Top 14 Rust zero-trust Projects

zero-trust

• Add a project

1. Ockam

   1 77 4,634 9.6 Rust

   Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

   

2. AppSignal

   www.appsignal.com sponsored

   Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.

   

3. ferrotunnel

   2 1 80 8.6 Rust

   Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

   

   Project mention: From “It Just Works” to Building a Reverse Tunnel | dev.to | 2026-02-08

4. Symbiont

   3 4 54 9.5 Rust

   Symbiont lets teams build production agentic applications where every action is governed, every tool is verified, every agent has identity, and every decision leaves an audit trail.

   

   Project mention: Symbiont – Typestate-enforced policy gates for AI agents (Rust) | news.ycombinator.com | 2026-04-22

5. kars

   4 1 39 9.9 Rust

   Agent Reference Stack for Kubernetes (kars) - an open source stack from Microsoft for running AI agents safely on Kubernetes. Multi-runtime, Foundry-aware, hardened per-agent sandboxes, governed egress, end-to-end encrypted inter-agent mesh. (by Azure)

   

   Project mention: Kars – treat every AI agent as untrusted code, on Kubernetes | news.ycombinator.com | 2026-07-06

6. lilith-zero

   5 2 23 9.5 Rust

   ⚸ Lilith Zero - Security Middleware for MCP tool calls written in Rust.

   

   Project mention: Show HN: Lilith-zero update: fast Rust security for agents | news.ycombinator.com | 2026-04-23

7. CambiOS

   6 1 10 9.8 Rust

   Zero-trust, capability-based Rust microkernel targeting formal verification. Tri-arch (x86_64 / AArch64 / RISC-V). Sovereign and generative: no telemetry, user owns keys and data. Early-stage — see STATUS.md. Inspired by seL4, Hubris, and Redox.

   

   Project mention: Show HN: CambiOS – a new Rust-based, sovereign identity, zero-trust OS | news.ycombinator.com | 2026-06-11

8. lantunnel

   7 2 9 7.9 Rust

   Your private network, wherever you work. Peer-to-peer first, end-to-end encrypted access to your own LANs — no port forwarding, no public URLs.

   

   Project mention: Show HN: Lantunnel – a P2P-first private mesh for reaching your LANs | news.ycombinator.com | 2026-09-06

9. Kargo

   akuity.io sponsored

   Stop Scripting Promotions. Start Shipping with Kargo. Kargo automates promotion across dev, staging, and prod with approval gates and verification. Open source, built by the team behind Argo CD. Download now.

   

10. maturana

    8 1 6 9.6 Rust

    Maturana: secure, open-source personal agent platform built on Codex

    

    Project mention: Maturana: Hardware-isolated, zero-trust agent harness | news.ycombinator.com | 2026-06-24

11. tailscale-rs

    9 1 5 9.7 Rust

    A best-effort, pure-Rust port of Tailscale's Go tsnet — embed a Tailscale node directly in your Rust app. Fork of tailscale/tailscale-rs.

    

    Project mention: More Tailscale tricks for your jailbroken Kindle | news.ycombinator.com | 2026-07-28

    I had a similar project for bringing up Tailscale on a very resource-limited router, the gl.inet SFT1200, which has only 128 megabytes of RAM, and a dual-core MIPS processor.

    Despite my best efforts, the original tailscale-go was simply not going to work, since it used too much RAM, even when I followed some of the tips for stripping the unneeded parts of the binary. Thankfully there was an open-source port to Rust, which more effectively used memory: https://github.com/GeiserX/tailscale-rs

    What was surprising to me is that every Kindle released since 2019 has, at minimum, 512 megabytes of RAM, and therefore plenty of memory for tailscale-go to use.

12. mx2

    10 1 3 7.9 Rust

    Cross-platform password-based encryption using Argon2id + XChaCha20-Poly1305 for secret storage.

    

    Project mention: MX2: A minimal encrypted container using Argon2id and XChaCha20-Poly1305 | news.ycombinator.com | 2025-12-11

13. nexus

    11 1 2 - Rust

    A high-performance, zero-trust distributed framework in Rust. Orchestrates ephemeral WASI P2 components and native containers with unified identity (DPoP), JIT secrets (Vault), and multi-model persistence (SurrealDB). Built for high-density, memory-safe computing in FinTech and DefTech. (by AnatoliiShliakhto)

    

    Project mention: Errors as Infrastructure: Why the first crate in NEXUS wasn't networking. | dev.to | 2026-05-15

    NEXUS

14. trust_gateway

    12 1 2 8.6 Rust

    You do not want to grant "God Mode" anymore to your agents ? Try Trust Gateway. It is an open-source vendor-neutral transaction authorization protocol for AI agents

    

    Project mention: Stop Giving AI Agents Your API Keys: Introducing Trust Gateway (WIP) | dev.to | 2026-08-10

    git clone https://github.com/fcn06/trust_gateway.git cd trust_gateway docker compose -f deploy/docker-compose.yml up -d

15. intermcp

    13 2 1 8.5 Rust

    Ultra-fast, safe Model Context Protocol (MCP) engine and multiplexing hub in pure Rust, built for Interlayer Blockchain and open for all

    

    Project mention: Why I Built a Pure-Rust Model Context Protocol Engine for Interlayer & Liteverse (<3.8MB RAM, 457k ops/s) | dev.to | 2026-09-05

    GitHub: https://github.com/Bharathcoorg/intermcp

16. BlindPipe

    14 1 0 7.9 Rust

    🔒 High-performance full-duplex self-hosted AI gateway in Rust. Defeats bi-directional LLM surveillance: redacts outbound PII/credentials and purges inbound zero-width tracking characters, bidi tags, and synthetic watermarks to defeat AI surveillance like Anthropic watermarks and Gemini SynthID

    

    Project mention: Show HN: BlindPipe – Defeating Anthropic/LLM watermarks and protect PII locally | news.ycombinator.com | 2026-08-17

17. SaaSHub

    www.saashub.com sponsored

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    

Rust zero-trust related posts

• Spin 1.0 — The Developer Tool for Serverless WebAssembly

  17 projects | dev.to | 28 Mar 2023

Index

Sponsored

Monitoring that respects your time & budget

APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.

www.appsignal.com

Do not miss the trending Rust projects with our weekly report!