Sandstorm

Sandstorm is a self-hostable web productivity suite that acts as a security-hardened web app package manager. It lets you install multiple web apps on one server and provides a consistent sharing and access-control experience across them.

Key Features

• App market and one-click installation of packaged web applications
• Automatic app updates through the platform
• Per-document/app-instance isolation (“grains”) using strong sandboxing to limit impact of vulnerabilities
• Unified identity, sharing links, and access control across all installed apps
• Central place to find and manage everything you create across apps

Use Cases

• Run a private productivity suite (documents, chat, task boards, file storage) on your own infrastructure
• Host multiple small internal tools with consistent access control and sharing
• Package and distribute a web app as a deployable Sandstorm app without managing a full SaaS stack

Limitations and Considerations

• Sandstorm’s app ecosystem relies on Sandstorm-specific packaging and runtime constraints, which can limit which apps are available or easy to adapt

Sandstorm is a good fit for teams or individuals who want many web apps in one place with strong default security boundaries. It emphasizes simple administration, unified sharing, and privacy-focused control over where data lives.