netbirdio / netbird
NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
netbirdio / netbird
fosrl / pangolin
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
cloudflare / cloudflared
Cloudflare Tunnel client
OpenNHP / opennhp
A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.
gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
codenotary / immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
microsoft / agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
next-terminal / next-terminal
A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.
pomerium / pomerium
Pomerium is an identity and context-aware access proxy.
openziti / zrok
Secure internet sharing made simple.
nolabs-ai / nono
agent runtime security - zero trust, zero setup, zero latency agent sandboxing
openziti / ziti
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
microfeed / microfeed
an agentic cms self-hosted on cloudflare, for podcasts, blogs, photos, videos, documents, and curated urls.
octelium / octelium
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
BrowserBox / BrowserBox
💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.
DefGuard / defguard
Zero-Trust access management with true WireGuard® 2FA/MFA
ChrispyBacon-dev / DockFlare
DockFlare: Automate Cloudflare Tunnels with Docker Labels
kdeldycke / awesome-iam
👤 Identity and Access Management knowledge for cloud platforms
CluvexStudio / Aether
A Rust userspace WARP core for censored networks, built around MASQUE over HTTP/3 and HTTP/2.
tailscale-dev / ScaleTail
Ready-to-run Docker Compose stacks for 120+ self-hosted apps, each with a Tailscale sidecar and automatic HTTPS
Azure / agent-landing-zone
Enterprise-grade landing zone for AI agent applications on Azure. Deploy the secure infrastructure, the agent app, or both — built on Microsoft Foundry and Microsoft Agent Framework, with Zero-Trust networking, observability and IaC.
carverauto / serviceradar
Open-Source Network Management, Monitoring, ITOM, and Security Analytics
OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
mereyabdenbekuly-ctrl / clodex-ide
Local-first, zero-trust agentic IDE for verifiable autonomous software development.
mrrfv / cloudflare-gateway-pihole-scripts
Use Cloudflare Gateway DNS/VPN to block ads, malware and tracking domains - free alternative to NextDNS, Pi-hole and AdGuard
pritunl / pritunl-zero
Zero trust system
samvallad33 / vestige
Think before doing, prove before saving. Vestige is a local, deterministic safety kernel for AI agents. Every memory write and agent action is recorded in Strata, an append-only log, so you can see exactly what your agent did and why.
DrHazemAli / enterprise-system-design
A source-grounded course and architectural reference for engineers designing systems that must survive real traffic, partial failure, security review, and changing requirements, spanning enterprise system design, distributed systems, AI systems, cybersecurity, reliability, cloud, HPC, edge, and mission-critical infrastructure.
totoshko88 / RustConn
Modern cross-platform connection manager — SSH, RDP, VNC, SPICE, MOSH, Telnet, Serial, Kubernetes and Zero Trust — with a GTK4/libadwaita interface and embedded Rust clients. Linux, macOS, FreeBSD, Windows (WSLg).
emiliaprotocol / emilia-protocol
Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.
Rose22 / openlumara
handwritten harness for AI, not vibecoded, everything is a module/plugin, tailor made for use with local models, tiny system prompt (around 1k by default), support for exclusive llamacpp features, strong security, strict zero-trust-in-the-ai policy (the code hard limits the ai, no amount of prompt engineering will bypass it)
strands-agents / box
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
Apeireth / Apeireth
Apeireth — a digital companion that grows with you. Pure Safe Rust AGI cognitive microkernel: memory that fades like a person's, human approval before every side effect, honest boundaries. 31-member workspace (30 crates + 1 bench).
ChiefGyk3D / Clouds-Against-Humanity
OpenTofu + DigitalOcean + Spacelift + Doppler + Twingate: a zero-trust cloud lab, built in costed stages.
GeorgeXie2333 / usque-app
High-performance cross-platform GUI for Cloudflare WARP client's MASQUE protocol.
mkbhardwas12 / purposemesh
Purpose-bound authorization reference: RBAC + ABAC + ReBAC, row/field controls, fidelity gates, lifecycle governance, and a tested 100K synthetic-data path.
lantunnel / lantunnel
Your private network, wherever you work. Peer-to-peer first, end-to-end encrypted access to your own LANs — no port forwarding, no public URLs.
theycallmehassan1 / transition-state-zero-trust-toolkit
This consolidated document combines a gap analysis with a practical toolkit. It is designed to complement NIST SP 1800-35 by explaining a narrow transition-state implementation need and then providing vendor neutral worksheets, checklists, test records, assurance reviews, and pilot artifacts that organizations can use while legacy
Sega757 / meta-core
Deterministic telemetry & control plane for multi-agent AI systems. Atomic POSIX JSONL event bus, W3C/OpenTelemetry DAG reconstruction, and circular handoff guardrails.
sashyo / minidauth
Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.
flankerhqd / cyvisguard
Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.
osmanonurkoc / SecureAppLocker
A robust system-level application locker for Windows. Powered by an NT Service and a modern WinUI 3 interface, it features instant metadata-based interception, fail-secure lockdown, zero-trust WTS session resets, and isolated Session 0 IPC. Secure your personal apps with master password cryptography and offline recovery.
AdminTurnedDevOps / ABox
A microVM-native, zero-trust agent harness with semantic authorization
iffiX / neutrino
A mini developer hub for your network access, credentials, machines, AI, storage, and remote workflow.
LunarPy-Labs / LunarDump
A lightweight, zero-trust CLI tool built in Python to automate, encrypt, and stream database backups directly to multi-cloud storage.
izzy-Ti / fayda-mcp
A Model Context Protocol (MCP) bridge connecting AI agents to Ethiopia's Fayda National ID (MOSIP eSignet) for zero-trust e-KYC and identity verification.