Open Source Security & Privacy Software
Security & Privacy software manages network access, identity verification, and data encryption to protect digital environments. These tools block trackers at the DNS level, establish private tunnels between remote servers, and handle single sign-on authentication for multiple applications. This type of software serves system administrators and developers who need to manage login credentials and network traffic on their own hardware. Self-hosting these apps ensures that authentication logs and private encryption keys remain on local infrastructure rather than on external servers.
This page lists 102 open source tools in the Security & Privacy category. The most popular are LocalSend, PocketBase and Pi-hole. Most use the AGPL-3.0 or Apache-2.0 license, and 87 offer an official Docker image.
Highlight
Full stack monitoring platform providing session replay, error tracking, and server side logging for web applications.
Technitium DNS Server
Self host an authoritative and recursive DNS server to manage network privacy, security, and ad blocking.
Hanko
Provides authentication and user management with support for passkeys, multi factor authentication, and social login integrations.
FireZone
Manage remote access with zero trust policies and peer to peer connections built on the WireGuard protocol.
PrivateBin
A minimalist pastebin where data is encrypted in the browser to ensure server zero knowledge.
GrowthBook
Manage feature flags and run A/B tests using a warehouse native approach to product analytics and experimentation.
iodine
Tunnel IPv4 data through a DNS server to bypass firewalls that allow DNS queries.
CryptPad
A collaborative suite providing end-to-end encrypted document editing and file sharing for privacy focused team workflows.
Warpgate
A transparent bastion host for managing secure access to SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC.
Mullvad VPN
A privacy preserving VPN client for desktop and mobile that secures internet traffic using WireGuard.
Cap
A lightweight bot protection system using proof-of-work and instrumentation challenges to replace visual puzzles and tracking.
OnionShare
Securely and anonymously share files, host websites, and chat with others using the Tor network.
Blocky
A DNS proxy and ad-blocker for local networks that filters queries using external blocklists.
frpc-desktop
Provides a visual desktop interface for configuring and managing FRP clients to achieve intranet penetration.
ejabberd
Realtime communication platform providing XMPP server, MQTT broker, and SIP service capabilities for scalable messaging.
Flagsmith
A feature flagging and remote configuration tool for managing software releases and conducting multivariate tests across environments.
Outline Server
A proxy server running a Shadowsocks instance with a REST API for managing access keys.
Cosmos Server
Manage and secure home servers with a built-in reverse proxy, authentication server, and container management system.
Passbolt
A security focused password manager for teams to centralize, organize, and share credentials and secrets securely.
Pomerium
An identity and context-aware reverse proxy for secure, clientless connections to internal web applications and services.
Flipt
Manage feature flags as code by storing configurations directly in Git repositories with version control.
AnonAddy
An email forwarding service that creates aliases to protect real email addresses from spam and tracking.
sish
Create HTTP, HTTPS, WebSocket, and TCP tunnels to localhost using standard SSH without custom clients.
Cerbos
An authorization layer that manages fine grained access control through externalized policies written in YAML files.
Synapse
A homeserver implementation for the Matrix open standard for secure and interoperable real-time communications.
OpenZiti
A zero-trust networking platform that makes network services invisible to unauthorized users through cryptographic identity.
2FAuth
Manage two factor authentication accounts and generate security codes through a self hosted and private web application.
Cinny
A secure and modern Matrix client providing an encrypted interface for decentralized instant messaging conversations.
Tracecat
Automate security workflows and playbooks using a low code builder with integrated AI agents and case management.
SWAG
Nginx webserver and reverse proxy with PHP support and automated SSL certificate generation and renewal.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.