Topics / #iam

Iam projects on GitHub

Identity and access management frameworks controlling who can do what in systems.

As of , the most-starred Iam projects on GitHub are better-auth (30.4K stars), authentik (26K stars) and casbin (20.5K stars). GitHub.Locker tracks 16 Iam repositories with 170.8K stars combined. The fastest-growing on October 18 was better-auth, with +21 stars in a day.

16Projects
170.8KStars in total
+48Stars in a day
Browse in the catalog →github.com/topics/iam ↗

Hot right now

Most stars gained in a day · Oct 18

+21

better-auth

better-auth/better-auth · ★ 30.4K

It's Better Auth — a free, open-source authentication and authorization framework for TypeScript with a plugin ecosystem for advanced features.

+11

authentik

goauthentik/authentik · ★ 26K

authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

+7

prowler

prowler-cloud/prowler · ★ 15.1K

Prowler is an open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes, M365, GitHub, and many other providers.

+3

casdoor

casdoor/casdoor · ★ 14.6K

Casdoor is an open-source, self-hosted identity and access management (IAM) platform: a single sign-on (SSO) and authentication server with a web console that speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and connects to providers like Google Workspace and Azure AD.

The all-time top

16 projects · by stars

  1. #1 · better-auth/better-auth

    better-auth

    It's Better Auth — a free, open-source authentication and authorization framework for TypeScript with a plugin ecosystem for advanced features.

    30.4K
  2. #2 · goauthentik/authentik

    authentik

    authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

    26K
  3. #3 · apache/casbin

    casbin

    An open-source access control library for Go projects: it enforces authorization based on configurable models like ACL, RBAC and ABAC.

    20.5K
  1. 4

    prowler

    15.1Kprowler-cloud/prowler · Python

    Prowler is an open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes, M365, GitHub, and many other providers.

  2. 5

    casdoor

    14.6Kcasdoor/casdoor · Go

    Casdoor is an open-source, self-hosted identity and access management (IAM) platform: a single sign-on (SSO) and authentication server with a web console that speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and connects to providers like Google Workspace and Azure AD.

  3. 6

    awesome-aws

    14.2Kdonnemartin/awesome-aws · Python

    Awesome AWS is a curated list of AWS resources - official and community SDKs, CLI tools, open source repos, guides, books, blogs, and training material - organized by language and AWS service.

  4. 7

    kratos

    13.9Kory/kratos · Go

    An open source, API-first identity and user management server for cloud-native apps: it centralizes login, registration, recovery, verification, and profile management so your app doesn't reimplement them.

  5. 8

    ubicloud

    12.3Kubicloud/ubicloud · Ruby

    Ubicloud is an open source cloud platform that runs on bare metal servers, offering elastic compute, non-replicated block storage, firewall and load balancer, managed Postgres, Kubernetes, AI inference, and IAM services as an open alternative to AWS.

  6. 9

    cas

    11.4Kapereo/cas · Java

    CAS (Central Authentication Service) is an enterprise multilingual identity provider and single sign-on server for the web: an open-source Java platform for centralizing authentication and authorization.

  7. 10

    chalice

    11.1Kaws/chalice · Python

    Chalice is a Python framework for writing serverless apps: you write ordinary Python functions, and it creates and deploys the AWS Lambda functions and REST APIs behind them.

  8. 11

    openclaw-enterprise

    419openclaw/openclaw-enterprise · JavaScript

    OpenClaw Enterprise (OCE) is an open-source, vendor-neutral control plane for deploying and managing AI agents, described by its authors as being like 'Kubernetes for agents'.

  9. 12

    k8scout

    258k8scout/k8scout · Go

    k8scout is a single-binary tool you drop into a compromised Kubernetes pod to automatically map every realistic attack path from that foothold to cluster-admin, node escape, secret theft, or cloud IAM takeover.

  10. 13

    cynative

    223cynative/cynative · Go

    Cynative is an open-source AI agent framework that gives LLMs live, read-only access to your AWS, Azure, GCP, Kubernetes, GitHub and GitLab infrastructure so you can ask security questions and run cloud security posture and detection checks.

  11. 14

    forge

    213cisco-open/forge · HCL

    ForgeMT is an open-source platform from Cisco for running self-hosted GitHub Actions runners on your own AWS accounts — ephemeral EC2 runners and Kubernetes ARC runner scale sets, operated as code across many tenant repos.

  12. 15

    GDecay

    196shivanipoddariiith/GDecay · Python

    GrantDecay is a CLI tool that finds privilege that was granted but never used. It compares an entitlement export (who holds which permissions) against an access log export covering a time window, then reports unused permissions, narrowable roles, dormant principals, and ungranted use.

  13. 16

    GrantDecay

    127rojiloro/GrantDecay · Python

    GrantDecay is a CLI that compares what each principal was granted against what it actually used over an observation window, and reports unused permissions, narrowable roles, dormant principals, and ungranted use.

Often tagged together