Open Source Security & Privacy Tools
A curated collection of the best open source software for protecting systems and data, spanning application and network security, identity and access management, secrets, and threat detection.
Passkeys, SSO, and MFA without vendor lock-in
Stars
9,036Last commit
4 hours agoLicense
Unknown
Open source authentication platform supporting passkeys, 2FA, SSO, and social login. Self-host or use Hanko Cloud, with full control over your data and no lock-in.
Open Source Alternative to:
A full desktop environment that runs in your browser
Stars
43,609Last commit
4 hours agoLicense
AGPL-3.0
Puter is a cloud-based desktop OS you run in the browser, with built-in apps, file storage, and support for hosting web apps and sites.
Open Source Alternative to:
Secure collaboration platform for mission-critical work
Stars
39,214Last commit
3 hours agoLicense
Unknown
Mattermost provides a flexible, open-source platform for secure team collaboration, designed for organizations with strict security and privacy requirements.
Open Source Alternative to:
Secure authentication and access control made simple
Stars
37,042Last commit
5 hours agoLicense
Apache-2.0
Comprehensive open source identity management solution offering single sign-on, social login, and fine-grained authorization for applications and services.
Open Source Alternative to:
Framework-agnostic authentication for TypeScript applications
Stars
30,120Last commit
11 hours agoLicense
MIT
A comprehensive authentication framework offering email/password, social sign-on, two-factor auth, and multi-tenant support with full TypeScript integration.
Open Source Alternative to:
Advanced vulnerability detection and management platform
Stars
31,615Last commit
4 hours agoLicense
MIT
Monitor infrastructure for exploitable vulnerabilities with real-time detection, automated workflows, and zero false positives.
Open Source Alternative to:
Secure storage and access control for secrets and sensitive data
Stars
36,317Last commit
12 hours agoLicense
Unknown
Manages tokens, passwords, certificates, and encryption keys through a UI, CLI, or HTTP API, with dynamic credentials and encryption-as-a-service built in.
Open Source Alternative to:
Secure access management for modern IT infrastructure
Stars
31,667Last commit
3 hours agoLicense
GPL-3.0
Open-source privileged access management solution offering secure, browser-based access to SSH, RDP, Kubernetes, databases and remote applications.
Open Source Alternative to:
Secure, private photo storage and sharing solution
Stars
29,150Last commit
3 hours agoLicense
AGPL-3.0
End-to-end encrypted cloud storage for photos and videos, offering privacy, security, and seamless cross-device syncing.
Open Source Alternative to:
Secure secret management for modern development teams
Stars
29,497Last commit
3 hours agoLicense
MIT
End-to-end encrypted secret management platform for seamless integration and enhanced security in development workflows.
Open Source Alternative to:
Private messaging with end-to-end encryption
Stars
29,401Last commit
4 days agoLicense
AGPL-3.0
Secure messaging app with state-of-the-art encryption, voice/video calls, group chats, and file sharing. No ads, trackers, or data collection.
Open Source Alternative to:
Take control of your identity with a secure, flexible solution
Stars
25,774Last commit
3 hours agoLicense
MIT
authentik is an open-source identity provider that offers self-hosted authentication, authorization, and user management for businesses of all sizes.
Open Source Alternative to:
Secure, customizable identity infrastructure for developers
Stars
15,124Last commit
5 hours agoLicense
AGPL-3.0
ZITADEL provides a comprehensive identity management solution with easy APIs, customizable workflows, and serverless deployment options.
Open Source Alternative to:
Secure, seamless authentication for modern applications
Stars
14,647Last commit
6 hours agoLicense
MPL-2.0
An open-source identity solution offering customizable login experiences, multi-tenant support, and comprehensive user management.
Open Source Alternative to:
Secure, customizable authentication for your applications
Stars
15,323Last commit
3 hours agoLicense
Unknown
Open-source authentication solution offering flexible, self-hosted user management with advanced features and easy integration.
Open Source Alternative to:
Open source messaging with privacy and community focus
Stars
10,435Last commit
9 hours agoLicense
AGPL-3.0
Free, open-source instant messaging and VoIP platform with full Markdown support, voice/video calls, moderation tools, and self-hosting options for communities.
Open Source Alternative to:
Secure, decentralized messaging for teams and individuals
Stars
13,527Last commit
3 hours agoLicense
AGPL-3.0
Open-source platform for encrypted communication, file sharing, and collaboration based on the Matrix protocol.
Open Source Alternative to:
A certified and battle-tested identity solution
Stars
13,896Last commit
2 months agoLicense
Apache-2.0
Ory is a certified and battle-tested identity solution backed by a large open source community and trusted by Fortune 500 companies.
Open Source Alternative to:
Feature flags for rapid, risk-free software deployment
Stars
13,842Last commit
3 hours agoLicense
AGPL-3.0
A powerful feature management platform enabling gradual rollouts, A/B testing, and seamless integration for continuous delivery.
Open Source Alternative to:
Passwordless OIDC provider built for self-hosters
Stars
9,317Last commit
12 hours agoLicense
BSD-2-Clause
Self-hostable OpenID Connect and OAuth 2.0 provider that lets users sign in to any OIDC-compatible app using passkeys instead of passwords.
Open Source Alternative to:
Privacy-first CAPTCHA alternative with proof-of-work
Stars
7,883Last commit
5 days agoLicense
Apache-2.0
Lightweight open-source CAPTCHA solution using SHA-256 proof-of-work. 250x smaller than hCaptcha, fully customizable, and privacy-focused with zero telemetry.
Open Source Alternative to:
Open-source A/B testing and feature flagging platform
Stars
8,451Last commit
4 hours agoLicense
MIT
Powerful, developer-friendly experimentation tool for data-driven product decisions. Seamless integration, real-time insights, and flexible deployment.
Open Source Alternative to:
Modular auth, payments, emails, and analytics for your product
Stars
6,862Last commit
12 hours agoLicense
Unknown
Self-hostable platform combining user auth, payments, email, and analytics into modular building blocks that fit around your existing product.
Open Source Alternative to:
Secure email, calendar and contacts with end-to-end encryption
Stars
7,960Last commit
3 hours agoLicense
GPL-3.0
Tuta offers encrypted email, calendar and contacts with quantum-resistant security, protecting your privacy without ads or tracking.
Open Source Alternative to:
Feature flags and remote config for rapid deployment
Stars
6,582Last commit
11 hours agoLicense
BSD-3-Clause
Powerful feature management platform for seamless software releases, A/B testing, and personalized user experiences.
Open Source Alternative to:
Secure, scalable API key management for developers
Stars
5,452Last commit
4 hours agoLicense
AGPL-3.0
Streamline API authentication with UnKey's powerful, developer-friendly platform for creating, revoking, and monitoring API keys.
Open Source Alternative to:
Build scalable authorization in minutes, not months
Stars
5,960Last commit
6 days agoLicense
AGPL-3.0
Open-source authorization service for implementing fine-grained access controls. Centralized, scalable solution supporting RBAC, ABAC and ReBAC with Google Zanzibar-inspired architecture.
Open Source Alternative to:
Open source security automation platform for builders
Stars
3,821Last commit
8 hours agoLicense
AGPL-3.0
Tracecat is a scalable, self-hostable platform for automating security workflows and playbooks without limits.
Open Source Alternative to:
Secure, policy-based access control for modern applications
Stars
4,600Last commit
23 hours agoLicense
Apache-2.0
A scalable authorization layer that provides fine-grained access control through externalized policies, enabling secure and flexible permissions management.
Open Source Alternative to:
Git-native feature management for developers
Stars
4,912Last commit
6 hours agoLicense
GPL-3.0
A feature flag platform that integrates with Git workflows, enabling developers to manage features directly in their codebase.
Open Source Alternative to:
Secure and elegant Matrix client for seamless conversations
Stars
3,907Last commit
15 hours agoLicense
AGPL-3.0
Cinny offers a simple, elegant, and secure interface for Matrix-based conversations, protected by end-to-end encryption.
Open Source Alternative to:
Open-source code security engine for developers
Stars
3,122Last commit
12 hours agoLicense
LGPL-2.1
Opengrep is a community-driven fork of SemgrepCE, providing accessible static code analysis and security scanning for developers.
Group chat for friends and communities, without the baggage
Stars
3,363Last commit
4 hours agoLicense
Unknown
Self-hostable group chat with servers, channels, voice, and moderation tools. No ads, no data mining, built under EU privacy law.
Open Source Alternative to:
Zero-Trust VPN with built-in 2FA/MFA and SSO capabilities
Stars
2,850Last commit
3 hours agoLicense
Unknown
Enterprise-grade open source VPN solution combining WireGuard with mandatory 2FA/MFA and integrated OpenID Connect SSO for secure remote access
Open Source Alternative to:
Next-Gen CAPTCHA and Spam Protection, GDPR compliant
Stars
2,784Last commit
9 days agoLicense
MIT
ALTCHA offers cutting-edge spam and abuse protection for websites and apps, with privacy-friendly CAPTCHA alternatives designed for GDPR compliance.
Open Source Alternative to:
Serverless team chat over Tor, no phone number needed
Stars
2,655Last commit
1 day agoLicense
GPL-3.0
Quiet is a peer-to-peer messaging app that syncs messages directly between devices over Tor, with no central server, no phone number required, and no metadata leaks.
Open Source Alternative to:
Secure, private, and decentralized file storage
Stars
2,530Last commit
18 hours agoLicense
AGPL-3.0
A peer-to-peer encrypted filesystem for secure file storage, sharing, and collaboration with end-to-end encryption and user-controlled data.
Open Source Alternative to:
Security framework that protects from within your product
Stars
1,529Last commit
2 days agoLicense
AGPL-3.0
Open-source security framework for threat detection, fraud prevention, and abuse monitoring. Self-hosted solution with built-in dashboard and risk scoring.
Open Source Alternative to:
Open-source feature flag management for seamless deployments
Stars
1,908Last commit
7 hours agoLicense
MIT
FeatBit is a fast, scalable feature flag service that enables risk mitigation and fosters business growth through controlled feature releases.
Open Source Alternative to:
Managed identity and access management for any app
Stars
2,078Last commit
3 hours agoLicense
Apache-2.0
Authgear is a managed IAM platform handling authentication, SSO, and user management for B2C and B2B apps, with biometrics, MFA, and zero-trust support.
Open Source Alternative to:
Privacy-first proof-of-work CAPTCHA without user friction
Stars
2,494Last commit
1 year agoLicense
AGPL-3.0
Privacy-focused proof-of-work CAPTCHA system that silently protects websites without tracking users or requiring image solving. Drop-in replacement for reCAPTCHA.
Open Source Alternative to:
Secure collaboration platform with end-to-end encryption
Stars
2,549Last commit
9 months agoLicense
GPL-3.0
A comprehensive collaboration platform offering end-to-end encrypted messaging, file sharing, and video calls with enterprise-grade security and compliance features.
Open Source Alternative to:
Capture – Capture screenshots, generate PDFs, scrape content, extract metadata, and automate browsers with one API.
Capture
Windshift
Stellar Hosted