Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with mtls

A curated list of projects in awesome lists tagged with mtls .

https://github.com/johanbrandhorst/certify

Automatic client and server certificate distribution and maintenance

acmpca aws certificate cfssl go golang mtls tls vault

Last synced: 12 Apr 2025

https://github.com/otterize/intents-operator

Manage network policies, AWS, GCP & Azure IAM policies, Istio Authorization Policies, and Kafka ACLs in a Kubernetes cluster with ease.

acl auth authentication authorization controller go golang hacktoberfest ibac intents kafka kubernetes mtls networkpolicies operator otterize zero-trust

Last synced: 11 May 2025

https://github.com/damienbod/aspnetcorecertificates

Certificate Manager in .NET Core for creating and using X509 certificates

aspnet-core certificate dotnet mtls pki ssl tls x509

Last synced: 15 May 2025

https://github.com/damienbod/AspNetCoreCertificates

Certificate Manager in .NET Core for creating and using X509 certificates

aspnet-core certificate dotnet mtls pki ssl tls x509

Last synced: 09 Apr 2025

https://github.com/fuomag9/caddy-proxy-manager

The modern web interface for Caddy Server. WAF protection, automatic HTTPS, mTLS, forward auth, geo blocking, L4 TCP/UDP proxying, traffic analytics, a full REST API, and a complete audit trail. All in one place.

caddy geoblock http mtls proxy quic reverse-proxy tcp waf web

Last synced: 01 Jul 2026

https://github.com/julie-ng/nodejs-certificate-auth

Demo for Client Certificate Authentication with Node.js Tutorial

authentication client-cert-authentication demo mtls mutual-tls openssl tutorial

Last synced: 16 Jun 2025

https://github.com/johanbrandhorst/grpc-auth-example

Examples of client authentication with gRPC

authentication authorization client grpc jwt mtls

Last synced: 30 Apr 2025

https://github.com/przemek-nowicki/node-express-template.ts

NET.ts - node express template built on TypeScript that follows the top-ranked practices from the https://github.com/goldbergyoni/nodebestpractices :zap:

boilerplate-template express express-template express-typescript mongo mongo-database mongo-db mongodb mtls mutual-tls node node-express-boilerplate node-express-typescript node-template node-typescript node-typescript-boilerplate nodejs typescript

Last synced: 28 Jul 2025

https://github.com/c2fmzq/tlsproxy

TLSPROXY is a TLS termination proxy that provides automatic TLS encryption for various network services. It supports SSO, client authentication, and can act as a web server or reverse proxy.

ech golang http3 lets-encrypt mtls oidc passkey passkeys pki quic reverse-proxy security self-hosted sso tls-proxy tlspassthrough tpm

Last synced: 11 Feb 2026

https://github.com/smallstep/hello-mtls

:wave: Docs demonstrating mutual TLS configurations in various technologies

certificate documentation golang mtls ngnix node-js postgres

Last synced: 17 Mar 2025

https://github.com/picatz/terraform-google-nomad

📗 Terraform Module for Nomad clusters with Consul on GCP

acls consul consul-connect gcp mtls nomad packer ssh terraform

Last synced: 22 Apr 2025

https://github.com/quicsec/quicsec

HTTP/3-enable existing HTTP apps. Leverage HTTP3 native features and auto-enable workload identity (SPIFFE), AuthN (mTLS/x509, OIDC/Auth0-Okta), AuthZ (OPA), defense-in-depth (WAAP/WAF), and observability (metrics, logs, alerting, dashboard).

auth0 authentication cert-manager cloud-native grafana http http3 kubernetes loki metrics mtls oidc okta open-policy-agent prometheus quic security spiffe waf zero-trust

Last synced: 12 Apr 2025

https://github.com/aurae-runtime/auraed

Secure mTLS and gRPC backed runtime daemon. Alternative to systemd. Written in Rust.

daemon grpc mtls rust

Last synced: 17 Jul 2025

https://github.com/acuvity/minibridge

Make your MCP servers secure and production ready

acuvity mcp mcp-server modelcontextprotocol mtls security

Last synced: 21 Jan 2026

https://github.com/nothinux/octo-proxy

🐙 Simple TCP/TLS Proxy support mutual authentication and traffic mirroring

golang monitoring mtls proxy reverse-proxy tcp tcp-proxy tls traffic-mirroring

Last synced: 14 Jan 2026

https://github.com/nothinux/certify

:lock: Create private CA and Issue Certificates without hassle

certificate certificate-authority go golang mtls tls

Last synced: 28 Jan 2026

https://github.com/islishude/grpc-mtls-example

grpc mTLS example

grpc grpc-go mtls tls

Last synced: 14 Jan 2026

https://github.com/maxlambrecht/rust-spiffe

A collection of crates for SPIFFE workload identity, Workload API clients, SPIRE-specific APIs, and TLS integration.

authentication mtls rust security spiffe spire tls workload-identity

Last synced: 11 May 2026

https://github.com/gamussa/kuma4devs

Service Mesh for the Developer (with examples using Kuma Mesh kuma.io)

java kotlin mtls observability service-mesh zero-trust

Last synced: 25 Jun 2025

https://github.com/icedevml/tinypki

Live index of all X.509 Certificates in Step CA queryable via GUI and API, easy human onboarding with in-browser CSR generation.

certificate-authority mtls x509

Last synced: 14 May 2026

https://github.com/crabtree/mtls-transmitter

Reverse proxy injecting client certificate for mTLS communication

certificate golang hacktoberfest mtls mutual-tls proxy reverse-proxy ssl tls tls-proxy

Last synced: 30 Oct 2025

https://github.com/aurae-runtime/environment

Distributed Systems Runtime. Core workspace and top level environment.

containers distributed-systems kernel microvms mtls networking runtime rust security

Last synced: 17 Jul 2025

https://github.com/cloudflare/access-crl-worker-template

A worker that can be used for doing basic CRL checks. It assumes that the request has gone through Access MTLS.

cloudflare-access cloudflare-workers mtls

Last synced: 20 Oct 2025

https://fortunen.github.io/kete/

Keycloak Events To Everywhere is a flexible, high-performance Keycloak extension that streams matched events to various destinations, in various formats.

amqp audit event-streaming events extension http kafka keycloak listener mqtt mtls observability spi tls

Last synced: 08 Mar 2026

https://github.com/mehrdadrad/gping

ping from remote host through gRPC

golang grpc mtls ping

Last synced: 09 Mar 2026

https://github.com/andifalk/client-certificate-demo

Demo for client/server certificate authentication using TLS (Mutual TLS)

java mtls mutual-tls spring-boot spring-security ssl tls x509-auth

Last synced: 12 Apr 2025

https://github.com/x-mod/tlsconfig

more convenient package to create tls.Config

mtls tls-certificate

Last synced: 12 Jan 2026

https://github.com/mohammed90/caddy-zero-trust-tls-everywhere

Example of zero-trust architecture with Caddy Server

caddy caddyserver devsecops infrastructure mtls tls zero-trust

Last synced: 23 Jan 2026

https://github.com/wuxxin/infra-shared

Software Defined Git Operated Infrastructure

butane coreos fcos gitops iaas mtls pulumi python

Last synced: 20 Mar 2025

https://github.com/denismurphy/secure-https-client-mtls

HTTPS client implementation in C using mutual TLS (mTLS) authentication.

c client-certificate-authentication cmake https mbedtls mtls

Last synced: 07 Mar 2026

https://github.com/getvictor/mtls

Examples for using and implementing mutual TLS (mTLS).

certificates cybersecurity golang hello-world keychain keystore macos mtls tsl windows

Last synced: 26 Jul 2025

https://github.com/bancodobrasil/api-mtls-ambassador-gateway

Ambassador Docker container used to authenticate using mTLS communication as client (request) between microservices

ambassador ambassador-gateway docker mtls mtls-authentication mtls-request

Last synced: 28 Feb 2026

https://github.com/atorrescogollo/mtlsocks5

Transparent SOCKS5 proxy implementation over mTLS

forward-proxy go golang mtls proxy proxy-server socks5 socks5-proxy

Last synced: 18 Jan 2026

https://github.com/crcsmnky/service-mush

Service Mush: Debugging Istio Deployments

istio kubernetes microservices mtls security telemetry traffic

Last synced: 26 Mar 2025

https://github.com/scitrera/aether

AI Agent Rapid Development Fabric

acl agentic-ai ai durable-execution grpc mtls

Last synced: 28 May 2026

https://github.com/moresec-io/conduit

A transparent proxy mesh. 一个透明代理网格，为你集群间安全保驾护航！

iptables mesh-networks mtls security tls tob transparent-proxy

Last synced: 12 Jan 2026

https://github.com/kevinpollet/k8s-tunnel

Example of a secured mTLS tunnel between two Kubernetes clusters.

clusters k8s mtls tunnel

Last synced: 19 May 2026

https://github.com/sap-samples/cf-autoscaler-custom-metrics-mtls

Sample Golang app that demonstrates the use of the custom metrics feature in Application Autoscaler using mTLS authentication.

application-autoscaler cloud-foundry custom-metrics golang mtls sample sample-code sap-btp

Last synced: 29 Aug 2025

https://github.com/ghdwlsgur/mutual-tls-in-go

💻 코드로 확인하는 mTLS

mtls

Last synced: 03 Nov 2025

https://github.com/achetronic/tunnel

Expose private Kubernetes services to the internet in a simple, fast, secure and reliable way.

envoy kubernetes load-balancer mtls private-tunnel tcp tls tunnel udp wireguard

Last synced: 26 Jun 2026

https://github.com/arthurtsang/rsocket-mtls-demo

a demo using rsocket to communicate between two spring boot services with mutual TLS & CRL, JWT for authentication, protobuf for serializion, cloudevents for routing and rabbitmq for event queue

cloudevents crl jws jwt jwt-authentication mtls mtls-authentication protobuf rabbitmq rsocket springboot

Last synced: 15 Apr 2026

https://github.com/robgrame/intune-device-actions

Serverless self-service Intune device action API (wipe, autopilot-register, bitlocker). Azure Functions (.NET 10, capability-plugin architecture) + Service Bus + mTLS client cert + Microsoft Graph. Includes Bicep IaC and PowerShell 5.1 client.

azure azure-functions bicep device-management dotnet dotnet10 entra-id infrastructure-as-code intune managed-identity mdm microsoft-graph microsoft-intune mtls powershell security serverless storage-queue

Last synced: 07 Jun 2026

https://github.com/tpokki/mtls-proxy

Small utility that starts local http server, and forwards all requests to remote endpoint that requires mTLS authentication.

mtls mtls-authentication mtls-request proxy proxy-server

Last synced: 17 Jan 2026

https://github.com/wendlerqueiroz/enliven-ai-agent

Build an enterprise-level AI agent operating system enabling cross-departmental and cross-system intelligent collaboration.

ai autonomous-agents enterprise-ai erp-integration iec-62443 industrial-ai iso-27001 modbus mtls multi-agent-system nist-compliance opc-ua sap-s4hana zero-trust

Last synced: 06 Apr 2025

https://github.com/abliqo/mtls-echo

Mutual TLS Echo Server

mtls x509

Last synced: 14 Apr 2025

https://github.com/jeamon/demo-mtls

This is a cross-platform go tool to demonstrate the implementation of mTLS (Mutual TLS) and how useful it can be to setup authorization on top of TLS certificate - known as Certificate Bound Token. This program could be run into client or server mode. All certificates (for root & clients CAs, server and clients) are auto generated.

go golang https-client https-server mtls mtls-authentication tls-certificate

Last synced: 11 Mar 2025

https://github.com/adarsh-kmt/distributionserver

DistributionServer is used to route messages and other information between users connected to different end servers that run on different containers.

go grpc mtls redis

Last synced: 04 Apr 2026

https://github.com/xxmrk888ytxx/portal-android

Portal is a secure, open-source smart key that turns your Android smartphone into a wireless authentication tool for your computer. It enables instant PC unlocking via Bluetooth (RFCOMM) or WiFi (WebSockets), featuring biometric protection, Wake-on-LAN support, and a privacy-focused, local-only communication model.

android bluetooth kotlin mtls security windows

Last synced: 31 May 2026

https://github.com/augusto11cb/security-studies

Repository of notes and comments on Software Security and its fundamental concepts

asymmetric-cryptography authentication authorization csrf mtls multi-factor-authentication oauth2 openid tls

Last synced: 19 Mar 2026

https://github.com/opencpo/opencpo-core

⚡ OCPP 1.6 + 2.0.1 Central System with zero trust networking, built-in PKI, and profile-driven charger compatibility

cpo ev-charging fastapi mtls ocpp ocpp16 ocpp201 pki websocket zero-trust

Last synced: 03 Jun 2026

https://github.com/Aganium/agenium

AGENIUM — DNS of the Agent Web. Identity, trust & discovery for AI agents. MCP-compatible. agent:// protocol with mTLS, trust scores & capability search.

a2a agent-discovery agent-protocol agent-registry ai-agents dns mcp mtls python typescript

Last synced: 03 Jun 2026

https://github.com/rchiofalo/rustgate

Secure mTLS message router in Rust — group-based routing, WebSocket, server federation, NATS scaling, certificate enrollment, CRL/FIPS support. Single binary, edge-ready.

certificate-enrollment crl cursor-on-target federation fips helm kubernetes message-router mtls nats rust websocket

Last synced: 05 Apr 2026

https://github.com/akornatskyy/auth-playground

Auth playground with openssl, nodejs, hydra and oathkeeper.

hydra jwk jwt mtls oathkeeper oauth2

Last synced: 21 Apr 2026

https://github.com/laugiov/security-by-design

Security by Design reference: JWT/mTLS auth, RBAC, DevSecOps pipeline (SAST/DAST/SBOM/Cosign), Kubernetes hardening. Production-grade patterns.

api-security cosign devsecops fastapi gitlab-ci helm jwt-authentication kubernetes microservices mtls owasp platform-security python rbac sast-dast sbom security-by-design slsa supply-chain-security threat-modeling

Last synced: 01 May 2026

https://github.com/tfkfan/mtls_jwt_demo

spring-boot mtls+stateless JWT authentication demo

jwt mtls spring-boot

Last synced: 02 May 2026

https://github.com/stackql/pgwire-lite-rs

Lightweight PostgreSQL wire protocol client library for Rust, providing direct, low-level access to the PostgreSQL protocol.

mtls pgwire pgwire-protocol postgres postgresql protocol-client rust rust-crate rust-lang rust-library ssl stackql wire-protocol

Last synced: 10 Mar 2026

https://github.com/bryanaustin/mtlsproxy

A proxy for receiving or making mtls connections

mtls proxy service

Last synced: 13 Mar 2026

https://github.com/umahmood/mtls

Example showing mutually-authenticated TLS (mTLS)

go golang https mtls

Last synced: 24 May 2026

https://github.com/hasithaishere/mtls-with-nodejs

Discover how to implement mTLS in Node.js for secure communication. Practical code examples and easy steps for enhanced application security.

api certificates mtls mtls-authentication nodejs security tls

Last synced: 19 Jun 2026

https://github.com/lira/go-mtls

Applying tutorial mTLS with Go https://venilnoronha.io/a-step-by-step-guide-to-mtls-in-go

golang mtls ssl

Last synced: 06 Apr 2025

https://github.com/strideynet/spiffe-pinger

Small utility for testing SPIFFE-powered gRPC and mTLS.

grpc mtls spiffe

Last synced: 08 Mar 2026

https://github.com/butzee/quarkus_mtls_test

This project demonstrates a proof-of-concept (POC) microservice architecture using Kafka for secure communication and computation within a Kubernetes cluster. The architecture simulates a cloud environment and secure computing on sensitive data, specifically for calculating the premium value of car insurance.

certificates cpp kafka microsoft-seal mtls quarkus

Last synced: 30 Jan 2026

https://github.com/oluizeduardo/mutual-tls-java-demo

Example project demonstrating digital certificate generation and mutual TLS authentication using Java and OpenSSL.

java mtls mtls-authentication openssl

Last synced: 26 Jun 2025

https://github.com/tomdewildt/kvk-data-service-experiment

Experiment with the KVK Data Service SOAP API

actions httpx kvk mtls python soap

Last synced: 02 Jun 2026

https://github.com/zoobz-io/aegis

Service mesh for Go microservices — mTLS everywhere, zero configuration

go golang grpc microservices mtls service-mesh zoobzio

Last synced: 07 May 2026

https://github.com/gkhays/mtls-java

Mutual TLS scenarios in Java

java mtls tls

Last synced: 19 May 2026

https://github.com/opencpo/opencpo-bastion

🥧 Flashable Raspberry Pi site controller — zero-trust bridge, mTLS, sensors, cameras, 4G failover

edge-computing iot mtls raspberry-pi site-controller wireguard zero-trust

Last synced: 03 Jun 2026

https://github.com/charlesbulabula/zero-trust-framework

Zero Trust network security framework with policy enforcement

kubernetes mtls opa policy-engine security spiffe zero-trust

Last synced: 03 Jun 2026

https://github.com/marcofortina/custodia

Privacy-first encrypted secrets vault with mTLS, client-side crypto, audit integrity, Lite/FULL deployment profiles, and official multi-language SDKs.

access-control audit-trail client-side-encryption compliance credential-management data-protection encrypted-secrets enterprise-security golang mtls mutual-tls on-prem password-manager sdk secret-sharing secrets-management secure-storage security-tools self-hosted vault

Last synced: 15 May 2026

https://github.com/sebdeveloper6952/mtls-sandbox

Sandbox to test your mTLS integrations.

devtool mtls mtls-authentication mtls-request sandbox testing

Last synced: 08 Apr 2026

https://github.com/dotcoocoo/hermitstash-sync

Desktop sync client for HermitStash. PQC TLS, WebSocket real-time sync, zero-dependency Node.js daemon.

desktop-client file-sync hermitstash ml-kem mtls nodejs post-quantum pqc-tls websocket zero-dependency

Last synced: 18 May 2026

https://github.com/bend0us/ravenc2

RavenC2 is a cross-platform Command & Control (C2) tool written in Go. Built for educational and authorized security research only.

command-and-control file-upload keylogger loader mtls pentesting ravenc2 redteam reverse-shell socks5-proxy ssh-log

Last synced: 18 Jun 2025

https://github.com/guilledipa/praetor

A Go-based configuration management tool for real-time, mTLS-secured infrastructure orchestration via Message Brokers and gRPC.

automation configuration-management devops golang grpc-go mtls nats-jetstream orchestration sre system-administration

Last synced: 14 Jun 2026

https://github.com/icd360s-e-v/mail

Secure, end-to-end encrypted email client for desktop and mobile — Flutter, OpenPGP, mTLS, ClamAV, zero local storage

clamav cross-platform dart email-client end-to-end-encryption fluent-ui flutter imap mtls openpgp pgp-mime privacy security smtp zero-knowledge

Last synced: 16 May 2026

https://github.com/blark/sscte

Secure Super Cereal Tap ESP: A lightweight ESP32 firmware to bridge UART devices over TCP with TLS/mTLS support.

esp-idf esp32 mtls serial serial-bridge tls uart uart-bridge

Last synced: 25 Apr 2026

https://github.com/canonical/certificate-transfer-interface

Charm libraries for providers and requirers of the certificate-transfer integration.

juju mtls security tls trust-store x509

Last synced: 17 May 2026

https://github.com/miroslav-matejovsky/go-mtls-demo

Puro go demonstartion of TLS and mTLS

certstore golang mtls tpm2 windows

Last synced: 16 May 2026

https://github.com/cullis-security/cullis

Trust infrastructure for AI agents across organizations. Verified identity, explicit authorization, cryptographic audit trail.

ai-agents api-gateway cryptography dpop e2e-encryption fastapi federated-identity iam mcp mtls multi-agent-systems pki python self-hosted spiffe trust-broker workload-identity zero-trust

Last synced: 13 May 2026

https://github.com/cyb3rko/gotify-mtls-setup

Guide and script for setting up Gotify mTLS certificates

caddy certificates gotify mtls tls

Last synced: 05 May 2025

https://github.com/devevghenicernev-png/apigw

The single-binary API gateway. nginx + Let's Encrypt + GitHub deploys + live dashboard + RBAC — one static Go binary.

api-gateway cli dashboard deployment enterprise gitops golang high-availability jwt letsencrypt mtls nginx oauth2 opentelemetry rbac reverse-proxy self-hosted systemd tls webhook

Last synced: 07 Jun 2026

https://github.com/chmodshubham/proto-testbed

Traffic generation between two systems using different protocols (TLS, mTLS, DTLS, QUIC, SSH, IPSec) and with classical and post-quantum cryptography.

dtls ipsec mtls post-quantum-cryptography quic ssh tls traffic-generation

Last synced: 08 Jun 2026

https://github.com/thomas-illiet/cerbai

CerbAI is a lightweight HTTP reverse proxy written in Go, built for corporate environments where access to LLM services is secured via JWT tokens obtained through an OAuth2 client_credentials flow over mutual TLS (mTLS).

jwt mtls oauth openai proxy

Last synced: 21 Jun 2026

https://github.com/joemiller/certsponge

Utility for splitting Vault's PKI output into one or more files containing the private key, certificate, and CA data

mtls pki tls vault

Last synced: 11 Jun 2025

https://github.com/alexsjones/istio-service-tester

A quick chart with some simple services to test your service mesh

golang istio kubernetes mesh mtls testing

Last synced: 29 Apr 2026

https://github.com/laoluadewoye/ruby-hdfs

A small recreation of Hadoop Distributed File System in Ruby and Kubernetes

certificates grpc hadoop hdfs kubernetes mtls protocol-buffers rpc ruby tls toml-config

Last synced: 16 May 2026