Security & Identity
Identity and access, secrets, application and supply-chain security, container and cloud hardening, zero-trust networking and threat detection used by engineering and security teams.
- Categories
- 11
- Tools
- 125
- Stars
- 1.5M
1.1B combined weekly package downloads tracked in this domain.
Hot in Security & Identity
Categories
11 categories. Open one to filter, sort and compare its tools.
Identity providers & SSO
15 tools
Hosted and self-hosted identity platforms for login, SSO (OIDC/SAML), MFA, passkeys and user management.
Authorization & policy
9 tools
Engines and services for fine-grained permissions (RBAC, ABAC, ReBAC) and policy-as-code.
Secrets management
11 tools
Store, rotate, inject and encrypt secrets such as API keys, database credentials and certificates.
SAST & code scanning
9 tools
Static analysis that finds vulnerabilities and insecure patterns in source code before it ships.
Dependency & supply-chain security
12 tools
Keep dependencies patched, catch vulnerable or malicious packages, and generate, sign and verify SBOMs and artifacts.
Container, Kubernetes & cloud security
11 tools
Scan images and IaC, enforce Kubernetes policies, detect runtime threats and audit cloud security posture.
Secret scanning
6 tools
Find leaked API keys, tokens and passwords in code, Git history, CI logs and container images.
Pentesting & DAST
16 tools
Dynamic application testing, vulnerability scanning and offensive-security tools for finding exploitable weaknesses.
Crypto & web security libraries
13 tools
In-app libraries for password hashing, tokens, encryption, TLS, passkeys and safe HTML handling.
Zero-trust access & VPN
11 tools
Mesh VPNs, identity-aware proxies and access platforms that replace flat networks and legacy VPNs.
WAF & threat detection
12 tools
Web application firewalls, bot and abuse protection, intrusion detection and SIEM/XDR for spotting attacks.
Learn & go deeper
OWASP Top 10
The standard awareness list of critical web app risks
owasp.org
OWASP Cheat Sheet Series
Concise, practical guidance on secure coding topics
cheatsheetseries.owasp.org
Cyber Security Roadmap
Step-by-step learning path for security engineers
roadmap.sh
OpenSSF
Open source supply-chain security guides, tools and best practices
openssf.org
SLSA
Framework of supply-chain integrity and build provenance levels
slsa.dev
CNCF Cloud Native Security Whitepaper
Reference for securing cloud-native stacks
github.com
Awesome Security
Curated list of security software, libraries and resources
github.com
Awesome Self-Hosted: Identity
Self-hostable identity and SSO software
awesome-selfhosted.net