security

Keycloak is an open source identity and access management solution providing features like single sign-on, identity brokering and social login, user federation, strong authentication, and fine-grained authorization.

AdGuard Home is a network-wide software for blocking ads and tracking, providing a user-friendly DNS server with comprehensive filtering capabilities and detailed analytics.

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for reverse proxies.

Authentik is an open-source Identity Provider focused on flexibility and versatility. It supports multiple authentication protocols and can serve as a self-hosted alternative to commercial solutions like Okta, Auth0, and Entra ID.

SafeLine is a web application firewall and reverse proxy designed to protect web applications from attacks and exploits. It provides comprehensive security features including threat detection, attack prevention, and real-time monitoring with easy deployment through Docker.

OAuth2 Proxy is a flexible, open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. It provides a simple and secure way to protect web applications with OAuth2/OIDC authentication by intercepting requests and redirecting users to OAuth2 providers for authentication.

Bytebase is a Database CI/CD and DevSecOps solution that helps teams manage database changes, access control, and governance. It provides a web-based interface for developers and DBAs to collaborate on database development lifecycle management.

Casdoor is an open-source Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with a web UI supporting multiple authentication protocols including OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, and more.

ZITADEL is an open-source identity and access management platform with built-in multi-tenancy, providing authentication, authorization, and user management capabilities. It offers both self-hosted and cloud options with features like SSO, OIDC, SAML, and passkey support.

Logto is a modern, open-source authentication infrastructure focused on SaaS and AI applications. It provides multi-tenancy, enterprise SSO, and RBAC capabilities while simplifying OIDC and OAuth 2.1 implementation.

BunkerWeb is a next-generation Web Application Firewall (WAF) that protects your web services from various attacks and threats. It provides comprehensive security features including DDoS protection, bot detection, and vulnerability scanning with easy deployment options.

Pocket ID is a simple OIDC provider focused on passkey authentication, allowing users to securely access services without passwords. It provides a streamlined alternative to more complex identity providers.