ToolVitals
🔒

Security & Compliance

Identity, access management, compliance tools

222 tools across 14 use cases

Identity & Access Management

Authentication, authorization, SSO, identity, and access management tools.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
AuthentikTop Pick
The authentication glue you need.
OSI-approved OSS
25.4k starsActive98
02
Thunder
Identity and access management product by WSO2.
OSI-approved OSS
574 starsActive98
03
Keycloak
Open Source Identity and Access Management For Modern Applications and Services
OSI-approved OSS
36.7k starsActive98

1 tool is on Evidence Watch.

5 tools are not scored because comparable open/source-visible evidence is unavailable.

Security Scanning

Vulnerability scanning, SAST, dependency scanning, and security testing.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
KubescapeTop Pick
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
OSI-approved OSS
11.7k starsActive98
02
Akto
Open-source API security platform for discovery, posture, and CI/CD testing.
OSI-approved OSS
1.5k starsActive98
03
Prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
OSI-approved OSS
14.8k starsActive97

8 tools are not scored because comparable open/source-visible evidence is unavailable.

VPN & Network Security

VPNs, tunnels, zero-trust networking, and secure access tools.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
PangolinTop Pick
Identity-aware VPN and tunneled reverse proxy for remote access.
OSI-approved OSS
22.7k starsActive97
02
Tailscale
Zero-config VPN built on WireGuard
OSI-approved OSS
36.3k starsActive97
03
NetBird
Zero-configuration mesh VPN for business.
OSI-approved OSS
29k starsActive97

2 tools are not scored because comparable open/source-visible evidence is unavailable.

Secrets Management

Tools for storing, managing, rotating, and distributing application secrets, certificates, keys, and privileged credentials.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
InfisicalTop Pick
Infisical is the open-source platform for secrets, certificates, and privileged access management.
OSI-approved OSS
29.2k starsActive99
02
certd
开源SSL证书管理工具；全自动证书申请、更新、续期；通配符证书，泛域名证书申请；证书自动化部署到阿里云、腾讯云、主机、群晖、宝塔；https证书，pfx证书，der证书，TLS证书，nginx证书自动续签自动部署
OSI-approved OSS
5k starsActive96
03
OneCLI
Open-source credential vault for AI agents.
OSI-approved OSS
3.5k starsActive94

3 tools are not scored because comparable open/source-visible evidence is unavailable.

Governance, Risk & Compliance

Tools for GRC workflows including evidence collection, control mapping, compliance auditing, risk management, and gap analysis.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
ProboTop Pick
Open source solutions for SOC 2, GDPR, and ISO27001.
OSI-approved OSS
1.4k starsActive97
02
The Open Lane
Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more
OSI-approved OSS
303 starsActive95
03
Claude GRC Engineering
Open-source GRC toolkit with Claude Code plugins for evidence collection and gap reports.
OSI-approved OSS
398 starsActive89

3 tools are not scored because comparable open/source-visible evidence is unavailable.

AI Agent Governance

Tools for controlling AI agent permissions, consent, spend limits, policy enforcement, and auditability.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
mcpproxy-goTop Pick
Supercharge AI Agents, Safely
OSI-approved OSS
343 starsActive97
02
Pipelock
Open-source AI agent firewall for MCP security and egress control.
OSI-approved OSS
840 starsActive96
03
ArifOS
Governed AI execution platform with architect, auditor, and agent roles.
OSI-approved OSS
51 starsActive95

Security Monitoring & Threat Hunting

Security operations tools for monitoring logs and networks, investigating incidents, detecting intrusions, and hunting threats.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
InnerWardenTop Pick
Autonomous EDR for Linux with kernel-level eBPF detection and AI triage.
OSI-approved OSS
164 starsActive96
02
osctrl
Fast and efficient osquery management.
OSI-approved OSS
520 starsActive95
03
Wildbox
Open-source security platform with SIEM, SOAR, WAF, and more in a self-hosted package.
OSI-approved OSS
133 starsActive79

2 tools are not scored because comparable open/source-visible evidence is unavailable.

Secure Secret Sharing

Tools for securely sending sensitive information through expiring, encrypted, single-use, or access-limited links.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
PasswordPusherTop Pick
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
OSI-approved OSS
3.2k starsActive96
02
One Time Secret
Share sensitive information once and then destroy the secret link.
OSI-approved OSS
2.9k starsActive96
03
LastSignal
A self-hosted dead man's switch for delivering encrypted messages (E2EE) to your loved ones — when you're gone or unresponsive.
OSI-approved OSS
747 starsWarning68

Video Surveillance

Tools for monitoring security cameras and surveillance footage with NVR, object detection, alerts, tracking, and video search.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
RuViewTop Pick
π RuView: WiFi DensePose turns commodity WiFi signals into real-time human pose estimation, vital sign monitoring, and presence detection — all without a single pixel of video.
OSI-approved OSS
93k starsActive96
02
clearcam
Add object detection, tracking, mobile notifications, and search to any security camera.
OSI-approved OSS
1.6k starsActive84
03
DeepCamera
Open-source AI camera skills platform and AI NVR for CCTV surveillance.
OSI-approved OSS
3.1k starsCritical13

Password Management

Password managers and credential vaults for generating, storing, syncing, and managing user passwords.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
LessPassTop Pick
:key: stateless open source password manager
OSI-approved OSS
6.1k starsWarning57
02
CosmoSecure
Open-source cross-platform password manager.
OSI-approved OSS
0 starsCritical13

4 tools are not scored because comparable open/source-visible evidence is unavailable.

Email Security

Tools for detecting, preventing, and investigating email-based threats such as phishing and malicious messages.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
sublime-rulesTop Pick
Sublime rules for email attack detection, prevention, and threat hunting.
OSI-approved OSS
373 starsActive90

Pentest & Red Team Operations

Platforms for managing collaborative penetration testing and red team workflows, including findings, reporting, and coordination.

Open ranking →

Open/source-visible picks

Health-first ToolVitals score, then adoption

01
CervantesTop Pick
Open-source collaborative platform for pentesters and red teams.
OSI-approved OSS
449 starsCritical38

AI Governance

Tools for governing AI systems through policy management, auditing, compliance, safety evaluation, and responsible AI operations.

Open ranking →

No scored tools in this use case yet.

1 tool is not scored because comparable open/source-visible evidence is unavailable.

Awaiting Use-Case Review

These tools fit this broad category, but still need a more specific use-case assignment.

No scored tools in this use case yet.

19 tools are on Evidence Watch.

3 tools are not scored because comparable open/source-visible evidence is unavailable.