Cardea is an SSH bastion server that provides access control and session recording.

LemonLDAP::NG Manager

An open source, self-hosted implementation of the Tailscale coordination server.

Let's Encrypt client and ACME library written in Go. https://github.com/go-acme/lego

Toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens).

jumpserver/guacd

jumpserver

The native server-side proxy used by Apache Guacamole.

nebula is a scalable overlay networking tool with a focus on performance, simplicity and security

Lightweight Squid proxy server on Alpine Linux for web caching and traffic filtering

Netmaker automates fast, secure, and distributed virtual networks using Wireguard

amass performs network mapping of attack surfaces and external asset discovery

A minimal sftpd docker container

betterweb/service-base

betterweb

A simple yet scalable microservice base

SpiceDB is a Zanzibar-inspired database that stores, computes & validates application permissions.

LinuxKit prometheus node_exporter package

A command-line security tool for file encryption and protection.

Lightweight DNS Proxy with dnsmasq and DNSCrypt-Proxy

subfinder is a subdomain discovery tool via passive online sources

trufflehog finds leaked credentials

containerized pcscd to use HSMs via K8s sidecar

Fast CORS misconfiguration vulnerabilities scanner

s390x/notary

s390x

DEPRECATED; Notary server and signer cooperatively handle signing and distribution

Local DNS resolver using DoH for privacy, in a tiny container and support for cloud and local infra.

LinuxKit auditd package

Simple Alpine-based Dockerfile for cloudflared, hopefully with support for multiple architectures.

whois is a Go implementation of WHOIS with optional JSON output

Container to open ports so that you can use for firewall policy verification.

🔐 Alpine Linux based OpenSSL build environment for madnuttah/unbound

ssh-audit is a tool for ssh server & client configuration auditing