GitHub topics: zero-trust | Ecosyste.ms: Repos

Mihirajmera/iam-zero-trust-security

IAM implementation with Zero Trust security model and automated compliance monitoring

Language: HCL - Size: 11.7 KB - Last synced at: about 23 hours ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

Mihirajmera/secure-vpc-architecture

Enterprise-grade secure VPC architecture with Zero Trust networking principles

Language: HCL - Size: 18.6 KB - Last synced at: about 23 hours ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

pomerium/pomerium

Pomerium is an identity and context-aware access proxy.

Language: Go - Size: 74.1 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 4,428 - Forks: 310

openziti/ziti

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @OpenZiti

Language: Go - Size: 27.1 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 3,543 - Forks: 206

zscaler/terraform-provider-zia

:cloud: Terraform Provider for Zscaler Internet Access :cloud:

Language: Go - Size: 7.42 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 41 - Forks: 9

jonathan-vella/SAIF

A 3-tier diagnostic application designed for hands-on learning about securing AI systems across identity, network, application, and content safety domains.

Language: PHP - Size: 971 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

pritunl/pritunl-zero

Zero trust system

Language: Go - Size: 133 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 626 - Forks: 121

microsoft/Security-101

8 Lessons, Kick-start Your Cybersecurity Learning.

Language: HTML - Size: 4.36 MB - Last synced at: 2 days ago - Pushed at: 28 days ago - Stars: 5,635 - Forks: 728

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA/BeyondCorp architecture, API/AI gateway, a PaaS, an infrastructure for MCP & A2A architectures or even as an ngrok-alternative and a homelab infrastructure.

Language: Go - Size: 4.06 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 2,297 - Forks: 64

BrowserBox/BrowserBox

💚 Secure remote browsing anywhere.

Language: JavaScript - Size: 7.03 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 3,687 - Forks: 395

saeedmasoudie/pywarp

Pywarp is a powerful replacement for the official Cloudflare WARP app, offering an intuitive UI and extended options, including advanced DNS settings, custom endpoints, and support for change protocols like masque and WireGuard.

Language: Python - Size: 3.99 MB - Last synced at: 2 days ago - Pushed at: 3 days ago - Stars: 187 - Forks: 17

openziti/zrok

Geo-scale, next-generation peer-to-peer sharing platform built on top of OpenZiti.

Language: Go - Size: 35.9 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 3,425 - Forks: 146

lfedgeai/AegisEdgeAI

AegisEdgeAI delivers verifiable trust for AI at the edge — from manufacturing to live operations — ensuring workloads run only on approved, uncompromised devices, in approved locations.

Language: Python - Size: 947 KB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 0 - Forks: 0

spiffe/spike

SPIKE is a lightweight secrets store that uses SPIFFE as its identity control plane. It protects your secrets and helps your ops, SREs, and sysadmins manage sensitive data securely with minimal overhead.

Language: Go - Size: 45.5 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 115 - Forks: 20

ChrispyBacon-dev/DockFlare

DockFlare: Automate Cloudflare Tunnels with Docker Labels

Language: Python - Size: 28.2 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 1,547 - Forks: 56

openziti/ziti-browzer-core

Core componentry for the Ziti browZer ecosystem (used internally by ziti-browzer-runtime and ziti-sdk-browzer)

Language: JavaScript - Size: 11.1 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 10 - Forks: 2

gravitl/netmaker

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

Language: Go - Size: 284 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 10,784 - Forks: 602

opentdf/platform

Persistent data centric security that extends owner control wherever data travels

Language: Go - Size: 77.6 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 38 - Forks: 20

divyamohan1993/zero-trust-mysql

Zero-trust MySQL reference with TLS 1.3 mTLS, client-side AES-GCM via HSM KMS, tenant isolation, tamper-evident audit, and automated proof-of-controls.

Language: Shell - Size: 69.3 KB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 0 - Forks: 0

codenotary/immudb

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

Language: Go - Size: 38.6 MB - Last synced at: 6 days ago - Pushed at: 3 months ago - Stars: 8,809 - Forks: 352

opentdf/otdfctl

OpenTDF command line interface

Language: Go - Size: 16.1 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 9 - Forks: 5

OpenIdentityPlatform/OpenIdentityPlatform.org

Open Identity Platform Community site

Language: HTML - Size: 21.3 MB - Last synced at: 7 minutes ago - Pushed at: 6 days ago - Stars: 3 - Forks: 3

OpenNHP/opennhp

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.

Language: Go - Size: 78.4 MB - Last synced at: 5 days ago - Pushed at: 22 days ago - Stars: 13,675 - Forks: 2,503

OpenIdentityPlatform/OpenICF

OpenICF (Open Identity Connectors Java Framework) is built to help drive development of Connectors. Connectors provide a consistent generic layer between applications and target resources.

Language: Java - Size: 12.5 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 38 - Forks: 29

OpenIdentityPlatform/OpenIDM

OpenIDM is an open standards based Identity Management, Provisioning and Compliance solution. Experience shows that the most important features of an identity management product are: high flexibility in Business Process handling and compliance with open standards and interfaces. A highly flexible user interface combined with a very robust workflow engine make OpenIDM ready for any Identity Management project.

Language: Java - Size: 65.9 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 90 - Forks: 39

OpenIdentityPlatform/OpenIG

Open Identity Gateway (OpenIG) is a high-performance reverse proxy server with specialized session management and credential replay functionality.

Language: Java - Size: 8.04 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 83 - Forks: 11

OpenIdentityPlatform/OpenAM

OpenAM is an open access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security.

Language: Java - Size: 493 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 841 - Forks: 167

OpenIdentityPlatform/OpenDJ

OpenDJ is an LDAPv3 compliant directory service, which has been developed for the Java platform, providing a high performance, highly available, and secure store for the identities managed by your organization. Its easy installation process, combined with the power of the Java platform makes OpenDJ the simplest, fastest directory to deploy and manage.

Language: Java - Size: 195 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 415 - Forks: 111

identitymachines/ironbook-a2a-extension

This A2A extension defines how to enable Iron Book's zero trust policy-based access control for agents.

Language: Python - Size: 12.7 KB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 0 - Forks: 0

zscaler/zscaler-sdk-python

Official Zscaler SDK Python provides an uniform and easy-to-use interface for each of the Zscaler product APIs.

Language: Python - Size: 16.2 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 15 - Forks: 19

sandworm-hq/sandworm-guard-js

Easy auditing & sandboxing for your JavaScript dependencies 🪱

Language: JavaScript - Size: 4.63 MB - Last synced at: 1 day ago - Pushed at: over 2 years ago - Stars: 253 - Forks: 8

presbrey/beyond

BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.

Language: Go - Size: 2.89 MB - Last synced at: 2 days ago - Pushed at: 10 days ago - Stars: 254 - Forks: 26

build-trust/ockam

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

Language: Rust - Size: 87 MB - Last synced at: 7 days ago - Pushed at: 8 days ago - Stars: 4,560 - Forks: 559

pomerium/awesome-zero-trust

A curated collection of awesome resources for the zero-trust security model.

Size: 17.6 KB - Last synced at: 4 days ago - Pushed at: over 2 years ago - Stars: 757 - Forks: 84

identitymachines/a2a_ironbook

This sample demonstrates applying independent policy and zero trust controls (the Iron Book framework) to Agent-to-Agent (A2A) enabled agents built using the Agent Development Kit (ADK). The sample implements two agents that perform capability-gated action delegation to one another via granular policy adherence.

Language: Python - Size: 25.4 KB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 0 - Forks: 0

zscaler/zscaler-sdk-go

Zscaler SDK for Golang (ZPA/ZIA/ZDX/ZCC APIs)

Language: Go - Size: 3.99 MB - Last synced at: 9 days ago - Pushed at: 9 days ago - Stars: 12 - Forks: 2

cruxstack/terraform-aws-teleport-cluster

Terraform module to deploy Teleport, a zero-trust solution from Gravitational, to AWS in high-availability architecture

Language: HCL - Size: 91.8 KB - Last synced at: 4 days ago - Pushed at: 9 days ago - Stars: 2 - Forks: 0

hashicorp/boundary

Boundary enables identity-based access management for dynamic infrastructure.

Language: Go - Size: 97.1 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 3,945 - Forks: 294

opentdf/docs

OpenTDF documentation

Language: TypeScript - Size: 1.43 MB - Last synced at: 9 days ago - Pushed at: 9 days ago - Stars: 2 - Forks: 0

Compcode1/entra-private-access-internal-app

This project configures Entra Private Access to securely route traffic to an internal line-of-business (LOB) application without exposing it to the internet.

Language: Jupyter Notebook - Size: 6.84 KB - Last synced at: 11 days ago - Pushed at: 11 days ago - Stars: 0 - Forks: 0

cycastic-cumberland/sigil-backend

Zero trust hierarchical file storage

Language: Java - Size: 677 KB - Last synced at: 5 days ago - Pushed at: 12 days ago - Stars: 0 - Forks: 0

zscaler/terraform-provider-zpa

:cloud: Terraform Provider for Zscaler Private Access :cloud:

Language: Go - Size: 66.9 MB - Last synced at: 11 days ago - Pushed at: 12 days ago - Stars: 53 - Forks: 18

openziti/ziti-sdk-c

A C-based sdk for delivering secure applications over a Ziti Network

Language: C - Size: 3.08 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 77 - Forks: 18

cycastic-cumberland/sigil-frontend

Zero trust hierarchical file storage

Language: TypeScript - Size: 479 KB - Last synced at: 5 days ago - Pushed at: 14 days ago - Stars: 0 - Forks: 0

opentdf/java-sdk

OpenTDF Java SDK

Language: Java - Size: 1.2 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 0 - Forks: 2

opentdf/web-sdk

OpenTDF JavaScript SDK

Language: TypeScript - Size: 16.2 MB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 5 - Forks: 3

aww1021/routesentry

RouteSentry – securely routes selected pod traffic through fail‑closed, encrypted VPN tunnels

Language: Go - Size: 14.6 KB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 1 - Forks: 0

borgoat/farmfa

TOTP MFA for teams: Shamir's Secret Sharing and zero trust OTP generation

Language: Go - Size: 1.68 MB - Last synced at: 14 days ago - Pushed at: about 1 year ago - Stars: 27 - Forks: 1

Mhmad200/cloudflare-operator

Manage Cloudflare DNS records with Kubernetes objects. cloudflare, cloudflare-dns, dns, kubernetes, kubernetes-operator

Language: Go - Size: 86.9 KB - Last synced at: 15 days ago - Pushed at: 15 days ago - Stars: 0 - Forks: 0

AdrianWahyu/Biconic-AI

Enterprise AI framework orchestrating AI agent swarms with reinforcement learning for scalable, autonomous business solutions.

Language: Python - Size: 204 KB - Last synced at: 15 days ago - Pushed at: 15 days ago - Stars: 2 - Forks: 0

openziti/ziti-tunnel-sdk-c

Language: C - Size: 2.68 MB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 47 - Forks: 26

resetroot99/tecp

Trusted Ephemeral Computation Protocol - Making privacy violations mathematically impossible

Language: TypeScript - Size: 395 KB - Last synced at: 15 days ago - Pushed at: 15 days ago - Stars: 0 - Forks: 0

openziti/ziti-sdk-jvm

Ziti SDK for JVM

Language: Java - Size: 2.93 MB - Last synced at: 15 days ago - Pushed at: 15 days ago - Stars: 63 - Forks: 14

philips-labs/spiffe-vault

Integrates Spiffe and Vault to have secretless authentication

Language: Go - Size: 320 KB - Last synced at: 15 days ago - Pushed at: 16 days ago - Stars: 90 - Forks: 13

zyclonite/nassh-relay

Relay Server for the Secure Shell Chromium plugin

Language: Java - Size: 6.47 MB - Last synced at: 16 days ago - Pushed at: 16 days ago - Stars: 147 - Forks: 21

openziti/sdk-golang

Ziti SDK for Golang

Language: Go - Size: 17.4 MB - Last synced at: about 10 hours ago - Pushed at: about 11 hours ago - Stars: 111 - Forks: 27

openziti/ziti-sdk-py

Ziti SDK for Python

Language: Python - Size: 448 KB - Last synced at: 16 days ago - Pushed at: 16 days ago - Stars: 79 - Forks: 4

launchiamenterprise/keyrunner

KeyRunner: A secure, codeless VS Code extension for API testing & Designing. Features include data encryption at rest, sensitive data masking, and the innovative Playground for chaining API requests without coding

Size: 87.9 KB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 20 - Forks: 1

arthasa28/Cloudflare-Tunnel-Setup-Ubuntu

Panduan singkat instalasi dan konfigurasi Cloudflare Tunnel (cloudflared) di Ubuntu. Berisi langkah untuk menghapus instalasi lama, memasang versi terbaru, membuat tunnel, mengatur DNS ke subdomain (Panel & wildcard *), serta menjalankan Cloudflared sebagai service di systemd.

Size: 8.79 KB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 0 - Forks: 0

dekeyrej/secretmanager

Ephemeral secrets, eternal security: a Vault-powered blueprint for Kubernetes

Language: Python - Size: 97.7 KB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 0 - Forks: 0

octelium/playground

A playground to play with Octelium Clusters inside GitHub Codespaces

Language: Shell - Size: 30.3 KB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 4 - Forks: 1

hak-apped/enterprise-security-suite

🛡️ Enterprise-grade security suite with zero-trust architecture, hardware-backed encryption, and SSH hardening

Size: 1.95 KB - Last synced at: 18 days ago - Pushed at: 18 days ago - Stars: 0 - Forks: 0

c2FmZQ/photos

Securely encrypt, store, and share files, including but not limited to pictures and videos.

Language: Go - Size: 4.28 MB - Last synced at: 20 days ago - Pushed at: 20 days ago - Stars: 46 - Forks: 4

Authtagon/authtagon

Authentication that doesn't suck. Zero-trust security with joyful developer experience. 🛡️

Size: 2.93 KB - Last synced at: 20 days ago - Pushed at: 20 days ago - Stars: 0 - Forks: 0

Azure-Security-Portfolio/secure-vm-nsg-bastion

Harden an Azure Virtual Machine with zero public exposure using Network Security Groups and Azure Bastion. Step-by-step cloud security lab with full documentation, screenshots and zero-trust best practices.

Size: 2.66 MB - Last synced at: 21 days ago - Pushed at: 22 days ago - Stars: 0 - Forks: 0

Azure-Security-Portfolio/keyvault-secrets

Secure, app-only secrets management in Azure using Key Vault and RBAC. Includes app registration, automated secret rotation, and Python-based retrieval—no human access. Step-by-step lab with screenshots and architecture diagram.

Language: Python - Size: 2.34 MB - Last synced at: 21 days ago - Pushed at: 22 days ago - Stars: 0 - Forks: 0

zscaler/zscaler-mcp-server

Zscaler MCP Server is a Model Context Protocol (MCP) server designed for managing Several Zscaler Products using Large Language Models (LLMs).

Language: Python - Size: 1.32 MB - Last synced at: 23 days ago - Pushed at: 23 days ago - Stars: 0 - Forks: 0

opentdf/tests

Tests for OpenTDF

Language: Python - Size: 23.9 MB - Last synced at: 12 days ago - Pushed at: 12 days ago - Stars: 6 - Forks: 2

jaquanwatson/account-inactivity-monitor

🛡️ Security-focused AD & M365 inactive account detector with automated reporting - saves 0K+ in licensing costs while enforcing zero-trust principles

Language: HTML - Size: 23.4 KB - Last synced at: 25 days ago - Pushed at: 25 days ago - Stars: 0 - Forks: 0

mcidclan/w2cla-way2citadelLA

Way To Citadel Logical Architecture (W2CLA) is an open-source experimental Zero Trust protocol for secure shared key and secret management through a distributed Citadel/Proxy system. It leverages DIDs, local Vaults for sensitive data, and a Guardhouse for real-time access control and revocation.

Size: 8.79 KB - Last synced at: 26 days ago - Pushed at: 26 days ago - Stars: 0 - Forks: 0

zyclonite/zerotier-docker

ZeroTier One as Docker Image

Language: Shell - Size: 129 KB - Last synced at: 26 days ago - Pushed at: 27 days ago - Stars: 362 - Forks: 92

stasher-dev/stasher-cli

A CLI to stash secrets safely. No logins. No leaks. Just trust.

Language: TypeScript - Size: 77.1 KB - Last synced at: 27 days ago - Pushed at: 27 days ago - Stars: 92 - Forks: 1

opentdf/charts

OpenTDF Helm Charts

Language: Go - Size: 839 KB - Last synced at: 27 days ago - Pushed at: 27 days ago - Stars: 4 - Forks: 0

netfoundry/zfw Fork of r-caamano/zfw

An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers

Language: C - Size: 1.5 MB - Last synced at: 29 days ago - Pushed at: 29 days ago - Stars: 65 - Forks: 7

Paper-Dragon/docker-transparent-proxy

Docker透明代理，给容器分配一个公网地址。通过共享网络命名空间将正在运行的容器的网络提供给另一个工作容器。

Size: 33.2 KB - Last synced at: 14 days ago - Pushed at: 11 months ago - Stars: 14 - Forks: 1

openziti/ziti-sdk-js

A JavaScript-based SDK for delivering secure browser-based web applications over a Ziti Network

Language: JavaScript - Size: 1.09 MB - Last synced at: 4 days ago - Pushed at: 7 months ago - Stars: 17 - Forks: 4

priyankaav123/SecureBank

SecureBank is a simulated banking platform using keystroke dynamics for continuous user authentication. It combines behavioral biometrics with Zero Trust security to detect anomalies and trigger real-time reauthentication for enhanced session security.

Language: TypeScript - Size: 369 KB - Last synced at: 27 days ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

otterize/intents-operator

Manage network policies, AWS, GCP & Azure IAM policies, Istio Authorization Policies, and Kafka ACLs in a Kubernetes cluster with ease.

Language: Go - Size: 19.9 MB - Last synced at: 6 days ago - Pushed at: 3 months ago - Stars: 307 - Forks: 17

lunasec-io/lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Language: TypeScript - Size: 293 MB - Last synced at: 26 days ago - Pushed at: over 1 year ago - Stars: 1,457 - Forks: 168

zenkiet/traefik-tunnel-expose

Exposing internal services securely via Traefik Proxy & Cloudflare Tunnel

Language: Shell - Size: 212 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 8 - Forks: 0

NishizukaKoichi/magicrune-policy-runner

AI Assistant Integration Zero Trust Execution Runtime - Secure command execution with multi-signature verification, advanced Linux sandboxing (namespaces, seccomp, landlock), and comprehensive auditing

Language: Rust - Size: 50.8 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

openziti/ziti-sdk-swift

An OpenZiti SDK for Swift

Language: Swift - Size: 9.77 MB - Last synced at: 27 days ago - Pushed at: 27 days ago - Stars: 49 - Forks: 4

openziti/ziti-sdk-csharp

An C#-based SDK to access Ziti

Language: C# - Size: 1.16 MB - Last synced at: 17 days ago - Pushed at: 7 months ago - Stars: 49 - Forks: 5

zscaler/zpacloud-ansible

Ansible collection that automates the configuration and operational tasks on Zscaler Private Access, using the ZPA API.

Language: Python - Size: 35.7 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 5 - Forks: 2

Azure-Security-Portfolio/conditional-access-mfa

Azure AD Conditional Access & MFA – Modern identity protection with Zero Trust (users, groups, Conditional Access, MFA, docs and diagrams)

Size: 1.3 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

microsoft/AzureOpenAI-with-APIM

Deploy APIM. Auto-configure it to work with your Azure Open AI.

Language: Bicep - Size: 11.8 MB - Last synced at: 3 days ago - Pushed at: 9 months ago - Stars: 104 - Forks: 44

sking-dev/sc100-portfolio

End-to-end portfolio for the Microsoft SC-100 Cybersecurity Architect exam - Zero-Trust landing zones, Policy-as-Code, AKS guard-rails, FinOps budget controls, and AI-powered Sentinel playbooks. All projects are IaC-driven (Terraform / Bicep) and mapped directly to the four SC-100 skill domains.

Size: 6.84 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0