Tools

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Password manager dedicated for managing passwords in a collaborative way. One symmetric key is used to encrypt all shared/team passwords and stored server side in a file and the database. works on any server Apache, MySQL and PHP.

Single Sign-On for Your Self-Hosted Universe

Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

The authentication glue you need.

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

Share sensitive information securely with self-destructing links that are only viewable once.

Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.

Secure sharing of secrets, passwords and files.

Whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser

ZITADEL - Identity infrastructure, simplified for you.

An editor of encrypted files that supports YAML, JSON and BINARY formats and encrypts with AWS KMS and PGP.

Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2.0 and PAM

Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.

Secure, browser-based, password-only self-custodial cryptocurrency wallet.

Fully transparent SSH, HTTPS, Kubernetes, MySQL and Postgres bastion/PAM that doesn't need additional client-side software

A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.

Open Source Identity and Access Management For Modern Applications and Services

Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

Quantum-inspired keyring for AI coding agents. Secure secrets with superposition, entanglement, tunneling, and teleportation.

Web frontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.

Permission control plane for AI agents. MCP proxy that enforces least-privilege YAML policies on every tool call, classifies sensitive data (PII/PHI), detects dangerous skill chains, and generates compliance audit trails. Supports stdio and HTTP proxy modes.

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

Kanidm: A simple, secure, and fast identity management platform

A helm plugin that help manage secrets with Git workflow and store them anywhere

Plugable framework for automated decryption, often used as a Tang client.

Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps