Open Source Security & Privacy Software
Security & Privacy software manages network access, identity verification, and data encryption to protect digital environments. These tools block trackers at the DNS level, establish private tunnels between remote servers, and handle single sign-on authentication for multiple applications. This type of software serves system administrators and developers who need to manage login credentials and network traffic on their own hardware. Self-hosting these apps ensures that authentication logs and private encryption keys remain on local infrastructure rather than on external servers.
This page lists 102 open source tools in the Security & Privacy category. The most popular are LocalSend, PocketBase and Pi-hole. Most use the AGPL-3.0 or Apache-2.0 license, and 87 offer an official Docker image.
LocalSend
Share files and messages between nearby devices over a local network without requiring an internet connection.
PocketBase
Provides a self‑hosted backend with real‑time SQLite database, authentication, file storage and admin UI.
Pi-hole
A network-wide DNS sinkhole that blocks unwanted content for all devices on a local network.
Sentry
An error tracking and performance monitoring platform that helps developers detect and resolve software issues through debugging.
Keycloak
An identity and access management server providing single sign-on, user federation, and fine-grained authorization for applications.
AdGuard Home
A network-wide DNS server that blocks ads and trackers for all devices on a local network.
Tailscale
Creates private WireGuard networks to connect devices across clouds, VPCs, and on-premises networks without modifying firewall rules.
Hasura
Generate a composable and secure API endpoint to access data from multiple database sources.
JumpServer
Provides secure, browser based privileged access management for SSH, RDP, Kubernetes, databases and remote application endpoints.
ProjectDiscovery
Detect infrastructure vulnerabilities in real time with customizable templates and low false‑positive rates across multiple protocols.
Signal
Encrypted messaging and calling that uses data connections for secure text, voice, and video communication.
Infisical
Centralize application secrets, certificates, and privileged access management with end to end encryption across multiple environments.
Ente
End-to-end encrypted cloud storage for photos, videos, and documents with a dedicated two-factor authentication tool.
Netbird
Creates a WireGuard based overlay network with centralized access control for secure peer to peer connectivity.
Authentik
A self-hosted identity provider for single sign-on that manages authentication and authorization via multiple industry standards.
SafeLine
A self-hosted web application firewall and reverse proxy that filters and monitors HTTP traffic to block exploits.
Pangolin
Provides identity-based remote access to private networks and web applications using WireGuard and reverse proxy tunnels.
Anubis
Filters incoming HTTP requests using challenges to protect upstream resources from AI crawlers and scraper bots.
Teleport
Provides connectivity, authentication, and access controls for servers, Kubernetes clusters, databases, and internal web applications.
SimpleX Chat
A privacy focused messaging platform that operates without user identifiers to protect metadata and identity.
Cryptomator
Client-side encryption for files stored in the cloud to ensure privacy and data control.
SuperTokens
Provides secure login and session management for web applications through self hosted user identity infrastructure.
Zitadel
An identity and access management platform providing single sign on, multi tenancy, and API first authentication.
OpenVPN
Creates secure point to point or site to site connections using a tunneling daemon for encrypted network traffic.
Logto
An identity solution providing multi-tenancy, enterprise SSO, and RBAC for SaaS and agent-based AI applications.
Termix
Self-hosted server management platform for SSH terminal access, remote desktop control, and infrastructure monitoring.
Unleash
Manage feature flags and gradual rollouts to control how and when new features reach end users.
Element
A communication client for encrypted messaging and collaboration built on the decentralized Matrix protocol.
OpenReplay
A self-hosted session replay and product analytics suite for troubleshooting web application issues and monitoring performance.
BunkerWeb
A web application firewall and reverse proxy that provides secure by default protection for web services.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.