NHP: A lightweight cryptography-driven Zero Trust networking protocol at the OSI 5th layer to hide your server and data from attackers.

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

Pomerium is an identity and context-aware access proxy.

Boundary enables identity-based access management for dynamic infrastructure.

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @openziti

Geo-scale, next-generation peer-to-peer sharing platform built on top of OpenZiti.

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

Zero Trust Service Access

Manage network policies, AWS, GCP & Azure IAM policies, Istio Authorization Policies, and Kafka ACLs in a Kubernetes cluster with ease.

BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.

VMware Secrets Manager is a lightweight secrets manager to protect your sensitive data. It’s perfect for edge deployments where energy and footprint requirements are strict—See more: https://vsecm.com/

🔑 Team Access Sharing - a self-hosted solution with single sign-on for secure, easy shared access to servers, databases, and applications.

Ziti SDK for Golang

Integrates Spiffe and Vault to have secretless authentication

Application-embedded connectivity and zero-trust components

Serverless, Zero-Trust SSH for Microsoft Azure

HTTP/3-enable existing HTTP apps. Leverage HTTP3 native features and auto-enable workload identity (SPIFFE), AuthN (mTLS/x509, OIDC/Auth0-Okta), AuthZ (OPA), defense-in-depth (WAAP/WAF), and observability (metrics, logs, alerting, dashboard).

Your ultimate infrastructure to run a CTF, with a BeyondCorp-like zero-trust network and simple infrastructure-as-code configuration.

☁️ Terraform Provider for Zscaler Private Access ☁️