Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Meshery, the cloud native manager

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

🐊 Policy Controller for Kubernetes

Cloud-native authorization for modern applications and APIs

A curated list of OPA related tools, frameworks and articles

📚 The OPA Gatekeeper policy library

Tool and policy library for reviewing Google Kubernetes Engine clusters against best practices

S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)

A policy management tool for interacting with Gatekeeper

Regal is a linter and language server for Rego, bringing your policy development experience to the next level!

A plugin to enforce OPA policies with Envoy

Integrations, examples, and proof-of-concepts that are not part of OPA proper.

A simple to use web-based OPA Gatekeeper policy manager

SCuBA Secure Configuration Baselines and assessment tool for Google Workspace

Open source compliance tool for development platforms.

A set of curated exercises to help you prepare for the CKS exam

Regorus - A fast, lightweight Rego (OPA policy language) interpreter written in Rust.

Sidecar for managing OPA instances in Kubernetes.

Notice: Postee is no longer under active development or maintenance.

A native policy enforcement layer for AI coding agents. Built on OPA/Rego.

Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.

Style guide for Rego

CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of their cloud environments.

Rego policies collection

Create Kubernetes AdmissionReview requests from Kubernetes resource manifests

Open Policy Agent WebAssembly NPM module (opa-wasm)

MagTape Policy-as-Code for Kubernetes

Traefik plugin which checks JWT tokens for required fields. Supports Open Policy Agent (OPA) and signature validation with JWKS

The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.