ToolVitals
πŸ”’

Security & Compliance

Identity, access management, compliance tools

222 tools across 14 use cases

Identity & Access Management

Authentication, authorization, SSO, identity, and access management tools.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
Authentik Top Pick
The authentication glue you need.
OSI-approved OSS
22.5k stars Active 100
02
Keycloak
Open Source Identity and Access Management For Modern Applications and Services
OSI-approved OSS
35.8k stars Active 98
03
Thunder
Identity and access management product by WSO2.
OSI-approved OSS
382 stars Active 97

Proprietary targets

Replacement targets, not open-tool picks

01
Stack Auth
Open-source Auth0/Clerk alternative
Active 96
02
FusionAuth
User authentication and session management framework
Warning 56
03
OpenIG
Open source identity gateway that secures, routes, and manages web traffic.
Critical 53

1 tool is on Evidence Watch.

Security Scanning

Vulnerability scanning, SAST, dependency scanning, and security testing.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
Prowler Top Pick
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
OSI-approved OSS
14.5k stars Active 100
02
Akto
Open-source API security platform for discovery, posture, and CI/CD testing.
OSI-approved OSS
1.5k stars Active 98
03
Strix
Open-source AI hackers to find and fix your app’s vulnerabilities.
OSI-approved OSS
44.8k stars Active 97

Proprietary targets

Replacement targets, not open-tool picks

01
CNSpec
Cloud-native security platform for protecting build and runtime environments.
Active 97
02
Caido
πŸš€ Caido releases, wiki and roadmap
Warning 67
03
Mixeway
Repository containing source code of MixewayFlow service that is Swiss army knife for DevSecOps Teams
Warning 59

VPN & Network Security

VPNs, tunnels, zero-trust networking, and secure access tools.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
NetBird Top Pick
Zero-configuration mesh VPN for business.
OSI-approved OSS
27.8k stars Active 100
02
Tailscale
Zero-config VPN built on WireGuard
OSI-approved OSS
34.4k stars Active 98
03
Pangolin
Identity-aware VPN and tunneled reverse proxy for remote access.
OSI-approved OSS
21.9k stars Active 94

Proprietary targets

Replacement targets, not open-tool picks

01
BrowserBox
πŸ’š Secure remote browsing anywhere, any way you like it.
Active 83
02
DockFlare
Automates Cloudflare tunnels with Docker labels.
Warning 61

Secrets Management

Tools for storing, managing, rotating, and distributing application secrets, certificates, keys, and privileged credentials.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
Infisical Top Pick
Infisical is the open-source platform for secrets, certificates, and privileged access management.
OSI-approved OSS
28.4k stars Active 100
02
OneCLI
Open-source credential vault for AI agents.
OSI-approved OSS
2.9k stars Active 93
03
Phase
Application secrets and configuration management for developers.
OSI-approved OSS
899 stars Active 92

Proprietary targets

Replacement targets, not open-tool picks

01
Sigillo
Self-hostable secrets management platform and open-source Doppler alternative.
Warning 73
02
Zexio ZMS
High-performance secrets management system.
Critical 37
03
Envy CLI
Open-source CLI for secret injection and management.
Critical 33

Governance, Risk & Compliance

Tools for GRC workflows including evidence collection, control mapping, compliance auditing, risk management, and gap analysis.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
Comp AI Top Pick
AI Native platform to get companies compliant - Vanta & Drata Alternative
OSI-approved OSS
1.7k stars Active 96
02
The Open Lane
Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more
OSI-approved OSS
279 stars Active 95
03
Probo
Open source solutions for SOC 2, GDPR, and ISO27001.
OSI-approved OSS
1.2k stars Active 93

Proprietary targets

Replacement targets, not open-tool picks

01
CISO Assistant Community
Open-source GRC platform for risk management, compliance, audit, TPRM, privacy, and reporting.
Active 99
02
VerifyWise
AI governance and evaluation platform for policy and compliance frameworks.
Active 92
03
RAI Ops
Open source platform for responsible AI operations with red teaming, control monitoring, and policy management.
Critical 33

Security Monitoring & Threat Hunting

Security operations tools for monitoring logs and networks, investigating incidents, detecting intrusions, and hunting threats.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
Lyrie AI Top Pick
Autonomous AI cybersecurity agent.
OSI-approved OSS
375 stars Active 92
02
InnerWarden
Autonomous EDR for Linux with kernel-level eBPF detection and AI triage.
OSI-approved OSS
164 stars Active 92
03
osctrl
Fast and efficient osquery management.
OSI-approved OSS
509 stars Active 83

Proprietary targets

Replacement targets, not open-tool picks

01
SEKOIA.IO
SEKOIA.IO Documentation - The Intelligence-Driven SaaS SIEM
Active 81
02
Security Onion
Open platform for threat hunting, security monitoring, and log management.
Warning 70

AI Agent Governance

Tools for controlling AI agent permissions, consent, spend limits, policy enforcement, and auditability.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
mcpproxy-go Top Pick
Supercharge AI Agents, Safely
OSI-approved OSS
301 stars Active 93
02
Pipelock
Open-source AI agent firewall for MCP security and egress control.
OSI-approved OSS
786 stars Active 92
03
Panguard AI
Open-source security platform for AI agents with skill audits and threat monitoring.
OSI-approved OSS
58 stars Active 91

Password Management

Password managers and credential vaults for generating, storing, syncing, and managing user passwords.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
LessPass Top Pick
:key: stateless open source password manager
OSI-approved OSS
6k stars Warning 56
02
CosmoSecure
Open-source cross-platform password manager.
OSI-approved OSS
0 stars Critical 45
03
PassMan
Open-source cross-platform password manager.
OSI-approved OSS
0 stars Critical 30

Proprietary targets

Replacement targets, not open-tool picks

01
BitWarden
Password manager for teams and individuals
Active 98
02
1Password
Password manager for teams and families
Active 78
03
ZeroNote
Offline-first encrypted note-taking and secrets manager.
Warning 50

Secure Secret Sharing

Tools for securely sending sensitive information through expiring, encrypted, single-use, or access-limited links.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
PasswordPusher Top Pick
πŸ” Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
OSI-approved OSS
3.1k stars Active 95
02
One Time Secret
Share sensitive information once and then destroy the secret link.
OSI-approved OSS
2.9k stars Active 93
03
LastSignal
A self-hosted dead man's switch for delivering encrypted messages (E2EE) to your loved ones β€” when you're gone or unresponsive.
OSI-approved OSS
687 stars Warning 54

Video Surveillance

Tools for monitoring security cameras and surveillance footage with NVR, object detection, alerts, tracking, and video search.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
RuView Top Pick
Ο€ RuView: WiFi DensePose turns commodity WiFi signals into real-time human pose estimation, vital sign monitoring, and presence detection β€” all without a single pixel of video.
OSI-approved OSS
86.8k stars Active 99
02
clearcam
Add object detection, tracking, mobile notifications, and search to any security camera.
OSI-approved OSS
958 stars Warning 75
03
DeepCamera
Open-source AI camera skills platform and AI NVR for CCTV surveillance.
OSI-approved OSS
3k stars Critical 41

AI Governance

Tools for governing AI systems through policy management, auditing, compliance, safety evaluation, and responsible AI operations.

Open ranking β†’

Proprietary targets

Replacement targets, not open-tool picks

01
Guardian SDK
Open-source AI safety, ethics, and compliance platform components.
Warning 75

Email Security

Tools for detecting, preventing, and investigating email-based threats such as phishing and malicious messages.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
sublime-rules Top Pick
Sublime rules for email attack detection, prevention, and threat hunting.
OSI-approved OSS
368 stars Active 80

Pentest & Red Team Operations

Platforms for managing collaborative penetration testing and red team workflows, including findings, reporting, and coordination.

Open ranking β†’

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
Cervantes Top Pick
Open-source collaborative platform for pentesters and red teams.
OSI-approved OSS
445 stars Critical 35

Awaiting Use-Case Review

These tools fit this broad category, but still need a more specific use-case assignment.

No scored tools in this use case yet.

22 tools are on Evidence Watch.