mfa

Read-only Microsoft Entra Conditional Access rollout planner that runs in your browser.

Security, TLS, authentication, and other hardening setup guides written for AI development assistants: free and self-signed certificates, Cloudflare Zero Trust, and hardening steps for common servers, frameworks, and databases.

Batteries-included authentication for Phoenix (admin UI, MFA, OAuth, passkeys)

Self-hosted multi-tenant IAM for SaaS builders.

ThunderID is a high-performance, open-source identity stack designed for developers to secure and manage access for humans, AI agents, and machines through fully composable identity flows.

Generate TOTP(Time-based One-time Password) token with CLI.

🛡️ Automate comprehensive Windows security audits using a PowerShell framework with Zero-Trust checks, threat detection, and detailed reports.

🤖 Monitor your systems in real-time with SentinelBot, a smart alert system that integrates Prometheus, Alertmanager, and Telegram for instant notifications.

🔍 Automate bug detection and security scanning across multiple languages, create GitHub issues, and fix simple problems effortlessly.

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

Passkey-gated port knocking: a self-hosted control plane that opens per-IP, auto-expiring firewall rules after WebAuthn authentication

A lightweight two-factor authentication (2FA) app for Android. Overlay your OTP list on other apps so you can view and copy codes without leaving your login screen.

Read-only Microsoft 365 & Google Workspace security-posture auditing — self-hosted, on the Hexward engine.

Hardware-backed developer credentials

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.

Self-hosted, multi-tenant OpenID Connect provider and identity management server in Rust: OAuth 2.0, MFA and passkeys, SCIM 2.0, admin and account consoles. Cloud-agnostic, MIT. Pre-release.

Transport-agnostic OAuth 2.1 / OpenID Connect server for the redb ecosystem — OpenIddict on redb.Route, redb-backed stores, MFA, WebAuthn, federation, SCIM, DPoP. Green on PostgreSQL, MSSQL and SQLite.

Enterprise admin platform in Go on go-kratos (Ent): Protobuf as the single API contract with full-stack codegen (Go APIs + TypeScript clients, one-click CRUD scaffolds), multi-tenant RBAC (Casbin / OPA / Zanzibar), TOTP MFA, 180-day audit logging aligned with China MLPS 2.0 (等保) — with Vue3 (Vben / Element Plus) and React 19 (Antd) frontends.

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.