Open Source Security & Privacy Tools

A curated collection of the best free and open source software for keeping systems and data safe, covering authentication, secrets, encryption, network security and threat detection.

Puter

A self-hostable desktop environment in the browser, with everyday apps for users and cloud, AI and storage APIs for developers.

Alternative to:

Dropbox

A full desktop environment that runs in your browser

Stars
43,937
Forks
4,122
Last commit
22 hours ago

Mattermost

Self-hosted collaboration platform with chat, workflow automation, voice calling and screen sharing for teams that must control their own deployment.

Alternative to:

Slack

Secure collaboration platform for mission-critical work

Stars
39,454

Tailscale

Private WireGuard networks made easy, with a daemon and CLI that connect machines across Linux, Windows, macOS and BSD.

Alternative to:

Cloudflare One

Zero-config VPN with WireGuard for secure networking

Stars
38,194

Better Auth

Framework-agnostic authentication and authorization library for TypeScript, for developers who need more than a login form without paying a vendor.

Alternative to:

Auth0

Framework-agnostic authentication for TypeScript applications

Stars
30,497

HashiCorp Vault

Secrets management tool that stores, generates and revokes credentials behind one interface, with access control and a detailed audit log.

Alternative to:

AWS Secrets Manager

Secure storage and access control for secrets and sensitive data

Stars
36,446

ProjectDiscovery

A template-driven vulnerability scanner that runs YAML detection recipes across HTTP, DNS, TCP and more, at scale from the command line.

Alternative to:

Detectify

Advanced vulnerability detection and management platform

Stars
32,381

Ente

End-to-end encrypted cloud platform behind photo, document and two-factor apps, for anyone who would rather not trust a provider.

Alternative to:

Apple iCloud Photos

Secure, private photo storage and sharing solution

Stars
29,685

Infisical

Secret management platform for engineering teams, reaching into certificates, key management and privileged access from one self-hostable place.

Alternative to:

AWS Secrets Manager

Secure secret management for modern development teams

Stars
30,054

JumpServer

Open source privileged access management bastion giving IT and DevOps teams browser-based access to servers, databases and Kubernetes clusters.

Alternative to:

CyberArk

Secure access management for modern IT infrastructure

Stars
31,840

Netbird

WireGuard-based overlay network with centralized access control, connecting machines peer to peer without open ports or VPN gateways.

Alternative to:

Cloudflare One

Zero Trust networking with WireGuard-based secure connectivity

Stars
30,275

Signal

Private messenger for Android that uses your data connection, with encryption always on for messages, voice and video calls.

Alternative to:

WhatsApp

Private messaging with end-to-end encryption

Stars
29,549

Authentik

Self-hosted identity provider speaking SAML, OAuth2, OIDC, LDAP and RADIUS, for teams running single sign-on on their own infrastructure.

Alternative to:

Auth0

Take control of your identity with a secure, flexible solution

Stars
26,147

Pangolin

Self-hostable SASE platform built on WireGuard that unites a zero trust VPN, reverse proxy and identity aware AI gateway.

Alternative to:

Cloudflare One

Zero trust network access that's better than VPN

Stars
23,255

Zitadel

Identity and access management for teams that need multi-tenancy, enterprise SSO and a full audit trail rather than basic login.

Alternative to:

Auth0

Secure, customizable identity infrastructure for developers

Stars
15,457

Logto

Auth infrastructure for SaaS and AI products, covering OIDC, OAuth 2.1, SAML, multi-tenancy and RBAC without hand-rolled protocol code.

Alternative to:

Auth0

Secure, seamless authentication for modern applications

Stars
14,806

SuperTokens

Self-hosted login and session management, an open-core alternative to Auth0 and Cognito that keeps user data in your own database.

Alternative to:

Auth0

Secure, customizable authentication for your applications

Stars
15,334

Element

A Matrix client for the web and desktop, giving teams and individuals decentralized chat they are free to host themselves.

Alternative to:

Slack

Secure, decentralized messaging for teams and individuals

Stars
13,620

Fluxer

A free and open source instant messaging and VoIP chat app for friends, groups and communities, with a fully self-hostable backend.

Alternative to:

Discord

Open source messaging with privacy and community focus

Stars
10,688

Ory

An API-first identity server handling login, registration, recovery and profile flows, so your services stop reimplementing them.

Alternative to:

Auth0

A certified and battle-tested identity solution

Stars
13,944

Unleash

A feature flag service for teams that want to ship code to production in small releases and control rollout.

Alternative to:

LaunchDarkly

Feature flags for rapid, risk-free software deployment

Stars
13,908

Cap

Lightweight CAPTCHA alternative using proof-of-work and instrumentation challenges, for sites that want bot resistance without user puzzles.

Alternative to:

Cloudflare Turnstile

Privacy-first CAPTCHA alternative with proof-of-work

Stars
8,195

Hanko

Authentication and user management server with passkeys, passwords, MFA and SAML SSO, built to avoid vendor lock-in.

Alternative to:

Auth0

Passkeys, SSO, and MFA without vendor lock-in

Stars
9,050

GrowthBook

Feature flags, experimentation and product analytics on your own data warehouse, for teams that will not build the platform themselves.

Alternative to:

Amplitude

Open-source A/B testing and feature flagging platform

Stars
8,539

FireZone

WireGuard based remote access with least privilege policies, for organizations replacing a legacy VPN with per-resource control.

Alternative to:

Cloudflare One

Fast, flexible VPN replacement with zero-trust security

Stars
9,133

Hexclave

User infrastructure for product teams, bundling authentication, teams, payments, emails and analytics behind one shared user model.

Alternative to:

Auth0

Modular auth, payments, emails, and analytics for your product

Stars
6,880

Tuta

An email service with end-to-end encryption built in, with open source clients for mobile, desktop and the browser for privacy-conscious users.

Alternative to:

Google Workspace

Secure email, calendar and contacts with end-to-end encryption

Stars
8,051

Flagsmith

A feature flag, remote config and A/B testing platform for teams that want release control on their own infrastructure.

Alternative to:

LaunchDarkly

Feature flags and remote config for rapid deployment

Stars
6,627

UnKey

A source-available developer platform for API infrastructure, covering key issuance, rate limiting, gateways, permissions and usage analytics.

Alternative to:

Amazon API Gateway

Secure, scalable API key management for developers

Stars
5,480

Permify

A fine-grained authorization service modeled on Google Zanzibar, for teams that want permission logic out of application code.

Alternative to:

Oso

Build scalable authorization in minutes, not months

Stars
5,967

Tracecat

Open source security automation platform combining agents, workflows, lookup tables and case management for security teams that prefer writing Python.

Alternative to:

Cortex XSOAR

Open source security automation platform for builders

Stars
3,872

Cerbos

Stateless authorization service that evaluates access rules written as YAML policies, keeping permission logic out of your application code.

Alternative to:

Oso

Secure, policy-based access control for modern applications

Stars
4,636

Flipt

Git-native feature flag platform that stores flags in your own repositories, so flag changes ship through the same review path as code.

Alternative to:

LaunchDarkly

Git-native feature management for developers

Stars
4,930

Zen

System-wide ad and tracker blocker for Windows, macOS and Linux that filters traffic from every application, not just the browser.

Alternative to:

AdGuard

System-wide ad-blocking and privacy protection, no extensions needed

Stars
4,314

Cinny

Matrix client built around a simple, elegant interface, available as a hosted web app, a desktop build or a static site you serve yourself.

Alternative to:

Slack

Secure and elegant Matrix client for seamless conversations

Stars
3,947

Stars
Forks
Last commit

Stars
Forks
Last commit

Stars
Forks
Last commit

Stars
Forks
Last commit

Stars
Forks
Last commit

Stars
Forks
Last commit

Open Source Security & Privacy Tools

A curated collection of the best free and open source software for keeping systems and data safe, covering authentication, secrets, encryption, network security and threat detection.

Puter

Mattermost

Tailscale

Better Auth

HashiCorp Vault

ProjectDiscovery

Ente

Infisical

JumpServer

Netbird

Signal

Authentik

Pangolin

Zitadel

Logto

SuperTokens

Element

Fluxer

Ory

Unleash

Cap

Hanko

GrowthBook

FireZone

Hexclave

Tuta

Flagsmith

UnKey

Permify

Tracecat

Cerbos

Flipt

Zen

Cinny

Puter

Mattermost

Tailscale

Better Auth

HashiCorp Vault

ProjectDiscovery

Ente

Infisical

JumpServer

Netbird

Signal

Authentik

Pangolin

Zitadel

Logto

SuperTokens

Element

Fluxer

Ory

Unleash

Cap

Hanko

GrowthBook

FireZone

Hexclave

Tuta

Flagsmith

UnKey

Permify

Tracecat

Cerbos

Flipt

Zen

Cinny

Keycloak