A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.
-
Updated
Oct 12, 2026 - Go
#
zero-trust
Here are 288 public repositories matching this topic...
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
kubernetes security cloud self-hosted vpn mesh vpn-server k8s ipv6-support overlay-network wireguard devsecops zero-trust site-to-site mesh-network wireguard-vpn wg-quick virtual-networking wireguard-ui secure-remote-access
-
Updated
Oct 9, 2026 - Go
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
go verify performance immutable sql database key-value verification pci-dss cryptographic compliance merkle-tree immutable-database gdpr zero-trust timetravel tamper-evident auditable tamperproof
-
Updated
Oct 5, 2026 - Go
Pomerium is an identity and context-aware access proxy.
go identity gateway iam reverse-proxy vpn zero-trust beyondcorp identity-aware-proxy pomerium aigateway
-
Updated
Oct 10, 2026 - Go
Secure internet sharing made simple.
-
Updated
Oct 8, 2026 - Go
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @openziti
golang networking network overlay vpn mesh overlay-network netsec appsec zero-trust zerotrust zero-trust-network zero-trust-network-access ztna zero-trust-security zero-trust-cloud ztaa ztha secure-networking vpn-2
-
Updated
Oct 9, 2026 - Go
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
kubernetes tunnel ssh api-gateway paas vpn sso quic mfa remote-access abac homelab wireguard zero-trust beyondcorp policy-as-code opentelemetry ztna ai-gateway mcp-gateway
-
Updated
Oct 11, 2026 - Go
Boundary enables identity-based access management for dynamic infrastructure.
-
Updated
Oct 9, 2026 - Go
Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.
golang permissions iam acl authorization rbac role-based-access-control entitlements access-control abac authz ciam zero-trust fine-grained-access-control zanzibar fine-grained-authorization rebac pricing-tiers relationship-based-access-control fgac
-
Updated
Dec 5, 2025 - Go
Zero Trust Service Access
-
Updated
Dec 22, 2021 - Go
Zero Trust OpenID / Proxy service
redis rest keycloak authentication websocket redis-sentinel redis-cluster sse authorization opa high-availability fips uma zero-trust mtls forwarding-proxy open-policy-agent oidc-proxy
-
Updated
Oct 7, 2026 - Go
Manage network policies, AWS, GCP & Azure IAM policies, Istio Authorization Policies, and Kafka ACLs in a Kubernetes cluster with ease.
go kubernetes golang kafka authentication controller acl auth authorization intents operator hacktoberfest zero-trust mtls ibac networkpolicies otterize
-
Updated
Jun 11, 2025 - Go
BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.
golang security proxy proxy-server http-proxy vpn openid-connect federation zero-trust relying-party beyondcorp perimeter-network trust-transition
-
Updated
Sep 14, 2026 - Go
SPIKE is a lightweight secrets store that uses SPIFFE as its identity control plane. It protects your secrets and helps your ops, SREs, and sysadmins manage sensitive data securely with minimal overhead.
infrastructure security devops cloud-native identity-management devsecops zero-trust secrets-management spiffe spire secrets-manager infrastructure-security secrets-store
-
Updated
Sep 20, 2026 - Go
VMware Secrets Manager is a lightweight secrets manager to protect your sensitive data. It’s perfect for edge deployments where energy and footprint requirements are strict—See more: https://vsecm.com/
-
Updated
Nov 4, 2025 - Go
The secure gateway connecting AI agents to enterprise systems.
go security ai-agents zero-trust spiffe credential-management egress-gateway ai-compliance ai-governance ai-auditing openbao mcp-security workload-access-management
-
Updated
Oct 11, 2026 - Go
🔑 Team Access Sharing - a self-hosted solution with single sign-on for secure, easy shared access to servers, databases, and applications.
go kubernetes ssh golang bastion security pam cluster firewall postgresql audit self-hosted rdp database-access hacktoberfest firewalls 1password zero-trust kubernetes-access werbot
-
Updated
Aug 3, 2026 - Go
Local-first AWS forensic engine. Finds waste via dependency graph analysis and enables safe remediation with Terraform state restoration.
-
Updated
Sep 11, 2026 - Go
Ziti SDK for Golang
golang security sdk networking netsec appsec zero-trust zerotrust zero-trust-network zero-trust-network-access ztna zero-trust-security ztaa secure-networking openziti
-
Updated
Oct 10, 2026 - Go
Add this topic to your repo
To associate your repository with the zero-trust topic, visit your repo's landing page and select "manage topics."
