Self-hosted projects tagged “Security”

Real-time monitoring platform for Plex, Jellyfin, and Emby with session tracking, playback analytics, stream maps, alerts, and account-sharing detection rules.

AGPL-3.0Actively maintained

Alternative to:

Tautulli+1

A Bash script that auto-implements a full mail server (Postfix, Dovecot, DKIM, SpamAssassin) with TLS and PAM-based logins on Debian/Ubuntu.

GPL-3.0Slowing down

Alternative to:

Microsoft Exchange Online+14

Secure low-code honeypot framework that uses LLMs to simulate high-interaction systems across SSH/HTTP/TCP and MCP, with metrics and cloud-native deployment options.

GPL-3.0Actively maintained

Alternative to:

Thinkst Canary+1

Centralized SSH gateway to remotely manage Linux servers, containers and IoT devices via web or native SSH; offers key auth, firewall rules, audit logging and session recording.

Apache-2.0Actively maintained

Alternative to:

Teleport+14

Self-hosted open-source file sharing server with resumable uploads (tus), large-file streaming, expiry/one-time downloads, Docker packaging and a Vue frontend.

BSD-2-ClauseActively maintained

Alternative to:

WeTransfer+11

Automates Reverse Proxy-over-VPN (RPoVPN) using WireGuard, Caddy and NGINX to expose Docker Compose services to the public Internet with automated TLS.

AGPL-3.0Slowing down

Alternative to:

Cloudflare Tunnel+3

High-performance web application firewall and API security gateway with semantic detection, rule management, and reverse-proxy deployment for protecting websites and APIs.

BSD-2-ClauseActively maintained

Alternative to:

Cloudflare Web Application Firewall (WAF)+9

Alf.io is an open source ticket reservation and event attendance management system for conferences, workshops, meetups, and trade shows.

GPL-3.0Actively maintained

Alternative to:

Eventbrite+19

Open-source platform for secure, anonymous whistleblowing and case handling, designed for privacy by default and adaptable to many reporting use cases.

Open-source security analytics framework for event tracking, in-app threat detection, and risk management to protect applications from abuse, bots, and account takeover.

AGPL-3.0Actively maintained

Alternative to:

Splunk+4

Sharry is a self-hosted file sharing web app with resumable uploads (tus), configurable lifetimes and passwords, and multiple storage backends including PostgreSQL, MariaDB, H2, filesystem or S3-compatible storage.

GPL-3.0Actively maintained

Alternative to:

WeTransfer+19

RunsOn deploys scalable, ephemeral GitHub Actions runners in your AWS account with spot/on-demand support, integrated S3-backed caching, and workflow compatibility.

Invio is a minimalist self-hosted invoicing app to create invoices, share secure public links, and manage billing data with a simple SQLite-backed setup.

UnlicenseActively maintained

Alternative to:

Invoice Ninja+12

Self-hosted URL shortener built with SvelteKit and PocketBase to shorten, customize, organize, and track links with QR codes and security controls.

AGPL-3.0Slowing down

Alternative to:

Bitly+14

Self-hosted Docker Compose updater that discovers compose stacks, monitors GitHub releases, groups related services, and applies controlled updates with notifications and optional AI summaries.

MITActively maintained

Alternative to:

Portainer Business Edition (Portainer Cloud)

Open-source, self-hostable file sharing app that encrypts files and filenames in the browser before upload; Rust backend, SQLite metadata, Docker-ready.

MITSlowing down

Alternative to:

WeTransfer+7

Lightweight PHP dashboard that converts Fail2Ban logs into searchable JSON reports and centralizes UFW-based blocklist control with HTTPS-based multi-server sync.

GPL-3.0Slowing down

Alternative to:

Fail2Ban

Secrover generates human-readable HTML security audit reports for repositories and domains. Scans dependencies, code, and domains; supports scheduling and remote exports.

GPL-3.0Actively maintained

Alternative to:

Snyk+15

Open-source, self-hosted wishlist app to create, share and collaboratively manage wishlists with anonymous gift claiming; Docker-ready, supports PostgreSQL and MySQL.

Open-source, modular SIP server (proxy, presence, conference, B2BUA) with push gateway, ICE/STUN/TURN, MySQL/SQLite support; optimized for mobile and embedded systems.

AGPL-3.0Actively maintained

Alternative to:

3CX+11

Self-hosted Docker web app for generating secure passwords and passphrases with customizable options, haveibeenpwned checks, PWA support, and environment variable configuration.

Minimal, dependency-free browser password generator written in HTML, CSS and plain JavaScript. Customizable character sets, length, translations and a strength indicator.

GPL-2.0Likely dormant

Alternative to:

Microsoft Edge

Lightweight, self-hostable pastebin (Java backend + TypeScript frontend) with full-text search, expiry, adjustable visibility and client-side encryption.

Apache-2.0Actively maintained

Alternative to:

Pastebin+5

Lightweight SMTP server written in Go that receives and sends email via a single JSON config and executable hooks; supports per-user DKIM and TLS.

Activity unknown

Alternative to:

Amazon Simple Email Service (Amazon SES)+11

Free/libre web service for creating date-based scheduling polls and classic option polls; no registration required. Operated by Framasoft and built on the Pollaris open-source project.

Activity unknown

Alternative to:

Doodle+15

GNUnet is a network protocol stack and framework for building secure, distributed, privacy-preserving peer-to-peer applications and services.

Activity unknown

Alternative to:

ZeroTier

Deliver secure, disposable desktop and app sessions in a web browser using Docker-based workspaces, with streaming, RBAC, and optional Kubernetes deployments.

Activity unknown

Alternative to:

Citrix DaaS+10

Open-source, low-memory web server written in C that provides FastCGI/SCGI/CGI, TLS support, HTTP/1.1 and HTTP/2, modular architecture and high concurrency.

Activity unknown

Alternative to:

Apache HTTP Server+2

Mistborn aggregates threat intelligence from multiple sources to enrich, normalize, and distribute IOCs for security analysis and incident response workflows.

Activity unknown

Alternative to:

VirusTotal+2

OpenSMTPD is an open-source, minimal SMTP daemon from the OpenBSD project providing an RFC-compliant MTA with privilege separation, table backends, filters and TLS support.

Activity unknown

Alternative to:

Postfix+11