Open Source Security & Privacy Tools
A curated collection of the best open source software for protecting systems and data, spanning application and network security, identity and access management, secrets, and threat detection.
Passkeys, SSO, and MFA without vendor lock-in
Stars
9,005Last commit
2 days agoLicense
Unknown
Open source authentication platform supporting passkeys, 2FA, SSO, and social login. Self-host or use Hanko Cloud, with full control over your data and no lock-in.
Open Source Alternative to:
A full desktop environment that runs in your browser
Stars
43,106Last commit
8 hours agoLicense
AGPL-3.0
Puter is a cloud-based desktop OS you run in the browser, with built-in apps, file storage, and support for hosting web apps and sites.
Open Source Alternative to:
Privacy-focused browser with powerful customization
Stars
43,980Last commit
7 hours agoLicense
MPL-2.0
A Firefox-based browser offering enhanced privacy, split views, and extensive customization options for a personalized browsing experience.
Open Source Alternative to:
Secure collaboration platform for mission-critical work
Stars
38,841Last commit
6 hours agoLicense
Unknown
Mattermost provides a flexible, open-source platform for secure team collaboration, designed for organizations with strict security and privacy requirements.
Open Source Alternative to:
Secure authentication and access control made simple
Stars
36,283Last commit
8 hours agoLicense
Apache-2.0
Comprehensive open source identity management solution offering single sign-on, social login, and fine-grained authorization for applications and services.
Open Source Alternative to:
Zero-config VPN with WireGuard for secure networking
Stars
35,357Last commit
7 hours agoLicense
BSD-3-Clause
Deploy a modern WireGuard-based VPN with zero configuration. Connect devices securely across clouds, VPCs, and on-premises networks without firewall rules.
Open Source Alternative to:
Framework-agnostic authentication for TypeScript applications
Stars
29,596Last commit
14 hours agoLicense
MIT
A comprehensive authentication framework offering email/password, social sign-on, two-factor auth, and multi-tenant support with full TypeScript integration.
Open Source Alternative to:
Secure storage and access control for secrets and sensitive data
Stars
36,141Last commit
7 hours agoLicense
Unknown
Manages tokens, passwords, certificates, and encryption keys through a UI, CLI, or HTTP API, with dynamic credentials and encryption-as-a-service built in.
Open Source Alternative to:
Advanced vulnerability detection and management platform
Stars
30,602Last commit
2 days agoLicense
MIT
Monitor infrastructure for exploitable vulnerabilities with real-time detection, automated workflows, and zero false positives.
Open Source Alternative to:
Secure access management for modern IT infrastructure
Stars
31,404Last commit
13 hours agoLicense
GPL-3.0
Open-source privileged access management solution offering secure, browser-based access to SSH, RDP, Kubernetes, databases and remote applications.
Open Source Alternative to:
Secure, private photo storage and sharing solution
Stars
28,417Last commit
9 hours agoLicense
AGPL-3.0
End-to-end encrypted cloud storage for photos and videos, offering privacy, security, and seamless cross-device syncing.
Open Source Alternative to:
Secure secret management for modern development teams
Stars
28,846Last commit
6 hours agoLicense
MIT
End-to-end encrypted secret management platform for seamless integration and enhanced security in development workflows.
Open Source Alternative to:
Private messaging with end-to-end encryption
Stars
29,222Last commit
2 days agoLicense
AGPL-3.0
Secure messaging app with state-of-the-art encryption, voice/video calls, group chats, and file sharing. No ads, trackers, or data collection.
Open Source Alternative to:
Zero Trust networking with WireGuard-based secure connectivity
Stars
28,515Last commit
7 hours agoLicense
Unknown
Open source platform combining WireGuard overlay networks with Zero Trust access controls. Features SSO, MFA, device posture checks, and granular policies for secure remote connectivity.
Open Source Alternative to:
Zero trust network access that's better than VPN
Stars
22,383Last commit
8 hours agoLicense
AGPL-3.0
Deploy zero trust access to infrastructure, self-hosted apps, and SaaS tools in days. Identity-aware security with seamless user experience.
Open Source Alternative to:
Take control of your identity with a secure, flexible solution
Stars
24,982Last commit
6 hours agoLicense
MIT
authentik is an open-source identity provider that offers self-hosted authentication, authorization, and user management for businesses of all sizes.
Open Source Alternative to:
Privacy-first browser with ad-blocking and no bloat
Stars
19,609Last commit
7 hours agoLicense
GPL-3.0
Chromium-based desktop browser with default ad and tracker blocking, no analytics, native !bangs, split view, and full MV2 extension support.
Open Source Alternative to:
Secure password management for individuals and businesses
Stars
19,901Last commit
6 hours agoLicense
Unknown
Bitwarden is an open source password manager that securely stores, shares, and autofills passwords across unlimited devices.
Open Source Alternative to:
Secure, seamless authentication for modern applications
Stars
14,385Last commit
8 hours agoLicense
MPL-2.0
An open-source identity solution offering customizable login experiences, multi-tenant support, and comprehensive user management.
Open Source Alternative to:
Secure, customizable identity infrastructure for developers
Stars
14,787Last commit
11 hours agoLicense
AGPL-3.0
ZITADEL provides a comprehensive identity management solution with easy APIs, customizable workflows, and serverless deployment options.
Open Source Alternative to:
Secure, customizable authentication for your applications
Stars
15,268Last commit
10 hours agoLicense
Unknown
Open-source authentication solution offering flexible, self-hosted user management with advanced features and easy integration.
Open Source Alternative to:
Open source messaging with privacy and community focus
Stars
10,035Last commit
6 hours agoLicense
AGPL-3.0
Free, open-source instant messaging and VoIP platform with full Markdown support, voice/video calls, moderation tools, and self-hosting options for communities.
Open Source Alternative to:
Secure, decentralized messaging for teams and individuals
Stars
13,388Last commit
6 hours agoLicense
AGPL-3.0
Open-source platform for encrypted communication, file sharing, and collaboration based on the Matrix protocol.
Open Source Alternative to:
A certified and battle-tested identity solution
Stars
13,833Last commit
22 days agoLicense
Apache-2.0
Ory is a certified and battle-tested identity solution backed by a large open source community and trusted by Fortune 500 companies.
Open Source Alternative to:
Feature flags for rapid, risk-free software deployment
Stars
13,746Last commit
9 hours agoLicense
AGPL-3.0
A powerful feature management platform enabling gradual rollouts, A/B testing, and seamless integration for continuous delivery.
Open Source Alternative to:
Privacy-first CAPTCHA alternative with proof-of-work
Stars
7,544Last commit
5 days agoLicense
Apache-2.0
Lightweight open-source CAPTCHA solution using SHA-256 proof-of-work. 250x smaller than hCaptcha, fully customizable, and privacy-focused with zero telemetry.
Open Source Alternative to:
Fast, flexible VPN replacement with zero-trust security
Stars
9,038Last commit
7 hours agoLicense
Apache-2.0
Replace your VPN with zero-trust access built on WireGuard. Fast, scalable network security with simple policies and identity provider integration.
Open Source Alternative to:
Open-source A/B testing and feature flagging platform
Stars
8,139Last commit
6 hours agoLicense
MIT
Powerful, developer-friendly experimentation tool for data-driven product decisions. Seamless integration, real-time insights, and flexible deployment.
Open Source Alternative to:
Modular auth, payments, emails, and analytics for your product
Stars
6,842Last commit
6 hours agoLicense
Unknown
Self-hostable platform combining user auth, payments, email, and analytics into modular building blocks that fit around your existing product.
Open Source Alternative to:
Secure email, calendar and contacts with end-to-end encryption
Stars
7,863Last commit
6 hours agoLicense
GPL-3.0
Tuta offers encrypted email, calendar and contacts with quantum-resistant security, protecting your privacy without ads or tracking.
Open Source Alternative to:
Feature flags and remote config for rapid deployment
Stars
6,519Last commit
11 hours agoLicense
BSD-3-Clause
Powerful feature management platform for seamless software releases, A/B testing, and personalized user experiences.
Open Source Alternative to:
Secure, scalable API key management for developers
Stars
5,420Last commit
7 hours agoLicense
AGPL-3.0
Streamline API authentication with UnKey's powerful, developer-friendly platform for creating, revoking, and monitoring API keys.
Open Source Alternative to:
Build scalable authorization in minutes, not months
Stars
5,936Last commit
18 hours agoLicense
AGPL-3.0
Open-source authorization service for implementing fine-grained access controls. Centralized, scalable solution supporting RBAC, ABAC and ReBAC with Google Zanzibar-inspired architecture.
Open Source Alternative to:
Secure password management for teams
Stars
6,081Last commit
2 days agoLicense
AGPL-3.0
Open source password manager focused on security, collaboration and privacy for organizations
Open Source Alternative to:
System-wide ad-blocking and privacy protection, no extensions needed
Stars
4,134Last commit
6 days agoLicense
MIT
Free, open-source desktop app that blocks ads, trackers, and surveillance scripts across all browsers and apps on Windows, macOS, and Linux.
Open Source Alternative to:
Open source security automation platform for builders
Stars
3,770Last commit
6 hours agoLicense
AGPL-3.0
Tracecat is a scalable, self-hostable platform for automating security workflows and playbooks without limits.
Open Source Alternative to:
Secure, policy-based access control for modern applications
Stars
4,543Last commit
2 days agoLicense
Apache-2.0
A scalable authorization layer that provides fine-grained access control through externalized policies, enabling secure and flexible permissions management.
Open Source Alternative to:
Git-native feature management for developers
Stars
4,873Last commit
11 hours agoLicense
GPL-3.0
A feature flag platform that integrates with Git workflows, enabling developers to manage features directly in their codebase.
Open Source Alternative to:
Secure and elegant Matrix client for seamless conversations
Stars
3,848Last commit
5 days agoLicense
AGPL-3.0
Cinny offers a simple, elegant, and secure interface for Matrix-based conversations, protected by end-to-end encryption.
Open Source Alternative to:
Open-source code security engine for developers
Stars
2,970Last commit
9 hours agoLicense
LGPL-2.1
Opengrep is a community-driven fork of SemgrepCE, providing accessible static code analysis and security scanning for developers.
Group chat for friends and communities, without the baggage
Stars
3,231Last commit
1 day agoLicense
Unknown
Self-hostable group chat with servers, channels, voice, and moderation tools. No ads, no data mining, built under EU privacy law.
Open Source Alternative to:
Zero-Trust VPN with built-in 2FA/MFA and SSO capabilities
Stars
2,805Last commit
14 hours agoLicense
Unknown
Enterprise-grade open source VPN solution combining WireGuard with mandatory 2FA/MFA and integrated OpenID Connect SSO for secure remote access
Open Source Alternative to:
Capture – Capture screenshots, generate PDFs, scrape content, extract metadata, and automate browsers with one API.
Capture
Stellar Hosted
Sent