Security & Privacy

Fast, extensible web server and reverse proxy with automatic TLS certificates, simple configuration, HTTP/3 support, and production-ready observability features.

Alternative to:

NGINX Plus+3

Traefik is a dynamic reverse proxy and load balancer for Docker, Kubernetes, and microservices with automatic service discovery, routing, and TLS/ACME support.

Alternative to:

NGINX Plus+3

DNS sinkhole that blocks ads, trackers, and malicious domains network-wide with a web dashboard, per-client controls, and optional DHCP/DNS features.

Alternative to:

NextDNS+1

Lightweight, self-hosted Bitwarden-compatible password manager server with web vault, clients support, orgs, sharing, attachments, and optional admin interface.

Alternative to:

LastPass+1

Self-hostable team chat with channels, threads, calls, integrations, and enterprise-grade security controls for organizations that need full data control.

Alternative to:

Slack+4

Browser-based tool for decoding, encoding, encryption, and data analysis using a drag-and-drop “recipe” workflow for security, DFIR, and engineering tasks.

Alternative to:

CrackStation (online hash cracking/lookup)+4

Self-hosted DNS server with ad/tracker blocking, custom filtering, parental controls, encrypted DNS, and per-client statistics for home networks.

Alternative to:

NextDNS+1

Web-based reverse proxy manager for Nginx with hosts, streams, access lists, and automatic Let's Encrypt certificates via an easy admin UI.

Alternative to:

NGINX Plus+5

SafeLine is an open-source web application firewall (WAF) that protects web apps and APIs from common attacks using HTTP traffic inspection, rules, and management UI.

Alternative to:

Cloudflare WAF+4

Open-source platform that provides unified, audited, identity-based access to servers, Kubernetes clusters, databases, and desktops without static credentials.

Alternative to:

Okta Advanced Server Access+2

Self-hostable password manager with end-to-end encryption, vault sharing, TOTP, passkeys, and cross-platform apps plus browser extensions.

Alternative to:

1Password Secrets Sharing+4

Pangolin provides a self-hosted access gateway for securely exposing internal apps via tunnels, with identity-aware access controls and a web UI.

Alternative to:

Cloudflare SSL/TLS and reverse proxy features+3

Self-hosted platform for preparing, sending, and tracking legally binding e-signatures with templates, audit trails, and team workflows.

Alternative to:

DocuSign+9

Self-hosted SFTP/FTP/WebDAV server with web admin, virtual users, storage backends, and auditing for secure file exchange and managed file transfer workflows.

Alternative to:

WeTransfer+7

Stalwart is an all-in-one mail server (SMTP/IMAP/JMAP) with built-in anti-spam/DMARC, web admin UI, and flexible routing for running your own email infrastructure.

Alternative to:

Microsoft Exchange Online+9

Privacy-first messenger using SimpleX relays and end-to-end encryption, designed to avoid user identifiers, phone numbers, and centralized identity.

Alternative to:

Signal+5

Self-hosted WAF and reverse proxy built on NGINX, with a web UI, ModSecurity/OWASP rules, automatic HTTPS, and hardened defaults for securing web apps.

Alternative to:

Cloudflare WAF+5

Self-hosted web app for managing SSH connections, organizing hosts, and accessing terminals from a browser with a focus on team-friendly workflows.

Alternative to:

BeyondTrust Privileged Remote Access+2

Self-hosted, zero-knowledge pastebin that encrypts text in the browser, supports file attachments, expiration, burn-after-reading, and discussion threads.

Alternative to:

Pastebin.com+4

Self-hosted DNS server with recursive resolver, authoritative zones, DoH/DoT, ad-blocking, DHCP, and a web UI with optional app-based extensibility.

Alternative to:

NextDNS+2

Self-hosted platform for running web apps with per-user sandboxes, easy install, app store packaging, and sharing via secure links and access controls.

Alternative to:

Heroku+9

Self-hosted SSH bastion and access gateway with web UI, RBAC, just-in-time access, session recording, and audit logging for servers and infrastructure.

Alternative to:

Okta Advanced Server Access+2

Self-hostable email alias manager that generates aliases, forwards mail, and shields your real address with reply support, custom domains, and anti-tracking options.

Alternative to:

Fastmail Masked Email+3

HAProxy is a fast, reliable load balancer and reverse proxy for TCP/HTTP(S), with TLS termination, health checks, advanced routing, and built-in observability features.

Alternative to:

NGINX Plus+4

Web-based remote management server for computers and IoT devices with remote desktop/terminal, file transfer, user/device groups, and auditing.

Alternative to:

TeamViewer+6

Lightweight DNS proxy and local DNS server with blocklists, allowlists, custom DNS rules, caching, and optional DoH/DoT upstream for network-wide ad and tracker blocking.

Alternative to:

NextDNS+1

Self-hosted, GPG-based password manager for teams with shared vaults, RBAC, auditing, and browser extensions for secure credential sharing.

Alternative to:

1Password Secrets Sharing+4

Self-hosted reverse proxy and HTTP(S) gateway with a web UI, TLS support, routing rules, and traffic/security utilities for homelabs and small servers.

Alternative to:

Cloudflare SSL/TLS and reverse proxy features+3

Enterprise-ready file sharing and content collaboration with sync, sharing, and integrations, built as a modern successor to ownCloud/Nextcloud-style platforms.

Alternative to:

Dropbox+5

Create unlimited email aliases and forward mail to your inbox to reduce spam, protect identity, and control who can reach you.

Alternative to:

Apple Hide My Email (iCloud+)+5