Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

8 Lessons, Kick-start Your Cybersecurity Learning.

Pomerium is an identity and context-aware access proxy.

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

Secure internet sharing made simple.

The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @openziti

Boundary enables identity-based access management for dynamic infrastructure.

💚 Secure remote browsing anywhere, any way you like it.

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.

Capability-based sandboxes with fine-grained policies The next-generation isolation primitive — brokering access directly within the agent's operating context, with zero setup and zero latency

👤 Identity and Access Management knowledge for cloud platforms

DockFlare: Automate Cloudflare Tunnels with Docker Labels

Tailscale Sidecar Configurations for Docker

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

Single Packet Authorization > Port Knocking

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.