Topics / #audit-log
Audit-log projects on GitHub
Audit logging of user and system actions for compliance and traceability.
As of , the most-starred Audit-log projects on GitHub are vault (36.4K stars), buzz (36.1K stars) and apollo (29.8K stars). GitHub.Locker tracks 43 Audit-log repositories with 321.1K stars combined. The fastest-growing on October 16 was buzz, with +57 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
+57buzz
block/buzz · ★ 36.1KBuzz is a self-hostable workspace where humans and AI agents share the same rooms. Every message, review, workflow step, and git event is a signed Nostr event in one shared log, on a relay you own.
OpenBot
CopilotKit/OpenBot · ★ 6.6KOpenBot is a self-hosted platform for running AI coworkers that each get a computer of their own (a browser, files, and only the tools you grant), with a policy gateway that decides every action before it happens and logs it afterward.
+37QuantDinger
OpenByteInc/QuantDinger · ★ 12.9KQuantDinger is an open-source, self-hosted AI Trading OS: it lets you research trading ideas with AI, write Python strategies on a Strategy API, backtest them server-side, and run paper or live trading across crypto exchanges and traditional brokers, with web, mobile, API, and MCP access.
infisical
Infisical/infisical · ★ 29.8KInfisical is an open-source security platform teams use to centralize secrets, certificates, and privileged access, with syncing, rotation, and leak prevention built in.
The all-time top
43 projects · by stars
- 36.4K
#1 · hashicorp/vaultvault
Vault is a tool for securely accessing secrets such as API keys, passwords, and certificates, giving you a unified interface with tight access control and detailed audit logging.
- 36.1K
#2 · block/buzzbuzz
Buzz is a self-hostable workspace where humans and AI agents share the same rooms. Every message, review, workflow step, and git event is a signed Nostr event in one shared log, on a relay you own.
- 29.8K
#3 · apolloconfig/apolloapollo
Apollo is a reliable configuration management system. It centrally manages the configurations of different applications and different clusters, and is built for microservice configuration management scenarios.
- 4
infisical
29.8KInfisical/infisical · TypeScriptInfisical is an open-source security platform teams use to centralize secrets, certificates, and privileged access, with syncing, rotation, and leak prevention built in.
- 5
kuboard-press
25.3Keip-work/kuboard-press · ShellKuboard is a free management interface built for Kubernetes (compatible with K8s 1.13+) that turns cluster management into a visual web dashboard. This repo holds the source of its v4 documentation site.
- 6
netbox
21.7Knetbox-community/netbox · PythonNetBox is the open-source source of truth for network infrastructure: it models and documents everything networked — racks, cables, IP addresses — and serves that data to your automation tools.
- 7
suna
20.3Kkortix-ai/suna · TypeScriptKortix (Suna) is an open-source AI Management System — an alternative to Claude Cowork and ChatGPT Work — where your agents, their shared skills, company memory and connectors all live in one git repo that your whole company owns and can audit.
- 8

openfang
18.2KRightNow-AI/openfang · RustOpenFang is an open-source Agent Operating System written in Rust. Instead of a chatbot that waits for your prompt, it runs autonomous agents 24/7 — on schedules, monitoring targets, building knowledge graphs and reporting results to a dashboard.
- 9

edict
17Kcft0808/edict · PythonEdict is a multi-agent orchestration system for OpenClaw: 12 AI agents (11 business roles plus one compatibility agent) work as an ancient Chinese imperial bureaucracy — planning, review, dispatch and parallel execution — with a real-time dashboard and full audit trails.
- 10

casdoor
14.6Kcasdoor/casdoor · GoCasdoor is an open-source, self-hosted identity and access management (IAM) platform: a single sign-on (SSO) and authentication server with a web console that speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and connects to providers like Google Workspace and Azure AD.
- 11

bytebase
14.6Kbytebase/bytebase · GoBytebase is an open-source database governance platform that acts as a control plane between users (humans and AI agents) and databases, governing change management, access control, and compliance so every change and query is reviewed, controlled, and recorded.
- 12

QuantDinger
12.9KOpenByteInc/QuantDinger · PythonQuantDinger is an open-source, self-hosted AI Trading OS: it lets you research trading ideas with AI, write Python strategies on a Strategy API, backtest them server-side, and run paper or live trading across crypto exchanges and traditional brokers, with web, mobile, API, and MCP access.
- 13

utopia
8.4Kdeeplethe/utopia · RustUtopia is an open-source enterprise world model from DeepLethe: a self-hosted knowledge system that turns documents into a bitemporal knowledge graph you can search, chat with and reason over, running entirely on hardware you control.
- 14

grok2api
7.8Kchenyme/grok2api · GoGrok2API is a self-hosted Go gateway that pools multiple Grok Build, Grok Web, and Grok Console accounts and exposes them through unified OpenAI- and Anthropic-compatible APIs, with a built-in React admin dashboard.
- 15
OpenBot
6.6KCopilotKit/OpenBot · TypeScriptOpenBot is a self-hosted platform for running AI coworkers that each get a computer of their own (a browser, files, and only the tools you grant), with a policy gateway that decides every action before it happens and logs it afterward.
- 16
agent-governance-toolkit
6.4Kmicrosoft/agent-governance-toolkit · PythonA toolkit from Microsoft that governs autonomous AI agents in production: it enforces policies on tool calls, verifies agent identity, sandboxes execution, and provides SRE controls like kill switches and SLO monitoring. It covers all 10 of the OWASP Agentic Top 10 risks.
- 17
skillhub
5.2Kiflytek/skillhub · JavaSkillHub is a self-hosted, open-source agent skill registry that lets enterprises publish, version, and govern reusable agent skill packages behind their own firewall.
- 18

turnstone
1.6Kturnstonelabs/turnstone · PythonTurnstone is a self-hosted, local-first orchestration framework that gives LLMs real tools — shell, files, search, web, planning — and runs multi-turn agent conversations across your own cluster.
- 19

openframe-oss-frontend
852flamingo-stack/openframe-oss-frontend · TypeScriptIt's the main web application of the OpenFrame platform — a unified, AI-driven control panel for Managed Service Providers (MSPs), positioned as an open-source replacement for expensive proprietary MSP software.
- 20

anythingmcp
753HelpCode-ai/anythingmcp · TypeScriptAnythingMCP is a self-hosted MCP gateway that turns REST/OpenAPI, SOAP, GraphQL, OData or SQL APIs into MCP tools usable by Claude, ChatGPT and Copilot, shipping with hundreds of ready-made connectors for systems like SAP, ERPs and e-commerce platforms.
- 21

nordef-matrix-open-control
741MORTEN-BUUR/nordef-matrix-open-control · PythonA model-independent safety belt for AI agents: it puts deterministic 0/1/2 policy decisions, Ed25519-signed human approval, replay protection, and a hash-chained evidence log outside the language model itself.
- 22

gitagent
717open-gitagent/gitagent · RustGitagent is a git-native AI agent framework where an agent's identity, rules, memory, tools, and skills all live as version-controlled files inside a git repository, so you can fork an agent, branch its personality, and diff its rules like any other repo.
- 23

bisibility
605CorgiCorner/bisibility · TypeScriptbisibility is an open-source SEO platform for researching keywords, inspecting backlinks, and tracking Google search rankings, with all the data stored in a PostgreSQL database you control.
- 24

trustmebro
533DavidCarliez/trustmebro · GoTrustMeBro is a red-team CLI tool that intercepts command-line tools called by coding agents (like Codex, Claude Code, and pi) through PATH shims, so testers can feed the agent fabricated, modified, or blocked tool output and see how it reacts.
- 25

privacy-preserving-control-plane
425gbenletoluwase/privacy-preserving-control-plane · JavaA Java control plane that bundles four coupled mechanisms for production ML pipelines: forecast-driven autoscaling, zero-shot PII redaction at the point of processing, governed model promotion, and drift/anomaly detection.
- 26

openclaw-enterprise
415openclaw/openclaw-enterprise · JavaScriptOpenClaw Enterprise (OCE) is an open-source, vendor-neutral control plane for deploying and managing AI agents, described by its authors as being like 'Kubernetes for agents'.
- 27

dsh-memory
402FuRongJun-1999/dsh-memory · Pythondsh-memory is a memory plugin for DeepSeek Harness (DSH) that gives AI agents persistent, cross-session memory built on a mostly non-LLM 'white-box' reasoning pipeline, a spatiotemporal knowledge graph, and auditable guardrails. It targets AGI research into self-cognition, continual learning, world models and self-improvement rather than everyday chat memory.
- 28

halofy
319halofyai/halofy · TypeScriptHalofy is an access and governance layer that sits between an organization's knowledge and the AI agents that use it, handling identity, policy, provenance, audit, and signed erasure.
- 29
hivepaas
305hivepaas/hivepaas · GoHivePaaS is a lightweight, self-hosted Platform-as-a-Service built on Docker Swarm, meant as a resource-efficient alternative to Heroku, Render, and Coolify for deploying apps on your own servers.
- 30

ApeAdmin
289KevinLiss/ApeAdmin · PythonApeAdmin is an open-source Python admin backend framework built on FastAPI and Vue3, aimed at modern AI applications. It bundles RBAC permission control and audit logging with a plugin ecosystem and an MCP-SSE gateway that exposes system and plugin capabilities as tools AI agents can call.
- 31
labtether
249labtether/labtether · GoLabTether is a self-hosted control plane that unifies monitoring and control of your homelab (Proxmox, TrueNAS, Docker, Home Assistant, etc.) into one dashboard with remote terminal, remote desktop, alerts, and an AI-operable interface.
- 32

multi-agent-discuss
213sjc88661/multi-agent-discuss · TypeScriptMulti-Agent Workbench is a local-first control room for running several coding agents (like Claude Code and Codex CLI) together under explicit roles, with your approval required before risky actions are taken.
- 33
zilan
200lxcshine/zilan · GoZilan is an LLM-powered knowledge management and Q&A platform that unifies RAG quick Q&A, ReAct agent reasoning, and auto-generated Wiki knowledge distillation into one minimalist knowledge hub.
- 34

cohort-harbor
198lantingzhang1119/cohort-harbor · TypeScriptCohortHarbor is a self-hosted platform that combines employee accounts, onboarding materials, versioned company policies, online learning, exams, automated welcome emails, and private file protection into a single full-stack app, meant for internal deployment and further customization.
- 35

CodeMason
176mufengyuan6/CodeMason · PythonCodeMason (编舟) is an autonomous coding agent in the same class as Claude Code or Cline: it understands a requirement, plans, edits code, verifies the result and delivers it, running the whole loop on its own. It is built around the idea that state is never saved — everything is derived from an append-only event log, so every change can be replayed, rolled back or audited.
- 36
RecallWeave
175Herricka/RecallWeave · RustRecallWeave is a local-first agent memory lifecycle engine: it stores typed memories in an append-only, hash-chained log and handles dedupe, conflict detection, forgetting, compaction and portable export.
- 37

clevis
169nazarli-shabnam/clevis · JavaScriptClevis is a self-hosted dashboard that turns the GitHub API into security and analytics insight for your repositories and organizations — it computes a security score from six automated checks (MFA enforcement, branch protection, secret scanning, Dependabot alerts, code scanning alerts, default-branch force-push protection) and lets admins run privileged maintenance jobs like clearing GitHub Actions caches.
- 38
StarLive
168SMNETSTUDIO/StarLive · TypeScriptStarLive is a self-hosted live-streaming and interaction platform: it handles the video stream, real-time danmaku/gifts/red-packets/lottery, moderation, and a built-in StarCoin virtual-currency economy. It's a rewrite of the legacy LDLive, moving from serverless HTTP polling to a standalone NestJS backend with persistent Socket.IO connections.
- 39

ZizkaDB
145ZIZKA-AI-SL/ZizkaDB · PythonZizkaDB is an audit trail database built for AI agents. It logs every agent decision with a SHA-256 checksum and a causal link back to what caused it, so you can replay sessions and time-travel to see exactly what the agent knew at any past moment, supporting EU AI Act Article 12 record-keeping.
- 40

LoomFlow
141banmu123/LoomFlow · TypeScriptLoomFlow is a lightweight AI-native workflow builder: you describe an idea in natural language, it generates a runnable workflow on a visual canvas, and you can publish that workflow as an HTTP API. It is positioned as an open-source, lightweight alternative to Dify and n8n for individuals and small teams.
- 41

apowerb
121apowerb/apowerb · Pythonapowerb is an open-source platform for building, running and governing AI agents in production, covering multi-agent orchestration, RAG, Text-to-SQL, MCP servers and built-in business tools.
- 42

CanvasTTY
110howdeploy/CanvasTTY · TypeScriptCanvasTTY is an Electron-based spatial desktop that lets you arrange real local terminals and AI-agent CLI sessions (Claude Code, Codex, Grok, Kimi, OpenCode, Hermes) as cards on an infinite, zoomable canvas instead of flat tabs.
- 43

NodePilot
110Sev7eNup/NodePilot · C#NodePilot is an open-source, self-hosted platform for building and running Windows/PowerShell automation workflows, designed as a modern agentless replacement for Microsoft System Center Orchestrator.
Related topics
Often tagged together