Topics / #zero-trust

Zero-trust projects on GitHub

Security architecture that removes implicit trust and verifies every request to network resources.

As of , the most-starred Zero-trust projects on GitHub are API-Security-Checklist (23.3K stars), pangolin (23.1K stars) and cloudflared (16.2K stars). GitHub.Locker tracks 11 Zero-trust repositories with 104.3K stars combined. The fastest-growing on October 16 was nono, with +26 stars in a day.

11Projects
104.3KStars in total
+69Stars in a day
Browse in the catalog →github.com/topics/zero-trust ↗

Hot right now

Most stars gained in a day · Oct 16

+26

nono

nolabs-ai/nono · ★ 4.5K

nono is a zero-setup, zero-latency sandbox that runs AI coding agents (Claude Code, Codex, OpenCode, etc.) with least-privilege access, so they can't touch your SSH keys, cloud credentials, or the rest of your disk by default.

+12

cloudflared

cloudflare/cloudflared · ★ 16.2K

cloudflared is the command-line client for Cloudflare Tunnel — a daemon that proxies traffic from Cloudflare's network to your origin server, so client requests reach you without opening any ports on your firewall.

+10

box

strands-agents/box · ★ 417

Box is an open-source sandbox for running AI agents that restricts what they can execute, read, write, and reach on the network, combining OS-level isolation with a policy engine (Dogwood) and credential injection so secrets never reach the agent.

+7

pangolin

fosrl/pangolin · ★ 23.1K

Pangolin is an open-source SASE (Secure Access Service Edge) platform built on WireGuard that unifies a zero-trust VPN, reverse proxy, privileged access management, and an identity-aware AI gateway under one identity and policy model.

The all-time top

11 projects · by stars

  1. #1 · shieldfy/API-Security-Checklist

    API-Security-Checklist

    A community checklist of the most important security countermeasures to apply when designing, testing, and releasing an API — a list of checkboxes you run through before shipping.

    23.3K
  2. #2 · fosrl/pangolin

    pangolin

    Pangolin is an open-source SASE (Secure Access Service Edge) platform built on WireGuard that unifies a zero-trust VPN, reverse proxy, privileged access management, and an identity-aware AI gateway under one identity and policy model.

    23.1K
  3. #3 · cloudflare/cloudflared

    cloudflared

    cloudflared is the command-line client for Cloudflare Tunnel — a daemon that proxies traffic from Cloudflare's network to your origin server, so client requests reach you without opening any ports on your firewall.

    16.2K
  1. 4

    opennhp

    13.9KOpenNHP/opennhp · Go

    OpenNHP is a lightweight, cryptography-powered, open-source Zero Trust toolkit: it hides server ports, IP addresses, and domain names so your infrastructure stays invisible until a client is cryptographically authorized.

  2. 5

    netmaker

    11.8Kgravitl/netmaker · Go

    Netmaker is a tool that automates creating and managing virtual networks (mesh VPNs, remote access gateways, site-to-site links) using WireGuard.

  3. 6

    agent-governance-toolkit

    6.4Kmicrosoft/agent-governance-toolkit · Python

    A toolkit from Microsoft that governs autonomous AI agents in production: it enforces policies on tool calls, verifies agent identity, sandboxes execution, and provides SRE controls like kill switches and SLO monitoring. It covers all 10 of the OWASP Agentic Top 10 risks.

  4. 7

    nono

    4.5Knolabs-ai/nono · Rust

    nono is a zero-setup, zero-latency sandbox that runs AI coding agents (Claude Code, Codex, OpenCode, etc.) with least-privilege access, so they can't touch your SSH keys, cloud credentials, or the rest of your disk by default.

  5. 8

    dingtalk-workspace-cli

    3.7KDingTalk-Real-AI/dingtalk-workspace-cli · Go

    DingTalk Workspace CLI (dws) is DingTalk's official cross-platform command-line tool that brings the full suite of DingTalk product capabilities (chat, calendar, aitable, and more) into a single CLI, built for both human operators and AI agents.

  6. 9

    enterprise-system-design

    642DrHazemAli/enterprise-system-design

    This is a source-grounded engineering course and architectural reference for designing enterprise systems that survive real traffic, partial failure, security review, and changing requirements, covering distributed systems, AI workloads, cybersecurity, reliability, cloud, HPC, and edge infrastructure built on Azure.

  7. 10

    box

    417strands-agents/box · Rust

    Box is an open-source sandbox for running AI agents that restricts what they can execute, read, write, and reach on the network, combining OS-level isolation with a policy engine (Dogwood) and credential injection so secrets never reach the agent.

  8. 11

    jarviscore-framework

    189Prescott-Data/jarviscore-framework · Python

    JarvisCore is a Python framework for building AI agent systems that can plan, reason, execute code, browse the web, search the internet, and connect to 150 external services out of the box.

Often tagged together