Security

72 projects

This category covers security libraries and tools written in Go: file and data encryption, TLS certificate automation, web application firewalls, HTTP security middleware, handling secrets in memory, supply chain and vulnerability scanning, and offensive tools such as honeypots and stream scanners. Go's standard crypto packages, maintained by the Go team, are well regarded, so many entries build on them rather than replacing them.

FiloSottile's age is a simple file encryption tool and library with small explicit keys, widely used as a modern alternative to PGP for encrypting files. For TLS certificates, go-acme/lego is an ACME client library and CLI supporting many DNS providers, and CertMagic, used by the Caddy server, manages certificates automatically inside your program. Coraza is a WAF library compatible with ModSecurity rules and the OWASP Core Rule Set. unrolled/secure adds security headers to net/http. memguard protects sensitive values in memory. Google's osv-scanner checks dependencies against the OSV vulnerability database, and SafeDep's vet flags malicious packages.

Use the standard library and golang.org/x/crypto for primitives, and avoid writing your own cryptography. For HTTPS, golang.org/x/crypto/acme/autocert covers simple cases and CertMagic or lego cover the rest. Run govulncheck, which reports only vulnerabilities your code reaches, and osv-scanner in CI to catch known issues in dependencies, and keep the Go toolchain itself updated, since security fixes to the standard library ship in minor releases.

ageby FiloSottile

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

filippo.io/ageGo 1.25+ 8 dependenciesv1.3.2updated 2mo ago

24.2k

osv-scannerby google

Vulnerability scanner written in Go which uses the data provided by OSV.

github.com/google/osv-scanner/v2Go 1.27+ 28 dependenciesv2.7.0updated 1d ago

11.4k

legoby go-acme

Pure Go ACME client library and CLI tool (for use with Let's Encrypt).

github.com/go-acme/lego/v5Go 1.26+ 96 dependenciesv5.6.0updated today

10k

CertMagicby caddyserver

Mature, robust, and powerful ACME client integration for fully-managed TLS certificate issuance and renewal.

github.com/caddyserver/certmagicGo 1.26+ 11 dependenciesv0.25.6updated 1mo ago

5.6k

Cameradarby Ullaakut

Tool and library to remotely hack RTSP streams from surveillance cameras.

github.com/Ullaakut/cameradar/v6Go 1.26+ 12 dependenciesv6.2.1updated 6d ago

5.3k

Corazaby corazawaf

Enterprise-ready, modsecurity and OWASP CRS compatible WAF library.

github.com/corazawaf/coraza/v3Go 1.26+ 14 dependenciesv3.8.1updated 3d ago

4k

memguardby awnumar

A pure Go library for handling sensitive values in memory.

github.com/awnumar/memguardGo 1.25+ 4 dependenciesv0.23.0updated 5mo ago

2.8k

secureby unrolled

HTTP middleware for Go that facilitates some quick security wins.

github.com/unrolled/secureGo 1.13+ No dependencies v1.17.0updated 23d ago

2.4k

beelzebubby mariocandela

A secure low code honeypot framework, leveraging AI for System Virtualization.

github.com/beelzebub-labs/beelzebub/v3Go 1.26+ 16 dependenciesv3.10.0updated 5d ago

2.2k

acmetoolby hlandau

ACME (Let's Encrypt) client tool with automatic renewal.

v0.0.67updated 3y ago

2.1k

themisby cossacklabs

High-level cryptographic library for solving typical data security tasks (secure data storage, secure messaging, zero-knowledge proof authentication), available for 14 languages, best fit for multi-platform apps.

0.15.7updated 6mo ago

2k

acraby cossacklabs

Network encryption proxy to protect database-based applications from data leaks: strong selective encryption, SQL injections prevention, intrusion detection system.

github.com/cossacklabs/acraGo 1.23+ 31 dependencies0.96.0updated 6mo ago

1.5k

SafeDep/vetby safedep

Protect against malicious open source packages.

github.com/safedep/vet/v2Go 1.27+ 41 dependenciesv1.20.0updated 1d ago

1.1k

dongleby golang-module

A simple, semantic and developer-friendly golang package for encoding&decoding and encryption&decryption.

github.com/dromara/dongleGo 1.23+ 2 dependenciesv1.3.0updated 14d ago

1.1k

caddy-wafby fabriziosalmi

Web Application Firewall middleware for the Caddy server, with a regex rule engine, anomaly scoring, IP/DNS/ASN/country blacklists and rate limiting.

github.com/fabriziosalmi/caddy-wafGo 1.26+ 7 dependenciesv0.4.16updated 2d ago

882

boosterby anatol

Fast initramfs generator with full-disk encryption support.

github.com/anatol/boosterGo 1.26+ 22 dependencies0.13updated 7d ago

685

go-password-validatorby lane-c-wagner

Password validator based on raw cryptographic entropy values.

github.com/wagslane/go-password-validatorGo 1.16+ No dependencies updated 4y ago

592

naclby kevinburke

Go implementation of the NaCL set of API's.

github.com/kevinburke/naclGo 1.25+ 3 dependenciesupdated 3mo ago

551

ssh-vault

Encrypt/decrypt using ssh keys.

1.3.9updated 8d ago

511

teler-wafby kitabisa

Teler-waf is a Go HTTP middleware that provide teler IDS functionality to protect against web-based attacks and improve the security of Go-based web applications. It is highly configurable and easy to integrate into existing Go applications.

github.com/teler-sh/teler-wafGo 1.22+ 24 dependenciesv1.0.0updated 1y ago

407

go-yaraby hillu

Go Bindings for YARA, the "pattern matching swiss knife for malware researchers (and everyone else)".

github.com/hillu/go-yara/v4Go 1.10+ No dependencies updated 1y ago

390

optimus-goby pjebs

ID hashing and Obfuscation using Knuth's Algorithm.

github.com/pjebs/optimus-goNo dependencies updated 6y ago

368

firewalld-restby prashantgupta24

A rest application to dynamically update firewalld rules on a linux server.

github.com/prashantgupta24/firewalld-restGo 1.14+ 2 dependenciesv1.1.0updated 2y ago

344

BadActorby jaredfolkins

In-memory, application-driven jailer built in the spirit of fail2ban.

github.com/jaredfolkins/badactorGo 1.14+ No dependencies updated 6y ago

328

go-peerby number571

A software library for creating secure and anonymous decentralized systems.

github.com/number571/go-peerGo 1.25+ 4 dependenciesv1.7.18updated 24d ago

327

passlibby hlandau

Futureproof password hashing library.

updated 5y ago

289

FCaptchaby WebDecoy

Self-hosted CAPTCHA server and Go client that detects bots, AI agents, and headless browsers through behavioral analysis and proof of work.

github.com/WebDecoy/FCaptchaGo 1.23+ No dependencies v1.46.1updated today

231

simple-scryptby elithrar

Scrypt package with a simple, obvious API and automatic cost calibration built-in.

github.com/elithrar/simple-scryptGo 1.21+ 1 dependencyv1.4.1updated 2mo ago

204

urusaiby calpa

Urusai ("noisy" in Japanese) is a Go implementation of a random HTTP/DNS traffic noise generator that helps protect privacy by creating digital smokescreens while browsing.

github.com/calpa/urusaiGo 1.22+ No dependencies v1.1.1updated 3mo ago

183

pii-shield

Zero-code log sanitization sidecar for Kubernetes that redacts PII from logs.

github.com/pii-shield/pii-shield/v2Go 1.26+ 2 dependenciesv3.0.0updated today

178

luks.goby anatol

Pure Golang library to manage LUKS partitions.

github.com/anatol/luks.goGo 1.26+ 9 dependenciesupdated 4mo ago

99

fortby djadmin

Audits macOS security settings across 16 checks, reports a score, and fixes issues where it safely can. Single binary, installable via Homebrew.

github.com/djadmin/fortGo 1.24+ 1 dependencyv0.3.2updated 3mo ago

82

passwapby zitadel

Provides a unified implementation between different password hashing algorithms

github.com/zitadel/passwapGo 1.25+ 1 dependencyv0.12.1updated 12d ago

78

acme-proxyby esnet

Solve ACME http-01 challenge without opening port 80 to the internet, obtain certs from an external certificate authority.

github.com/esnet/acme-proxyGo 1.25+ 7 dependenciesv0.7.1updated 9d ago

70

goSecretBoxPasswordby dwin

A probably paranoid package for securely hashing and encrypting passwords.

github.com/dwin/goSecretBoxPassword2 dependenciesv1.1.0updated 5mo ago

61

go-generate-passwordby m1

Password generator that can be used on the cli or as a library.

github.com/m1/go-generate-passwordGo 1.18+ 2 dependenciesv0.2.0updated 4y ago

57

go-htpasswdby tg123

Apache htpasswd Parser for Go.

github.com/tg123/go-htpasswdGo 1.24+ 3 dependenciesv1.2.5updated 3mo ago

49

procscopeby Mutasem-mk4

Process-scoped runtime investigator using eBPF to trace process lifecycle, file activity, and network connections.

github.com/Mutasem-mk4/procscopeGo 1.26+ 6 dependenciesv1.1.2updated 29d ago

46

deidentifyby aliengiraffe

Deterministic, format-preserving removal of personally identifiable information from text and structured data.

github.com/aliengiraffe/deidentifyGo 1.24+ No dependencies v1.0.4updated 2mo ago

41

y509by kanywst

TUI for X.509 certificate chains that reports whether a chain verifies and, separately, whether a server served it correctly.

github.com/kanywst/y509Go 1.27+ 13 dependenciesv1.14.0updated today

40

certificatesby mvmaasakkers

An opinionated tool for generating tls certificates.

github.com/mvmaasakkers/certificatesGo 1.18+ 4 dependenciesv0.7.2updated 3y ago

38

secureioby xaionaro-go

An keyexchanging+authenticating+encrypting wrapper and multiplexer for io.ReadWriteCloser based on XChaCha20-poly1305, ECDH and ED25519.

v0.1archived

34

secretby rsjethani

Prevent your secrets from leaking into logs, std* etc.

github.com/rsjethani/secret/v3Go 1.16+ No dependencies v3.0.1updated 2y ago

33

sslmgrby adrianosela

SSL certificates made easy with a high level wrapper around acme/autocert.

github.com/adrianosela/sslmgrGo 1.23+ 4 dependenciesv1.0.1updated 1y ago

33

Crenoxby crenoxhq

Zero-dependency pre-commit secret scanner using Aho-Corasick for high-performance credentials leak detection.

github.com/crenoxhq/crenox/v2Go 1.23+ 3 dependenciesv2.1.11updated 3d ago

31

nurago/pkg/redactby tecnickcom

Removes secrets from log lines and HTTP dumps in a single pass, covering headers, JSON, XML, URL-encoded data, JWTs, PEM keys, and vendor tokens.

github.com/tecnickcom/nurago/pkg/redactGo 1.26+ v1.156.5updated today

26

argon2-hashingby andskur

Light wrapper around Go's argon2 package that closely mirrors with Go's standard library Bcrypt and simple-scrypt package.

github.com/andskur/argon2-hashingGo 1.23+ 1 dependencyupdated 1y ago

25

goArgonPassby dwin

Argon2 password hash and verification designed to be compatible with existing Python and PHP implementations.

v1.2.1archived

20

Razifyby Hossiy21

CLI to scan, validate and audit.env files for leaked secrets and environment drift.

github.com/Hossiy21/razifyGo 1.25+ 3 dependenciesv1.0.0updated 3mo ago

20

leakhoundby nilpoona

Static analysis tool to detect accidental logging of sensitive struct fields, preventing data leaks in logs.

github.com/nilpoona/leakhoundGo 1.26+ 1 dependencyv1.3.0updated 2mo ago

18

qrandby bitfield

Client for the ANU Quantum Numbers (AQN) API, providing quantum-mechanically secure random data.

github.com/bitfield/qrandGo 1.13+ 1 dependencyupdated 2y ago

18

multikeyby adrianosela

An n-out-of-N keys encryption/decryption framework based on Shamir's Secret Sharing algorithm.

github.com/adrianosela/multikeyGo 1.20+ 1 dependencyv1.0.0updated 2y ago

13

veilby getveil

Local HTTPS proxy that hides API credentials from AI coding agents. OS keychain integration, format-aware placeholders, SQLite audit log.

github.com/getveil/veilGo 1.26+ 12 dependenciesv0.2.0updated 5mo ago

10

aes-ctr-drbgby sixafter

A Deterministic Random Bit Generator based on AES in Counter mode (AES-CTR-DRBG) as specified in NIST SP 800-90A.

github.com/sixafter/aes-ctr-drbgGo 1.27+ 2 dependenciesv1.21.0updated 4d ago

9

secretgeneratorby rafaelperoco

CSPRNG-backed credential generator with a versioned JSON schema for passwords, passphrases, secrets, API keys, and PINs.

github.com/rafaelperoco/secretgeneratorGo 1.23+ 2 dependenciesv2.1.0updated 3d ago

9

caneryby rluders

Minimal, stateless authorization engine with a pluggable evaluation model.

github.com/rluders/canery/v2Go 1.24+ No dependencies v2.0.0updated 10d ago

8

Interpolby avahidi

Rule-based data generator for fuzzing and penetration testing.

github.com/avahidi/interpolGo 1.13+ No dependencies updated 1y ago

8

encidby bobg

Encode and decode encrypted integer IDs.

github.com/bobg/encid/v2Go 1.26+ 7 dependenciesv2.3.1updated 22d ago

7

entpassgenby andreimerlescu

Entropy Password Generator with extensive command line arguments to generate random strings securely including digits, passwords, and passwords built using obscure dictionary words mixed with symbols and digits.

github.com/andreimerlescu/entpassgenGo 1.22+ No dependencies v1.1.0updated 6mo ago

7

dotlockby ahmadraza100

Encrypted.env vault manager with interactive TUI for managing secrets across multiple environments and profiles.

github.com/ahmadraza100/dotlockGo 1.24+ 6 dependenciesv0.1.0-alphaupdated 5mo ago

4

PwnedCheckby mohamedation

Command-line tool to check passwords against Have I Been Pwned breaches, with Bitwarden export support.

github.com/mohamedation/PwnedCheckGo 1.25+ 2 dependenciesv1.0.1updated 21d ago

4

gost-cryptoby rekurt

Go library for Russian GOST cryptographic standards (digital signatures, Streebog hash, Kuznechik cipher, MGM AEAD) backed by OpenSSL gost-engine.

github.com/rekurt/gost-cryptoGo 1.22+ No dependencies v0.3.0updated 1mo ago

2

mcprobeby tamish560

Security scanner for MCP servers with prompt injection detection, tool shadowing, and SARIF output.

github.com/tamish560/mcprobeGo 1.23+ No dependencies v0.1.0updated 3mo ago

2

pmby nicola-strappazzon

Unix-style password manager written in Go to save your data with OpenPGP encryption.

github.com/nicola-strappazzon/password-managerGo 1.24+ 9 dependenciesv0.13.0updated 1mo ago

2

redactby alesr

Redact sensitive information from slog-based logs using a configurable pipeline.

github.com/alesr/redactGo 1.26+ 1 dependencyv0.1.0updated 1mo ago

2

certifierby 0x524a

Library and CLI for generating and validating X.509 certificates, certificate authorities, CRLs, and OCSP responses.

github.com/0x524a/certifierGo 1.25+ 4 dependenciesv1.0.0updated 15d ago

1

grimby ijin82

Fast and secure CLI tool for managing encrypted Markdown note vaults in volatile memory.

github.com/ijin82/grimGo 1.26+ 5 dependenciesv0.1.8updated 1mo ago

1

gspyby Mutasem-mk4

Forensic goroutine-to-syscall inspector for live Go processes.

github.com/Mutasem-mk4/gspyGo 1.26+ 4 dependenciesv0.2.3updated 23d ago

1

mistby iSerganov

Asymmetric-key audio steganography library that hides encrypted messages inside compressed audio using X25519 and ChaCha20-Poly1305.

github.com/iSerganov/mistGo 1.27+ 8 dependenciesv1.2.0updated 21d ago

1

coraza-rule-validatorby stardothosting

Standalone CLI tool to validate ModSecurity and Coraza SecLang WAF rules before production deployment.

github.com/stardothosting/coraza-rule-validatorGo 1.25+ 1 dependencyv1.0.0updated 5d ago

0

acopw-go

Small cryptographically secure password generator package for Go.

sr.ht

autocert

Auto provision Let's Encrypt certificates and start a TLS server.

pkg.go.dev

About this site
Esc

Type to search every entry. ↑↓ to move, Enter to open.