Havuz

A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are

Halofy, organizasyonel bilgiyi AI agents ile paylasirken identity, access control, provenance ve audit kurallarini tek bir katmanda yoneten bir yazilimdir.

Neden yükseliyor · 36 gunde 335 yildiz, projeye erken ilgi oldugunu gosteriyor; ancak ilginin nedenini olcumlerden belirlemek mumkun degil. Son 28 gunde commit ve farkli yazar sayisi sifir oldugundan, bu ilgi guncel gelistirme temposuyla desteklenmiyor.

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware tabl

Purpose-bound authorization reference: RBAC + ABAC + ReBAC, row/field controls, fidelity gates, lifecycle governance, and a tested 100K synt

一款安全又便捷的网页加密工具。采用 AES-256 + PBKDF2 百万次迭代 + HMAC 验签，密码与解密全程留在浏览器本地；一条命令或图形界面即可把 HTML（乃至整站 css/js/图片）加密成自解密页面，部署到任意静态托管。Secure, effortless HTM

AmneziaWG VPN server for OpenWrt with a LuCI admin. Every person gets a personal link to add their own devices, with per-person access, limi

Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.

Turn your database into secure, semantically rich MCP tools for agents.

AgentGuard: Zero-Trust Security Foundation for AI Agents

面向 NAS、软路由与家庭服务器的多平台高性能安全网关，采用 Rust + Go 双核心架构，集成反向代理、身份认证、WAF、SSL、DDNS 与内网穿透。

Share Twitter posts , YouTube videos or your own content(blog) with your friends if they can't access them. It's actually a CMS capable of m

Composable data security plane for Model Context Protocol. Pluggable layers — collect, analyze, guard — across 50+ enterprise providers. Ope

Runtime enforcement boundary for AI agents: a local sidecar that gates every outbound call against Cedar policies you own. Deterministic, ca

Real-time Kubernetes dashboard for SREs — live cluster state, drain wizard, YAML editor, just-in-time exec access, cost analysis, and AI dia

Claude and ChatGPT now log into your app as your customers. OneHuman decides what they can see and do. Join our community: https://discord.g

Trace-backed Agent Authorization Reviews for tool-using AI agents. Staging-only evidence for payment, record-change, access, and export acti

Self-hosted WireGuard® access management — bring every remote worker, device and site securely back to HQ. One native binary (Quarkus + Graa

Permission-aware Agentic RAG for enterprise knowledge bases — folder ACLs, hybrid retrieval, OCR, grounded citations, and secure LLM evidenc

A BOLA/IDOR access-control confirmation engine — code adjudicates every verdict, not just the model, with a reproducible evidence chain.

A secure and production-oriented FastAPI authentication system with JWT, RBAC, session management, HttpOnly cookies, token rotation, device

​Automatically manage temporary Pangolin IP bypass rules for devices that can't use SSO (like smart TVs). Bootstraps trust from authenticate

Self-hosted database access-control proxy for MySQL and PostgreSQL: lineage-aware column masking, Cedar policy, fail-closed deny, tamper-evi

Deterministic authorization + tamper-evident audit for AI agents, humans, and workloads — one principal type, safety invariants machine-chec

Ground truth for enterprise AI: your AI coding tools, your accounts and every session on your own server, from one web console, CLI or API.

Suckless-style PTY proxy in Zig that drops an LLM exec dialog, atuin autosuggest, and guardrail - eBPF LSM, tiered classification (regex + S