Self-hosted projects tagged “Authentication”

Tyk Gateway is an open source, cloud-native API gateway for securing, managing, and scaling REST, GraphQL, gRPC, and TCP APIs with auth, rate limits, and policies.

Actively maintained

Alternative to:

Amazon API Gateway+6

Pocket ID is a simple self-hosted OpenID Connect (OIDC) provider that lets users sign in to apps using passkeys instead of passwords.

BSD-2-ClauseActively maintained

Alternative to:

Auth0+19

step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.

Apache-2.0Actively maintained

Alternative to:

HashiCorp Vault+7

Workout.cool is an open-source fitness coaching web app to build workout routines and programs, track progress and statistics, and manage an exercise database.

MITActively maintained

Alternative to:

Hevy+3

Mumble is an open-source, low-latency VoIP voice chat platform with a desktop client and a self-hosted server for encrypted group communication.

Actively maintained

Alternative to:

Skype+4

Tinyauth is a lightweight auth middleware that adds a login screen, OAuth, or LDAP authentication in front of your apps via common reverse proxies.

AGPL-3.0Actively maintained

Alternative to:

Cloudflare Access+17

Adminer is a full-featured, single-file PHP database management tool for administering MySQL, PostgreSQL, SQLite, MS SQL, and more, with optional plugins for extra backends.

Actively maintained

Alternative to:

DBeaver Cloud+11

Cross-platform single-binary CLI to serve files and directories over HTTP with directory listings, uploads, authentication, TLS, and WebDAV.

MITActively maintained

Alternative to:

Send Anywhere+8

Self-hostable Git server focused on SSH, featuring a terminal UI, access control, and Git LFS support, with cloning via SSH, HTTP, or the Git protocol.

Lura is a stateless, high-performance API gateway framework for building reverse proxies that aggregate, transform, and secure backend APIs via middleware and plugins.

Actively maintained

Alternative to:

Amazon API Gateway+9

LLDAP is a lightweight LDAP server for authentication and user management, providing a simplified LDAP interface, a web admin UI, and SQLite/MySQL/PostgreSQL backends.

GPL-3.0Actively maintained

Alternative to:

Microsoft Active Directory+2

Cosmos Cloud is a security-focused self-hosting platform that provides an app store, reverse proxy with automatic HTTPS, SSO/MFA, container management, backups, and monitoring.

Actively maintained

Alternative to:

Cloudron+18

Haraka is a fast, event-driven SMTP server for receiving, filtering, and relaying email, featuring a modular plugin architecture for customization at scale.

MITActively maintained

Alternative to:

Postfix+11

Remark42 is a lightweight, privacy-focused self-hosted comment system with social/email login, moderation tools, notifications, and easy embedding for blogs and sites.

MITActively maintained

Alternative to:

Disqus+8

TrailBase is a fast, single-executable Firebase alternative with type-safe REST and realtime APIs, built-in auth, admin UI, WebAssembly extensibility, and SQLite storage.

OSL-3.0Actively maintained

Alternative to:

Firebase+6

Kanidm is a secure identity management platform providing SSO, passkeys (WebAuthn), and integrations like OAuth2/OIDC, RADIUS, and LDAP gateway for legacy apps.

MPL-2.0Actively maintained

Alternative to:

Okta+19

Self-hosted web app that provides a spreadsheet-like interface to view, edit, query, and manage PostgreSQL data with native Postgres role-based access control.

GPL-3.0Actively maintained

Alternative to:

Mathesar Cloud+7

Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.

Apache-2.0Actively maintained

Alternative to:

Cloudflare Access+12

Kimai is an open-source, web-based time tracking app for teams and freelancers, with project/customer management, reporting, exports, and invoicing.

AGPL-3.0Actively maintained

Alternative to:

Kimai Cloud+19

Lightweight CalDAV/CardDAV server for syncing calendars, to-dos, and contacts with many clients, storing data on the filesystem and supporting auth and TLS.

GPL-3.0Actively maintained

Alternative to:

Google Calendar+8

Kinto is a lightweight JSON document store with an HTTP API, built-in permissions, sharing, and client synchronization, designed for offline-first and distributed apps.

Actively maintained

Alternative to:

Firebase+3

OpenZiti is an open-source zero trust networking platform that builds an identity-based overlay mesh with SDKs, tunnelers, and policy-based access controls.

Apache-2.0Actively maintained

Alternative to:

Zscaler Private Access+14

Open-source web app to manage TOTP/HOTP 2FA accounts: scan QR codes, generate one-time codes, import/export tokens, and protect access with WebAuthn and optional encryption.

AGPL-3.0Actively maintained

Alternative to:

Google Authenticator+3

Ombi lets Plex, Emby and Jellyfin users request movies, TV shows and music, integrates with Sonarr/Radarr/Lidarr and automates request delivery and notifications.

GPL-2.0Actively maintained

Alternative to:

Ombi (Hosted)+2

yarr is a lightweight, self-hostable RSS reader and feed aggregator delivered as a single binary with an embedded SQLite database and optional desktop tray UI.

MITActively maintained

Alternative to:

Feedly+12

Open-source browser-based gateway enabling VNC, RDP, and SSH access to remote desktops without client software.

Apache-2.0Actively maintained

Alternative to:

Citrix DaaS+17

slskd is a modern Soulseek client-server daemon with a web UI for searching, downloading, and managing transfers, chats, and user shares from a browser.

AGPL-3.0Actively maintained

Alternative to:

SoulseekQt

Self-hosted web UI that exposes YAML-defined shell commands as buttons, dashboards and API endpoints with ACLs, auth and logging for safe, repeatable server operations.

AGPL-3.0Actively maintained

Alternative to:

PagerDuty Rundeck+11

bknd is a lightweight Firebase/Supabase alternative that provides a modular backend with REST API, admin UI, auth, media, and workflows, deployable across many JS runtimes.

Apache-2.0Actively maintained

Alternative to:

Firebase+9

Self-hosted web dashboard for WireGuard and AmneziaWG to manage configs, peers, and access with a simple UI and optional 2FA.

Apache-2.0Actively maintained

Alternative to:

Tailscale+15