How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Opal is a policy distribution engine and real-time authorization data synchronizer. It serves as a management plane for deploying and monitoring distributed policy engines, such as OPA and Cedar, across microservices architectures. The project centralizes the administration of policies and data while deploying decentralized decision points. The system distinguishes itself by decoupling policy code, managed via version control, from authorization data retrieved from external databases and APIs. It uses a pub/sub-based state distribution model to push immediate updates to agents via WebSockets
This project is a unified, cloud-native policy engine designed to decouple authorization and security logic from application codebases. It functions as a centralized authorization service that evaluates structured input data against declarative rules, enabling consistent policy enforcement across microservices, infrastructure, and continuous integration pipelines. The engine utilizes a specialized logic programming language to express complex constraints, which are compiled into an optimized intermediate representation for high-performance evaluation. By supporting both sidecar-based deployme
Syft is a software bill of materials generator, container image scanner, and software dependency catalog. It analyzes container images and filesystems to produce comprehensive inventories of installed packages and dependencies in standard formats. Additionally, it serves as a software attestation tool and an SBOM format converter. The project distinguishes itself through the ability to create cryptographically signed attestations for software inventories to ensure provenance and integrity. It also provides the capability to transform software bills of materials between different industry sche
Cloud-native authorization for modern applications and APIs
The main features of aserto-dev/topaz are: Access Control Frameworks, Security and Compliance, Security and Identity.
Projects with overlapping indexed features include: permitio/opal — Opal is a policy distribution engine and real-time authorization data synchronizer. It serves as a management plane… open-policy-agent/opa — This project is a unified, cloud-native policy engine designed to decouple authorization and security logic from… anchore/syft — Syft is a software bill of materials generator, container image scanner, and software dependency catalog. It analyzes… appscode/kubed — 🛡️ Kubernetes Config Syncer (previously kubed). aquasecurity/kube-bench — kube-bench is a Kubernetes security benchmark scanner and configuration auditor. It verifies if a cluster adheres to… appscode/guard — 🔑 Kubernetes Authentication & Authorization WebHook Server.
