Best Self-hosted Security & Privacy tools in 2026
117 self-hosted open source alternatives in this category
117 services found
Nginx UI
Web UI for managing Nginx configurations, certificates, and logs
Self-hosted web interface to manage Nginx configs, reload safely, issue Let’s Encrypt certificates, view logs, monitor server stats, and manage multiple nodes.
BunkerWeb
Open-source web application firewall and reverse proxy
BunkerWeb is an open-source WAF and NGINX-based reverse proxy to protect web apps and APIs with HTTPS automation, security policies, and extensible plugins.
Firezone
Zero-trust remote access platform built on WireGuard
Firezone is a zero-trust VPN replacement built on WireGuard, providing identity-aware access policies, peer-to-peer encrypted tunnels, and lightweight gateways.
Pocket ID
A passkey-only OpenID Connect identity provider
Pocket ID is a simple self-hosted OpenID Connect (OIDC) provider that lets users sign in to apps using passkeys instead of passwords.
step-ca
Private certificate authority and ACME server for X.509 and SSH
step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.
Tinyauth
Lightweight authentication middleware for protecting web apps
Tinyauth is a lightweight auth middleware that adds a login screen, OAuth, or LDAP authentication in front of your apps via common reverse proxies.
Graylog
Centralized log management and analysis platform
Graylog is an open source platform for collecting, indexing, searching, and alerting on logs and machine data from many sources in one place.
iodine
IPv4-over-DNS tunneling server and client
iodine is a DNS tunneling tool that forwards IPv4 traffic through DNS queries and replies, providing a TUN interface to route IP traffic when only DNS is allowed.
Warpgate
Transparent bastion and PAM for SSH, HTTPS, MySQL and PostgreSQL
Self-hosted transparent bastion host and PAM for SSH, HTTPS, MySQL and Postgres with RBAC, session recording, and SSO/2FA—no client-side software required.
Cap
Privacy-first proof-of-work CAPTCHA alternative for web and APIs
Lightweight, self-hostable CAPTCHA alternative using SHA-256 proof-of-work challenges to protect forms and APIs from bots without tracking or visual puzzles.
WatchYourLAN
Lightweight LAN IP scanner with web UI, alerts, and metrics export
Self-hosted lightweight LAN IP/ARP scanner with web dashboard, new-host notifications, online/offline history, and metrics export to Prometheus or InfluxDB for Grafana.
OneUptime
Open-source monitoring, incident management, and observability platform
Self-hostable observability platform for uptime monitoring, alerting, incident management, on-call, status pages, logs, and APM in one integrated suite.
OpenBao
Open source secrets management for keys, certificates, and tokens
OpenBao is an open source secrets management platform to securely store, generate, lease, and revoke secrets, certificates, and encryption keys with auditing and access control.
ClamAV
Open-source antivirus engine for gateway and file scanning
ClamAV is an open-source antivirus toolkit providing a multi-threaded daemon, command-line scanners, and automatic signature updates for mail gateways and file scanning.
MeshCentral
Open-source web-based remote device management and remote desktop server
Self-hosted Node.js server for remote monitoring, web-based remote desktop, terminal, file access and multi-DB device management.
NetAlertX
Network device scanner and presence detection with alerts
Self-hosted network visibility and presence scanner that discovers connected devices and alerts on new, unknown, or changed hosts across your LAN/Wi‑Fi.
LLDAP
Lightweight LDAP authentication server with a web UI
LLDAP is a lightweight LDAP server for authentication and user management, providing a simplified LDAP interface, a web admin UI, and SQLite/MySQL/PostgreSQL backends.
Cosmos Cloud
Security-first self-hosting platform with reverse proxy, SSO, and apps
Cosmos Cloud is a security-focused self-hosting platform that provides an app store, reverse proxy with automatic HTTPS, SSO/MFA, container management, backups, and monitoring.
Passbolt
Open-source password and secret manager for teams
Passbolt is an open-source, security-first password and secret manager for teams, with end-to-end encryption, granular sharing permissions, and auditing.
Kanidm
Simple, secure identity management and SSO provider
Kanidm is a secure identity management platform providing SSO, passkeys (WebAuthn), and integrations like OAuth2/OIDC, RADIUS, and LDAP gateway for legacy apps.
Pomerium
Identity- and context-aware access proxy for zero trust access
Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.
OPNsense
Open source firewall and routing platform for network security
OPNsense is an open source FreeBSD-based firewall and routing platform with a web GUI, API, VPN, traffic shaping, and security features for networks and homelabs.
Cerbos
Context-aware authorization and access control policy engine
Cerbos is a scalable, language-agnostic authorization layer for defining and evaluating context-aware access control policies via a dedicated Policy Decision Point (PDP) API.
OpenZiti
Open-source zero trust networking overlay for applications
OpenZiti is an open-source zero trust networking platform that builds an identity-based overlay mesh with SDKs, tunnelers, and policy-based access controls.
2FAuth
Web-based TOTP/HOTP authenticator and 2FA account manager
Open-source web app to manage TOTP/HOTP 2FA accounts: scan QR codes, generate one-time codes, import/export tokens, and protect access with WebAuthn and optional encryption.
WGDashboard
Web dashboard to manage and monitor WireGuard VPN
Self-hosted web dashboard for WireGuard and AmneziaWG to manage configs, peers, and access with a simple UI and optional 2FA.
Wizarr
User invitation and management system for media servers
Wizarr automates user invitations and onboarding for Plex, Jellyfin, Emby and similar media servers, with SSO, time-limited access, Discord and request-system integration.
Password Pusher
Securely share passwords and sensitive data with auto-expiring links.
Open-source app that creates self-deleting secret links with audit logs.
Yopass
Secure one-time secret sharing with client-side encryption
Open-source tool for sharing secrets and files via client-side OpenPGP encryption and one-time expiring links.
AliasVault
End-to-end encrypted password manager with built-in email aliasing
Privacy-first, end-to-end encrypted password and email alias manager with passkeys, TOTP, apps and extensions, plus a built-in email server for self-hosting.
