Self-hosted projects tagged “Security”

A Bash script that auto-implements a full mail server (Postfix, Dovecot, DKIM, SpamAssassin) with TLS and PAM-based logins on Debian/Ubuntu.

Alternative to:

Microsoft Exchange Online+14

Centralized SSH gateway to remotely manage Linux servers, containers and IoT devices via web or native SSH; offers key auth, firewall rules, audit logging and session rec...

Alternative to:

Teleport+14

Self-hosted open-source file sharing server with resumable uploads (tus), large-file streaming, expiry/one-time downloads, Docker packaging and a Vue frontend.

Alternative to:

WeTransfer+11

Secure low-code honeypot framework that uses LLMs to simulate high-interaction systems across SSH/HTTP/TCP and MCP, with metrics and cloud-native deployment options.

Alternative to:

Thinkst Canary+1

Automates Reverse Proxy-over-VPN (RPoVPN) using WireGuard, Caddy and NGINX to expose Docker Compose services to the public Internet with automated TLS.

Alternative to:

Cloudflare Tunnel+3

High-performance web application firewall and API security gateway with semantic detection, rule management, and reverse-proxy deployment for protecting websites and APIs...

Alternative to:

Cloudflare Web Application Firewall (WAF)+9

Alf.io is an open source ticket reservation and event attendance management system for conferences, workshops, meetups, and trade shows.

Alternative to:

Eventbrite+19

Open-source platform for secure, anonymous whistleblowing and case handling, designed for privacy by default and adaptable to many reporting use cases.

Sharry is a self-hosted file sharing web app with resumable uploads (tus), configurable lifetimes and passwords, and multiple storage backends including PostgreSQL, Maria...

Alternative to:

WeTransfer+19

RunsOn deploys scalable, ephemeral GitHub Actions runners in your AWS account with spot/on-demand support, integrated S3-backed caching, and workflow compatibility.

Alternative to:

GitHub Actions

Open-source security analytics framework for event tracking, in-app threat detection, and risk management to protect applications from abuse, bots, and account takeover.

Alternative to:

Splunk+4

Real-time monitoring platform for Plex, Jellyfin, and Emby with session tracking, playback analytics, stream maps, alerts, and account-sharing detection rules.

Alternative to:

Tautulli+1

Invio is a minimalist self-hosted invoicing app to create invoices, share secure public links, and manage billing data with a simple SQLite-backed setup.

Alternative to:

Invoice Ninja+12

Self-hosted URL shortener built with SvelteKit and PocketBase to shorten, customize, organize, and track links with QR codes and security controls.

Alternative to:

Bitly+14

Open-source, self-hostable file sharing app that encrypts files and filenames in the browser before upload; Rust backend, SQLite metadata, Docker-ready.

Alternative to:

WeTransfer+7

Self-hosted Docker Compose updater that discovers compose stacks, monitors GitHub releases, groups related services, and applies controlled updates with notifications and...

Alternative to:

Portainer Business Edition (Portainer Cloud)

Lightweight PHP dashboard that converts Fail2Ban logs into searchable JSON reports and centralizes UFW-based blocklist control with HTTPS-based multi-server sync.

Alternative to:

Fail2Ban

Secrover generates human-readable HTML security audit reports for repositories and domains. Scans dependencies, code, and domains; supports scheduling and remote exports.

Alternative to:

Snyk+15

Open-source, self-hosted wishlist app to create, share and collaboratively manage wishlists with anonymous gift claiming; Docker-ready, supports PostgreSQL and MySQL.

Open-source, modular SIP server (proxy, presence, conference, B2BUA) with push gateway, ICE/STUN/TURN, MySQL/SQLite support; optimized for mobile and embedded systems.

Alternative to:

3CX+11

Self-hosted Docker web app for generating secure passwords and passphrases with customizable options, haveibeenpwned checks, PWA support, and environment variable configu...

Minimal, dependency-free browser password generator written in HTML, CSS and plain JavaScript. Customizable character sets, length, translations and a strength indicator.

Alternative to:

Microsoft Edge

Lightweight, self-hostable pastebin (Java backend + TypeScript frontend) with full-text search, expiry, adjustable visibility and client-side encryption.

Alternative to:

Pastebin+5

Mistborn aggregates threat intelligence from multiple sources to enrich, normalize, and distribute IOCs for security analysis and incident response workflows.

Alternative to:

VirusTotal+2

The sftp-server subsystem in OpenSSH provides SFTP file-transfer services over SSH with support for internal-sftp, chroot jails, public-key and certificate authentication...

Alternative to:

Files.com+12

OpenSMTPD is an open-source, minimal SMTP daemon from the OpenBSD project providing an RFC-compliant MTA with privilege separation, table backends, filters and TLS suppor...

Alternative to:

Postfix+11

Free/libre web service for creating date-based scheduling polls and classic option polls; no registration required. Operated by Framasoft and built on the Pollaris open-s...

Alternative to:

Doodle+15

Deliver secure, disposable desktop and app sessions in a web browser using Docker-based workspaces, with streaming, RBAC, and optional Kubernetes deployments.

Alternative to:

Citrix DaaS+10

GNUnet is a network protocol stack and framework for building secure, distributed, privacy-preserving peer-to-peer applications and services.

Alternative to:

ZeroTier

Lightweight SMTP server written in Go that receives and sends email via a single JSON config and executable hooks; supports per-user DKIM and TLS.

Alternative to:

Amazon Simple Email Service (Amazon SES)+11