Restic
Fast, secure backup program with encryption and deduplication.
BSD-2-ClausePermissive
SaaS: YesClosed product: Yes
Open source in IT, security & identity
Identity/SSO, password management, monitoring and backup.
Common tools in this category
- Okta
- Microsoft Entra ID
- 1Password
- Auth0
- Acronis
- Backblaze
- Datadog
- JumpCloud
- PRTG
- Cisco Umbrella
- Veeam
- AWS Secrets Manager
- Clerk
- CyberArk Conjur
- Datadog APM
- Device42
Show 77 more tools
- Dynatrace
- NextDNS
- Prisma Cloud
- ServiceNow ITAM
- SolarWinds
- Tailscale
- AWS Cognito
- Bitwarden Cloud
- Cisco AnyConnect
- Cloudflare WAF
- Datadog Metrics
- Doppler
- HashiCorp Vault Enterprise
- Honeycomb
- Keeper
- Lansweeper
- New Relic
- NordLayer
- Okta CIC
- Qualys
- Snyk
- Splunk Enterprise Security
- StrongDM
- TeamViewer
- Teleport Enterprise
- Tenable Nessus
- Wiz
- Zscaler Private Access
- AnyDesk
- AppDynamics
- AWS Security Hub
- AWS WAF
- Burp Suite Pro
- Citrix Workspace
- Cloudflare Access
- Cloudflare Tunnel
- ConnectWise ScreenConnect
- CrowdStrike Falcon
- CrowdStrike Falcon Insight
- CyberArk PAM
- Darktrace
- Datadog Infrastructure
- Duo
- Fail2ban Pro
- GitGuardian
- GitHub Advanced Security
- Grafana Cloud
- HashiCorp Vault
- Imperva
- Infoblox
- Invicti
- Jamf
- JumpCloud LDAP
- Kandji
- Kasten K10
- Kenna
- Microsoft Active Directory
- Microsoft Intune
- Microsoft RD Gateway
- Microsoft Sentinel
- Nagios XI
- ngrok
- Ottomatik
- Passwordstate
- Recorded Future
- RSA SecurID
- SimpleBackups
- SolarWinds IPAM
- SolarWinds NPM
- Sysdig Secure
- Tanium
- TeamViewer IoT
- Termius
- ThreadFix
- ThreatConnect
- Twingate
- Veeam Kubernetes
Open-source products · 83
Backup
Duplicati
Encrypted backups to cloud storage and your own servers.
SaaS: YesClosed product: Yes
Kopia
Backup tool for Windows, Mac and Linux with encryption, compression and deduplication.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
BorgBackup
Backup tool with deduplication, compression and authenticated encryption.
BSD-3-ClausePermissive
SaaS: YesClosed product: Yes
Velero
Backs up and migrates Kubernetes applications and their persistent volumes.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Databasus
PostgreSQL backup tool with point-in-time recovery.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Zerobyte
Automates backups for self-hosted setups, built on top of restic.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
Device management & endpoint visibility
Osquery
Queries the operating system with SQL for monitoring and security analysis of computers.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Fleet
Device management and monitoring for computers and servers, built on osquery.
SaaS: YesClosed product: Yes
DNS filtering
Pi-hole
Network-wide DNS server that blocks ads and trackers.
EUPL-1.2Strong copyleft
SaaS: YesClosed product: No
AdGuard Home
DNS server that blocks ads and trackers for every device on the network.
GPL-3.0Strong copyleft
SaaS: YesClosed product: No
Technitium DNS Server
Self-hosted DNS server with support for encrypted DNS and ad blocking.
GPL-3.0Strong copyleft
SaaS: YesClosed product: No
Blocky
Fast DNS proxy that blocks ads on the local network.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Identity & SSO (IdP)
Keycloak
Identity and access management with SSO over OIDC and SAML.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
authentik
Flexible identity provider with login and enrollment flows.
SaaS: YesClosed product: Yes
Zitadel
Identity platform with built-in multi-organisation support. Swiss vendor.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
Authelia
Login portal with single sign-on and two-factor authentication in front of web apps.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Ory Hydra
OAuth 2 and OpenID Connect server that connects to your own user management through APIs.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
SuperTokens
Sign-in and user management for apps, an alternative to Auth0 and Firebase Auth.
SaaS: YesClosed product: Yes
Logto
Authentication and authorisation infrastructure for SaaS and AI apps, with SSO and multi-tenancy.
MPL-2.0Weak copyleft
SaaS: YesClosed product: Yes, with conditions
Casdoor
Identity and access management with a web UI and support for OAuth, OIDC, SAML and LDAP.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Ory Kratos
Headless user management and login with passkeys, social sign-in and two-factor.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Pocket ID
Simple OpenID Connect provider where users sign in to your apps with passkeys.
BSD-2-ClausePermissive
SaaS: YesClosed product: Yes
LLDAP
Lightweight LDAP server for users and groups, with a web interface.
GPL-3.0Strong copyleft
SaaS: YesClosed product: No
Kanidm
Identity management platform with OIDC, LDAP and passkeys, written in Rust.
MPL-2.0Weak copyleft
SaaS: YesClosed product: Yes, with conditions
Authgear
Authentication platform with passkeys, SSO and two-factor for SaaS and mobile apps.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
privacyIDEA
Multi-factor authentication system with one-time codes, FIDO keys and other tokens.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
IT asset & network inventory
NetBox
Tool for documenting networks and data centres, such as IP addresses, equipment and connections.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Snipe-IT
System for tracking IT assets and licences and who has what.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
Ralph
Asset management and CMDB for data centre and back-office hardware.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Monitoring & observability
Netdata
Real-time monitoring of servers, containers and apps with ready-made dashboards.
GPL-3.0Strong copyleft
SaaS: YesClosed product: No
Prometheus
Monitoring system and time-series database that collects metrics and raises alerts.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
SigNoz
Observability with logs, metrics and traces built on OpenTelemetry.
SaaS: YesClosed product: Yes
Grafana Loki
System for collecting and querying logs, using the same labels as Prometheus.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
Apache SkyWalking
Application performance monitoring (APM) and tracing for distributed systems.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Jaeger
Distributed tracing platform that shows how requests move through services.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
OpenObserve
Platform for logs, metrics, traces and user monitoring with low storage cost.
SaaS: Yes, with conditionsClosed product: No
VictoriaMetrics
Fast, resource-efficient time-series database and monitoring solution, compatible with Prometheus.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
HyperDX
Observability platform that brings session replays, logs, metrics and traces together, built on ClickHouse.
MITPermissive
SaaS: YesClosed product: Yes
Coroot
Observability and APM tool with metrics, logs, traces and help finding root causes.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Apache HertzBeat
Agentless real-time monitoring of servers, services and databases, with alerts and status pages.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Zabbix
Established real-time monitoring of networks, servers, virtual machines and applications.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
LibreNMS
Network monitoring with automatic device discovery, alerts and graphs.
GPL-3.0Strong copyleft
SaaS: YesClosed product: No
Uptrace
APM tool for traces, metrics and logs via OpenTelemetry, built on ClickHouse.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
Checkmk
Infrastructure and application monitoring with automatic service discovery.
GPL-2.0Strong copyleft
SaaS: YesClosed product: No
Icinga 2
The core of the Icinga monitoring platform, with a configuration language, clustering and a REST API.
GPL-3.0Strong copyleft
SaaS: YesClosed product: No
Password management
Vaultwarden
Lightweight, unofficial Bitwarden-compatible server – easy to self-host.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
Bitwarden
Password manager for businesses with shared vaults; self-hosting possible.
SaaS: Yes, with conditionsClosed product: No
KeePassXC
Desktop password manager that keeps passwords in an encrypted KeePass file.
GPL-2.0Strong copyleft
SaaS: YesClosed product: No
KeeWeb
Cross-platform password manager that reads and writes KeePass files.
MITPermissive
SaaS: YesClosed product: Yes
Passbolt
Password manager for teams with sharing and end-to-end encryption.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
AliasVault
Encrypted password manager with built-in email aliases, which can be self-hosted.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
TeamPass
Password manager for teams with folders and permissions.
GPL-3.0Strong copyleft
SaaS: YesClosed product: No
Remote access, VPN & zero trust
RustDesk
Remote desktop app with the option to run your own server, in the style of TeamViewer.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
Headscale
Self-hosted implementation of the Tailscale control server for building your own WireGuard network.
BSD-3-ClausePermissive
SaaS: YesClosed product: Yes
NetBird
Private network built on WireGuard that connects devices and users with SSO and access rules.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
wg-easy
Runs a WireGuard VPN with a simple web interface for managing clients.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
Pangolin
Platform for secure remote access to apps and infrastructure through tunnels.
SaaS: Yes, with conditionsClosed product: No
Teleport
Secure access to servers, Kubernetes, databases and apps with certificates and audit logging.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
Termix
Self-hosted management of SSH connections and remote desktops in the browser.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Firezone
Remote access and VPN built on WireGuard with per-resource access policies.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Warpgate
Bastion host for SSH, HTTPS, Kubernetes, databases and remote desktop without client software.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
MeshCentral
Web-based remote management and monitoring of computers through agents, locally or over the internet.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Apache Guacamole
Remote desktop in the browser for RDP, VNC and SSH, without client software.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Shellhub
Centralised SSH access to Linux devices, even behind firewalls.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Secrets management
HashiCorp Vault
Management of secrets, encryption keys and privileged access.
BUSL-1.1Source-available (not OSI)
SaaS: NoClosed product: No
Infisical
Platform for secrets, certificates and privileged access for development teams.
SaaS: YesClosed product: Yes
SOPS
Encrypts secrets in configuration files so they can be stored safely in Git.
MPL-2.0Weak copyleft
SaaS: YesClosed product: Yes, with conditions
OpenBao
Stores and distributes secrets, certificates and keys, a continuation of HashiCorp Vault.
MPL-2.0Weak copyleft
SaaS: YesClosed product: Yes, with conditions
Security monitoring, SIEM & vulnerability scanning
Trivy
Security scanner that finds vulnerabilities, misconfigurations and secrets in containers, code and cloud.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
Nuclei
Vulnerability scanner that uses YAML templates to test websites and services.
MITPermissive
SaaS: YesClosed product: Yes
TruffleHog
Finds leaked passwords and keys in code, history and other sources and checks whether they work.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
SafeLine
Self-hosted web application firewall (WAF) acting as a reverse proxy against attacks.
GPL-3.0Strong copyleft
SaaS: YesClosed product: No
Wazuh
Security platform for threat detection, log analysis and compliance on servers and endpoints.
GPL-2.0Strong copyleft
SaaS: YesClosed product: No
ZAP
Security scanner for web apps that finds vulnerabilities by testing the running app.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
CrowdSec
Detects and blocks attacks and bots using logs and a shared list of malicious IP addresses.
MITPermissive
SaaS: YesClosed product: Yes
Prowler
Audits security and compliance in cloud environments such as AWS, Azure and Google Cloud.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
MISP
Platform for collecting and sharing threat intelligence and indicators between organisations.
AGPL-3.0Network copyleft (AGPL)
SaaS: Yes, with conditionsClosed product: No
ThreatMapper
Scans cloud environments, containers and Kubernetes for vulnerabilities and threats.
Apache-2.0Permissive
SaaS: YesClosed product: Yes
DefectDojo
Platform for collecting and tracking vulnerabilities from many security tools.
BSD-3-ClausePermissive
SaaS: YesClosed product: Yes
Security Onion
Platform for threat hunting, network security monitoring and log management.
Elastic-2.0Source-available (not OSI)
SaaS: NoClosed product: No
OpenVAS
Network and system vulnerability scanner, part of Greenbone Community Edition.
GPL-2.0Strong copyleft
SaaS: YesClosed product: No