opennhp

Why we included this project

When your team has to put internal dashboards or admin panels where scanners can find them, the usual answer is endless firewall rules. OpenNHP takes a different route: it implements the Cloud Security Alliance's Network-infrastructure Hiding Protocol, so protected servers stay invisible until an authenticated client sends a cryptographic signal and gets a short, time-limited window of access. A second protocol handles the data layer, encrypting content so it remains usable but unreadable. The agent, server, and access-control components are written in Go and can run as standalone clients, SDKs, or browser plugins, which makes it practical to drop into existing infrastructure. It's a concrete way to put zero trust into practice, not just a concept to read about.