant metadata-based interception, fail-secure lockdown, zero-trust WTS session resets, and isolated Session 0 IPC. Secure your personal apps with master password cryptography and offline recovery.
AdminTurnedDevOps / ABox
A microVM-native, zero-trust agent harness with semantic authorization
LunarPy-Labs / LunarDump
A lightweight, zero-trust CLI tool built in Python to automate, encrypt, and stream database backups directly to multi-cloud storage.
codenotary / immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
mkbhardwas12 / purposemesh
Purpose-bound authorization reference: RBAC + ABAC + ReBAC, row/field controls, fidelity gates, lifecycle governance, and a tested 100K synthetic-data path.
BrowserBox / BrowserBox
💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.
ChrispyBacon-dev / DockFlare
DockFlare: Automate Cloudflare Tunnels with Docker Labels
sashyo / minidauth
Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.
emiliaprotocol / emilia-protocol
Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.
Apeireth / Apeireth
Apeireth — a digital companion that grows with you. Pure Safe Rust AGI cognitive microkernel: memory that fades like a person's, human approval before every side effect, honest boundaries. 31-member workspace (30 crates + 1 bench).