30 open-source projects similar to lennolium/swiftguard, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
Automatically audit your Mac for basic security hygiene.
Easily configure macOS security settings from the terminal.
macOS vulnerability management for individuals
Visually explore all running tasks (processes) ....viewing its signature status, loaded dylibs, open files, network connection, and much more.
Cover your Mac screen with a hotkey while AI agents keep running. Dog/cat mascot, native Settings, Touch ID unlock.
View all modules on that are loaded in the OS kernel
WhatsYourSign adds a menu item to Finder.app. Simply right-, or control-click on any file to display its cryptographic signing information!
BlockBlock provides continual protection by monitoring persistence locations.
Use your phone's fingerprint to authenticate on any Mac — sudo, screensaver, App Store. No $199 Magic Keyboard needed. Works with iPhone, Android, Apple Watch, Wear OS, or any browser. Ready for MacBook Neo.
:link: Link-Layer MAC spoofing GUI for macOS
OverSight monitors a mac's mic and webcam, alerting the user when the internal mic is activated, or whenever a process accesses the webcam.
LuLu is an open-source application firewall designed for macOS that monitors and controls outgoing network traffic. It functions by intercepting connection attempts at the system level, allowing users to approve or deny network access for individual programs to prevent unauthorized data transmission. The software provides granular control over application-level communication, ensuring that only trusted or explicitly permitted software can establish external connections. By maintaining stateful tracking of network flows and validating the cryptographic signatures of requesting binaries, it pro
This project is a curated directory and catalog of privacy-respecting software and security-focused services. It serves as a structured resource for finding alternatives to corporate services, focusing on tools that prioritize data sovereignty, end-to-end encryption, and user anonymity. The directory is maintained as a markdown-based resource list and rendered via a static site generator. It further extends its utility through a CORS-enabled public API and a JSON-based data schema, allowing the curated catalog of tools and providers to be retrieved programmatically. The collection covers a w
This project is a comprehensive technical documentation repository focused on Linux system administration, network security, and privacy-oriented computing. It provides a curated knowledge base of instructional guides and configuration tutorials designed to assist users in managing low-level system environments, kernel compilation, and bootloader setup. The repository distinguishes itself by emphasizing privacy engineering and infrastructure hardening. It offers detailed procedures for anonymizing network traffic, securing credentials, and isolating applications within a computing environment
Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the Windows operating system through policy enforcement. It provides a collection of security presets and templates to implement official hardening standards across multiple devices. The project distinguishes itself through a comprehensive execution control system, featuring a manager for Windows Application Control and a kernel protection suite. It implements strict trust models, including kernel-mode driver whitelisting, signed policy implementation on the EFI partition, and code inte
This project is a collection of automated hardening frameworks and Ansible roles designed to secure Linux systems, databases, SSH services, and web servers. It functions as a configuration framework that reduces the attack surface of Linux distributions through the automated enforcement of security policies. The collection provides specific security baselines for a variety of services, including MySQL databases, OpenSSH daemons, and web servers such as Nginx and Apache. These roles are designed to remove insecure defaults, enforce secure authentication methods, and align system configurations
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
Know your Mac's security posture, fix the gaps, and keep it locked down. One command.
Probable-Wordlists is a collection of curated data resources providing password frequency lists, character masks, and common identity identifiers for security research. These resources serve as credential analysis tools to identify popular password trends and support the creation of secure credentials. The project provides password frequency wordlists and security research wordlists, including common usernames and top-level domains. It includes password recovery datasets featuring character masks and rule sets designed to analyze vulnerability patterns. The repository covers a broad range of
This project is a centralized, open-access repository that serves as a structured directory for technical education and professional development. It functions as a community-driven knowledge base, aggregating high-quality learning materials to support global accessibility to computer science and software engineering resources. The platform distinguishes itself through a collaborative governance model that utilizes peer-reviewed workflows for all content additions and modifications. By leveraging structured text files and decentralized version control, the repository maintains a searchable, hu
Brute-force a JWT HS256, HS384 or HS512 from your browser (online)
Vuls is an agentless vulnerability scanner and CVE intelligence aggregator. It identifies security flaws in operating systems, containers, and network devices without requiring the installation of permanent software agents on target machines. The project distinguishes itself by cross-referencing software versions against multiple vulnerability databases, security advisories, and known exploit catalogs. It utilizes platform-based enumeration and lockfile analysis to detect vulnerabilities in network hardware, programming libraries, and website plugins. The tool covers a broad range of securit
ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.