Self-hosted projects tagged “Security”

Open-source peer-to-peer file synchronization with TLS encryption, no central server, and a browser-based UI.

Alternative to:

Resilio Sync+6

Open-source, self-hosted messaging platform for secure team collaboration with real-time chat, audio calls, screen sharing, and integrations.

Alternative to:

Slack+19

Hasura is an open-source GraphQL engine that instantly exposes realtime, secure GraphQL APIs over databases and other data sources with fine-grained access control.

Alternative to:

Hasura+16

Comprehensive on-demand OSINT to analyze a website's security, architecture, and tech stack.

Alternative to:

Shodan+8

SafeLine is a self-hosted Web Application Firewall (WAF) and reverse proxy that defends web apps from SQL injection, XSS, bot abuse, and DDoS using ML-powered threat dete...

Alternative to:

Cloudflare Web Application Firewall (WAF)+7

Fail2Ban monitors service logs for repeated failures and automatically bans abusive IP addresses by updating firewall rules for a configurable time.

Alternative to:

CrowdSec

Anubis is a lightweight web AI firewall that protects sites from AI crawlers and scraping bots using configurable request challenges and bot policies.

Alternative to:

Cloudflare Web Application Firewall (WAF)+10

Open-source federated social network built around independently run pods, privacy via Aspects, and standard social features; implemented in Ruby on Rails.

Alternative to:

Mastodon (mastodon.social)+6

OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.

Alternative to:

OpenVPN CloudConnexa+18

CrowdSec is an open-source security engine that detects attacks from logs and blocks malicious IPs using bouncers and community-curated threat intelligence.

Alternative to:

Fail2Ban+10

Fast, security-focused image processing server to resize, transform, optimize, and convert images on demand via URL-based HTTP requests.

Alternative to:

CloudConvert+4

BunkerWeb is an open-source WAF and NGINX-based reverse proxy to protect web apps and APIs with HTTPS automation, security policies, and extensible plugins.

Alternative to:

Cloudflare Web Application Firewall (WAF)+10

Open-source VPN client for desktop and mobile that can automatically set up a private VPN server and connect using WireGuard, OpenVPN, IKEv2, and obfuscated modes.

Alternative to:

NordVPN+15

step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.

Alternative to:

HashiCorp Vault+7

Open-source DocSend alternative for secure document sharing and data rooms, with custom domains, access controls, and viewing analytics.

Alternative to:

DocSend+7

iodine is a DNS tunneling tool that forwards IPv4 traffic through DNS queries and replies, providing a TUN interface to route IP traffic when only DNS is allowed.

Alternative to:

Cloudflare Tunnel+15

Sandstorm is a self-hostable web productivity suite that lets you install, run, and securely share many web apps with unified access control and sandboxing.

Alternative to:

Cloudron+4

ClamAV is an open-source antivirus toolkit providing a multi-threaded daemon, command-line scanners, and automatic signature updates for mail gateways and file scanning.

Alternative to:

McAfee+8

LLDAP is a lightweight LDAP server for authentication and user management, providing a simplified LDAP interface, a web admin UI, and SQLite/MySQL/PostgreSQL backends.

Alternative to:

Microsoft Active Directory+2

Lightweight, self-hostable CAPTCHA alternative using SHA-256 proof-of-work challenges to protect forms and APIs from bots without tracking or visual puzzles.

Alternative to:

Google reCAPTCHA+8

OpenEMR is an open-source electronic health records (EHR/EMR) and practice management platform for clinics, including scheduling, billing, and interoperability features.

Alternative to:

Cerner (Oracle Health)

Standards-based validating recursive DNS resolver with DNSSEC validation, DNS-over-TLS/HTTPS support and configurable caching for privacy and performance.

Alternative to:

Cloudflare DNS+9

Judge0 CE is an open-source, sandboxed online code execution system with an HTTP JSON API for running untrusted code in many programming languages at scale.

Open-source web app to manage TOTP/HOTP 2FA accounts: scan QR codes, generate one-time codes, import/export tokens, and protect access with WebAuthn and optional encrypti...

Alternative to:

Google Authenticator+3

Svix is an open-source webhook service that handles event ingestion, signing, retries, and endpoint management with scalable delivery and client libraries.

Alternative to:

Svix+6

An open-source WebRTC SFU that routes media for scalable multiparty video conferencing; supports Colibri XMPP/REST control, DTLS/SRTP, and Prometheus metrics.

Alternative to:

LiveKit Cloud+17

Open-source Debian-based OS and control panel that simplifies installing, managing and securing web apps, mail and services via a web admin and app catalog.

Alternative to:

Cloudron+19

Convoy is a cloud-native webhooks gateway to ingest, persist, debug, and reliably deliver incoming and outgoing webhooks with retries, rate limiting, and security control...

Alternative to:

Svix+2

Canarytokens generates honeytokens (URLs, files, credentials, docs) that alert you when an attacker touches them, helping detect breaches early.

Alternative to:

Thinkst Canary+2

A ACL-based proxy that sits in front of the Docker daemon to block unsafe API endpoints while allowing authorized operations.

Alternative to:

Docker