Cardea is an SSH bastion server that provides access control and session recording.

LemonLDAP::NG Manager

Let's Encrypt client and ACME library written in Go. https://github.com/go-acme/lego

An open source, self-hosted implementation of the Tailscale coordination server.

Toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens).

jumpserver/guacd

jumpserver

The native server-side proxy used by Apache Guacamole.

Lightweight Squid proxy server on Alpine Linux for web caching and traffic filtering

nebula is a scalable overlay networking tool with a focus on performance, simplicity and security

Netmaker automates fast, secure, and distributed virtual networks using Wireguard

A minimal sftpd docker container

amass performs network mapping of attack surfaces and external asset discovery

betterweb/service-base

betterweb

A simple yet scalable microservice base

LinuxKit prometheus node_exporter package

SpiceDB is a Zanzibar-inspired database that stores, computes & validates application permissions.

A command-line security tool for file encryption and protection.

Lightweight DNS Proxy with dnsmasq and DNSCrypt-Proxy

trufflehog finds leaked credentials

subfinder is a subdomain discovery tool via passive online sources

Fast CORS misconfiguration vulnerabilities scanner

containerized pcscd to use HSMs via K8s sidecar

s390x/notary

s390x

DEPRECATED; Notary server and signer cooperatively handle signing and distribution

Local DNS resolver using DoH for privacy, in a tiny container and support for cloud and local infra.

LinuxKit auditd package

Simple Alpine-based Dockerfile for cloudflared, hopefully with support for multiple architectures.

Container to open ports so that you can use for firewall policy verification.

whois is a Go implementation of WHOIS with optional JSON output

ssh-audit is a tool for ssh server & client configuration auditing

🔐 Alpine Linux based OpenSSL build environment for madnuttah/unbound