A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.
Shizuku+ brings Root/ADB/Dhizuku unification, a Plus API suite, OneUI/Android 16+ support, M3E theming, TCP connectivity, improved customization, & more.
Lightweight, self-hosted Entra ID governance portal: track app/identity ownership, surface credential and access risk, and score tenant health — running in your own Azure subscription.
ADTierKit: Deploys and audits an Active Directory tier model with PowerShell
Omni-SAG — auditable Linux privileged-access gateway (SSH + SFTP): AD+MFA, single-dialer authz, tamper-evident evidence chain, recording, ICAP inspection, CyberArk injection, four-eyes approvals, control-plane API/TUI. Go modular monolith.
Sunucularda kimin yönetici olduğunu gösteren envanter aracı: Active Directory, Windows ve Linux için tek HTML rapor (salt okunur).
Shizuku-API-compatible privileged service for Android TV, driven with the remote
Enterprise banking IAM architecture implementing tiered Active Directory administration, RBAC, PowerShell provisioning, Group Policy security controls, and independent security assurance.
PIM Manager Community edition by Invardia: privileged access for Microsoft Entra ID and Azure, governed as one model. Just-in-time delegation through PIM for Groups across Entra roles, Azure RBAC, Intune and Defender, with approvals and drift detection. Free; Pro editions at invardia.com.
Transforms IAM exports into a human-readable identity risk narrative with executive summaries and engineer-focused findings.
Self-hosted open-source credential manager for teams. Share company accounts without exposing passwords. Chrome extension auto-login. One-click offboarding.
Detects changes to identity and access posture. Diffs your directory against a baseline, so it reports what moved rather than everything that is imperfect.
Finds privileged Azure RBAC and Entra role assignments that posture tools miss
Saviynt connector starter for importing Okta users, admin roles, permissions, and privileged access relationships into an identity governance workflow.
Who really has privileged access? A research prototype exploring secure enterprise data access through local AI, role-based authorization, and least-privilege principles. Built with synthetic data.
Pre-execution security for human and AI-generated commands. Correlates intent, privilege, behavior, blast radius, project state, and AV/EDR/SIEM signals to ALLOW, REVIEW, or BLOCK.
Machine and agent identity operations on synthetic data: lifecycle scoring, time-boxed elevation with separation of duties, runtime threat signals, confirmation-gated response. Fictional data, stdlib only.
PowerShell-first Active Directory security posture auditor for privileged access, Kerberos, Windows LAPS, Group Policy, ACLs, and offline drift analysis.
Azure landing-zone privileged-access guardrails via Azure Policy + Verified Modules
To associate your repository with the privileged-access topic, visit your repo's landing page and select "manage topics."