Learn More

Open Source Application Security Tools

A curated collection of the best open source tools for securing software applications during development and runtime.

Feature flags for rapid, risk-free software deployment
  • Stars


    13,831
  • Last commit


    12 hours ago
  • License


    AGPL-3.0
A powerful feature management platform enabling gradual rollouts, A/B testing, and seamless integration for continuous delivery.

Open Source Alternative to:

Privacy-first CAPTCHA alternative with proof-of-work
  • Stars


    7,856
  • Last commit


    2 days ago
  • License


    Apache-2.0
Lightweight open-source CAPTCHA solution using SHA-256 proof-of-work. 250x smaller than hCaptcha, fully customizable, and privacy-focused with zero telemetry.

Open Source Alternative to:

Open-source A/B testing and feature flagging platform
  • Stars


    8,430
  • Last commit


    10 hours ago
  • License


    MIT
Powerful, developer-friendly experimentation tool for data-driven product decisions. Seamless integration, real-time insights, and flexible deployment.

Open Source Alternative to:

Feature flags and remote config for rapid deployment
  • Stars


    6,570
  • Last commit


    10 hours ago
  • License


    BSD-3-Clause
Powerful feature management platform for seamless software releases, A/B testing, and personalized user experiences.

Open Source Alternative to:

Git-native feature management for developers
  • Stars


    4,911
  • Last commit


    13 hours ago
  • License


    GPL-3.0
A feature flag platform that integrates with Git workflows, enabling developers to manage features directly in their codebase.

Open Source Alternative to:

Next-Gen CAPTCHA and Spam Protection, GDPR compliant
  • Stars


    2,779
  • Last commit


    6 days ago
  • License


    MIT
ALTCHA offers cutting-edge spam and abuse protection for websites and apps, with privacy-friendly CAPTCHA alternatives designed for GDPR compliance.

Open Source Alternative to:

Open-source feature flag management for seamless deployments
  • Stars


    1,907
  • Last commit


    2 days ago
  • License


    MIT
FeatBit is a fast, scalable feature flag service that enables risk mitigation and fosters business growth through controlled feature releases.

Open Source Alternative to:

Privacy-first proof-of-work CAPTCHA without user friction
  • Stars


    2,493
  • Last commit


    1 year ago
  • License


    AGPL-3.0
Privacy-focused proof-of-work CAPTCHA system that silently protects websites without tracking users or requiring image solving. Drop-in replacement for reCAPTCHA.

Open Source Alternative to:

Feature management with GitOps for developers
  • Stars


    810
  • Last commit


    17 days ago
  • License


    MIT
Featurevisor is an open-source tool for managing feature flags, experiments, and remote configuration directly from your Git repository.

Open Source Alternative to:

Decentralized CAPTCHA for enhanced web security
  • Stars


    300
  • Last commit


    10 hours ago
  • License


    Apache-2.0
A blockchain-based CAPTCHA solution offering improved security, user experience, and resistance to bot attacks for web applications.

Open Source Alternative to:

GDPR-compliant bot protection without user friction
  • Stars


    194
  • Last commit


    11 hours ago
  • License


    Unknown
Privacy-first CAPTCHA service that blocks bots while keeping forms accessible. No puzzles, no tracking, no cookies - just invisible cryptographic protection.

Open Source Alternative to:

Type-safe feature flags and remote config for developers
  • Stars


    166
  • Last commit


    1 year ago
  • License


    AGPL-3.0
Abby offers open-source, fully typed feature flagging and remote configuration for React and Next.js, with multi-environment testing and debugging tools.

Open Source Alternative to:

Invisible bot protection that respects user privacy
  • Stars


    35
  • Last commit


    23 days ago
  • License


    MPL-2.0
Privacy-compliant CAPTCHA alternative using proof-of-work technology. Protects websites from bots and spam without user interaction or data tracking.

Open Source Alternative to:

Favicon

 

  
 
Favicon