zero-trust

There are 53 repositories under zero-trust topic.

gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
cloud devsecops k8s kubernetes mesh network networking security self-hosted virtual-network virtual-networking vpn vpn-server wg-quick wireguard wireguard-ui wireguard-vpn zero-trust
Language:Go 9227
immudb
codenotary / immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
auditable compliance cryptographic database gdpr go immutable immutable-database key-value merkle-tree pci-dss performance sql tamper-evident tamperproof timetravel verification verify zero-trust
Language:Go 8528
ockam
build-trust / ockam
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
messaging authentication key-management identity trust kafka rust security end-to-end-encryption encrypted-connections encrypted-messages zero-trust e2ee encryption credentials authorization distributed-systems snowflake
Language:Rust 4402
pomerium
pomerium / pomerium
Pomerium is an identity and context-aware access proxy.
reverse-proxy iam beyondcorp identity go identity-aware-proxy zero-trust gateway pomerium vpn
Language:Go 3958
boundary
hashicorp / boundary
Boundary enables identity-based access management for dynamic infrastructure.
hacktoberfest hashicorp security zero-trust
Language:Go 3823
Security-101
microsoft / Security-101
8 Lessons, Kick-start Your Cybersecurity Learning.
appsec cia-triad data-protection data-security iam identity risk-management secops security threat-modeling zero-trust
Language:HTML 3796
BrowserBox / BrowserBox
🌀 Browse the web from a web page. Remote browser isolation. For security, privacy and more! By https://github.com/dosyago
embeddable chrome cobrowsing proxy-server browser rbi cybersecurity remote-browsers web-isolation zero-trust multiplayer remote-browser-isolation hidden-services onion-service tor reverse-proxy web-browser webrtc cdr sanitization
Language:JavaScript 3302
zrok
openziti / zrok
Geo-scale, next-generation peer-to-peer sharing platform built on top of OpenZiti.
file-sharing golang network peer-to-peer reverse-proxy security zero-trust
Language:Go 2318
ziti
openziti / ziti
The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @OpenZiti
appsec golang mesh netsec network networking overlay overlay-network secure-networking vpn vpn-2 zero-trust zero-trust-cloud zero-trust-network zero-trust-network-access zero-trust-security zerotrust ztaa ztha ztna
Language:Go 2300
lunasec-io / lunasec
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
tokenization web-security compliance security soc2 pci-dss gdpr zero-trust devsecops log4shell dependency-analysis scanning cybersecurity security-tools scanning-tool cve-scanning sbom sbom-generator continuous-delivery software-composition-analysis
Language:TypeScript 1424
warrant-dev / warrant
Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.
abac access-control acl authorization authz ciam entitlements fgac fine-grained-access-control fine-grained-authorization golang iam permissions pricing-tiers rbac rebac relationship-based-access-control role-based-access-control zanzibar zero-trust
Language:Go 1077
mrash / fwknop
Single Packet Authorization > Port Knocking
port-knocker authentication authorization spa zero-trust firewall hmac
Language:Perl 1054
pomerium / awesome-zero-trust
A curated collection of awesome resources for the zero-trust security model.
access-management beyondcorp device-management identity zero-trust
722
pritunl / pritunl-zero
Zero trust system
beyondcorp smartcard u2f zero-trust
Language:Go 576
seknox / trasa
Zero Trust Service Access
privileged-access-management remote-access trasa two-factor-authentication zero-trust
Language:Go 381
dosyago / chai
chai - Experience Zero Trust security with Chai! Convert and view documents as vivid images right in your browser. No mandatory downloads, no hassle—just pure, joyful security! 🌈
clientless content-disarm-and-reconstruction converter document-viewer-app docx-converter pdf-viewer-application secure-view zero-trust docspunk document-spark document-vpn chai pdf
Language:Shell 362
wecooperate / iMonitorSDK
系统监控开发套件（sysmon、procmon、edr、终端安全、主机安全、零信任、上网行为管理、沙箱）
sysmon defender edr security procmon endpoint-security monitoring-tool etw kernel zero-trust access-control
Language:C++ 336
zyclonite / zerotier-docker
ZeroTier One as Docker Image
zerotier docker coreos container vpn fcos podman multi-arch bridge rpi zero-trust sdn
Language:Shell 308
otterize / intents-operator
Manage network policies, AWS, GCP & Azure IAM policies, Istio Authorization Policies, and Kafka ACLs in a Kubernetes cluster with ease.
acl ibac intents kafka kubernetes mtls networkpolicies operator controller go golang otterize auth zero-trust authentication authorization hacktoberfest
Language:Go 285
cogolabs / beyond
BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.
openid-connect proxy relying-party zero-trust security vpn http-proxy proxy-server federation perimeter-network trust-transition golang beyondcorp
Language:Go 250
sandworm-hq / sandworm-guard-js
Easy auditing & sandboxing for your JavaScript dependencies 🪱
audit compartments compliance dependencies dependency-analysis dynamic-analysis hardening intercept lockdown permission permissions sandbox security security-audit security-tools ses supply-chain vulnerability-scanners zero-trust
Language:JavaScript 249
MirageNetwork / MirageServer
蜃境：基于Headscale修改的带WebUI开源版本Tailscale控制器
headscale mirage sdp tailscale web-ui zero-trust
Language:Vue 175
Erisa / discord-oidc-worker
Sign into Discord on Cloudflare Access, powered by Cloudflare Workers!
cloudflare-access cloudflare-workers discord oauth2 oidc-provider workers zero-trust
Language:JavaScript 141
zyclonite / nassh-relay
Relay Server for the Secure Shell Chromium plugin
chromium-plugin java relay-server ssh vertx websocket microservice proxy bastion-host docker nassh zero-trust
Language:Java 140
secrets-manager
vmware-tanzu / secrets-manager
VMware Secrets Manager is a lightweight secrets manager to protect your sensitive data. It’s perfect for edge deployments where energy and footprint requirements are strict—See more: https://vsecm.com/
cloud-native edge kubernetes secret-management secrets-manager security spiffe spire zero-trust
Language:Go 138
lucadibello / zerotrust-your-home
🔐 Securing Your Digital Sanctuary, Trust None, Protect Everything.
backup-restore continuous-monitoring home-automation log-management privacy-by-design security-by-design zero-trust
Language:Shell 120
ssbostan / tondra
Continuous Development on Kubernetes environments with Skaffold
kubernetes docker helm skaffold agile zero-trust k8s flask
Language:Python 111
werbot
werbot / werbot
🔑 Team Access Sharing - a self-hosted solution with single sign-on for secure, easy shared access to servers, databases, and applications.
go kubernetes audit bastion certificate cluster database-access firewall firewalls golang kubernetes-access pam postgresql rdp security ssh zero-trust self-hosted hacktoberfest 1password
Language:Go 96
sdk-golang
openziti / sdk-golang
Ziti SDK for Golang
golang networking sdk zero-trust appsec netsec openziti secure-networking ztaa ztna security zerotrust zero-trust-network zero-trust-network-access zero-trust-security
Language:Go 93
uatuko / sentium
🔐 Lightning fast, global scale authorization service without the overhead of yet another DSL.
grpc cpp20 cmake fga abac access-control authorization fine-grained-authorization least-privilege rbac rebac zanzibar zero-trust
Language:C++ 89
azure-spring-apps-landing-zone-accelerator
Azure / azure-spring-apps-landing-zone-accelerator
The Azure Spring Apps landing zone accelerator is an open-source collection of architectural guidance and reference implementation to accelerate deployment of Azure Spring Apps at scale.
cloud azure azure-spring-cloud spring-boot spring-cloud vmware tanzu zero-trust virtual-network application-gateway firewall database on-premises terraform arm-templates azure-cli bicep azure-spring-apps spring-apps lza
Language:HCL 80
philips-labs / spiffe-vault
Integrates Spiffe and Vault to have secretless authentication
spire spiffe vault hashicorp zero-trust bottom-turtle secrets code-signing helm k8s kubernetes terraform cosign hacktoberfest
Language:Go 80
openziti / edge
Application-embedded connectivity and zero-trust components
appsec netsec zerotrust zero-trust zero-trust-network zero-trust-security zero-trust-network-access
Language:Go 76
CloudDefenseAI / AWSZeroTrustPolicy
Adaptive AWS Zero Trust Policy made easy: Auto-generate least-privilege policies based on user activity in real time! Accelerate the adoption of smart access control
aws aws-iam aws-security cloud cloud-security cloudtrail-log-analytics iam security clouddefense aws-policy cloudtrail cloudtrail-logs iam-policies iam-policy permissions security-audit zero-trust zero-trust-cloud zero-trust-security
Language:Python 70
ThalesGroup / sshizzle
Serverless, Zero-Trust SSH for Microsoft Azure
cloud devops devops-tools security zero-trust azure azure-functions serverless golang remote-access ssh cryptography
Language:Go 70
ziti-sdk-nodejs
openziti / ziti-sdk-nodejs
An SDK for embedding zero trust into Node.JS applications and web servers to improve security.
appsec javascript netsec node nodejs sdk sdk-js security zero-trust zero-trust-network zero-trust-network-access zero-trust-security zerotrust ztna
Language:C 69