Best Application Security Tools in 2026

Infisical

Secure secret management for modern development teams

Stars
25,920
Forks
1,803
Last commit
9 hours ago

End-to-end encrypted secret management platform for seamless integration and enhanced security in development workflows.

Open Source Alternative to:

Doppler

Unleash

Feature flags for rapid, risk-free software deployment

Stars
13,390
Forks
841
Last commit
14 hours ago

A powerful feature management platform enabling gradual rollouts, A/B testing, and seamless integration for continuous delivery.

Open Source Alternative to:

LaunchDarkly

GrowthBook

Open-source A/B testing and feature flagging platform

Stars
7,661
Forks
723
Last commit
8 hours ago

Powerful, developer-friendly experimentation tool for data-driven product decisions. Seamless integration, real-time insights, and flexible deployment.

Open Source Alternative to:

LaunchDarkly

Cap

Privacy-first CAPTCHA alternative with proof-of-work

Stars
5,221
Forks
367
Last commit
19 hours ago

Lightweight open-source CAPTCHA solution using SHA-256 proof-of-work. 250x smaller than hCaptcha, fully customizable, and privacy-focused with zero telemetry.

Open Source Alternative to:

reCAPTCHA

Flagsmith

Feature flags and remote config for rapid deployment

Stars
6,302
Forks
505
Last commit
13 hours ago

Powerful feature management platform for seamless software releases, A/B testing, and personalized user experiences.

Open Source Alternative to:

LaunchDarkly

Flipt

Git-native feature management for developers

Stars
4,770
Forks
281
Last commit
9 hours ago

A feature flag platform that integrates with Git workflows, enabling developers to manage features directly in their codebase.

Open Source Alternative to:

LaunchDarkly

Cerbos

Secure, policy-based access control for modern applications

Stars
4,327
Forks
174
Last commit
1 day ago

A scalable authorization layer that provides fine-grained access control through externalized policies, enabling secure and flexible permissions management.

Open Source Alternative to:

Auth0

BleachBit

Clean your system and free disk space

Stars
4,727
Forks
337
Last commit
2 days ago

BleachBit frees disk space & protects privacy by deleting cache, cookies, history & temp files from Firefox, Chrome & more. Open source for Linux/Windows.

Open Source Alternative to:

CCleaner

Opengrep

Open-source code security engine for developers

Stars
2,390
Forks
193
Last commit
19 hours ago

Opengrep is a community-driven fork of SemgrepCE, providing accessible static code analysis and security scanning for developers.

ALTCHA

Next-Gen CAPTCHA and Spam Protection, GDPR compliant

Stars
2,160
Forks
103
Last commit
7 days ago

ALTCHA offers cutting-edge spam and abuse protection for websites and apps, with privacy-friendly CAPTCHA alternatives designed for GDPR compliance.

Open Source Alternative to:

reCAPTCHA

mCaptcha

Privacy-first proof-of-work CAPTCHA without user friction

Stars
2,436
Forks
87
Last commit
6 months ago

Privacy-focused proof-of-work CAPTCHA system that silently protects websites without tracking users or requiring image solving. Drop-in replacement for reCAPTCHA.

Open Source Alternative to:

reCAPTCHA

FeatBit

Open-source feature flag management for seamless deployments

Stars
1,792
Forks
140
Last commit
8 hours ago

FeatBit is a fast, scalable feature flag service that enables risk mitigation and fosters business growth through controlled feature releases.

Open Source Alternative to:

LaunchDarkly

Featurevisor

Feature management with GitOps for developers

Stars
797
Forks
36
Last commit
18 hours ago

Featurevisor is an open-source tool for managing feature flags, experiments, and remote configuration directly from your Git repository.

Open Source Alternative to:

LaunchDarkly

Iffy

AI-powered content moderation for safer online platforms

Stars
442
Forks
86
Last commit
4 months ago

Iffy provides intelligent, scalable content moderation to keep unwanted content off your platform without managing a team of moderators.

Procaptcha

Decentralized CAPTCHA for enhanced web security

Stars
295
Forks
9
Last commit
1 day ago

A blockchain-based CAPTCHA solution offering improved security, user experience, and resistance to bot attacks for web applications.

Open Source Alternative to:

reCAPTCHA

Aikido Intel

Real-time vulnerability and malware intelligence for open source

Stars
181
Forks
19
Last commit
28 days ago

A comprehensive threat intelligence platform that monitors open source ecosystems for vulnerabilities and malware, providing early warnings and detailed security advisories.

Private Captcha

GDPR-compliant bot protection without user friction

Stars
165
Forks
5
Last commit
10 hours ago

Privacy-first CAPTCHA service that blocks bots while keeping forms accessible. No puzzles, no tracking, no cookies - just invisible cryptographic protection.

Open Source Alternative to:

reCAPTCHA

Friendly Captcha

Invisible bot protection that respects user privacy

Stars
22
Forks
10
Last commit
1 day ago

Privacy-compliant CAPTCHA alternative using proof-of-work technology. Protects websites from bots and spam without user interaction or data tracking.

Open Source Alternative to:

reCAPTCHA

Abby

Type-safe feature flags and remote config for developers

Stars
165
Forks
21
Last commit
9 months ago

Abby offers open-source, fully typed feature flagging and remote configuration for React and Next.js, with multi-environment testing and debugging tools.

Open Source Alternative to:

LaunchDarkly

Infisical

Secure secret management for modern development teams

Stars
25,920
Forks
1,803
Last commit
9 hours ago

End-to-end encrypted secret management platform for seamless integration and enhanced security in development workflows.

Open Source Alternative to:

Doppler

Unleash

Feature flags for rapid, risk-free software deployment

Stars
13,390
Forks
841
Last commit
14 hours ago

A powerful feature management platform enabling gradual rollouts, A/B testing, and seamless integration for continuous delivery.

Open Source Alternative to:

LaunchDarkly

GrowthBook

Open-source A/B testing and feature flagging platform

Stars
7,661
Forks
723
Last commit
8 hours ago

Powerful, developer-friendly experimentation tool for data-driven product decisions. Seamless integration, real-time insights, and flexible deployment.

Open Source Alternative to:

LaunchDarkly

Cap

Privacy-first CAPTCHA alternative with proof-of-work

Stars
5,221
Forks
367
Last commit
19 hours ago

Lightweight open-source CAPTCHA solution using SHA-256 proof-of-work. 250x smaller than hCaptcha, fully customizable, and privacy-focused with zero telemetry.

Open Source Alternative to:

reCAPTCHA

Flagsmith

Feature flags and remote config for rapid deployment

Stars
6,302
Forks
505
Last commit
13 hours ago

Powerful feature management platform for seamless software releases, A/B testing, and personalized user experiences.

Open Source Alternative to:

LaunchDarkly

Flipt

Git-native feature management for developers

Stars
4,770
Forks
281
Last commit
9 hours ago

A feature flag platform that integrates with Git workflows, enabling developers to manage features directly in their codebase.

Open Source Alternative to:

LaunchDarkly

Cerbos

Secure, policy-based access control for modern applications

Stars
4,327
Forks
174
Last commit
1 day ago

A scalable authorization layer that provides fine-grained access control through externalized policies, enabling secure and flexible permissions management.

Open Source Alternative to:

Auth0

BleachBit

Clean your system and free disk space

Stars
4,727
Forks
337
Last commit
2 days ago

BleachBit frees disk space & protects privacy by deleting cache, cookies, history & temp files from Firefox, Chrome & more. Open source for Linux/Windows.

Open Source Alternative to:

CCleaner

Opengrep

Open-source code security engine for developers

Stars
2,390
Forks
193
Last commit
19 hours ago

Opengrep is a community-driven fork of SemgrepCE, providing accessible static code analysis and security scanning for developers.

ALTCHA

Next-Gen CAPTCHA and Spam Protection, GDPR compliant

Stars
2,160
Forks
103
Last commit
7 days ago

ALTCHA offers cutting-edge spam and abuse protection for websites and apps, with privacy-friendly CAPTCHA alternatives designed for GDPR compliance.

Open Source Alternative to:

reCAPTCHA

mCaptcha

Privacy-first proof-of-work CAPTCHA without user friction

Stars
2,436
Forks
87
Last commit
6 months ago

Privacy-focused proof-of-work CAPTCHA system that silently protects websites without tracking users or requiring image solving. Drop-in replacement for reCAPTCHA.

Open Source Alternative to:

reCAPTCHA

FeatBit

Open-source feature flag management for seamless deployments

Stars
1,792
Forks
140
Last commit
8 hours ago

FeatBit is a fast, scalable feature flag service that enables risk mitigation and fosters business growth through controlled feature releases.

Open Source Alternative to:

LaunchDarkly

Featurevisor

Feature management with GitOps for developers

Stars
797
Forks
36
Last commit
18 hours ago

Featurevisor is an open-source tool for managing feature flags, experiments, and remote configuration directly from your Git repository.

Open Source Alternative to:

LaunchDarkly

Iffy

AI-powered content moderation for safer online platforms

Stars
442
Forks
86
Last commit
4 months ago

Iffy provides intelligent, scalable content moderation to keep unwanted content off your platform without managing a team of moderators.

Procaptcha

Decentralized CAPTCHA for enhanced web security

Stars
295
Forks
9
Last commit
1 day ago

A blockchain-based CAPTCHA solution offering improved security, user experience, and resistance to bot attacks for web applications.

Open Source Alternative to:

reCAPTCHA

Aikido Intel

Real-time vulnerability and malware intelligence for open source

Stars
181
Forks
19
Last commit
28 days ago

A comprehensive threat intelligence platform that monitors open source ecosystems for vulnerabilities and malware, providing early warnings and detailed security advisories.

Private Captcha

GDPR-compliant bot protection without user friction

Stars
165
Forks
5
Last commit
10 hours ago

Privacy-first CAPTCHA service that blocks bots while keeping forms accessible. No puzzles, no tracking, no cookies - just invisible cryptographic protection.

Open Source Alternative to:

reCAPTCHA

Friendly Captcha

Invisible bot protection that respects user privacy

Stars
22
Forks
10
Last commit
1 day ago

Privacy-compliant CAPTCHA alternative using proof-of-work technology. Protects websites from bots and spam without user interaction or data tracking.

Open Source Alternative to:

reCAPTCHA

Abby

Type-safe feature flags and remote config for developers

Stars
165
Forks
21
Last commit
9 months ago

Abby offers open-source, fully typed feature flagging and remote configuration for React and Next.js, with multi-environment testing and debugging tools.

Open Source Alternative to:

LaunchDarkly

Open Source Application Security Tools

A curated collection of the best open source tools for securing software applications during development and runtime.

Infisical

Unleash

GrowthBook

Cap

Flagsmith

Flipt

Cerbos

BleachBit

Opengrep

ALTCHA

mCaptcha

FeatBit

Featurevisor

Iffy

Procaptcha

Aikido Intel

Private Captcha

Friendly Captcha

Abby

Infisical

Unleash

GrowthBook

Cap

Flagsmith

Flipt

Cerbos

BleachBit

Opengrep

ALTCHA

mCaptcha

FeatBit

Featurevisor

Iffy

Procaptcha

Aikido Intel

Private Captcha

Friendly Captcha

Abby