ToolVitals
🔒

Security & Compliance

Identity, access management, compliance tools

222 tools across 14 use cases

Identity & Access Management

Authentication, authorization, SSO, identity, and access management tools.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
AuthentikTop Pick
The authentication glue you need.
OSI-approved OSS
26.1k starsActive97
02
Better Auth
The most comprehensive authentication framework
OSI-approved OSS
30.5k starsActive97
03
Keycloak
Open Source Identity and Access Management For Modern Applications and Services
OSI-approved OSS
37.5k starsActive97

1 tool is on Evidence Watch.

5 tools are not scored because comparable open/source-visible evidence is unavailable.

Security Scanning

Vulnerability scanning, SAST, dependency scanning, and security testing.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
AktoTop Pick
Open-source API security platform for discovery, posture, and CI/CD testing.
OSI-approved OSS
1.5k starsActive98
02
DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
OSI-approved OSS
5.1k starsActive97
03
Snyk
Developer-first security platform
OSI-approved OSS
5.7k starsActive97

8 tools are not scored because comparable open/source-visible evidence is unavailable.

VPN & Network Security

VPNs, tunnels, zero-trust networking, and secure access tools.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
FirewallaTop Pick
http://firewalla.com
OSI-approved OSS
634 starsActive97
02
NetBird
Zero-configuration mesh VPN for business.
OSI-approved OSS
30.2k starsActive97
03
Tailscale
Zero-config VPN built on WireGuard
OSI-approved OSS
38.1k starsActive96

1 tool is on Evidence Watch.

2 tools are not scored because comparable open/source-visible evidence is unavailable.

Secrets Management

Tools for storing, managing, rotating, and distributing application secrets, certificates, keys, and privileged credentials.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
InfisicalTop Pick
Infisical is the open-source platform for secrets, certificates, and privileged access management.
OSI-approved OSS
30k starsActive98
02
certd
开源SSL证书管理工具；全自动证书申请、更新、续期；通配符证书，泛域名证书申请；证书自动化部署到阿里云、腾讯云、主机、群晖、宝塔；https证书，pfx证书，der证书，TLS证书，nginx证书自动续签自动部署
OSI-approved OSS
5.1k starsActive95
03
OpenBao Operator
Kubernetes operator for managing OpenBao clusters and secrets infrastructure.
OSI-approved OSS
32 starsActive94

3 tools are not scored because comparable open/source-visible evidence is unavailable.

Governance, Risk & Compliance

Tools for GRC workflows including evidence collection, control mapping, compliance auditing, risk management, and gap analysis.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
ProboTop Pick
Open source solutions for SOC 2, GDPR, and ISO27001.
OSI-approved OSS
1.5k starsActive97
02
The Open Lane
Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more
OSI-approved OSS
334 starsActive95
03
Comp AI
AI Native platform to get companies compliant - Vanta & Drata Alternative
OSI-approved OSS
2.1k starsActive89

3 tools are not scored because comparable open/source-visible evidence is unavailable.

AI Agent Governance

Tools for controlling AI agent permissions, consent, spend limits, policy enforcement, and auditability.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
mcpproxy-goTop Pick
Supercharge AI Agents, Safely
OSI-approved OSS
398 starsActive97
02
ArifOS
Governed AI execution platform with architect, auditor, and agent roles.
OSI-approved OSS
54 starsActive95
03
Pipelock
Open-source AI agent firewall for MCP security and egress control.
OSI-approved OSS
959 starsActive94

Security Monitoring & Threat Hunting

Security operations tools for monitoring logs and networks, investigating incidents, detecting intrusions, and hunting threats.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
InnerWardenTop Pick
Autonomous EDR for Linux with kernel-level eBPF detection and AI triage.
OSI-approved OSS
164 starsActive96
02
Wildbox
Open-source security platform with SIEM, SOAR, WAF, and more in a self-hosted package.
OSI-approved OSS
134 starsActive93
03
osctrl
Fast and efficient osquery management.
OSI-approved OSS
537 starsActive93

2 tools are not scored because comparable open/source-visible evidence is unavailable.

Secure Secret Sharing

Tools for securely sending sensitive information through expiring, encrypted, single-use, or access-limited links.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
One Time SecretTop Pick
Share sensitive information once and then destroy the secret link.
OSI-approved OSS
3k starsActive97
02
PasswordPusher
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
OSI-approved OSS
3.2k starsActive95
03
Enclosed
Minimalistic web app designed for sending private and secure notes.
OSI-approved OSS
2.1k starsWarning62

1 tool is on Evidence Watch.

Video Surveillance

Tools for monitoring security cameras and surveillance footage with NVR, object detection, alerts, tracking, and video search.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
RuViewTop Pick
π RuView: WiFi DensePose turns commodity WiFi signals into real-time human pose estimation, vital sign monitoring, and presence detection — all without a single pixel of video.
OSI-approved OSS
99.5k starsActive97
02
clearcam
Add object detection, tracking, mobile notifications, and search to any security camera.
OSI-approved OSS
2k starsActive80
03
DeepCamera
Open-source AI camera skills platform and AI NVR for CCTV surveillance.
OSI-approved OSS
3.1k starsCritical30

Password Management

Password managers and credential vaults for generating, storing, syncing, and managing user passwords.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
LessPassTop Pick
:key: stateless open source password manager
OSI-approved OSS
6.1k starsWarning47
02
CosmoSecure
Open-source cross-platform password manager.
OSI-approved OSS
0 starsCritical9

4 tools are not scored because comparable open/source-visible evidence is unavailable.

Email Security

Tools for detecting, preventing, and investigating email-based threats such as phishing and malicious messages.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
sublime-rulesTop Pick
Sublime rules for email attack detection, prevention, and threat hunting.
OSI-approved OSS
380 starsActive90

Pentest & Red Team Operations

Platforms for managing collaborative penetration testing and red team workflows, including findings, reporting, and coordination.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
CervantesTop Pick
Open-source collaborative platform for pentesters and red teams.
OSI-approved OSS
449 starsActive76

AI Governance

Tools for governing AI systems through policy management, auditing, compliance, safety evaluation, and responsible AI operations.

Open ranking →

No scored tools in this use case yet.

1 tool is not scored because comparable open/source-visible evidence is unavailable.

Awaiting Use-Case Review

These tools fit this broad category, but still need a more specific use-case assignment.

No scored tools in this use case yet.

19 tools are on Evidence Watch.

3 tools are not scored because comparable open/source-visible evidence is unavailable.