Topic

Open-source startups tagged #security

28 open-source startups in this directory carry the GitHub topic #security. 21 pushed code within 30 days of the snapshot of 2026-09-22, 3 have been quiet for 31–120 days, 4 have not pushed in over 120 days. Topics are set by each repository’s own maintainers, so this is what those projects chose to call themselves rather than a category we assigned.

21 of 28 pushed within 30 days of the snapshot of 2026-09-22. How we measure it →

The list

All 28, most-starred first.

The whole directory by ship status →

The last column is the most recent push GitHub reported to us on 2026-09-22. It counts a push to any branch, by a person or a bot — it is not a claim that anyone is maintaining the project, and a quiet repository may be a finished one.

ProjectWhat it doesStarsShip statusLast verified push
caddyserver/caddy

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

76KStill shippingSep 21, 2026
usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

64.2KStill shippingSep 22, 2026
KeygraphHQ/shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

48.3KStill shippingSep 21, 2026
Infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

29.4KStill shippingSep 22, 2026
authelia/authelia

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

29KStill shippingSep 22, 2026
digitalocean/nginxconfig.io

⚙️ NGINX config generator on steroids 💉

28.3KGone silentDec 14, 2024
goauthentik/authentik

The authentication glue you need.

25.7KStill shippingSep 22, 2026
chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

22.7KStill shippingSep 22, 2026
matomo-org/matomo

Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!

21.9KStill shippingSep 22, 2026
gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

20.9KStill shippingSep 17, 2026
ImranR98/Obtainium

Get Android app updates straight from the source.

19.9KStill shippingSep 13, 2026
simplex-chat/simplex-chat

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!

19.5KStill shippingSep 22, 2026
ory/hydra

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

17.6KSlowedJul 29, 2026
wazuh/wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

17KStill shippingSep 22, 2026
cryptomator/cryptomator

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

16.2KStill shippingSep 16, 2026
winsiderss/systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

16.1KStill shippingSep 16, 2026
crowdsecurity/crowdsec

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

14.9KStill shippingSep 22, 2026
prowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

14.8KStill shippingSep 22, 2026
bytebase/bytebase

Database governance built for humans and agents — controlling changes and access across every major database.

14.5KStill shippingSep 22, 2026
gophish/gophish

Open-Source Phishing Toolkit

14.2KGone silentSep 23, 2024
evilsocket/opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

14.1KSlowedJul 26, 2026
keeweb/keeweb

Free cross-platform password manager compatible with KeePass

13KGone silentMay 8, 2026
gravitl/netmaker

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

11.8KStill shippingSep 22, 2026
chaitin/xray

一款长亭自研的完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

11.8KGone silentOct 29, 2024
kubescape/kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

11.7KStill shippingSep 22, 2026
1N3/Sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

11.3KSlowedJul 4, 2026
bunkerity/bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

11KStill shippingSep 22, 2026
OpenCTI-Platform/opencti

Open Cyber Threat Intelligence Platform

10KStill shippingSep 22, 2026

Related collections

Sideways from here.

The 8 largest other topics in the directory, then the other ways to slice it. Every count is as of the snapshot of 2026-09-22.

Snapshot of 2026-09-22 · 721 repos in the directory · every number on this page is measured against that date, not against today. What this measurement cannot tell you →