zero-trust

There are 54 repositories under zero-trust topic.

OpenNHP / opennhp
Zero Trust Network Hiding Protocol (NHP) Open Source Implementation. OpenNHP Docs: https://opennhp.org/
cybersecurity zero-trust zero-trust-network-access zero-trust-security
Language:Go 13480
gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
cloud devsecops k8s kubernetes mesh network networking security self-hosted virtual-network virtual-networking vpn vpn-server wg-quick wireguard wireguard-ui wireguard-vpn zero-trust
Language:Go 9394
immudb
codenotary / immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
auditable compliance cryptographic database gdpr go immutable immutable-database key-value merkle-tree pci-dss performance sql tamper-evident tamperproof timetravel verification verify zero-trust
Language:Go 8555
ockam
build-trust / ockam
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
authentication authorization credentials distributed-systems e2ee encrypted-connections encrypted-messages encryption end-to-end-encryption identity kafka key-management messaging rust security snowflake trust zero-trust
Language:Rust 4431
Security-101
microsoft / Security-101
8 Lessons, Kick-start Your Cybersecurity Learning.
appsec cia-triad data-protection data-security iam identity risk-management secops security threat-modeling zero-trust
Language:HTML 4122
pomerium
pomerium / pomerium
Pomerium is an identity and context-aware access proxy.
beyondcorp gateway go iam identity identity-aware-proxy pomerium reverse-proxy vpn zero-trust
Language:Go 4014
boundary
hashicorp / boundary
Boundary enables identity-based access management for dynamic infrastructure.
hacktoberfest hashicorp security zero-trust
Language:Go 3834
BrowserBox / BrowserBox
🌀 Browse the web from a web page. Remote browser isolation. For security, privacy and more! By https://dosyago.com
embeddable chrome cobrowsing proxy-server browser rbi cybersecurity remote-browsers web-isolation zero-trust multiplayer remote-browser-isolation hidden-services onion-service tor reverse-proxy web-browser webrtc cdr sanitization
Language:JavaScript 3378
ziti
openziti / ziti
The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @OpenZiti
networking vpn-2 appsec network zero-trust zero-trust-cloud zero-trust-network zero-trust-network-access zero-trust-security ztaa ztha ztna overlay overlay-network netsec vpn zerotrust mesh golang secure-networking
Language:Go 2674
zrok
openziti / zrok
Geo-scale, next-generation peer-to-peer sharing platform built on top of OpenZiti.
file-sharing golang network peer-to-peer reverse-proxy security zero-trust
Language:Go 2513
lunasec-io / lunasec
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
tokenization web-security compliance security soc2 pci-dss gdpr zero-trust devsecops log4shell dependency-analysis scanning cybersecurity security-tools scanning-tool cve-scanning sbom sbom-generator continuous-delivery software-composition-analysis
Language:TypeScript 1435
warrant-dev / warrant
Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.
abac access-control acl authorization authz ciam entitlements fgac fine-grained-access-control fine-grained-authorization golang iam permissions pricing-tiers rbac rebac relationship-based-access-control role-based-access-control zanzibar zero-trust
Language:Go 1117
mrash / fwknop
Single Packet Authorization > Port Knocking
authentication authorization firewall hmac port-knocker spa zero-trust
Language:Perl 1101
pomerium / awesome-zero-trust
A curated collection of awesome resources for the zero-trust security model.
access-management beyondcorp device-management identity zero-trust
727
pritunl / pritunl-zero
Zero trust system
beyondcorp smartcard u2f zero-trust
Language:Go 587
seknox / trasa
Zero Trust Service Access
privileged-access-management remote-access trasa two-factor-authentication zero-trust
Language:Go 383
dosyago / chai
chai - Experience Zero Trust security with Chai! Convert and view documents as vivid images right in your browser. No mandatory downloads, no hassle—just pure, joyful security! 🌈
chai clientless content-disarm-and-reconstruction converter docspunk document-spark document-viewer-app document-vpn docx-converter pdf pdf-viewer-application secure-view zero-trust
Language:JavaScript 360
wecooperate / iMonitorSDK
The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能，而不用关心底层驱动的开发、维护和兼容性问题，让其可以专注于业务开发
sysmon defender edr security procmon endpoint-security monitoring-tool etw kernel zero-trust access-control
Language:Batchfile 340
zyclonite / zerotier-docker
ZeroTier One as Docker Image
bridge container coreos docker fcos multi-arch podman rpi sdn vpn zero-trust zerotier
Language:Shell 316
otterize / intents-operator
Manage network policies, AWS, GCP & Azure IAM policies, Istio Authorization Policies, and Kafka ACLs in a Kubernetes cluster with ease.
acl ibac intents kafka kubernetes mtls networkpolicies operator controller go golang otterize auth zero-trust authentication authorization hacktoberfest
Language:Go 288
cogolabs / beyond
BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.
openid-connect proxy relying-party zero-trust security vpn http-proxy proxy-server federation perimeter-network trust-transition golang beyondcorp
Language:Go 250
sandworm-hq / sandworm-guard-js
Easy auditing & sandboxing for your JavaScript dependencies 🪱
audit compartments compliance dependencies dependency-analysis dynamic-analysis hardening intercept lockdown permission permissions sandbox security security-audit security-tools ses supply-chain vulnerability-scanners zero-trust
Language:JavaScript 249
MirageNetwork / MirageServer
蜃境：基于Headscale修改的带WebUI开源版本Tailscale控制器
headscale mirage sdp tailscale web-ui zero-trust
Language:Vue 185
lucadibello / zerotrust-your-home
🔐 Securing Your Digital Sanctuary, Trust None, Protect Everything.
backup-restore continuous-monitoring home-automation log-management privacy-by-design security-by-design zero-trust
Language:Shell 168
secrets-manager
vmware-tanzu / secrets-manager
VMware Secrets Manager is a lightweight secrets manager to protect your sensitive data. It’s perfect for edge deployments where energy and footprint requirements are strict—See more: https://vsecm.com/
cloud-native edge kubernetes secret-management secrets-manager security spiffe spire zero-trust
Language:Go 153
Erisa / discord-oidc-worker
Sign into Discord on Cloudflare Access, powered by Cloudflare Workers!
cloudflare-access cloudflare-workers discord oauth2 oidc-provider workers zero-trust
Language:JavaScript 148
zyclonite / nassh-relay
Relay Server for the Secure Shell Chromium plugin
chromium-plugin java relay-server ssh vertx websocket microservice proxy bastion-host docker nassh zero-trust
Language:Java 139
ssbostan / tondra
Continuous Development on Kubernetes environments with Skaffold
agile docker flask helm k8s kubernetes skaffold zero-trust
Language:Python 110
werbot
werbot / werbot
🔑 Team Access Sharing - a self-hosted solution with single sign-on for secure, easy shared access to servers, databases, and applications.
go kubernetes audit bastion cluster database-access firewall firewalls golang kubernetes-access pam postgresql rdp security ssh zero-trust self-hosted hacktoberfest 1password werbot
Language:Go 106
sdk-golang
openziti / sdk-golang
Ziti SDK for Golang
golang networking sdk zero-trust appsec netsec openziti secure-networking ztaa ztna security zerotrust zero-trust-network zero-trust-network-access zero-trust-security
Language:Go 96
uatuko / sentium
🔐 Lightning fast, global scale authorization service without the overhead of yet another DSL.
grpc cpp20 cmake fga abac access-control authorization fine-grained-authorization least-privilege rbac rebac zanzibar zero-trust
Language:C++ 93
philips-labs / spiffe-vault
Integrates Spiffe and Vault to have secretless authentication
bottom-turtle code-signing cosign hacktoberfest hashicorp helm k8s kubernetes secrets spiffe spire terraform vault zero-trust
Language:Go 82
azure-spring-apps-landing-zone-accelerator
Azure / azure-spring-apps-landing-zone-accelerator
The Azure Spring Apps landing zone accelerator is an open-source collection of architectural guidance and reference implementation to accelerate deployment of Azure Spring Apps at scale.
cloud azure azure-spring-cloud spring-boot spring-cloud vmware tanzu zero-trust virtual-network application-gateway firewall database on-premises terraform arm-templates azure-cli bicep azure-spring-apps spring-apps lza
Language:HCL 80
openziti / edge
Application-embedded connectivity and zero-trust components
appsec netsec zerotrust zero-trust zero-trust-network zero-trust-security zero-trust-network-access
Language:Go 75
CloudDefenseAI / AWSZeroTrustPolicy
Adaptive AWS Zero Trust Policy made easy: Auto-generate least-privilege policies based on user activity in real time! Accelerate the adoption of smart access control
aws aws-iam aws-security cloud cloud-security cloudtrail-log-analytics iam security clouddefense aws-policy cloudtrail cloudtrail-logs iam-policies iam-policy permissions security-audit zero-trust zero-trust-cloud zero-trust-security
Language:Python 72
ThalesGroup / sshizzle
Serverless, Zero-Trust SSH for Microsoft Azure
azure azure-functions cloud cryptography devops devops-tools golang remote-access security serverless ssh zero-trust
Language:Go 71