Self-hosted projects tagged “Security”
62 open source projects with this tag
62 open source projects with this tag
62 services found

Open-source, peer-to-peer file synchronization tool.
Open-source peer-to-peer file synchronization with TLS encryption, no central server, and a browser-based UI.

Secure, self-hosted team collaboration and messaging platform.
Open-source, self-hosted messaging platform for secure team collaboration with real-time chat, audio calls, screen sharing, and integrations.


Open-source GraphQL engine providing instant, realtime APIs on your data
Hasura is an open-source GraphQL engine that instantly exposes realtime, secure GraphQL APIs over databases and other data sources with fine-grained access control.

All-in-one OSINT tool for analyzing any website.
Comprehensive on-demand OSINT to analyze a website's security, architecture, and tech stack.

Self-hosted WAF and reverse proxy for securing web apps
SafeLine is a self-hosted Web Application Firewall (WAF) and reverse proxy that defends web apps from SQL injection, XSS, bot abuse, and DDoS using ML-powered threat dete...

Log-monitoring daemon that bans abusive IPs via firewall rules
Fail2Ban monitors service logs for repeated failures and automatically bans abusive IP addresses by updating firewall rules for a configurable time.
Web AI firewall utility that challenges and blocks scraper bots
Anubis is a lightweight web AI firewall that protects sites from AI crawlers and scraping bots using configurable request challenges and bot policies.

Decentralized, privacy-focused federated social network
Open-source federated social network built around independently run pods, privacy via Aspects, and standard social features; implemented in Ruby on Rails.

Open-source VPN daemon for TLS-based secure tunneling
OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.
Crowdsourced IDS/IPS and WAF with shared malicious IP intelligence
CrowdSec is an open-source security engine that detects attacks from logs and blocks malicious IPs using bouncers and community-curated threat intelligence.

On-the-fly image resizing, processing, and format conversion server
Fast, security-focused image processing server to resize, transform, optimize, and convert images on demand via URL-based HTTP requests.

Open-source web application firewall and reverse proxy
BunkerWeb is an open-source WAF and NGINX-based reverse proxy to protect web apps and APIs with HTTPS automation, security policies, and extensible plugins.

Cross-platform client to deploy and use your own VPN server
Open-source VPN client for desktop and mobile that can automatically set up a private VPN server and connect using WireGuard, OpenVPN, IKEv2, and obfuscated modes.
Private certificate authority and ACME server for X.509 and SSH
step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.
Document sharing and virtual data rooms with analytics
Open-source DocSend alternative for secure document sharing and data rooms, with custom domains, access controls, and viewing analytics.
IPv4-over-DNS tunneling server and client
iodine is a DNS tunneling tool that forwards IPv4 traffic through DNS queries and replies, providing a TUN interface to route IP traffic when only DNS is allowed.

Security-hardened self-hosted web app suite and package manager
Sandstorm is a self-hostable web productivity suite that lets you install, run, and securely share many web apps with unified access control and sandboxing.

Open-source antivirus engine for gateway and file scanning
ClamAV is an open-source antivirus toolkit providing a multi-threaded daemon, command-line scanners, and automatic signature updates for mail gateways and file scanning.
Lightweight LDAP authentication server with a web UI
LLDAP is a lightweight LDAP server for authentication and user management, providing a simplified LDAP interface, a web admin UI, and SQLite/MySQL/PostgreSQL backends.

Privacy-first proof-of-work CAPTCHA alternative for web and APIs
Lightweight, self-hostable CAPTCHA alternative using SHA-256 proof-of-work challenges to protect forms and APIs from bots without tracking or visual puzzles.


Open-source EHR and medical practice management system
OpenEMR is an open-source electronic health records (EHR/EMR) and practice management platform for clinics, including scheduling, billing, and interoperability features.

Validating, recursive, caching DNS resolver
Standards-based validating recursive DNS resolver with DNSSEC validation, DNS-over-TLS/HTTPS support and configurable caching for privacy and performance.

Sandboxed online code execution system with a JSON API
Judge0 CE is an open-source, sandboxed online code execution system with an HTTP JSON API for running untrusted code in many programming languages at scale.

Web-based TOTP/HOTP authenticator and 2FA account manager
Open-source web app to manage TOTP/HOTP 2FA accounts: scan QR codes, generate one-time codes, import/export tokens, and protect access with WebAuthn and optional encrypti...
Enterprise-ready webhook service for reliable event delivery
Svix is an open-source webhook service that handles event ingestion, signing, retries, and endpoint management with scalable delivery and client libraries.

Open-source WebRTC Selective Forwarding Unit (SFU)
An open-source WebRTC SFU that routes media for scalable multiparty video conferencing; supports Colibri XMPP/REST control, DTLS/SRTP, and Prometheus metrics.


Debian-based server OS and web control panel for self-hosted apps
Open-source Debian-based OS and control panel that simplifies installing, managing and securing web apps, mail and services via a web admin and app catalog.

Cloud-native webhooks gateway for reliable event delivery
Convoy is a cloud-native webhooks gateway to ingest, persist, debug, and reliably deliver incoming and outgoing webhooks with retries, rate limiting, and security control...
Honeytokens that alert when accessed or executed
Canarytokens generates honeytokens (URLs, files, credentials, docs) that alert you when an attacker touches them, helping detect breaches early.
Security-enhanced proxy to restrict Docker socket API access
A ACL-based proxy that sits in front of the Docker daemon to block unsafe API endpoints while allowing authorized operations.
