HTML Security

Open-source HTML projects categorized as Security

Top 23 HTML Security Projects

  1. KeeWeb

    Free cross-platform password manager compatible with KeePass

    Project mention: Bitwarden SDK relicensed from proprietary to GPLv3 | news.ycombinator.com | 2024-10-24

    It is actually sort of how I used it as well, though through nextcloud. It did still remain a hassle. It also requires all different apps to be maintained and equally safe.

    Keeweb for example has not had an active maintainer since 2022 https://github.com/keeweb/keeweb/issues/2022

  2. InfluxDB

    InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

    InfluxDB logo
  3. YubiKey-Guide

    Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

  4. school-of-sre

    At LinkedIn, we are using this curriculum for onboarding our entry-level talents into the SRE role.

  5. cve

    Gather and update all available and newest CVEs with their PoC.

  6. Security-101

    8 Lessons, Kick-start Your Cybersecurity Learning.

  7. js-xss

    Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

    Project mention: Security Best Practices for Your Node.js Application | dev.to | 2024-07-17

    Encode output data before user-controllable data is written to a page to prevent it from being interpreted as HTML or JavaScript. You can use tools like xss for this purpose.

  8. kubernetes-goat

    Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

    Project mention: PURPOSELY Exploiting A Kubernetes Cluster | dev.to | 2024-08-22

    git clone https://github.com/madhuakula/kubernetes-goat.git

  9. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
  10. supercookie

    ⚠️ Browser fingerprinting via favicon!

    Project mention: Simple Browser Tracking | dev.to | 2025-05-03

    Tracking users is a touchy topic. Should you rely on screen size? Favicon loading hacks (like this one)? Or something more exotic?

  11. Web-Security-Learning

    Web-Security-Learning

  12. django-DefectDojo

    DevSecOps, ASPM, Vulnerability Management. All on one platform.

    Project mention: Django-DefectDojo: Unified DevSecOps Platform for Vulnerability Management | news.ycombinator.com | 2024-08-09
  13. reverse-shell-generator

    Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

  14. badssl.com

    :lock: Memorable site for testing clients against bad SSL configs.

    Project mention: (Occasionally) Useful Web Tools For Android Developers | dev.to | 2024-12-22

    Link: badssl.com

  15. OnionBrowser

    An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network

  16. sig-security

    🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

    Project mention: Show HN: Attune – Build and publish APT repositories in seconds | news.ycombinator.com | 2025-04-18

    Anything requiring or targeting CNCF SSCP compliance or similar use cases.

    https://github.com/cncf/tag-security/blob/main/community/wor...

  17. security-txt

    A proposed standard that allows websites to define security policies.

    Project mention: Most IT companies fail to serve security.txt for RFC 9116 in 2025 | news.ycombinator.com | 2025-03-02

    Been in or around tech my whole life and this is the first time I've heard of security.txt. This article is trying to shame or something over what even https://securitytxt.org/ is calling "A proposed standard..."?

  18. ICS-Security-Tools

    Tools, tips, tricks, and more for exploring ICS Security.

  19. 1Hosts

    Advanced DNS filter/blocklists for privacy, security, and clean browsing.

  20. portable-secret

    Better privacy without special software

  21. railsgoat

    A vulnerable version of Rails that follows the OWASP Top 10

  22. awesome-anti-forensic

    Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

  23. ffprofile

    A tool to create firefox profiles with personalized defaults.

  24. aws-secure-environment-accelerator

    The AWS Secure Environment Accelerator is a tool designed to help deploy and operate secure multi-account, multi-region AWS environments on an ongoing basis. The power of the solution is the configuration file which enables the completely automated deployment of customizable architectures within AWS without changing a single line of code.

  25. i2pdbrowser

    i2pd browser bundle

  26. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

HTML Security discussion

Log in or Post with

HTML Security related posts

Index

What are some of the best open-source Security projects in HTML? This list will help you:

# Project Stars
1 KeeWeb 12,592
2 YubiKey-Guide 11,744
3 school-of-sre 7,992
4 cve 7,045
5 Security-101 5,275
6 js-xss 5,270
7 kubernetes-goat 4,824
8 supercookie 4,662
9 Web-Security-Learning 4,236
10 django-DefectDojo 4,074
11 reverse-shell-generator 3,440
12 badssl.com 2,914
13 OnionBrowser 2,404
14 sig-security 2,189
15 security-txt 1,826
16 ICS-Security-Tools 1,792
17 1Hosts 1,757
18 portable-secret 1,729
19 railsgoat 891
20 awesome-anti-forensic 880
21 ffprofile 815
22 aws-secure-environment-accelerator 759
23 i2pdbrowser 733

Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com

Did you know that HTML is
the 9th most popular programming language
based on number of references?