Privacy and security
Passwords, encryption, ad blocking and keeping data yours.
82 tools, most recommended first
headscale
juanfont/headscale
An open source, self-hosted implementation of the Tailscale control server
“There is a well documented opensource alternative to Tailscale - Headscale. The tailscale client is already opensource, Headscale is opensource drop in replacement for the control server which isn't, and fully compatible with Tailscale clients:…”
- Recommended by
- 9
- Stars
- 45k
- Licence
- BSD-3-Clause
age
FiloSottile/age
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
“I'm not convinced that whole-disk encryption is sensible for most threat models, but I use the built-in FileVault on macOS (under the reasoning that, at the very least, it can't really hurt). On Linux, I use age (specifically, rage) to encrypt sensitive files. I wrote a sec…”
- Recommended by
- 6
- Stars
- 24k
- Licence
- BSD-3-Clause
hosts
StevenBlack/hosts
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
“for good measure, here are 83k additional domains:”
- Recommended by
- 5
- Stars
- 31k
- Licence
- MIT
git-bug
git-bug/git-bug
Distributed, offline-first bug tracker integrated in git
“I've used git-bug for issues and it works pretty well. The web-ui is lagging behind and PR support would be everything you'd need to ditch a central-hosted web instance.”
- Recommended by
- 5
- Stars
- 11k
- Licence
- GPL-3.0
v2ray-core
v2fly/v2ray-core
A platform for building proxies to bypass network restrictions.
“You really need Vmess / V2ray, now:”
- Recommended by
- 4
- Stars
- 35k
- Licence
- MIT
kratos
ory/kratos
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
“Congratulations on the launch! Innovation in the Auth* space is really necessary. How do you plan on differentiating from other open source solutions, such as or?”
- Recommended by
- 4
- Stars
- 14k
- Licence
- Apache-2.0
hister
asciimoo/hister
Your own search engine
“I'm still working on a self-hosted search service called Hister with the goal to reduce dependence on online search engines. Hister is a full text indexer for websites and local files which automatically saves all the visited pages rendered by your browser. It provides offline re…”
- Recommended by
- 4
- Stars
- 6.2k
- Licence
- AGPL-3.0
openrecall
openrecall/openrecall
OpenRecall is a fully open-source, privacy-first alternative to proprietary solutions like Microsoft's Windows Recall. With OpenRecall, you can easily access your digital history, enhancing your memory and productivity without compromising your privacy.
“We've launched a FOSS alternative with OpenRecall to (hopefully) work towards addressing some of the concerns people have with Windows Recall. We think it could be a useful feature but it must be (1) fully auditable/open source (2) using o…”
- Recommended by
- 4
- Stars
- 3.0k
- Licence
- AGPL-3.0
Xray-core
XTLS/Xray-core
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
“If VPNs don't work for you, I recommend using an anti-censorship tool with an obfuscation protocol like v2ray which is commonly used in China.…”
- Recommended by
- 3
- Stars
- 43k
- Licence
- MPL-2.0
tailscale
tailscale/tailscale
The easiest, most secure way to use WireGuard and 2FA.
“always have! our darwin and windows clients are closed source, but they wrap the oss implementation in github.com/tailscale/tailscale and you can see and even use all the same hooks yourself. the control plane is closed source, but headscale is an open source alternative that we…”
- Recommended by
- 3
- Stars
- 39k
- Licence
- BSD-3-Clause
analytics
plausible/analytics
Open source, privacy-first web analytics. Lightweight, cookie-free Google Analytics alternative. Self-hosted or cloud.
“I use plausible for my very low traffic side project, mostly because it's easy to host yourself and free if you do so.”
- Recommended by
- 3
- Stars
- 30k
- Licence
- AGPL-3.0
universal-android-debloater-next-generation
Universal-Debloater-Alliance/universal-android-debloater-next-generation
Cross-platform GUI written in Rust using ADB to debloat non-rooted Android devices. Improve your privacy, the security and battery life of your device.
“That is what I was alluding to, though I recommend people to use UAD-ng, since it explains what each package is and they are separated in safety-based categories. One note though: removal of system apps with adb is blocked in Android 17. You can only disable system apps on Androi…”
- Recommended by
- 3
- Stars
- 9.7k
- Licence
- GPL-3.0
wstunnel
erebe/wstunnel
Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available
“Wireguard or OpenVPN might work, if someone has a server set up, set up your client to connect. If those don't work you can try something like wssocks or wstunnel. It tunnels connections through WebSocke…”
- Recommended by
- 3
- Stars
- 7.1k
- Licence
- BSD-3-Clause
RemoveMacAI
omlahore/RemoveMacAI
Debloat macOS: turn off Apple Intelligence, analytics, ads and pop-ups. A native app and CLI, and every change can be undone.
“I don't want AI. I am preparing for a jump (back) to Linux. "Choice" disappeared, and yes, I know about the "fix" Maybe this idea may be foreign to many, but personal computers were something I built from bags of parts socketed and/or soldered onto S-100 cards, and that exper…”
- Recommended by
- 3
- Stars
- 5.7k
- Licence
- MIT
frp
fatedier/frp
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
“How does it compare to frp, one of the most popular Open Source Cloudflare Tunnel alternative?”
- Recommended by
- 2
- Stars
- 110k
- Licence
- Apache-2.0
Win11Debloat
Raphire/Win11Debloat
A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to declutter and customize your Windows experience. Win11Debloat works for both Windows 10 and Windows 11.
“You can easily get rid of most Windows annoyances in <10 minutes without AI. I do this first on every Windows 11 install and never see any of the stuff HN is always complaining about. I use agentic tools myself but I really don't understand…”
- Recommended by
- 2
- Stars
- 62k
- Licence
- MIT
gatsby
gatsbyjs/gatsby
React-based framework with performance, scalability, and security built in.
“If you're a fan of React, Gatsby is an excellent project to check out:”
- Recommended by
- 2
- Stars
- 56k
- Licence
- MIT
siyuan
siyuan-note/siyuan
An open-source, privacy-first, self-hosted knowledge workspace where humans and AI agents work together 开源、隐私优先、自托管的知识工作空间，让人与智能体在此协作
“SiYuan Note is a fantastic open source alternative to Obsidian and Notion, as it's like a mix of both, but open source and local-first.”
- Recommended by
- 2
- Stars
- 47k
- Licence
- AGPL-3.0
logseq
logseq/logseq
A privacy-first, open-source platform for knowledge management and collaboration. Download link: http://github.com/logseq/logseq/releases. roadmap: https://logseq.io/p/NX4mc_ggEV
“Check Logseq for an open source alternative to Obsidian:”
- Recommended by
- 2
- Stars
- 45k
- Licence
- AGPL-3.0
sniffnet
GyulyVGC/sniffnet
Comfortably monitor your network traffic 🕵️♂️
“Sniffnet – monitor your Internet traffic (256 points)”
- Recommended by
- 2
- Stars
- 42k
- Licence
- Apache-2.0
umami
umami-software/umami
Umami is a privacy-first web and product analytics platform. Traffic, campaigns, behavior, conversions, and revenue in one place. No cookies, no surveillance, self-hosted or in the cloud.
“Not quite as cheap as $5 but I've been running at Hetzner CAX31 for a couple of years now and I run the following services / apps. Actual Budget - AirTrail - Beszel - Co…”
- Recommended by
- 2
- Stars
- 40k
- Licence
- MIT
spacedrive
spacedriveapp/spacedrive
Spacedrive is an open source cross-platform file explorer, powered by a virtual distributed filesystem written in Rust.
“Spotlight Search: File Explorer: Rust/GraphQL Server: Dataflow Engine: CRDT Generator:…”
- Recommended by
- 2
- Stars
- 39k
- Licence
- Apache-2.0
searxng
searxng/searxng
SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.
“SearXNG: A free internet metasearch engine (281 points)”
- Recommended by
- 2
- Stars
- 39k
- Licence
- AGPL-3.0
openssl
openssl/openssl
General purpose TLS and crypto library
“Not actually confirmed as compiler bugs yet. Here’s a similar bug where OpenSSL’s inline asm was wrong and probably only GCC was smart enough to try to exploit the bug: Same for rust - could be UB in quiche that is getting exposed.”
- Recommended by
- 2
- Stars
- 31k
- Licence
- Apache-2.0
ente
ente/ente
💚 End-to-end encrypted cloud for everything.
“I currently use Ente.io as a secondary photo syncing service in addition to Google Photos. While I really like it — snappy and encrypted — I was surprised by how much the missing Ultra HDR implementation affects me. Photos are currently uploaded with brightness information but no…”
- Recommended by
- 2
- Stars
- 30k
- Licence
- AGPL-3.0
sops
getsops/sops
Simple and flexible tool for managing secrets
“Curious about why you're using SOPS instead of say, hashicorp vault or AWS/GCP's integrated keystores or git-crypt, etc?”
- Recommended by
- 2
- Stars
- 24k
- Licence
- MPL-2.0
nebula
slackhq/nebula
A scalable overlay networking tool with a focus on performance, simplicity and security
“> I don't see mention of open source alternatives Check out Nebula (created by Slack) - Fundamentally very similar to Tailscale. I've been using it for years and it has been flawless. It doesn't have as many bells and whistles as Tailscale but it…”
- Recommended by
- 2
- Stars
- 18k
- Licence
- MIT
oauth2-proxy
oauth2-proxy/oauth2-proxy
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
“Not quite as cheap as $5 but I've been running at Hetzner CAX31 for a couple of years now and I run the following services / apps. Actual Budget - AirTrail - Beszel - Co…”
- Recommended by
- 2
- Stars
- 15k
- Licence
- MIT
openhaystack
seemoo-lab/openhaystack
Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.
“> 1. "Don't use safari" Why? Like everything else, it's tied to your Apple account. You risk losing your browser history etc. You _can_ export it if it happens, but it's easier to not have the issue in the first place. > 2. Is there an alternative to "Find My" that I can use with…”
- Recommended by
- 2
- Stars
- 14k
- Licence
- AGPL-3.0
LuLu
objective-see/LuLu
LuLu is the free open-source macOS firewall
“> LittleSnitch is great for MacOS; it is easily configured to alert you every time your machine makes ip/domain connections, which can then be accepted, denied, or rules made For an open-source alternative, consider checking out - Lulu. It's not as feature rich nor has impres…”
- Recommended by
- 2
- Stars
- 13k
- Licence
- GPL-3.0
ubicloud
ubicloud/ubicloud
Open source alternative to AWS. Elastic compute, block storage (non replicated), firewall and load balancer, managed Postgres, K8s, AI inference, and IAM services.
“There is indeed a large gap in the market between outsourcing all your infrastructure to Hyperscalers vs. hosting it on DIY-bare-metal and/or VPC providers. An open source alternative to AWS would do much to fill that gap, and we are building just that at Ubicloud (I'm one of the…”
- Recommended by
- 2
- Stars
- 12k
- Licence
- AGPL-3.0
staticrypt
robinmoisson/staticrypt
Password protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.
“Password protect a static HTML page, decrypted in-browser in JavaScript (141 points)”
- Recommended by
- 2
- Stars
- 8.1k
- Licence
- MIT
curl-impersonate
lwthiker/curl-impersonate
curl-impersonate: A special build of curl that can impersonate Chrome & Firefox
“curl-impersonate is a curl fork that I maintain and which lets you fetch sites while impersonating a browser. Unfortunately, the practice of TLS and HTTP fingerprinting of web clients has become extremely common in the past ~1 year, which means a regular curl request will ofte…”
- Recommended by
- 2
- Stars
- 7.2k
- Licence
- MIT
lldap
lldap/lldap
Light LDAP implementation
“I wrote LLDAP after struggling to install and configure openLdap on my homelab. It's a simple and light LDAP server that only handles users and groups (which is all you need on a homelab).”
- Recommended by
- 2
- Stars
- 6.6k
- Licence
- GPL-3.0
security-research
google/security-research
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
“Zentool – AMD Zen Microcode Manipulation Utility (236 points)”
- Recommended by
- 2
- Stars
- 4.7k
- Licence
- Apache-2.0
octelium
octelium/octelium
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.
“(Shamless plug) I am also working on a similar FOSS, self-hosted project called Octelium that you might find interesting if you are interested in this space. Octelium is, however, more of a generic/unified zero trust secure access platform tha…”
- Recommended by
- 2
- Stars
- 4.1k
- Licence
- AGPL-3.0
redlib
redlib-org/redlib
Private front-end for Reddit
“There is Redlib, an open source alternative Reddit frontend, with many public instances, e.g. There is also LibRedirect (or PrivacyRedirect, although I for one have no experience with that), a browser extension that automatically redirects re…”
- Recommended by
- 2
- Stars
- 4.0k
- Licence
- AGPL-3.0
onecli
onecli/onecli
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
“Show HN: OneCLI – OSS credential gateway that keeps secrets out of AI agents (110 points)”
- Recommended by
- 2
- Stars
- 3.6k
- Licence
- Apache-2.0
core
secluso/core
A privacy-preserving Raspberry Pi home security camera that uses advanced end-to-end encryption.
“Privacy-preserving alternative to Ring cameras (Raspberry Pi Zero 2W)!: Hey everyone, We've built an open-source, privacy-preserving alternative to Ring cameras using a Raspberry Pi Zero 2W (called Secluso). It uses end-to-end encryption to send videos from the camera to a mobile…”
- Recommended by
- 2
- Stars
- 1.7k
- Licence
- GPL-3.0
ssoready
ssoready/ssoready
Open-source dev tools for enterprise SSO. Ship SAML + SCIM support this afternoon.
“"You can think of us as an open source alternative to products like Auth0 or WorkOS." from SSOReady's README: Single dev in contributors graph: Pre-pivot startup called Okapi (YC W24):…”
- Recommended by
- 2
- Stars
- 1.5k
- Licence
- MIT
invisible_captcha
markets/invisible_captcha
🍯 Unobtrusive and flexible spam protection for Rails apps
“Note that that library is not accessible and is hence illegal to use for most websites in the US. I've raised an issue on the project.”
- Recommended by
- 2
- Stars
- 1.3k
- Licence
- MIT
git-remote-gcrypt
spwhitton/git-remote-gcrypt
PGP-encrypted git remotes
“git-remote-gcrypt: It's available in most distro repositories and works with almost any underlying remote repos.”
- Recommended by
- 2
- Stars
- 1.0k
- Licence
- GPL-3.0
swgp-go
database64128/swgp-go
🐉 Simple WireGuard proxy with minimal overhead for WireGuard traffic.
“Try this,, setup is a bit complicated but it works extremely well.”
- Recommended by
- 2
- Stars
- 364
- Licence
- AGPL-3.0
redd-archiver
19-84/redd-archiver
A PostgreSQL-backed archive generator that creates browsable HTML archives from link aggregator platforms including Reddit, Voat, and Ruqqus.
“Self-host Reddit – 2.38B posts, works offline, yours forever: Reddit's API is effectively dead for archival. Third-party apps are gone. Reddit has threatened to cut off access to the Pushshift dataset multiple times. But 3.28TB of Reddit history exists as a torrent right now, and…”
- Recommended by
- 2
- Stars
- 350
- Licence
- Unlicense
twonly-app
twonlyapp/twonly-app
Open-source, end-to-end encrypted Snapchat alternative.
“If you're looking for an alternative: I'm currently developing an open-source alternative to Snapchat:)”
- Recommended by
- 2
- Stars
- 34
- Licence
- AGPL-3.0
rclone
rclone/rclone
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files
“Free open-source alternative: RcloneBrowser Speaking for myself, $9.90/year doesn't seem like good value for auto-remount on login. RcloneBrowser does everything the free RcloneView does. Meanwhile the RcloneView github is an empty rep…”
- Recommended by
- 1
- Stars
- 61k
- Licence
- MIT
meetily
Zackriya-Solutions/meetily
Privacy first AI meeting note taker. Download Free and open source granola, otter ai, fireflies alternative. Parakeet / Whisper live transcription, on-device speaker diarization, built on Rust. 100% local processing. Meetily (Meetly Ai - https://meetily.ai) is the #1 Self-hosted, Open-source Ai meeting note taker & Assistant for macOS & Windows
“I actually found this one today and will be adding it to Opensource Builders soon. It seems to be an open-source Otter alternative:”
- Recommended by
- 1
- Stars
- 32k
- Licence
- MIT
SafeLine
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
“Its not a rewrite and is more inspired by. Wanted a web interface and a distributed waf similar to cloudflare as an alternative. It supports OWASP CRS, J4A TLS trrmination handling. Comes with console-ui and also the proof of work used a diffe…”
- Recommended by
- 1
- Stars
- 23k
- Licence
- GPL-3.0
Obtainium
ImranR98/Obtainium
Get Android app updates straight from the source.
“If you like the Obtanium user experience, I recommend you get involved and help them implement signature verification on F-Droid repos:”
- Recommended by
- 1
- Stars
- 21k
- Licence
- GPL-3.0
systeminformer
winsiderss/systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
“I recommend System Informer. Such a great tool!”
- Recommended by
- 1
- Stars
- 16k
- Licence
- MIT
YubiKey-Guide
drduh/YubiKey-Guide
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
“I have been using Yubikeys for years, according to this guide: The nice thing is that using the private key requires physical touch. That means that AI itself (or a remote attacker, for that matter) can't do things unless I confirm.”
- Recommended by
- 1
- Stars
- 13k
- Licence
- MIT
alternative-front-ends
mendel5/alternative-front-ends
Overview of alternative open source front-ends for popular internet platforms (e.g. YouTube, Twitter, etc.)
“Some of these are open source and easy to run, like”
- Recommended by
- 1
- Stars
- 9.2k
- Licence
- AGPL-3.0
buku
jarun/buku
:bookmark: Personal mini-web in text
“CLI utilities from jarun for daily use: File manager: Google search: DuckDuckGo search: Bookmark manager: Multicore resize & rotate:…”
- Recommended by
- 1
- Stars
- 7.2k
- Licence
- GPL-3.0
yattee
yattee/yattee
Privacy oriented video player for iOS, tvOS and macOS
“Get I've been watching youtube without ads on all Apple hardware for years. I use invidious as backend. Absolutely fabulous.”
- Recommended by
- 1
- Stars
- 3.8k
- Licence
- AGPL-3.0
shynet
milesmcc/shynet
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
“Shynet: The goal is to provide modern, privacy-friendly, and detailed web analytics that works without cookies or JS. And it's completely open source. Full disclosure: I am the primary maintainer.”
- Recommended by
- 1
- Stars
- 3.2k
- Licence
- Apache-2.0
agent-beacon
Asymptote-Labs/agent-beacon
The cross-harness, self-improving memory layer for AI agents. Join our community: https://discord.com/invite/zdNChS2fBu
“We've tackled the core problem of agent telemetry normalization with our open-source project Beacon! Beacon is a harness-agnostic, environment-agnostic framework for capturing, normalizing, and storing the full session history of AI…”
- Recommended by
- 1
- Stars
- 3.0k
- Licence
- MIT
chatto
chattocorp/chatto
A fully-featured team and group chat application that you can easily selfhost.
“Have you tried Chatto? Seems to be an open-source Slack and Discord alternative with a nice UI. 0.”
- Recommended by
- 1
- Stars
- 2.9k
- Licence
- AGPL-3.0
Maskbook
DimensionDev/Maskbook
The portal to the new, open Internet. ([I:b])
“We're working on a solution for user to link their Fb/twitter identity to a decentralized ID and post encrypted post/comment (even sending any crypto over) on Fb/twitter only viewable by friends *(not able to decrypted by Fb or NSA) - Source code:…”
- Recommended by
- 1
- Stars
- 1.6k
- Licence
- AGPL-3.0
centrifuge
centrifugal/centrifuge
Real-time messaging library for Go. The simplest way to add feature-rich and scalable WebSocket support to your application. The core of Centrifugo server.
“Hi everyone! I'd like to share that we've just released Centrifugo v6 - a major update of scalable WebSocket server. The release addresses some usability pain points and adds nice features and more observability. Centrifugo is an open-source standalone server written in Go – http…”
- Recommended by
- 1
- Stars
- 1.5k
- Licence
- MIT
yubioath-flutter
Yubico/yubioath-flutter
Yubico Authenticator for Desktop (Windows, macOS and Linux) and Android
“Usually AI is marked as co-author, so you can't find it in the commit list. I use the contributor graph to find where the AI made the commits and then I search using the date, I found 3 commits relative to a11y stuff.…”
- Recommended by
- 1
- Stars
- 1.4k
- Licence
- Apache-2.0
AIPex
AIPexStudio/AIPex
AIPex: AI browser automation assistant, no migration and privacy first. Alternative to Manus Browser Operator、 Claude Chrome and Agent Browser
“We built an open source version, chatgpt atlas alternative Compared to Chatgpt Atlas, we have 3 parts of advantages 1. fully open source 2. respect your privacy, support BYOK 3. no migration need”
- Recommended by
- 1
- Stars
- 1.3k
- Licence
- MIT
wormhole-william
psanford/wormhole-william
End-to-end encrypted file transfer. A magic wormhole CLI and API in Go (golang).
“”
- Recommended by
- 1
- Stars
- 1.3k
- Licence
- MIT
Materialious
Materialious/Materialious
Materialious is a modern material design frontend for YouTube & Invidious, focused on a clean, privacy-friendly YouTube experience. It supports local video fallback when Invidious fails and is available on Web, Desktop, Android, and Android TV.
“After trying all the alternatives in the end I settled on self hosting All the YouTube alternative frontends are so privacy focused that they do not even offer video history in your account. Having video history is a must for me as I m…”
- Recommended by
- 1
- Stars
- 1.2k
- Licence
- AGPL-3.0
swetrix
Swetrix/swetrix
📈 Open source, privacy-first web analytics — a cookie-less Google Analytics alternative with built-in error tracking and performance monitoring. Self-host it or use our cloud. Get started for free!
“Hey guys, the Swetrix CE v4 is released, it's an open source and privacy-first Google Analytics alternative that I've been building since 2021. I've spent this year working on this release and overall it's one of our biggest releases ever! It includes complete UI redesign, custom…”
- Recommended by
- 1
- Stars
- 1.2k
- Licence
- AGPL-3.0
paranoid_crypto
google/paranoid_crypto
Paranoid's library contains implementations of checks for well known weaknesses on cryptographic artifacts.
“The researcher in question has publicly stated that he wanted to try Google's paranoid_crypto tool, so he ran it on some roots as a quick proof-of-concept, and the first thing that happened was that it detected these intermediates. He also states he's been running a lot of…”
- Recommended by
- 1
- Stars
- 857
- Licence
- Apache-2.0
hoop
hoophq/hoop
Open-source enforcement at runtime that masks sensitive data and blocks destructive commands from AI agents. You change one thing: your agent's port.
“Consider Hoop as an open source alternative. It's designed to be lightweight and developer-friendly. Key features that are free/open source: 1. SSH, K8s, database access 2. RBAC and just-in-time access 3. Session recording 4. IdP integration We monetize on ad…”
- Recommended by
- 1
- Stars
- 842
- Licence
- MIT
ProjectAlice
project-alice-assistant/ProjectAlice
Main repository of Project Alice, contains main unit source code
“Consider Project Alice. Runs on Raspberry Pi or AMD docker.”
- Recommended by
- 1
- Stars
- 702
- Licence
- GPL-3.0
tinylittleoffice
aboard-io/tinylittleoffice
A free office suite where your document is inside the link and easy to share. There's no account and nothing saved unless you choose.
“Bottom of the homepage has a link to the GitHub project: The bottom of the README has instructions to run locally and self-host. Looks good to me.”
- Recommended by
- 1
- Stars
- 568
- Licence
- MIT
hush
hushhq/hush
End-to-end encrypted messaging, voice, and video. Entry point that orchestrates every public component.
“Hi HN, I'm the dev behind Hush. The story of this project goes back more than a couple of years, but I'll cut it short. Me and my friends built this because we wanted a self-hosted, private alternative to Discord and Slack. Current platforms like Matrix didn’t cut it for us. Matr…”
- Recommended by
- 1
- Stars
- 495
- Licence
- AGPL-3.0
containerise
kintesh/containerise
Firefox extension to automatically open websites in a container
“Try either (unmaintained), or a maintained fork of it, -- both have a settings-setup that mimics exactly a temporary container for every site (i.e. those that are not explicitly defined in cust…”
- Recommended by
- 1
- Stars
- 459
- Licence
- MIT
fugu
shafy/fugu
Free, privacy-friendly, simple, open-source and self-hostable product analytics.
“I have an indie project called Fugu. Fugu is an open-source and privacy-friendly product analytics. If you're looking strictly for web analytics, it might not be a good fit. It's still an early version, but basic things like…”
- Recommended by
- 1
- Stars
- 214
- Licence
- AGPL-3.0
vibepod-cli
VibePod/vibepod-cli
Unified CLI for running AI coding agents in isolated containers. Includes built-in local metrics collection, HTTP traffic tracking, and an analytics dashboard to track agent actions.
“Open source alternative with podman support and local telemetry collection”
- Recommended by
- 1
- Stars
- 189
- Licence
- MIT
karui
ronynn/karui
Karui (軽い) is a offline only aesthetically pleasing, sync supported google tasks alternative to do list app, inspired by system-24 theme and windows mobile design system. It's a 145kb apk that allows you to take notes from status bar and from other apps with support for homescreen widgets! Made with ❤️ and Vue
“I am working on a FOSS google tasks alternative for android with unix-like aesthetics and my desire to take some inspiration from the windows mobile app designs. It's just 84kb apk at the with reproducible build system and also downloadable from IzzyOnDroid fdroid repo:…”
- Recommended by
- 1
- Stars
- 152
- Licence
- GPL-3.0
Parrot
turantekin/Parrot
Meeting recorder for your Mac with a live AI assistant. On-device transcription, answers from your own docs mid-call. Local-first and open source.
“Thank you so much. Please try and share your feedback. Do you mind to submit as a feature request on github? Happy to work on that sounds good.”
- Recommended by
- 1
- Stars
- 122
- Licence
- GPL-3.0
tenuo
tenuo-ai/tenuo
Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privilege escalation at every delegation hop, and produce signed evidence of what was allowed or denied.
“XAA is a great improvement to where we were in 2025. It helps track user access to mcp tools. There is a few other ongoing efforts in the IETF community. Eg; (implementation:)”
- Recommended by
- 1
- Stars
- 104
- Licence
- Apache-2.0
rawl
vpavlenko/rawl
Harmony as Flags 🇱🇺🇱🇹🇬🇦🇦🇲🇲🇺 Western scores in 12 colors. MIDI files in, piano rolls out. Abolition of standard notation's gatekeeping. Prosthesis for sheet-music-blind people. Syntax highlighting for pitches. Pinyin for black polkadot characters. Also a text-based tracker (a notation editor), sorta diatonic CSound/Strudel with insert/copy
“that's a great point. i'm making my alternative which does exactly that: a relative color-coding, starting from the tonic aside from that, I make a library of structures used in Western music (in the header). I've started saving structures a week ago, so there…”
- Recommended by
- 1
- Stars
- 84
- Licence
- GPL-3.0
ClipBin
alight659/ClipBin
ClipBin - The Secure, Simplest, Fast and Anonymous way of saving and sharing your code or anything that is in form of text or text file. Host it locally or access from the web.
“Hello Everyone, Once again sharing info on ClipBin, The Simplest and the most Secure Way of Sharing your Text or Code. This is a direct and most secure alternative to Pastebin and GitHub Gists. Give it a try at Also this project open-source, feel free to contribu…”
- Recommended by
- 1
- Stars
- 52
- Licence
- MIT
magiclinksdev
MicahParks/magiclinksdev
Transactional email magic link and One-Time Password (OTP) authentication platform. Sign up, log in, password resets, email verification, and more.
“I just updated my open-source Golang email magic link authentication project to include One-Time Password (OTP) support. This has brought the API specification to v2: Magic link authentication is my fav…”
- Recommended by
- 1
- Stars
- 51
- Licence
- Apache-2.0
aside
A-SIDE-Social/aside
A/SIDE private social app
“Regardless of the AI-tells on the homepage, if you check out the git repository, their most recent commits all happened within minutes of each other: - 8:14am - 8:15am - 8:36am - 8:37am Not a red flag in and of itself, but cons…”
- Recommended by
- 1
- Stars
- 30
- Licence
- AGPL-3.0
plimsoll
plimsollmark/plimsoll
A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone needed: https://plimsollmark.github.io/plimsoll/trainers/
“I wrote plimsoll for my own projects. Several have an agent writing and running code, and they all needed the same things: a way for that code to call my APIs without holding a credential, a record of exactly what ran with checksums I can verify, and a way to tie each run to my o…”
- Recommended by
- 1
- Stars
- 27
- Licence
- Apache-2.0
synthetic-data-studio
Urz1/synthetic-data-studio
Generate hyper-realistic, privacy-safe synthetic data and compliance packs for regulated startups, Bootcamps, competitions, and Learning.
“Hey HN! I'm a student who built this over the past 5 months. Why I built this:Every project I worked on hit the same wall: I couldn't use real data due to HIPAA/GDPR, public datasets were too generic, and mocking data manually was painful. Existing tools like Gretel or Tonic are…”
- Recommended by
- 1
- Stars
- 23
- Licence
- MIT
invoice
nickjj/invoice
Calculate a billable amount, hours and days logged for 1 or more projects.
“A whole bunch of little things, mainly command line tools. Most of them are open source and also have extensive documentation and a screencast video going over them. Here's a few examples: - - -…”
- Recommended by
- 1
- Stars
- 23
- Licence
- MIT
