01
gotls
tlsgate
A fingerprint-gating proxy for TLS services. It filters opportunistic scanner noise using JA3 or JA4 while leaving real authentication to the backend.
Open source
Projects
Small tools shaped by real infrastructure problems, with an emphasis on understandable security boundaries and straightforward operations. Browse the documentation or view all repositories on GitHub.
02
gossh
sshgate
A companion fingerprint-gating proxy for SSH. It reads the plaintext key exchange and uses a HASSH-style fingerprint to reduce background noise.
03
gosecurity
gatehub
The shared control plane for tlsgate and sshgate, with centralized fingerprint observations, approval policy, and narrowly scoped node synchronization.
04
golibrary
gatekit
The reusable node-side spine of the fingerprint gates: SQLite state, control-plane sync, rate limits, connection caps, and graceful process lifecycle.
05
gomonitoring
parallaxd
An availability monitor that corroborates failures from independent vantage points and alerts only when a quorum agrees that a service is down.
06
godns
rilldns
A compact CoreDNS operations stack for authoritative zones, authenticated replication, managed blocking, APIs, an OIDC console, and monitoring.
07
gonotifications
tintwire
A self-hosted inbox for rich operational notifications, with structured cards, actions, Web Push, and Mattermost and Slack compatibility.
08
golibrary
tintwire-go
A small, standard-library Go client for publishing native Tintwire cards, with bounded retries and selective Mattermost delivery failover.
09
gooidc
oidcrp
A focused OpenID Connect relying-party helper for Go web apps, covering the browser flow while leaving session ownership to the application.
10
goai
wayminder
A self-hosted MCP memory service that gives AI coding agents durable, scoped recall using PostgreSQL, pgvector, and local Ollama embeddings.
11
goai
rendercase
A self-hosted artifact plane for publishing, reviewing, versioning, and sharing interactive web output from AI agents, CI jobs, CLIs, and people.
12
goanalytics
GateSignal
Turns HTTP access logs into privacy-limited security signals and aggregate analytics without retaining raw client addresses.
13
goai
Switchboard
An identity-aware capability gateway that gives agents a curated MCP surface over approved upstream services, with policy and audit boundaries.
14
golibrary
MCPKit
Small, opinionated helpers for secure Go MCP servers, including bounded requests, safer JSON handling, and consistent protocol errors.
15
goweb push
PWA Kit
Shared Web Push transport and embedded browser helpers that keep permission, subscription, and notification-click behavior consistent across Go applications.
16
goai
Taskboard
A durable task system for people and AI agents, with enforced checklists, run leases, escalations, and an audit trail of who did what.
17
golibrary
taskboard-dispatch
Claims queued Taskboard work for a runner and hands it to a pluggable execution backend, starting with one local command per task.
18
godocker
Dockgate
A central monitor for a small Docker fleet: image updates, vulnerability scans, policy audit, and update jobs that run only after a person approves.
19
gomonitoring
Clattermark
A log alert daemon that filters noise, deduplicates across replicas, and groups related events into incidents before notifying.
20
goai
memory-gardener
A daily job that checks Wayminder memories against git and DNS, asks a local model about doubtful ones, and lets a person decide every change.
21
gotemplate
go-service-template
A starting point for small Go HTTP services with health endpoints, CI, and an Ansible systemd deploy that verifies the running version.