AH 
Network-wide DNS ad and tracker blocker with built-in encrypted DNS, per-client filtering, and parental controls. Covers every device including IoT with no client app needed
Security & Access Control
Authentication, secrets management, VPNs, and access control tools.
AL 
End-to-end encrypted password manager with a built-in email alias system and self-hosted email server. Generate a unique alias email address for every service you sign up to — so breaches expose only a throwaway address, never your real inbox
AG 
Clientless remote desktop gateway supporting VNC, RDP, and SSH through a web browser. No plugins or client software needed — just a URL and a browser
AU 
Self-hosted identity provider for SSO, OAuth2, SAML, and LDAP. Add single sign-on and multi-factor authentication to every self-hosted app from one control plane
CA 
Modern web server and reverse proxy with automatic HTTPS. Caddy provisions and renews TLS certificates without any configuration. Simpler setup than Nginx for most use cases
IN 
Open-source secrets management platform for teams and infrastructure. Centralise API keys, environment variables, and credentials with versioning, access controls, and sync to CI/CD pipelines
NE 
WireGuard-based mesh VPN connecting machines without open ports or gateway config. Free tier covers up to 100 machines. Self-hostable alternative to Tailscale
NP 
Web UI for managing Nginx reverse proxy hosts with one-click Let's Encrypt SSL, redirect rules, and access lists. No manual Nginx config required
PA 
Open-source team password manager built on OpenPGP end-to-end encryption. Share credentials with granular permissions, audit every access, and keep private keys on user devices. Community edition is free with unlimited users
PA 
Open source password manager with end-to-end encryption and group sharing. Passwords are encrypted client-side using libsodium before reaching the server — the operator cannot read stored credentials. Share passwords with individuals or groups without an administration interface
PS 
Self-hosted team password manager with multi-layer client-side encryption. Enterprise edition with SSO, LDAP, and audit logging is free up to 10 users. Business tier starts at $3/user/month
RU 
Open-source remote desktop software with a self-hosted relay server. Route all traffic through your own infrastructure. Replaces TeamViewer and AnyDesk. Client runs on all major platforms
RU 
Open-source WiFi sensing system that detects human presence, breathing, and body pose through walls. Runs offline on a $9 ESP32-S3 chip. No cameras required
VA 
Unofficial Bitwarden-compatible server written in Rust. Run your own password manager backend that works with all official Bitwarden clients on a fraction of the hardware the official server needs