Open Source Software Library

CANARIE manages the Canadian Access Federation (CAF), which provides open-source Shibboleth identity federation infrastructure enabling single sign-on for over 300 Canadian universities, colleges, and research institutions. Their open tools and configuration guides are publicly available.

Maple Linux is a Canadian maintained, Debian based distro. It ships with Cinnamon DE for an easy transition for Windows users, and includes additional security and privacy enhancements out of box. Learn more at maplelinux.ca

Encrypted Message Crypté is a small application that allows you to share passwords, secret messages, or private links securely with another person. It does this by hiding your message behind a unique URL that can only be viewed once. Messages automatically expire after a predefined time limit if they are not viewed.

Let KeePassXC safely store your passwords and auto-fill them into your favorite apps, so you can forget all about them. We do the heavy lifting in a no-nonsense, ad-free, tracker-free, and cloud-free manner. Free and open source. KeePassXC has been awarded a Security Visa by the French National Cybersecurity Agency (ANSSI).

YARA is an open-source software project focused on security, malware, analysis. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Open-source security project maintained in a public source repository.

Open-source security project maintained in a public source repository.

Open-source security project maintained in a public source repository.

Open-source security project maintained in a public source repository.

Open-source security project maintained in a public source repository.

Tools and policy checks that help Government of Canada teams evaluate IBM Cloud deployments against common cloud guardrails. It is useful for repeatable compliance reviews, documentation of security expectations, and sharing implementation patterns across departments.

Open Policy Agent guidance and configuration examples for checking Google Cloud Platform services against Government of Canada cloud guardrails. The repository documents recommended settings and gives teams a reusable starting point for compliant GCP deployments.

PowerShell-based tooling for assessing Microsoft Azure environments against Government of Canada cloud guardrail requirements. Although archived, it remains a useful reference for Azure compliance automation and policy-as-code patterns.

Terraform and infrastructure templates for accelerating Government of Canada service delivery on Google Cloud Platform. The project packages reusable baseline patterns so teams can start cloud projects with consistent security and operational defaults.

Infrastructure and policy examples for checking Oracle Cloud deployments against Government of Canada guardrails. It provides reusable guidance for teams that need to document cloud compliance controls in Oracle environments.

Minimum guardrails and practical guidance for preventing ransomware in Government of Canada environments. The project is useful as a policy and control reference for security teams reviewing digital services.

Prototype JavaScript service for processing DMARC report data in a Government of Canada context. It can serve as a reference for email-domain security monitoring and report automation.

Kubernetes admission tooling that injects Kerberos sidecars into workloads that need secure authentication. It supports enterprise data-science and analytics platforms where legacy identity systems must integrate with containers.

Collection of tools used by the Canadian Digital Service to support confidentiality, integrity and availability of applications. It includes shared security automation and reference material for operational teams.

GitHub Action that forwards data from a previous CI step into Microsoft Sentinel. It supports security-monitoring workflows by connecting repository automation with cloud security tooling.

Keycloak-based single sign-on assets used by B.C. Government platform services. The repository supports authentication configuration, integration examples and identity-management operations.

Harbor is an open-source software project focused on containers, registry, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Vault is an open-source software project focused on secrets, security, devops. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Bubblewrap is an open-source software project focused on sandbox, security, linux. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Firejail is an open-source software project focused on sandbox, security, linux. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Qubes OS Tools is an open-source software project focused on security, virtualization, privacy. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

OpenSCAP is an open-source software project focused on security, compliance, linux. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Lynis is an open-source software project focused on security, audit, linux. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Security Onion is an open-source software project focused on security, monitoring, forensics. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

TheHive is an open-source software project focused on security, incident response, soc. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

MISP is an open-source software project focused on security, threat intelligence, sharing. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

OpenCTI is an open-source software project focused on security, threat intelligence, knowledge graph. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

AIDE is an open-source software project focused on security, file integrity, linux. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Rkhunter is an open-source software project focused on security, rootkit, linux. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Chkrootkit is an open-source software project focused on security, rootkit, linux. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

OpenVAS is an open-source software project focused on security, vulnerability scanner, network. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Nuclei is an open-source software project focused on security, vulnerability scanner, templates. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Trivy is an open-source software project focused on security, containers, vulnerability scanner. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Grype is an open-source software project focused on security, containers, vulnerability scanner. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Syft is an open-source software project focused on security, sbom, containers. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Cosign is an open-source software project focused on security, signing, supply chain. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Rekor is an open-source software project focused on security, transparency log, supply chain. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Falco is an open-source software project focused on security, runtime, containers. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Open Policy Agent is an open-source software project focused on policy, security, cloud native. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Kyverno is an open-source software project focused on policy, kubernetes, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Gatekeeper is an open-source software project focused on policy, kubernetes, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Kanidm is an open-source software project focused on identity, authentication, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Zitadel is an open-source software project focused on identity, sso, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Casdoor is an open-source software project focused on identity, sso, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Gluu Flex is an open-source software project focused on identity, sso, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

A network access control system with registration, isolation, remediation, and 802.1X support.

A disk encryption application for creating encrypted volumes and protecting stored data.

A password manager that stores credentials in an encrypted local database.

A password and secrets management platform with desktop, mobile, browser, and self-hosted options.

A collaborative password manager designed for teams and organizations.

A lightweight community server compatible with Bitwarden clients.

A modern VPN protocol and implementation designed for simplicity, speed, and strong cryptography.

A widely deployed VPN solution for secure remote access and site-to-site networking.

A firewall and routing platform with VPN, traffic shaping, monitoring, and security services.

A firewall and router distribution for network security and connectivity.

A network discovery and security auditing tool for identifying hosts, services, and configurations.

A network protocol analyzer for inspecting packets and troubleshooting communications.

A vulnerability management platform built around the OpenVAS scanner.

A security monitoring platform for threat detection, compliance, log analysis, and endpoint protection.

A high-performance network threat detection, intrusion detection, and intrusion prevention engine.

A network security monitoring framework that produces detailed activity logs and analysis.

An antivirus engine for detecting malware in files, mail gateways, and storage systems.

A log-based intrusion prevention tool that blocks hosts showing malicious behaviour.

A collaborative intrusion prevention engine that detects attacks and shares threat intelligence.

Educational environment from Canada’s cyber-security community for learning assembly programming and operating-system development.

Scalable overlay networking tool for connecting hosts securely across networks.

Zero-trust networking platform for embedding secure application connectivity.

Remote access platform using WireGuard and identity-aware access controls.

Vulnerability-management and application security orchestration platform.

Collaborative vulnerability management platform for security testing teams.

Digital forensics and incident response platform for endpoint collection and threat hunting.

Collaborative forensic timeline analysis tool for incident response and investigations.

Observable analysis and active response engine designed to integrate with security operations platforms.

Security orchestration, automation, and response platform built around reusable workflows.

eBPF-based security observability and runtime enforcement tool for Linux and Kubernetes.

Runtime security enforcement system for Kubernetes workloads using Linux security technologies.

Framework for securing software supply chains by verifying the steps used to produce artifacts.

Secure container runtime combining container workflows with lightweight virtual machines.