Open Source Security Apps

A self-hosted, privacy-first CAPTCHA alternative that uses memory-hard proof-of-work to stop bots without cookies, tracking, or third-party APIs.

OpenID Certified SSO and MFA portal for securing self-hosted web applications behind reverse proxies.

The self-hosted Identity Provider that replaces Okta, Auth0, and Entra ID with a unified SSO platform supporting SAML, OAuth2/OIDC, LDAP, RADIUS, and WebAuthn.

Self-hosted, open-source password management backend with zero-knowledge encryption and enterprise-grade identity services

The only web server that obtains and renews TLS certificates automatically, with HTTP/1-2-3 support and zero dependency on external runtimes.

Automate SSL certificate lifecycle across any CA, 24+ DNS providers, and every major secret store — with a REST API, web dashboard, and built-in MCP server for AI-driven ops.

All-in-one self-hosted home server with SmartShield anti-DDoS, Nebula mesh VPN, automatic HTTPS, and a 250-app marketplace — all secured behind a unified auth layer.

Self-destructing encrypted notes and files that vanish after viewing — the server never sees your keys.

Self-hosted secure remote access that unifies WireGuard VPN, identity management, and connection-level MFA in one open-source platform.

Self-hosted PaaS that deploys apps and databases on your own VPS using Docker, Traefik, and multi-build-system orchestration

Send end-to-end encrypted notes and files where the server never sees your content — true zero-knowledge sharing.

Enterprise-grade zero-trust access platform built on WireGuard® that replaces legacy VPNs with peer-to-peer, identity-aware secure tunnels.

Open source, self-hostable authentication platform with passkeys, SAML SSO, and OAuth — the privacy-first alternative to Auth0 and Clerk.

Self-hosted, end-to-end encrypted cloud storage with browser-based encryption and S3-compatible storage support

A wire-protocol gateway that enforces data masking, command blocking, approval workflows, and full session recording for engineers and AI agents accessing production infrastructure.

The open-source platform for secrets, certificates, privileged access, and AI agent security — all in one self-hostable system.

A cross-platform, offline password manager with YubiKey, passkey, browser integration, and TOTP — all encrypted locally in the open KDBX format.

AI-powered file type detection that identifies 200+ content types with ~99% accuracy in milliseconds using a compact deep learning model.

Detect malicious network traffic using 47+ live threat feeds, heuristics, and a fat-client reporting dashboard — no commercial stack required.

The open-source, self-hostable fraud detection and AML compliance engine that gives fintechs full control over their detection rules, data, and investigations.

Replace your VPN with a zero-trust WireGuard overlay network that auto-connects devices, enforces SSO and posture checks, and deploys in under 5 minutes.

Automate secure WireGuard mesh networks from homelab to enterprise scale without manual configuration.

The offline-first networking toolbox for sysadmins — 100+ subnet, DNS, DHCP, and TLS utilities that work without internet access.

Manage Nginx reverse proxies and free Let's Encrypt SSL through a beautiful web interface — no Nginx expertise required.

End-to-end encrypted, open-source note-taking where your data stays yours — even from the server.

Generate self-destructing single-use links to share passwords and sensitive data without leaving traces in inboxes or chat logs.

Secure, fast, and extensible sandbox runtime for AI agents with multi-language SDKs and Docker/Kubernetes runtimes.

Google's open-source vulnerability database that maps CVEs to exact package versions across 50+ ecosystems with a public API and data dumps.

Self-hosted, privacy-focused file sharing without limits

Self-hosted, end-to-end encrypted password manager API built for teams who demand full ownership of their credentials.

End-to-end encrypted secrets management for engineering teams — from local dev to Kubernetes production.

Privacy-first, self-hostable Proof-of-Work CAPTCHA for GDPR-compliant bot protection.

Open-source HTTP interceptor and API mocker trusted by 300,000+ developers — intercept, modify, and mock HTTP traffic from browser extensions or desktop without complex proxy setup.

Self-hosted WAF with a custom semantic detection engine and ML-powered threat analysis that blocks web attacks without cloud dependency.

Developer-first error tracking and performance monitoring platform with AI-powered root-cause analysis across 20+ languages and frameworks.

Find and analyze a person's digital footprint across 1000+ social media platforms using multi-layer detection, OCR, and metadata extraction.

An open source, Google Zanzibar-inspired authorization database that models permissions as relationships and evaluates fine-grained access checks at massive scale with single-digit millisecond latency.

The ultimate open-source steganography suite — hide anything in any file using 100+ encoding techniques, detect it all, and run everything 100% in your browser.

An open-source SDK that blocks prompt injections, redacts PII and secrets, scans repositories for AI-targeted attacks, and red-teams production agents.

Open-source authentication platform you self-host, giving you complete control over user data with zero vendor lock-in.

Zero-trust infrastructure access platform that replaces credentials and VPNs with short-lived certificates, SSO, and identity-aware proxies for SSH, Kubernetes, databases, RDP, and AI agents.

Embed security inside your product — detect threats, fraud, and abuse in real time at the application layer

Open-source agentic security automation platform that runs AI agents and durable workflows at scale with sandboxed execution.

A cloud-native reverse proxy and load balancer that auto-configures itself from Docker, Kubernetes, and other orchestrators — zero manual routing required.

Unofficial Bitwarden-compatible server in Rust — run the full Bitwarden ecosystem on a Raspberry Pi using every official client you already have, without the multi-container overhead.

Self-hosted SSO with OIDC, LDAP, passkeys, and proxy auth for your entire self-hosted stack

A Google Zanzibar-inspired authorization service for defining, checking, and auditing fine-grained access control across your applications.

All-in-one OSINT dashboard that dissects any website's IP, SSL, DNS, headers, cookies, ports, trackers, and more in a single scan.