Applications
Self-hosted software worth knowing.
A practical catalog of identity, backup, infrastructure, monitoring, security testing, and remote access applications with real operational utility.
Authentication
3 appsHashiCorp Vault
VaultSecure, store and tightly control access to secrets. Enterprise-grade secrets management with dynamic credentials, encryption as a service, and audit logging.
Keycloak
IAMOpen source identity and access management. Full-featured IAM solution with SSO, social login, user federation, and fine-grained authorization.
Authentik
SSO/2FAAuthentication and authorization server with web UI. Modern identity provider supporting SAML, OAuth2, LDAP with intuitive admin interface.
Backup
2 appsRestic
DeduplicationFast, secure, efficient backup program with encryption. Deduplicating backups to local or cloud storage with client-side encryption and cross-platform support.
Borg Backup
DeduplicationDeduplicating archiver with compression and encryption. Space-efficient backups with authenticated encryption and optional remote repository support.
Container Management
1 appPortainer
Docker UILightweight management UI for Docker/Kubernetes. Intuitive web interface for managing containers, images, networks, and volumes across multiple environments.
Infrastructure
5 appsTraefik
ProxyCloud native application proxy and load balancer. Automatic service discovery with Let's Encrypt, Docker, and Kubernetes integration.
Caddy
Reverse ProxyFast web server with automatic HTTPS. Zero-configuration TLS with automatic certificate management and simple Caddyfile syntax.
HAProxy
Load BalancerReliable, high performance TCP/HTTP load balancer. Industry-standard load balancer with advanced health checking and traffic management.
NetBox Docker
IPAM/DCIMDocker Image of NetBox network documentation and management. Infrastructure resource modeling for IP addresses, racks, devices, and circuits.
Smallstep
Certificate AuthorityPrivate certificate authority and related tools. Run your own PKI for internal services with ACME support and short-lived certificates.
Malware Analysis
4 appsGhidra
Reverse EngineeringSoftware reverse engineering framework. NSA's powerful disassembler and decompiler with collaborative analysis features and extensible plugin architecture.
IDA Pro
Reverse EngineeringPowerful disassembler, decompiler and debugger. Industry-standard reverse engineering tool with advanced analysis capabilities and plugin ecosystem.
Cuckoo Sandbox
SandboxAutomated malware analysis system. Submit suspicious files for dynamic analysis with behavioral reports, network traffic capture, and memory analysis.
Wireshark
Network AnalysisNetwork protocol analyzer. Deep inspection of hundreds of protocols with live capture and offline analysis for network troubleshooting and security analysis.
Monitoring
2 appsPrometheus
MetricsSystems monitoring and alerting toolkit. Pull-based metrics collection with powerful query language, alerting, and extensive exporter ecosystem.
Grafana
VisualizationOpen platform for analytics and monitoring. Beautiful dashboards with support for multiple data sources and extensive visualization options.
Security Testing
3 appsBurp Suite
Web TestingWeb application security testing platform. Industry-standard proxy tool for intercepting, analyzing, and modifying HTTP traffic with automated scanning.
OWASP ZAP
WebWeb application security scanner. Free and open-source alternative to Burp Suite with active scanning, API testing, and CI/CD integration.
Postman
API TestingAPI development and testing platform. Comprehensive tool for API testing, documentation, and collaboration with automated testing capabilities.
SIEM
3 appsWazuh
XDR/SIEMOpen source unified XDR and SIEM protection. Complete security platform with log analysis, intrusion detection, vulnerability assessment, and compliance monitoring.
Graylog
Log ManagementFree and open source log management platform. Centralized log collection, processing, and analysis with powerful search and alerting.
Elastic Security
Security AnalyticsSIEM and endpoint security built on Elastic Stack. Threat detection, investigation, and response with machine learning and prebuilt detections.
VPN
1 appWireGuard
Modern VPNFast, modern, secure VPN tunnel. Extremely simple and fast VPN with state-of-the-art cryptography and minimal attack surface.