IAM
229 items from kdeldycke/awesome-iam ★2,303
-
Spire github.com
SPIRE (the SPIFFE Runtime Environment) is a toolchain of APIs for establishing trust between software systems across a wide variety of hosting platforms.
-
CFSSL github.com
🆓 A swiss army knife for PKI/TLS by CloudFlare. Command line tool and an HTTP API server for signing, verifying, and bundling TLS certificates.
-
salesforce/policy_sentry :fire::fire::fire::fire: github.com
🆓 Writing security-conscious IAM Policies by hand can be very tedious and inefficient. Policy Sentry helps users to create least-privilege policies in a matter of seconds.
-
OSINT Stuff Tool Collection github.com
“A collection of several hundred online tools for OSINT”: domain, IP, email, username and social-network lookups useful for unmasking fraud and abuse.
-
Google Cloud Developer's Cheat Sheet github.com
Describe all GCP products in 4 words or less.
-
MailChecker github.com
💸 Cross-language temporary (disposable/throwaway) email detection library.
-
Open Policy Administration Layer github.com
💸 Open Source administration layer for OPA, detecting changes to both policy and policy data in realtime and pushing live updates to OPA agents. OPAL brings open-policy up to the speed needed by live applications.
-
Kanidm github.com
🆓 Simple, secure and fast identity management platform.
-
Cerbos github.com
💸 An authorization endpoint to write context-aware access control policies.
-
Learn how to use JWT for Authentication github.com
Learn how to use JWT to secure your web app.
-
Cartography github.com
🆓 A Neo4J-based tool to map out dependencies and relationships between services and resources. Supports AWS, GCP, GSuite, Okta and GitHub.
-
oathkeeper github.com
💸 Identity & Access Proxy and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP requests. Inspired by the BeyondCorp / Zero Trust white paper.
-
List of Dirty, Naughty, Obscene, and Otherwise Bad Words github.com
🆓 Profanity blocklist from Shutterstock.
-
OpenSK github.com
🆓 Open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.
-
Dumb Password Rules github.com
🆓 Shaming sites with dumb password rules.
-
The Public Suffix List github.com
🆓 Mozilla's registry of public suffixes, under which Internet users can (or historically could) directly register names.
-
Ladon github.com
💸 Access control library, inspired by AWS.
-
Ballerine github.com
💸 An open-source infrastructure for user identity and risk management.
-
IAM Floyd github.com
🆓 AWS IAM policy statement generator with fluent interface. Helps with creating type safe IAM policies and writing more restrictive/secure statements by offering conditions and ARN generation via IntelliSense. Available for Node.js, Python, .Net and Java.
-
JA4+ github.com
💸 A suite of network fingerprinting methods to facilitate threat-hunting and analysis.
-
Email marketing regulations github.com
🆓 As the world becomes increasingly connected, the email marketing regulation landscape becomes more and more complex.
-
lemur github.com
🆓 Acts as a broker between CAs and environments, providing a central portal for developers to issue TLS certificates with 'sane' defaults.
-
UserFrosting github.com
🆓 Modern PHP user login and management framework.
-
GDPR Developer Guide github.com
Best practices for developers.
-
Project Oak github.com
🆓 A specification and a reference implementation for the secure transfer, storage and processing of data.
-
Statistically Likely Usernames github.com
🆓 Wordlists for creating statistically likely usernames for use in username-enumeration, simulated password-attacks and other security testing tasks.
-
Topaz github.com
💸 An open-source project which combines the policy-as-code and decision logging of OPA with a Zanzibar-modeled directory.
-
Burner email providers github.com
🆓 A list of temporary email providers. And its derivative Python module.
-
Athenz github.com
🆓 Set of services and libraries supporting service authentication and role-based authorization for provisioning and configuration.
-
Country IP Blocks github.com
🆓 CIDR country-level IP data, straight from the Regional Internet Registries, updated hourly.
-
A Well-Known URL for Changing Passwords github.com
🆓 Specification defining site resource for password updates.
-
obligator github.com
🆓 Simple and opinionated OpenID Connect server designed for self-hosters. Single static binary with flat-file or SQLite storage.
-
MIDAS: Detecting Microcluster Anomalies in Edge Streams github.com
🆓 A proposed method to “detects microcluster anomalies, or suddenly arriving groups of suspiciously similar edges, in edge streams, using constant time and memory.”
-
FerrisKey github.com
🆓 Self-hosted, open-source, RBAC system written in Rust.
-
NanoMDM github.com
🆓 Minimalist Apple MDM server and library to enroll and manage the identity of Apple devices, inspired by MicroMDM.
-
nextdns/metadata github.com
💸 Extensive collection of list for security, privacy and parental control.
-
profanity-check github.com
🆓 Uses a linear SVM model trained on 200k human-labeled samples of clean and profane text strings.
-
Keystone github.com
🆓 Open-source project for building trusted execution environments (TEE) with secure hardware enclaves, based on the RISC-V architecture.
-
IAMbic github.com
💸 GitOps for IAM. The Terraform of Cloud IAM. IAMbic is a multi-cloud identity and access management (IAM) control plane that centralizes and simplifies cloud access and permissions. It maintains an eventually consistent, human-readable, bi-directional representation of IAM in…
-
heimdall github.com
🆓 A cloud-native, identity-aware proxy and policy enforcement point that orchestrates authentication and authorization systems via versatile rules, supporting protocol-agnostic identity propagation.
-
SpiderFoot github.com
🆓 An open source intelligence (OSINT) automation tool. It integrates with just about every data source available and uses a range of methods for data analysis, making that data easy to navigate.
-
Best-of Digital Identity github.com
Ranking, popularity and activity status of open-source digital identity projects.
-
Gubernator github.com
🆓 High performance rate-limiting micro-service and library.
-
gman github.com
🆓 “A Ruby gem to check if the owner of a given email address or website is working for THE MAN (a.k.a verifies government domains).” Good resource to hunt for potential government customers in your user base.
-
PhishingKitTracker github.com
🆓 CSV database of email addresses used by threat actor in phishing kits.
