Open Source Leon Alternatives

Lumo is an AI chat assistant built by the team behind Proton Mail and Proton Drive. Its core promise is simple: your conversations stay yours. Every chat is stored with zero-access encryption, meaning not even Proton can read what you've asked. No logs, no ad targeting, no data sold to third parties.

Most popular AI chat alternatives collect and retain your messages, often using them to train future models or serve targeted ads. Lumo's open-source code lets anyone verify that it doesn't. You can also use it anonymously via Tor without creating an account.

Based in Switzerland and subject to GDPR, Lumo sits outside US jurisdiction and Big Tech infrastructure. You can delete your account at any time, and Proton cannot share your data with governments or advertisers even if asked.

What Lumo can do day-to-day:

• Image generation: Turn text descriptions into images, with iterative refinement. Your inputs aren't reused to train the model.
• Web search: Built-in real-time search for current information, without queries being tied to an ad profile.
• Document analysis: Upload confidential reports or research and extract insights without that data appearing in future AI outputs.
• Project organization: Turn messy workloads into prioritized plans, handle sensitive admin tasks like visa or tax paperwork.
• Code review and file linking: Connect files from Proton Drive to work with full context across projects.
• Custom Lumos: Create specialized assistants for specific workflows (paid tier).

The free tier covers limited messages, image generations, and one project. Lumo Plus adds unlimited chats, higher model usage, more image generations, and unlimited projects. It's aimed at professionals and teams who handle sensitive information and can't afford to have that data harvested by the tools they rely on daily.

OpenClaw is a personal AI assistant built to take action. It doesn't just answer questions. It clears your inbox, sends emails, manages your calendar, and handles tasks like flight check-ins, all triggered through chat apps you already use every day.

The core idea is that you shouldn't need a new app to talk to your assistant. OpenClaw works through WhatsApp, Telegram, Discord, Slack, Signal, and iMessage, so you interact with it wherever you already spend time. No dashboard to open, no new habit to build.

It connects to a wide range of services out of the box:

• Email and calendar via Gmail and similar tools, handling real actions, not just summaries
• AI models including Claude and GPT, so you can route requests through your preferred backend
• Productivity tools like Obsidian and GitHub for note-taking and code workflows
• Smart home and media through Philips Hue and Spotify
• Social and browser via Twitter and direct browser control

What sets it apart from most chat-based AI tools is the action layer. Many assistants can tell you what to do. OpenClaw does it. The integrations aren't read-only; it can send, create, update, and automate across connected services.

The project is open source and self-hostable, which matters if you're handing an assistant access to your email and calendar. You control where it runs and what it can reach. A companion menubar app is available for macOS users who want quick access without switching windows.

It's an independent project, not affiliated with Anthropic or any of the AI providers it connects to. That independence shows in the breadth of integrations rather than a walled ecosystem.

Hermes Agent is a desktop AI agent built by Nous Research that runs natively on macOS, Windows, and Linux. It's designed for people who want a single agent that works across their communication tools, handles recurring tasks, and actually remembers what it's done before.

The core idea is persistence. Most agents start fresh every session. Hermes maintains memory across conversations, auto-generates skills from past interactions, and builds up context about your projects over time. You don't have to re-explain things.

Where it connects:

• Telegram, Discord, Slack, WhatsApp, Signal, and email are all supported natively, so the agent meets you where you already work
• A CLI interface is also available for terminal-first workflows

What it can do:

• Natural-language scheduling for reports, backups, and briefings that run unattended
• Web search and browser automation with vision, image generation, and text-to-speech
• Subagents that run in isolated conversations with their own terminals and Python RPC scripts, useful for parallel pipelines without ballooning context costs
• Multi-model reasoning with access to 300+ models through the Nous Portal

Sandboxing is a genuine differentiator. Five execution backends (local, Docker, SSH, Singularity, and Modal) give you control over where code actually runs, with container hardening and namespace isolation. That matters if you're running automated tasks or untrusted scripts.

For teams or individuals already using LobeChat or similar multi-surface chat interfaces, Hermes takes a different angle: it's less about chat UI and more about an agent that operates autonomously across surfaces. Think of it as closer to an AgentOS approach, where the agent itself is the persistent layer.

It's free to use under the MIT license, with paid tiers through the Nous Portal for higher model access and monthly credits.

nanobot is a minimal, self-hosted AI agent designed to run wherever you work: a web UI, your terminal, or a chat interface. It's built for people who want a personal AI agent they control, without the overhead of bloated frameworks or cloud-locked platforms.

The core design philosophy is lean execution. Rather than consuming tokens without restraint, nanobot applies sensible context management and explicit token budgets, so your costs stay predictable. That matters especially for long-horizon tasks, where the agent needs to sustain coherent reasoning across tens or even hundreds of steps without losing the thread.

Key capabilities:

• Multi-surface operation: runs in a browser-based web UI, a terminal, or directly inside chat apps, so you're not locked into one interface
• Long-running workflows: maintains steady execution across complex, multi-step tasks without context drift
• Token budgeting: built-in controls keep spending predictable, unlike agents that leave cost management entirely to the user
• Embeddable runtime kernel: the agent core is portable, so you can drop it into a business workflow or a personal automation setup without rewiring everything around it
• Self-hosted: your data stays on your infrastructure; no third-party service holds your conversations or task history

Compared to heavier agent frameworks or fully managed platforms like Agenta, nanobot stays deliberately small. The codebase is compact, the runtime is portable, and the architecture doesn't assume you want a full orchestration platform. It suits developers and technically minded individuals who want an agent they can embed, extend, or just run locally without a lot of ceremony.

It supports automation tasks, developer integrations, and conversational use cases through the same core runtime. The MIT license means you can adapt it freely for personal or commercial use.

NanoClaw is a self-hosted personal AI agent built for individuals who want full control over their AI assistant. It connects to messaging apps including WhatsApp, Telegram, Discord, Slack, Microsoft Teams, iMessage, Matrix, Google Chat, Webex, WeChat, and email, then routes every conversation through isolated Docker containers. The codebase is intentionally small: 132 source files, roughly 17,500 lines of code, and fewer than 10 dependencies. You can read the whole thing in an afternoon.

It positions itself as a lightweight alternative to OpenClaw, which ships 3,680 source files and 70 dependencies. That size difference isn't cosmetic. It shapes whether you can audit what your agent actually does, customize it without fear, and trust its security model.

Security is structural, not policy-based. Each agent group runs in its own Linux container with its own filesystem. It can only see directories you explicitly mount. Credentials never enter the container at all. Outbound API requests route through OneCLI's Agent Vault, which injects authentication at the proxy level and enforces per-agent rate limits and policies.

Key capabilities:

• Multi-channel messaging – WhatsApp, Telegram, Slack, Discord, Teams, iMessage, Matrix, and more, installed on demand with /add-<channel> skills
• Flexible agent wiring – give each channel its own isolated agent, share one agent across channels for unified memory, or fold channels into a shared session
• Per-agent workspaces – each agent group has its own memory, its own CLAUDE.md, and its own container boundary
• Scheduled tasks – recurring jobs that run Claude and message you back (morning briefings, weekly reviews)
• Multiple AI providers – runs Claude Code natively via the Claude Agent SDK; drop-in options for OpenAI Codex, OpenRouter, Google, DeepSeek, and local models via Ollama
• Skills over features – install only the adapters you need; nothing is bundled that you didn't ask for

The architecture is a single Node.js host process that routes inbound messages through an entity model, writes to SQLite, and wakes per-session containers. No microservices, no message brokers, no shared memory across agent boundaries.

NanoClaw is MIT-licensed and designed to be forked. The philosophy is that your personal AI agent should be working software shaped to your exact needs, not a generic framework you configure around.

Jan is a desktop AI chat app built for people who want the capabilities of ChatGPT without handing their conversations to a cloud service. It runs entirely on your own machine using open-source models, or you can connect it to hosted providers when you need more power. Either way, you stay in control.

The model selection is broad. Out of the box, Jan supports:

• Local models like Llama, Mistral, Qwen, Gemma, and DeepSeek, downloaded and run on your hardware
• Cloud providers including OpenAI, Anthropic (Claude), Google (Gemini), and others, connected via API key
• Switching between them without leaving the app, so you're not locked into one backend

This flexibility is what separates Jan from simpler local-model runners. You get offline capability when you want privacy, and cloud fallback when a task demands it.

Jan is built in public and has crossed 5.7 million downloads, which puts it among the more widely adopted self-hosted AI interfaces alongside tools like Open WebUI and LibreChat. The codebase is open, community-driven, and free.

The interface is clean and focused on conversation. A memory feature is in development that will carry context and preferences across sessions, so you won't need to re-explain your setup or working style each time you start a new chat.

It's a practical fit for developers, designers, researchers, or anyone who handles sensitive work and doesn't want that data leaving their machine. Local inference does require reasonable hardware, but Jan handles model management inside the app, so you don't need to touch a terminal to get started.

Most AI assistants are a seat you rent on someone else's infrastructure. ZeroClaw runs as a single native binary on your own machine, using your own API keys or fully local models like Ollama. No cloud seat, no subscription, no ZeroClaw server in the middle.

The binary is built in Rust and starts in under 20ms. It uses less memory than a browser tab and runs on everything from a workstation to a Raspberry Pi, including ARM and x86. There's no Node, JVM, or Python environment to install.

What it connects to:

• 70+ LLM providers: local options like LM Studio, llama.cpp, vLLM, and LocalAI, plus hosted providers including Anthropic, OpenAI, Google Gemini, Amazon Bedrock, Mistral, Groq, and any OpenAI-compatible endpoint
• 30+ channels: Telegram, Discord, WhatsApp, Slack, Signal, iMessage, Matrix, email, IRC, Bluesky, Reddit, Nostr, Notion, webhooks, and more
• Hardware: GPIO on Raspberry Pi, STM32, Arduino, and ESP32

Security is the default posture, not an add-on.

• Supervised autonomy: medium-risk actions require your approval before they run; high-risk ones are blocked outright
• OS-level sandboxes: Landlock, Bubblewrap, Seatbelt, or Docker contain what the agent can touch, enforced by the kernel rather than a prompt
• Command allowlists: explicit workspace scoping decides what runs and where
• Tool receipts: every successful tool call can be stamped with an HMAC-SHA256 tag the model cannot forge, making fabricated runs or invented results detectable

YOLO mode exists for trusted dev environments and is strictly opt-in.

The agent supports multiple named agents running from a single daemon, each isolated. Skills package repeatable tasks with their tools. Scheduled jobs, webhook triggers, and channel events all run through the same agent loop inside the same sandbox and allowlists you've scoped. A2A discovery lets agents describe and find one another through the gateway.

With a local model, nothing leaves your machine at all. With a hosted provider, only your prompts go to the provider you chose, using your own key. Dual-licensed MIT OR Apache-2.0.

Khoj is a personal AI platform built for people who want a capable assistant they can actually trust. It connects to your documents and the web, turning any supported AI model into a research partner, automation engine, and second brain. The focus is transparency: citations are verifiable, behavior is inspectable, and you stay in control of what it accesses.

At its core, Khoj is designed around three distinct use cases:

• AI second brain: Ingest your own documents, then ask questions, get summaries, or run research across both your files and live web sources. Agents can be built on top to handle recurring tasks.
• Research workbench: Read and organize academic papers with citations you can check. Useful for anyone tracking a field or doing structured literature review.
• AI co-worker (beta): Assign multi-step tasks, track their progress, and receive polished outputs. This runs locally on your machine, keeping sensitive work off third-party servers.

Because it's open source and self-hostable, you're not locked into a single model or vendor. Swap the underlying model, run it on your own infrastructure, and keep your data private. That's a real distinction from closed alternatives like Humanloop or proprietary chat tools.

Khoj sits in similar territory to LobeChat and LLMChat, but leans harder into autonomous agents and scheduled automations rather than pure conversational UI. The scheduled automation feature means Khoj can run tasks on a cadence without you initiating each one manually.

It's a good fit for researchers, knowledge workers, and developers who want an AI assistant with genuine depth rather than a thin chat wrapper.

5ire brings sophisticated AI capabilities to your desktop with a clean, intuitive interface that makes advanced AI features accessible to everyone. The application stands out with its support for multiple leading AI providers including OpenAI, Anthropic, Google, and Mistral.

A key differentiator is the integration of the Model Context Protocol (MCP), which acts like a universal connector for AI applications. This allows 5ire to leverage various tools for file system access, database interactions, and remote data retrieval, expanding far beyond simple chat capabilities.

The built-in local knowledge base powered by bge-m3 embedding model enables multilingual document processing and vectorization. Users can analyze docx, pdf, xlsx, and other document formats for powerful local Retrieval-Augmented Generation. Additional features include:

• Usage analytics to track API spending and optimize costs
• Custom prompt library with variable support for reusable templates
• Conversation bookmarks that persist even after message deletion
• Full-text search across all conversations
• Free and open source with cross-platform support

5ire combines enterprise-grade AI capabilities with user-friendly design, making it an ideal choice for both casual users and professionals seeking a powerful desktop AI assistant.