Authorizer (Product): news timeline & CVEs

Hottest cybersecurity open-source tools of the month: September 2026

Help Net Security highlights eight September 2026 open-source security tools, from secrets scanning to AI-agent controls.

Help Net Security’s September 2026 roundup covers eight open-source security tools. Sift, from Stratus Security, searches disks, Active Directory, SharePoint, Slack, Jira, and Confluence for credentials. Stacklok’s ToolHive containers Model Context Protocol servers, while Tencent Zhuque Lab’s AI-Infra-Guard fingerprints Ollama, vLLM, and ComfyUI, checks more than 1,600 CVEs, and runs jailbreak evaluations. Other entries include Permify and Authorizer for access control, DeepZero for Windows driver analysis, Gopass for team passwords, and Prismor for policy checks on AI coding agents.

Help Net SecuritySep 29, 04:30 UTC · 10d agoTools

Authorizer: Open-source authentication and authorization for your apps

Open-source Authorizer adds login, fine-grained permissions, and a local MCP check for AI agents.

Authorizer is a free, self-hosted Go server for application sign-in and access control, with accounts stored in a database the operator chooses. It supports passwords, magic links, passkeys, social login, one-time MFA codes, and SSO through SAML 2.0 and OpenID Connect, and works with PostgreSQL, MySQL, MongoDB, DynamoDB, and other databases. Fine-grained permissions use embedded OpenFGA relationship records. A local, stdio-only MCP interface exposes read-only profile and permission checks so an agent acting for a user receives only the overlap of both permission sets, including filtering vector-search hits before scoring.

Help Net SecuritySep 28, 05:30 UTC · 10d agoTools

Authorizer

Timeline2 articles

Appears with

Hottest cybersecurity open-source tools of the month: September 2026

Authorizer: Open-source authentication and authorization for your apps