Submit
Ad
Learn more

Open Source Security & Privacy Tools

A curated collection of the best open source software for protecting systems and data, spanning application and network security, identity and access management, secrets, and threat detection..

See also:Secrets ManagementApplication SecurityIdentity & Access Management (IAM)Network SecurityThreat Detection & ResponseData Security & PrivacyFraud Prevention

Hanko

Passkeys, SSO, and MFA without vendor lock-in

  • Stars

    9,067

  • Last commit

    2 days ago

  • License

    AGPL-3.0
Open source authentication platform supporting passkeys, 2FA, SSO, and social login. Self-host or use Hanko Cloud, with full control over your data and no lock-in.

Open Source Alternative to:

Auth0

Puter

A full desktop environment that runs in your browser

  • Stars

    44,104

  • Last commit

    12 hours ago

  • License

    AGPL-3.0
Puter is a cloud-based desktop OS you run in the browser, with built-in apps, file storage, and support for hosting web apps and sites.

Open Source Alternative to:

Google Drive

Mattermost

Secure collaboration platform for mission-critical work

  • Stars

    39,557

  • Last commit

    9 hours ago

  • License

    Unknown
Mattermost provides a flexible, open-source platform for secure team collaboration, designed for organizations with strict security and privacy requirements.

Open Source Alternative to:

Microsoft Teams

Keycloak

Secure authentication and access control made simple

  • Stars

    37,749

  • Last commit

    13 hours ago

  • License

    Apache-2.0
Comprehensive open source identity management solution offering single sign-on, social login, and fine-grained authorization for applications and services.

Open Source Alternative to:

Auth0

Better Auth

Framework-agnostic authentication for TypeScript applications

  • Stars

    30,642

  • Last commit

    10 hours ago

  • License

    MIT
A comprehensive authentication framework offering email/password, social sign-on, two-factor auth, and multi-tenant support with full TypeScript integration.

Open Source Alternative to:

Auth0

ProjectDiscovery

AI
Advanced vulnerability detection and management platform

  • Stars

    32,667

  • Last commit

    18 hours ago

  • License

    MIT
Monitor infrastructure for exploitable vulnerabilities with real-time detection, automated workflows, and zero false positives.

Open Source Alternative to:

DataDog

HashiCorp Vault

Secure storage and access control for secrets and sensitive data

  • Stars

    36,481

  • Last commit

    2 days ago

  • License

    Unknown
Manages tokens, passwords, certificates, and encryption keys through a UI, CLI, or HTTP API, with dynamic credentials and encryption-as-a-service built in.

Open Source Alternative to:

1Password

JumpServer

Secure access management for modern IT infrastructure

  • Stars

    31,919

  • Last commit

    2 days ago

  • License

    GPL-3.0
Open-source privileged access management solution offering secure, browser-based access to SSH, RDP, Kubernetes, databases and remote applications.

Open Source Alternative to:

Teleport

Infisical

Secure secret management for modern development teams

  • Stars

    30,347

  • Last commit

    9 hours ago

  • License

    MIT
End-to-end encrypted secret management platform for seamless integration and enhanced security in development workflows.

Open Source Alternative to:

Keeper

Ente

Secure, private photo storage and sharing solution

  • Stars

    29,973

  • Last commit

    10 hours ago

  • License

    AGPL-3.0
End-to-end encrypted cloud storage for photos and videos, offering privacy, security, and seamless cross-device syncing.

Open Source Alternative to:

Google Drive

Signal

Private messaging with end-to-end encryption

  • Stars

    29,597

  • Last commit

    3 days ago

  • License

    AGPL-3.0
Secure messaging app with state-of-the-art encryption, voice/video calls, group chats, and file sharing. No ads, trackers, or data collection.

Open Source Alternative to:

WhatsApp

Authentik

Take control of your identity with a secure, flexible solution

  • Stars

    26,267

  • Last commit

    11 hours ago

  • License

    MIT
authentik is an open-source identity provider that offers self-hosted authentication, authorization, and user management for businesses of all sizes.

Open Source Alternative to:

Auth0

Zitadel

Secure, customizable identity infrastructure for developers

  • Stars

    15,541

  • Last commit

    4 days ago

  • License

    AGPL-3.0
ZITADEL provides a comprehensive identity management solution with easy APIs, customizable workflows, and serverless deployment options.

Open Source Alternative to:

Supabase

Logto

Secure, seamless authentication for modern applications

  • Stars

    14,853

  • Last commit

    1 day ago

  • License

    MPL-2.0
An open-source identity solution offering customizable login experiences, multi-tenant support, and comprehensive user management.

Open Source Alternative to:

Auth0

SuperTokens

Secure, customizable authentication for your applications

  • Stars

    15,344

  • Last commit

    2 days ago

  • License

    Unknown
Open-source authentication solution offering flexible, self-hosted user management with advanced features and easy integration.

Open Source Alternative to:

Auth0

Cryptomator

Client-side encryption for your cloud files

  • Stars

    16,461

  • Last commit

    2 days ago

  • License

    GPL-3.0
Encrypts files and filenames locally before they reach Dropbox, Google Drive, OneDrive, or any other cloud, so only you hold the key.

Open Source Alternative to:

pCloud Encryption

Fluxer

Open source messaging with privacy and community focus

  • Stars

    10,816

  • Last commit

    11 hours ago

  • License

    AGPL-3.0
Free, open-source instant messaging and VoIP platform with full Markdown support, voice/video calls, moderation tools, and self-hosting options for communities.

Open Source Alternative to:

Discord

Element

Secure, decentralized messaging for teams and individuals

  • Stars

    13,640

  • Last commit

    2 days ago

  • License

    AGPL-3.0
Open-source platform for encrypted communication, file sharing, and collaboration based on the Matrix protocol.

Open Source Alternative to:

Discord

Unleash

Feature flags for rapid, risk-free software deployment

  • Stars

    14,204

  • Last commit

    2 days ago

  • License

    AGPL-3.0
A powerful feature management platform enabling gradual rollouts, A/B testing, and seamless integration for continuous delivery.

Open Source Alternative to:

LaunchDarkly

Ory

A certified and battle-tested identity solution

  • Stars

    13,950

  • Last commit

    3 months ago

  • License

    Apache-2.0
Ory is a certified and battle-tested identity solution backed by a large open source community and trusted by Fortune 500 companies.

Open Source Alternative to:

Firebase

Pocket ID

Passwordless OIDC provider built for self-hosters

  • Stars

    Stars growing over the last 30 days10,193

  • Last commit

    1 day ago

  • License

    BSD-2-Clause
Self-hostable OpenID Connect and OAuth 2.0 provider that lets users sign in to any OIDC-compatible app using passkeys instead of passwords.

Open Source Alternative to:

Auth0

Cap

Privacy-first CAPTCHA alternative with proof-of-work

  • Stars

    Stars growing over the last 30 days8,282

  • Last commit

    1 day ago

  • License

    Apache-2.0
Lightweight open-source CAPTCHA solution using SHA-256 proof-of-work. 250x smaller than hCaptcha, fully customizable, and privacy-focused with zero telemetry.

Open Source Alternative to:

reCAPTCHA

GrowthBook

Open-source A/B testing and feature flagging platform

  • Stars

    8,575

  • Last commit

    9 hours ago

  • License

    MIT
Powerful, developer-friendly experimentation tool for data-driven product decisions. Seamless integration, real-time insights, and flexible deployment.

Open Source Alternative to:

LaunchDarkly

Hexclave

Modular auth, payments, emails, and analytics for your product

  • Stars

    6,886

  • Last commit

    2 days ago

  • License

    Unknown
Self-hostable platform combining user auth, payments, email, and analytics into modular building blocks that fit around your existing product.

Open Source Alternative to:

Auth0

Tuta

Secure email, calendar and contacts with end-to-end encryption

  • Stars

    8,132

  • Last commit

    2 days ago

  • License

    GPL-3.0
Tuta offers encrypted email, calendar and contacts with quantum-resistant security, protecting your privacy without ads or tracking.

Open Source Alternative to:

Gmail

Flagsmith

Feature flags and remote config for rapid deployment

  • Stars

    Stars growing over the last 30 days6,819

  • Last commit

    1 day ago

  • License

    BSD-3-Clause
Powerful feature management platform for seamless software releases, A/B testing, and personalized user experiences.

Open Source Alternative to:

LaunchDarkly

UnKey

Secure, scalable API key management for developers

  • Stars

    5,483

  • Last commit

    17 hours ago

  • License

    AGPL-3.0
Streamline API authentication with UnKey's powerful, developer-friendly platform for creating, revoking, and monitoring API keys.

Open Source Alternative to:

Kong

Permify

Build scalable authorization in minutes, not months

  • Stars

    5,970

  • Last commit

    2 days ago

  • License

    AGPL-3.0
Open-source authorization service for implementing fine-grained access controls. Centralized, scalable solution supporting RBAC, ABAC and ReBAC with Google Zanzibar-inspired architecture.

Open Source Alternative to:

Auth0

Tracecat

AI
Open source security automation platform for builders

  • Stars

    3,896

  • Last commit

    11 hours ago

  • License

    AGPL-3.0
Tracecat is a scalable, self-hostable platform for automating security workflows and playbooks without limits.

Open Source Alternative to:

Splunk

Cerbos

Secure, policy-based access control for modern applications

  • Stars

    4,649

  • Last commit

    2 days ago

  • License

    Apache-2.0
A scalable authorization layer that provides fine-grained access control through externalized policies, enabling secure and flexible permissions management.

Open Source Alternative to:

Auth0

Flipt

Git-native feature management for developers

  • Stars

    4,940

  • Last commit

    2 days ago

  • License

    GPL-3.0
A feature flag platform that integrates with Git workflows, enabling developers to manage features directly in their codebase.

Open Source Alternative to:

LaunchDarkly

Cinny

Secure and elegant Matrix client for seamless conversations

  • Stars

    3,974

  • Last commit

    15 hours ago

  • License

    AGPL-3.0
Cinny offers a simple, elegant, and secure interface for Matrix-based conversations, protected by end-to-end encryption.

Open Source Alternative to:

Discord

Opengrep

Open-source code security engine for developers

  • Stars

    Stars growing over the last 30 days3,299

  • Last commit

    2 days ago

  • License

    LGPL-2.1
Opengrep is a community-driven fork of SemgrepCE, providing accessible static code analysis and security scanning for developers.

Stoat

Group chat for friends and communities, without the baggage

  • Stars

    3,455

  • Last commit

    2 days ago

  • License

    Unknown
Self-hostable group chat with servers, channels, voice, and moderation tools. No ads, no data mining, built under EU privacy law.

Open Source Alternative to:

Discord

ALTCHA

Next-Gen CAPTCHA and Spam Protection, GDPR compliant

  • Stars

    2,884

  • Last commit

    17 days ago

  • License

    MIT
ALTCHA offers cutting-edge spam and abuse protection for websites and apps, with privacy-friendly CAPTCHA alternatives designed for GDPR compliance.

Open Source Alternative to:

reCAPTCHA

Defguard

Zero-Trust VPN with built-in 2FA/MFA and SSO capabilities

  • Stars

    2,904

  • Last commit

    11 hours ago

  • License

    Unknown
Enterprise-grade open source VPN solution combining WireGuard with mandatory 2FA/MFA and integrated OpenID Connect SSO for secure remote access

Open Source Alternative to:

NordVPN

Quiet

Serverless team chat over Tor, no phone number needed

  • Stars

    2,662

  • Last commit

    6 days ago

  • License

    GPL-3.0
Quiet is a peer-to-peer messaging app that syncs messages directly between devices over Tor, with no central server, no phone number required, and no metadata leaks.

Open Source Alternative to:

Discord

Peergos

Secure, private, and decentralized file storage

  • Stars

    2,552

  • Last commit

    15 hours ago

  • License

    AGPL-3.0
A peer-to-peer encrypted filesystem for secure file storage, sharing, and collaboration with end-to-end encryption and user-controlled data.

Open Source Alternative to:

Dropbox

Authgear

Managed identity and access management for any app

  • Stars

    2,146

  • Last commit

    2 days ago

  • License

    Apache-2.0
Authgear is a managed IAM platform handling authentication, SSO, and user management for B2C and B2B apps, with biometrics, MFA, and zero-trust support.

Open Source Alternative to:

Auth0

Tirreno

Security framework that protects from within your product

  • Stars

    1,562

  • Last commit

    15 days ago

  • License

    AGPL-3.0
Open-source security framework for threat detection, fraud prevention, and abuse monitoring. Self-hosted solution with built-in dashboard and risk scoring.

Open Source Alternative to:

Seon

FeatBit

Open-source feature flag management for seamless deployments

  • Stars

    1,963

  • Last commit

    12 hours ago

  • License

    MIT
FeatBit is a fast, scalable feature flag service that enables risk mitigation and fosters business growth through controlled feature releases.

Open Source Alternative to:

LaunchDarkly

mCaptcha

Privacy-first proof-of-work CAPTCHA without user friction

  • Stars

    2,497

  • Last commit

    1 year ago

  • License

    AGPL-3.0
Privacy-focused proof-of-work CAPTCHA system that silently protects websites without tracking users or requiring image solving. Drop-in replacement for reCAPTCHA.

Open Source Alternative to:

reCAPTCHA
Ad

 
Ad

 
Ad