eBPF-based Networking, Security, and Observability

Turn any program that uses STDIN/STDOUT into a WebSocket server. Like inetd, but for WebSockets.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

Fast event-loop networking for Go

HTTP(S) load generator, ApacheBench (ab) replacement, written in Go

An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress

OnionScan is a free and open source tool for investigating the Dark Web.

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

Project Wycheproof tests crypto libraries against known attacks.

The Unikernel & MicroVM Compilation and Deployment Platform

Fully static, unprivileged, self-contained, containers as executable binaries.

UNMAINTAINED: A Go implementation of the Raft distributed consensus protocol.

rtop is an interactive, remote system monitoring tool based on SSH

copy & paste-friendly golang crypto

Go Image Filtering Toolkit

go-audit is an alternative to the auditd daemon that ships with many distros

Simulate Protocol Interactions in Go

moss - a simple, fast, ordered, persistable, key-val storage library for golang

dynamic binary analysis via platform emulation

Escher: A language for programming in metaphors http://escher.io

A conformance testing tool for HTTP/2 implementation.

Implementations of white-box AES constructions and their cryptanalyses.

parsing postgres errors

Benchmarks for various Go data structures and services

Debugging reverse proxy for HTTP/2 developers

Run Unikernels Locally and Natively on OSX and Linux