Build software better, together

fosrl / pangolin

Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.

Updated Oct 23, 2026
TypeScript

OpenNHP / opennhp

Star

Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.

cybersecurity zero-trust zero-trust-network-access zero-trust-security

Updated Oct 23, 2026
Go

gravitl / netmaker

Star

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

Updated Oct 23, 2026
Go

codenotary / immudb

Star

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

go verify performance immutable sql database key-value verification pci-dss cryptographic compliance merkle-tree immutable-database gdpr zero-trust timetravel tamper-evident auditable tamperproof

Updated Oct 21, 2026
Go

microsoft / Security-101

Star

8 Lessons, Kick-start Your Cybersecurity Learning.

security identity iam secops threat-modeling appsec data-protection risk-management data-security zero-trust cia-triad

Updated Aug 24, 2026
HTML

microsoft / agent-governance-toolkit

Star

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

microsoft python security owasp trust compliance governance ai-safety policy-engine ai-agents zero-trust agent-framework

Updated Oct 23, 2026
Python

next-terminal / next-terminal

Star

A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.

docker ssh golang pam audit rdp vnc bastion-host zero-trust jump-server session-recording privileged-access

Updated Oct 18, 2026
TypeScript

pomerium / pomerium

Star

Pomerium is an identity and context-aware access proxy.

go identity gateway iam reverse-proxy vpn zero-trust beyondcorp identity-aware-proxy pomerium aigateway

Updated Oct 23, 2026
Go

openziti / zrok

Star

Secure internet sharing made simple.

golang security network peer-to-peer file-sharing reverse-proxy zero-trust

Updated Oct 8, 2026
Go

nolabs-ai / nono

Star

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

security mcp ai-agents zero-trust ai-security supply-chain-security agent-sandbox llm-security ai-security-tool agent-security mcp-security ai-agent-security ai-agent-sandbox agent-runtime-security

Updated Oct 22, 2026
Rust

build-trust / ockam

Star

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

rust security distributed-systems identity encryption kafka authentication credentials messaging snowflake authorization encrypted-connections trust encrypted-messages e2ee key-management end-to-end-encryption zero-trust

Updated Jan 4, 2026
Rust

openziti / ziti

Star

The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @openziti

Updated Oct 22, 2026
Go

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.