Self-hosted Encrypted apps

RustDesk

Remote Access & VPN

Open-source remote desktop alternative to TeamViewer

Replaces TeamViewer, AnyDesk

Fast reverse proxy to expose local servers behind NAT

Replaces ngrok

LocalSend

File Sync & Storage

Share files to nearby devices without the internet

Replaces AirDrop

Syncthing

File Sync & Storage

Continuous peer-to-peer file synchronization

Replaces Dropbox, Resilio Sync

Caddy

Reverse Proxy & Gateways

Fast, multi-platform web server with automatic HTTPS

Replaces Nginx, Apache

Vaultwarden

Password Managers

Lightweight Bitwarden-compatible password server

Replaces 1Password, LastPass

Traefik

Reverse Proxy & Gateways

Cloud-native reverse proxy and load balancer

Replaces HAProxy, AWS ELB

Rclone

Backup & Recovery

Sync and copy files to dozens of cloud providers

Replaces Backblaze

Ask questions about your documents fully offline

Replaces ChatGPT

Joplin

Notes & Knowledge Base

Open-source note-taking and to-do app with sync

Replaces Evernote, OneNote

SiYuan

Notes & Knowledge Base

Privacy-first personal knowledge management system

Replaces Notion, Evernote

Headscale

Remote Access & VPN

Open-source self-hosted Tailscale control server

Replaces Tailscale

Securely send files between any two computers

Replaces WeTransfer, AirDrop

Cross-platform file explorer powered by a virtual distributed filesystem

Replaces Google Drive, Dropbox

Full-featured service mesh for traffic and security control

Replaces AWS App Mesh

Trilium Notes

Notes & Knowledge Base

Hierarchical note-taking for building knowledge bases

Replaces Evernote, Notion

Nextcloud

File Sync & Storage

Self-hosted content collaboration and file sync platform

Replaces Dropbox, Google Drive

Tailscale

Remote Access & VPN

Zero-config mesh VPN built on WireGuard

Replaces ZeroTier

HashiCorp Vault

Password Managers

Secrets management and data protection for infrastructure

Replaces AWS Secrets Manager, Azure Key Vault

Fast, secure, efficient backup program

Replaces Backblaze, Carbonite

Nginx Proxy Manager

Reverse Proxy & Gateways

Easy reverse proxy management with a web UI and free SSL

Replaces Cloudflare

Atuin

Developer Tools & Git

Sync, search and back up your shell history

Replaces Warp Cloud

Nginx

Reverse Proxy & Gateways

High-performance web server and reverse proxy

Replaces Apache, IIS

JumpServer

Remote Access & VPN

Open-source bastion host and PAM platform

Replaces CyberArk, Teleport

Set up a personal IPsec and WireGuard VPN in minutes

Replaces NordVPN

Jitsi Meet

Video Conferencing

Secure, fully featured video conferencing

Replaces Zoom, Google Meet

NetBird

Remote Access & VPN

Connect devices into a secure WireGuard-based overlay network

Replaces Tailscale, ZeroTier

Infisical

Password Managers

Open-source secrets management platform for developers

Replaces AWS Secrets Manager, Doppler

Actual Budget

Budgeting & Finance

Local-first envelope budgeting app

Replaces YNAB, Mint

Authelia

Reverse Proxy & Gateways

Authentication and authorization server for reverse proxies

Replaces Okta, Cloudflare Access

Ente Photos

Photo Management

End-to-end encrypted photo storage and backup

Replaces Google Photos, iCloud Photos

Cloud-native high-performance edge and service proxy

Replaces Nginx, HAProxy

KeePassXC

Password Managers

Cross-platform offline KeePass password manager

Replaces LastPass, 1Password

Rust framework to build fast, reliable network services

Replaces Nginx

The easiest way to run WireGuard VPN with a web UI

Replaces OpenVPN Access Server

Encrypt secrets in config files for version control

Replaces AWS Secrets Manager, HashiCorp Vault

Get things from one computer to another, safely

Replaces WeTransfer, AirDrop

Pangolin

Reverse Proxy & Gateways

Self-hosted tunneled reverse proxy with identity access

Replaces Cloudflare Tunnel

Neko

Remote Access & VPN

Self-hosted virtual browser running in Docker

Replaces Browserling

Teleport

Remote Access & VPN

Identity-aware access for infrastructure

Replaces Cisco AnyConnect, AWS Systems Manager

Bitwarden

Password Managers

Open-source password manager you can self-host

Replaces 1Password, LastPass

Kubernetes ingress controller using NGINX

Replaces AWS ALB Ingress

SimpleX Chat

Chat & Communication

Private messenger without any user identifiers

Replaces Signal, WhatsApp

Production-ready, config-driven mail server in a container

Replaces Google Workspace, Microsoft 365

Scalable overlay networking tool from Slack

Replaces Tailscale

ZeroTier

Remote Access & VPN

Global virtual network for connecting devices anywhere

Replaces Tailscale

Fast TCP/UDP tunnel over HTTP secured by SSH

Replaces ngrok

Lightweight encrypted SOCKS5 proxy

Replaces commercial VPN proxies

Easy file sharing from the command line

Replaces WeTransfer

Mail-in-a-Box

Mail Servers

Turn a fresh server into a working mail server

Replaces Google Workspace, Microsoft 365

Seafile

File Sync & Storage

High-performance file sync and share with block storage

Replaces Dropbox, Google Drive

Duplicati

Backup & Recovery

Free backup software with a friendly web UI

Replaces Backblaze, Carbonite

Notesnook

Notes & Knowledge Base

Private, end-to-end encrypted note-taking app

Replaces Evernote, OneNote

OpenVPN

Remote Access & VPN

Robust and flexible open-source VPN solution

Replaces Cisco AnyConnect

Mobile shell with roaming and intermittent connectivity

Replaces SSH

Lightweight and high-performance reverse proxy for NAT traversal

Replaces ngrok, frp

Kopia

Backup & Recovery

Fast, encrypted backup with a clean interface

Replaces Backblaze, Carbonite

cert-manager

Reverse Proxy & Gateways

Automated TLS certificate management for Kubernetes

Replaces Certbot

Scalable web platform extending Nginx with Lua

Replaces Nginx

VNC client that runs entirely in the browser

Replaces RealVNC

Decentralized peer-to-peer mesh VPN

Replaces Tailscale, ZeroTier

Deduplicating archiver with compression and encryption

Replaces Carbonite, Backblaze

Free implementation of the Remote Desktop Protocol

Replaces Microsoft RDP

Encrypted DNS proxy supporting DNSCrypt and DoH

Replaces Cloudflare WARP

Multi-protocol VPN server from the University of Tsukuba

Replaces Cisco AnyConnect

Element Web

Matrix & XMPP

Glossy Matrix client for the web and desktop

Replaces Slack, Discord

mailcow

Mail Servers

Dockerized full-stack mail server suite

Replaces Microsoft Exchange, Google Workspace

Nginx-derived web server with extra features

Replaces Nginx

Web-based client for KeePass databases

Replaces LastPass, 1Password

Share your terminal over the web

Replaces PuTTY

Self-hosted real-time sync backend for Obsidian vaults

Replaces Obsidian Sync

Open-source cross-platform adversary emulation framework

Replaces Cobalt Strike

WireGuard-based virtual networks with a management server

Replaces Tailscale, ZeroTier

Modern, simple TCP tunnel in Rust

Replaces ngrok

Ultralight, security-first service mesh for Kubernetes

Replaces Istio, AWS App Mesh

PairDrop

File Sync & Storage

Local and internet file sharing inspired by Snapdrop

Replaces AirDrop, WeTransfer

Local DNS server that picks the fastest results

Replaces Pi-hole, dnsmasq

Containerized turnkey Nextcloud deployment

Replaces Dropbox, Google Drive

Self-hosted relay and ID server for RustDesk

Replaces TeamViewer

Self-hosted DNS server with ad-blocking and a web console

Replaces Pi-hole, AdGuard Home

Transparent file encryption for secrets stored in git

Replaces HashiCorp Vault, AWS Secrets Manager

Let's Encrypt and ACME client written in Go

Replaces Certbot

Reverse proxy toolkit for building proxies in .NET

Replaces Nginx

Peer-to-peer messaging app that works offline

Replaces WhatsApp, Signal

Markdown note-taking app with client-side encryption

Replaces Evernote, Simplenote

Firezone

Remote Access & VPN

Open-source secure remote access platform

Replaces Cisco AnyConnect, Tailscale

OpenVPN server in a Docker container

Replaces NordVPN

step-ca

Identity & SSO

Private online certificate authority for internal PKI

Replaces DigiCert

Anytype

Notes & Knowledge Base

Local-first encrypted knowledge workspace

Replaces Notion

ownCloud

File Sync & Storage

Open-source file sync, share and content collaboration

Replaces Dropbox, Google Drive

Privacy-focused, searchable email client

Replaces Gmail

PrivateBin

Pastebins & Snippets

Minimalist pastebin with zero-knowledge encryption

Replaces Pastebin.com

Sync your browser bookmarks across browsers and devices

Replaces Raindrop.io, Chrome Sync

Command-line note-taking, bookmarking, and archiving tool

Replaces Evernote, Notion

Mumble

Chat & Communication

Low-latency, high-quality voice chat application

Replaces Discord, TeamSpeak

Warpgate

Remote Access & VPN

Smart SSH, HTTPS and MySQL bastion host

Replaces Teleport

CryptPad

File Sync & Storage

End-to-end encrypted collaboration suite

Replaces Google Drive, Microsoft 365

Fast, collaborative live terminal sharing over the web

Replaces tmux

Simple yet full-featured Docker mail server

Replaces Google Workspace, Microsoft 365

Versatile secure tunneling and proxy toolkit

Replaces Chisel, ngrok

High-performance, platform-neutral VNC implementation

Replaces RealVNC

OpenBao

Password Managers

Open-source secrets management forked from Vault

Replaces AWS Secrets Manager, HashiCorp Vault

Backrest

Backup & Recovery

Web UI and orchestrator for Restic backups

Replaces Backblaze

Material design KeePass client for Android

Replaces 1Password, LastPass

Full remote management and remote desktop web platform

Replaces TeamViewer, ConnectWise

Team-oriented password manager compatible with pass

Replaces 1Password, LastPass

Anonymous file sharing over the Tor network

Replaces WeTransfer, Dropbox

Tunnel TCP and UDP traffic over WebSocket or HTTP2

Replaces Chisel

Layer-two peer-to-peer VPN

Replaces ZeroTier, Hamachi

Blocky

Reverse Proxy & Gateways

Fast DNS proxy and ad-blocker for local networks

Replaces Pi-hole, AdGuard Home

HAProxy

Reverse Proxy & Gateways

Reliable, high-performance TCP/HTTP load balancer

Replaces F5 BIG-IP, AWS ELB

ejabberd

Matrix & XMPP

Robust, scalable XMPP messaging server

Replaces Slack, WhatsApp

Global name system for secure file sharing

Replaces Dropbox

Self-hosted Shadowsocks-based access server

Replaces NordVPN

eBPF-based transparent proxy with traffic splitting

Replaces Clash

Passbolt

Password Managers

Open-source password manager built for teams

Replaces 1Password, LastPass

Composable, all-in-one mail server in Go

Replaces Google Workspace, Microsoft 365

Encrypted file sharing fork of Firefox Send

Replaces WeTransfer, Firefox Send

Modern, secure all-in-one mail server

Replaces Google Workspace, Microsoft 365

Lock-free deduplication cloud backup tool

Replaces Backblaze, Carbonite

Self-hosted SSH bastion with web terminal and audit

Replaces Apache Guacamole, Teleport

Second-generation Matrix homeserver written in Go

Replaces Slack, Discord

Private network system using WireGuard

Replaces Tailscale

Zoraxy

Reverse Proxy & Gateways

General-purpose HTTP reverse proxy and forwarding tool

Replaces Nginx Proxy Manager

Terminal over HTTP and HTTPS

Replaces PuTTY

Wireless file transfer between devices with no shared network

Replaces AirDrop, Snapdrop

Modern VNC server with a browser-based client

Replaces TightVNC, RealVNC

Web interface for managing WireGuard configurations

Replaces OpenVPN Access Server

SSH client running in a web browser via WebSockets

Replaces PuTTY

Remote control and support tool built with .NET

Replaces TeamViewer

Nexterm

Remote Access & VPN

Open-source server management for SSH, VNC, and RDP

Replaces Apache Guacamole, Termius

Enterprise VPN server built on OpenVPN and WireGuard

Replaces OpenVPN Access Server

Pomerium

Reverse Proxy & Gateways

Identity-aware reverse proxy for zero-trust access

Replaces Cloudflare Access, BeyondCorp

Git-backed file synchronization with version history

Replaces Dropbox

Peer-to-peer encrypted messaging and calls over Tox

Replaces Skype, WhatsApp

WireGuard, Pi-hole, and Unbound in one compose stack

Replaces NordVPN

Modern Shadowsocks proxy implementation in Go

Replaces VPN

zrok

Remote Access & VPN

Open-source sharing platform built on OpenZiti

Replaces ngrok

Generate Caddy reverse proxy config from Docker labels

Replaces Traefik

Synapse

Matrix & XMPP

Reference homeserver for the Matrix network

Replaces Slack, Discord

Fast encrypted overlay filesystem for cloud-synced folders

Replaces Boxcryptor

Beautiful, fully open-source tunnel to localhost

Replaces ngrok

MicroBin

Pastebins & Snippets

Tiny, feature-rich pastebin and file-sharing service

Replaces Pastebin.com

OpenZiti

Remote Access & VPN

Programmable zero-trust networking platform

Replaces Cloudflare Access

Reliable backup and restore solution for PostgreSQL

Replaces Veeam

Cross-platform password manager with multiple storage backends

Replaces 1Password, LastPass

Official Android client for Syncthing sync

Replaces Dropbox, Google Photos

Archival and restoration tool for databases

Replaces pgBackRest

The standard Unix password manager built on GPG and git

Replaces 1Password, LastPass

2FAuth

Identity & SSO

Self-hosted web app to manage two-factor authentication codes

Replaces Authy, Google Authenticator

Identity-based secure access to systems and services

Replaces Teleport, StrongDM

The world's most widely used web server

Replaces Nginx, IIS

Rotki

Budgeting & Finance

Privacy-focused portfolio and crypto accounting tool

Replaces CoinTracker, Koinly

Docker Volume Backup

Backup & Recovery

Backup tool for Docker volumes to local or remote storage

Replaces Veeam

WireGuard

Remote Access & VPN

Fast, modern, secure VPN tunnel

Replaces OpenVPN

Apache Guacamole

Remote Access & VPN

Clientless remote desktop gateway in your browser

Replaces TeamViewer, Citrix

Kubernetes ingress controller powered by Envoy

Replaces AWS ALB Ingress

Simple, elegant and secure Matrix client

Replaces Slack, Discord

Remote terminal that survives network changes

Replaces Mosh

OpenBSD load balancer and relay daemon

Replaces HAProxy, F5 BIG-IP

Official desktop sync client for Nextcloud

Replaces Dropbox, OneDrive

Hot-reconfigurable HTTP reverse proxy in Rust

Replaces HAProxy, Nginx

Secure web application gateway with Nginx and Certbot

Replaces Cloudflare

Self-hosted ngrok alternative for sharing local services

Replaces ngrok

Web-based SSH console and key management

Replaces Teleport, Termius

Mail hosting and management platform with a modern UI

Replaces Google Workspace, cPanel Email

Web-based XMPP/Jabber chat client

Replaces Slack

Fast encrypted deduplicated backup compatible with Restic

Replaces Backblaze, CrashPlan

Yopass

Password Managers

Securely share secrets with encrypted one-time links

Replaces 1Password, Doppler

FluffyChat

Matrix & XMPP

Cute, cross-platform Matrix messenger

Replaces WhatsApp, Telegram

AliasVault

Password Managers

End-to-end encrypted password and email alias manager

Replaces 1Password, SimpleLogin

Sshwifty

Remote Access & VPN

Web-based SSH and Telnet client

Replaces PuTTY

Web-based terminal emulator for remote shell access

Replaces PuTTY

Next-generation Kubernetes traffic routing standard

Replaces Kubernetes Ingress

Open-source XMPP chat client for Android with OMEMO encryption

Replaces WhatsApp, Signal

Modern IPsec-based VPN implementation

Replaces Cisco AnyConnect

Screen for X, persistent remote applications

Replaces NX, Citrix

Cross-platform Qt GUI for managing rclone remotes

Replaces Mountain Duck, Cyberduck

Share sensitive credentials with self-destructing links

Replaces 1Password, Doppler

Hierarchical note-taking app for building knowledge bases

Replaces Evernote, OneNote

Modern open-source password manager

Replaces 1Password, LastPass

CalDAV/CardDAV sync client for Android

Replaces Google Calendar Sync, iCloud sync

Android client wrapper for continuous Syncthing file synchronization

Replaces Dropbox, Google Drive

Lightweight self-hosted file sharing with expiring links

Replaces WeTransfer, Firefox Send

Defguard

Remote Access & VPN

WireGuard VPN and identity platform with MFA

Replaces OpenVPN Access Server, Twingate

Peer-to-peer encrypted messaging protocol and core

Replaces Skype, Discord

Web interface for scheduling PostgreSQL backups

Replaces AWS RDS Backups

Secret management and distribution system

Replaces HashiCorp Vault

Desktop backup client built on BorgBackup

Replaces Time Machine, CrashPlan

Desktop Matrix client with native Qt interface

Replaces Slack, Discord

Modern XMPP chat client for the desktop

Replaces Skype, Slack

Configurable reverse proxy from the Pingora project

Replaces nginx, HAProxy

Encrypted filesystem for safely storing files in the cloud

Replaces Boxcryptor

VPN daemon that builds an encrypted mesh network

Replaces Hamachi, ZeroTier

Graphical SSH and SFTP client with server monitoring

Replaces MobaXterm, Termius

Conduit

Matrix & XMPP

Simple, fast and reliable Matrix homeserver in Rust

Replaces Slack, Discord

Nextcloud Talk

Chat & Communication

Chat, video calls and webinars integrated into Nextcloud

Replaces Slack, Zoom

Low-latency WebRTC remote desktop streaming

Replaces Parsec

Script to deploy a full Postfix/Dovecot mail server

Replaces Google Workspace

Backup tool for Btrfs subvolume snapshots

Replaces Time Machine