Topic
Open-source startups tagged #security
28 open-source startups in this directory carry the GitHub topic #security. 21 pushed code within 30 days of the snapshot of 2026-09-22, 3 have been quiet for 31–120 days, 4 have not pushed in over 120 days. Topics are set by each repository’s own maintainers, so this is what those projects chose to call themselves rather than a category we assigned.
21 of 28 pushed within 30 days of the snapshot of 2026-09-22. How we measure it →
The list
All 28, most-starred first.
The last column is the most recent push GitHub reported to us on 2026-09-22. It counts a push to any branch, by a person or a bot — it is not a claim that anyone is maintaining the project, and a quiet repository may be a finished one.
| Project | What it does | Stars | Ship status | Last verified push |
|---|---|---|---|---|
| caddyserver/caddy | Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS | 76K | Still shipping | Sep 21, 2026 |
| usestrix/strix | Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | 64.2K | Still shipping | Sep 22, 2026 |
| KeygraphHQ/shannon | Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. | 48.3K | Still shipping | Sep 21, 2026 |
| Infisical/infisical | Infisical is the open-source platform for secrets, certificates, and privileged access management. | 29.4K | Still shipping | Sep 22, 2026 |
| authelia/authelia | The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready. | 29K | Still shipping | Sep 22, 2026 |
| digitalocean/nginxconfig.io | ⚙️ NGINX config generator on steroids 💉 | 28.3K | Gone silent | Dec 14, 2024 |
| goauthentik/authentik | The authentication glue you need. | 25.7K | Still shipping | Sep 22, 2026 |
| chaitin/SafeLine | SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits. | 22.7K | Still shipping | Sep 22, 2026 |
| matomo-org/matomo | Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome! | 21.9K | Still shipping | Sep 22, 2026 |
| gravitational/teleport | The easiest, and most secure way to access and protect all of your infrastructure. | 20.9K | Still shipping | Sep 17, 2026 |
| ImranR98/Obtainium | Get Android app updates straight from the source. | 19.9K | Still shipping | Sep 13, 2026 |
| simplex-chat/simplex-chat | SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱! | 19.5K | Still shipping | Sep 22, 2026 |
| ory/hydra | Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go. | 17.6K | Slowed | Jul 29, 2026 |
| wazuh/wazuh | Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads. | 17K | Still shipping | Sep 22, 2026 |
| cryptomator/cryptomator | Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data. | 16.2K | Still shipping | Sep 16, 2026 |
| winsiderss/systeminformer | A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com | 16.1K | Still shipping | Sep 16, 2026 |
| crowdsecurity/crowdsec | CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI. | 14.9K | Still shipping | Sep 22, 2026 |
| prowler-cloud/prowler | Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. | 14.8K | Still shipping | Sep 22, 2026 |
| bytebase/bytebase | Database governance built for humans and agents — controlling changes and access across every major database. | 14.5K | Still shipping | Sep 22, 2026 |
| gophish/gophish | Open-Source Phishing Toolkit | 14.2K | Gone silent | Sep 23, 2024 |
| evilsocket/opensnitch | OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch. | 14.1K | Slowed | Jul 26, 2026 |
| keeweb/keeweb | Free cross-platform password manager compatible with KeePass | 13K | Gone silent | May 8, 2026 |
| gravitl/netmaker | Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks. | 11.8K | Still shipping | Sep 22, 2026 |
| chaitin/xray | 一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档 | 11.8K | Gone silent | Oct 29, 2024 |
| kubescape/kubescape | Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources. | 11.7K | Still shipping | Sep 22, 2026 |
| 1N3/Sn1per | Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections. | 11.3K | Slowed | Jul 4, 2026 |
| bunkerity/bunkerweb | 🛡️ Open-source and cloud-native Web Application Firewall (WAF) | 11K | Still shipping | Sep 22, 2026 |
| OpenCTI-Platform/opencti | Open Cyber Threat Intelligence Platform | 10K | Still shipping | Sep 22, 2026 |
Related collections
Sideways from here.
The 8 largest other topics in the directory, then the other ways to slice it. Every count is as of the snapshot of 2026-09-22.
Snapshot of 2026-09-22 · 721 repos in the directory · every number on this page is measured against that date, not against today. What this measurement cannot tell you →