Self-hosted projects tagged “Security”

Open-source peer-to-peer file synchronization with TLS encryption, no central server, and a browser-based UI.

MPL-2.0Actively maintained

Alternative to:

Resilio Sync+6

Open-source, self-hosted messaging platform for secure team collaboration with real-time chat, audio calls, screen sharing, and integrations.

Actively maintained

Alternative to:

Slack+19

Comprehensive on-demand OSINT to analyze a website's security, architecture, and tech stack.

MITActively maintained

Alternative to:

Shodan+8

Hasura is an open-source GraphQL engine that instantly exposes realtime, secure GraphQL APIs over databases and other data sources with fine-grained access control.

Apache-2.0Actively maintained

Alternative to:

Hasura+16

SafeLine is a self-hosted Web Application Firewall (WAF) and reverse proxy that defends web apps from SQL injection, XSS, bot abuse, and DDoS using ML-powered threat detection and configurable policies.

GPL-3.0Actively maintained

Alternative to:

Cloudflare Web Application Firewall (WAF)+7

Anubis is a lightweight web AI firewall that protects sites from AI crawlers and scraping bots using configurable request challenges and bot policies.

MITActively maintained

Alternative to:

Cloudflare Web Application Firewall (WAF)+10

Fail2Ban monitors service logs for repeated failures and automatically bans abusive IP addresses by updating firewall rules for a configurable time.

Actively maintained

Alternative to:

CrowdSec

Open-source VPN client for desktop and mobile that can automatically set up a private VPN server and connect using WireGuard, OpenVPN, IKEv2, and obfuscated modes.

GPL-3.0Actively maintained

Alternative to:

NordVPN+15

CrowdSec is an open-source security engine that detects attacks from logs and blocks malicious IPs using bouncers and community-curated threat intelligence.

MITActively maintained

Alternative to:

Fail2Ban+10

OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.

Actively maintained

Alternative to:

OpenVPN CloudConnexa+18

Open-source federated social network built around independently run pods, privacy via Aspects, and standard social features; implemented in Ruby on Rails.

AGPL-3.0Actively maintained

Alternative to:

Mastodon (mastodon.social)+6

Fast, security-focused image processing server to resize, transform, optimize, and convert images on demand via URL-based HTTP requests.

Apache-2.0Actively maintained

Alternative to:

CloudConvert+4

BunkerWeb is an open-source WAF and NGINX-based reverse proxy to protect web apps and APIs with HTTPS automation, security policies, and extensible plugins.

AGPL-3.0Actively maintained

Alternative to:

Cloudflare Web Application Firewall (WAF)+10

Open-source DocSend alternative for secure document sharing and data rooms, with custom domains, access controls, and viewing analytics.

Actively maintained

Alternative to:

DocSend+7

step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.

Apache-2.0Actively maintained

Alternative to:

HashiCorp Vault+7

iodine is a DNS tunneling tool that forwards IPv4 traffic through DNS queries and replies, providing a TUN interface to route IP traffic when only DNS is allowed.

ISCSlowing down

Alternative to:

Cloudflare Tunnel+15

Lightweight, self-hostable CAPTCHA alternative using SHA-256 proof-of-work challenges to protect forms and APIs from bots without tracking or visual puzzles.

Actively maintained

Alternative to:

Google reCAPTCHA+8

ClamAV is an open-source antivirus toolkit providing a multi-threaded daemon, command-line scanners, and automatic signature updates for mail gateways and file scanning.

GPL-2.0Actively maintained

Alternative to:

McAfee+8

Sandstorm is a self-hostable web productivity suite that lets you install, run, and securely share many web apps with unified access control and sandboxing.

Actively maintained

Alternative to:

Cloudron+4

LLDAP is a lightweight LDAP server for authentication and user management, providing a simplified LDAP interface, a web admin UI, and SQLite/MySQL/PostgreSQL backends.

GPL-3.0Actively maintained

Alternative to:

Microsoft Active Directory+2

OpenEMR is an open-source electronic health records (EHR/EMR) and practice management platform for clinics, including scheduling, billing, and interoperability features.

GPL-3.0Actively maintained

Alternative to:

Cerner (Oracle Health)

Standards-based validating recursive DNS resolver with DNSSEC validation, DNS-over-TLS/HTTPS support and configurable caching for privacy and performance.

BSD-3-ClauseActively maintained

Alternative to:

Cloudflare DNS+9

Judge0 CE is an open-source, sandboxed online code execution system with an HTTP JSON API for running untrusted code in many programming languages at scale.

Open-source web app to manage TOTP/HOTP 2FA accounts: scan QR codes, generate one-time codes, import/export tokens, and protect access with WebAuthn and optional encryption.

AGPL-3.0Actively maintained

Alternative to:

Google Authenticator+3

Svix is an open-source webhook service that handles event ingestion, signing, retries, and endpoint management with scalable delivery and client libraries.

MITActively maintained

Alternative to:

Svix+6

An open-source WebRTC SFU that routes media for scalable multiparty video conferencing; supports Colibri XMPP/REST control, DTLS/SRTP, and Prometheus metrics.

Apache-2.0Actively maintained

Alternative to:

LiveKit Cloud+17

Canarytokens generates honeytokens (URLs, files, credentials, docs) that alert you when an attacker touches them, helping detect breaches early.

BSD-3-ClauseActively maintained

Alternative to:

Thinkst Canary+2

Open-source Debian-based OS and control panel that simplifies installing, managing and securing web apps, mail and services via a web admin and app catalog.

AGPL-3.0Actively maintained

Alternative to:

Cloudron+19

Convoy is a cloud-native webhooks gateway to ingest, persist, debug, and reliably deliver incoming and outgoing webhooks with retries, rate limiting, and security controls.

Actively maintained

Alternative to:

Svix+2

A ACL-based proxy that sits in front of the Docker daemon to block unsafe API endpoints while allowing authorized operations.

Apache-2.0Actively maintained

Alternative to:

Docker