OpenTRAP
Intercept, replay and audit web app traffic without a Burp licence: Repeater, Intruder and Collaborator on top of the OWASP ZAP scan engine, under the AGPL-3.0.
// OPEN-SOURCE
101 entries tagged with "open-source"
// COMPARISONS
23 Local speech to text Transcribing meetings, dictation or audio files offline: Meetily, Murmure, Scriberr and BetterWispr compared on models, hardware and what leaves the machine. File and database backup Backing up files and databases with open source tools: restic, Plakar and Databasus compared on encryption, deduplication, scheduling and restore checks. BI and dashboards Building dashboards without Power BI: Metabase, Superset and Redash compared on licensing, what you have to run, who maintains them and what paid plans keep. E-signature Getting PDFs signed without DocuSign: three open source apps and a Node.js library compared on the certificate they apply, legal standing and paid plans. Forms and surveys Replacing Typeform or Google Forms with software you host: LimeSurvey, Formbricks and OpnForm compared on setup, where responses live, licences and paid tiers. GRC and compliance Running ISO 27001, NIS2 or SOC 2 compliance on your own server: three open source GRC tools compared on bundled frameworks, hosting needs and paid editions. Headless CMS Serving content over an API or keeping it in Git: three open source headless CMSs compared on framework, database, hosting and what the paid plans hold back. Observability Keeping logs, metrics and traces on your own servers: five open source tools compared on what they ingest, where they store it, licensing and project health. OCR and document conversion Reading scanned PDFs or turning documents into Markdown: nine open-source tools compared on hardware, model licences, supported formats and release activity. Scheduling Taking bookings without Calendly: Cal.diy, the part of Cal.com that stayed open source, Easy!Appointments and Rallly compared on stack, calendars and pricing. Social media scheduling Schedule social media posts from your own server: three open source tools compared on supported networks, developer apps, paid editions and what you run. Web application firewall (WAF) Stop attacks before they reach your web apps: OWASP rules, shared IP reputation or a trained model. Three open source WAFs compared, paid tiers included. Web scraping Scraping the web with open-source tools: eight projects compared on headless browser, proxies, language, what they leave exposed and how active the repo is. Workflow automation Replacing Zapier or building AI agents on your own server: six automation tools compared on licensing, free-edition limits, the stack and project status. Self-hosted CAPTCHA Replacing reCAPTCHA with a CAPTCHA you host: ALTCHA, Cap and mCaptcha compared on proof of work, server setup, visitor data, licensing and release health. Proxmox multi-cluster consoles Running several Proxmox clusters from one console: the vendor's own manager and two third-party tools compared on migration, access rights and licensing. Git forges Moving your Git repositories off GitHub: two forges you run yourself and one hosted by a non-profit, compared on CI, packages, code review and governance. Newsletters Self-hosted newsletters without Mailchimp: three open-source tools compared on SMTP relays, deliverability, what you have to run and how each is licensed. Remote desktop Taking control of remote machines without TeamViewer: three open source tools compared on what they install, the server they need, paid plans and licence. Team chat Replacing Slack with team chat you host yourself: Mattermost, Rocket.Chat and OpenHive compared on their free editions, database, calls and mobile apps. Single sign-on (SSO) Putting a single sign-in in front of your self-hosted apps: five open-source tools compared on protocols, user accounts, memory needs and licensing terms. Status pages and uptime monitoring Watching your services and publishing their status without a SaaS: six open-source tools compared on database, checks, status page and project health. Web analytics Replacing Google Analytics with a tool you host yourself: eight open-source options compared on licence, required database, cookies and their release pace.
// ENTRIES
78 entries
Cachety
Watermark ID copies and payslips without uploading them: PDFs and photos are processed in the browser, with real redaction, traceable copies and AES-256 PDFs.
Apache Guacamole
Remote desktop in a browser tab, with no client or agent: a self-hosted gateway to RDP, VNC and SSH servers, with SSO, MFA and session recording built in.
Mattermost
Slack-style team chat you host yourself, written in Go on PostgreSQL. What its two free editions keep, what the paid plans hold back, and how it is licensed.
Nextcloud
Sync and share files from a server you control, then add calendars, contacts and hundreds of other apps on top. Open source PHP server under the AGPL.
Redash
Turn your SQL queries into charts and shared dashboards in the browser: a BSD-licensed open source BI tool, maintained by its own community since 2023.
restic
Encrypted, deduplicated backups to storage you don't trust: local disk, SFTP, S3, rest-server or rclone. One Go binary, with no built-in scheduler or GUI.
Plausible
Website stats with no cookies and no stored IP addresses: open source web analytics, as an EU-hosted cloud or self-hosted on PostgreSQL and ClickHouse.
Plakar
Back up files, databases and Kubernetes clusters to one encrypted, deduplicated store you can browse without restoring. Scheduling is left to cron or systemd.
Arc
Animated React components and blocks the shadcn CLI copies into your project as source, no Tailwind needed. Untagged MIT repo; the paid Pro tier is larger.
Bolt Slides
Have a coding agent write an interactive deck: StackBlitz's React slide engine, where every slide is a live web page. No PDF export and no tagged release.
Carbon
Planning, shop floor and quality in one Postgres database: an open source ERP, MES and QMS for complex assembly, contract work and high-mix, low-volume runs.
Comment and Let AI Do the Rest
Describing a spot in sentences, quoting a passage to remove doubt: a prompt can ask, but it can't point. How notabene turns page comments into agent tasks.
LimeSurvey
Run branching, multilingual surveys on your own PHP server under the GPL, or in the vendor's cloud, which is priced by the number of responses you collect.
Rallly
Find a date the whole group can make with a poll people answer without an account. Self-hostable under AGPL: free for one account, a paid license beyond that.
Bracket
Run a tournament on your own server: round-robin pools that feed a knockout bracket, Swiss rounds paired from past results, drag-and-drop court scheduling.
MeshCentral
Take control of Windows, Linux and macOS machines from a browser via an agent, and of powered-off PCs via Intel AMT. Lightweight Node.js server, Apache 2.0.
netboot.xyz
One USB stick or PXE entry to install Linux, boot a live distro or repair a disk, from an iPXE menu that downloads each kernel and initrd at boot time.
@signpdf
Sign PDFs with a P12 certificate from Node.js using small MIT-licensed npm packages. The UI, sending to signers and trusted timestamps are left to your app.
TastyIgniter
Take orders and table bookings on the restaurant's own site, commission-free. Self-hosted Laravel app under MIT; needs a cron job, plus Composer for extensions.
ToolJet
Build admin panels and dashboards on your databases and APIs by drag and drop. Workflows, RBAC and GitSync sit outside the AGPL code, in the Enterprise edition.
ModernWMS
Open source warehouse management system for SMEs: receiving, stock, in-house operations and shipping, built on .NET 7 and Vue 3, with QR codes and Docker.
Rybbit
Session replays, funnels and retention without cookies: open source web analytics, on an EU-hosted cloud or self-hosted on ClickHouse behind an HTTPS domain.
Easy!Appointments
Online booking for a team that sells services, running on plain PHP and MySQL hosting. Google and CalDAV sync, but no automatic reminders and no payments.
Lychee
Keep and share photos on your own server: an MIT-licensed PHP gallery with nested albums, public links behind a password, or access limited to named accounts.
Open Web Analytics
Click heatmaps and session recordings on your own server: open source PHP and MySQL web analytics, what it takes to run it, and how often it ships releases.
Gatus
Uptime monitoring declared in versioned YAML: a self-hosted status page with HTTP, DNS, TCP and ICMP checks, conditions on each response, and built-in alerts.
OpenHive
Slack-style team chat that runs on your own Supabase project: channels, threads, LiveKit calls, webhooks. MIT-licensed, still at version 0.1.0 with no release.
Fleetbase
Dispatch deliveries and track drivers live on a self-hosted Laravel logistics platform. Free under AGPL in-house; reselling as SaaS takes a commercial license.
Shotcut
Edit video on Windows, macOS or Linux with no account or subscription. GPLv3 licensed; 4K wants 8 cores and 16 GB of RAM, and multicam is still missing.
Open WES
Connect a WMS to warehouse robots: an MIT-licensed Java WES that allocates stock, then hands container moves to the equipment through scriptable callbacks.
SnapDOM
Export a chart, invoice or card as PNG, SVG or PDF straight from the page. An MIT-licensed JavaScript library with no runtime dependencies; it needs a browser.
UnInbox
Answer support@ or sales@ as a team: comments inside threads, a status on each email, a screener for new senders. AGPL code; self-hosting is still undocumented.
Keila
Newsletters and signup forms without Mailchimp: open source Elixir software you run behind your own SMTP relay, or that its maker hosts for you in the EU.
drawDB
Draw a database schema in the browser without signing up and get the SQL for six engines, or start from an existing database. AGPL-licensed and self-hostable.
Metabase
Dashboards without writing SQL: an AGPL business intelligence tool that keeps SSO, row-level security and full app embedding for its Pro and Enterprise plans.
Rocket.Chat
Team chat you host yourself, free for up to 50 users on the Starter plan. Matrix federation and air-gapped installs need a paid plan, priced on request.
Apache Superset
Dashboards on your SQL warehouse, with or without code. A BI tool from the Apache Software Foundation that runs in production on Kubernetes, Redis and Celery.
Quackback
Find out what customers want, rank it by votes and tell them when it ships: an AGPL-licensed feedback and support platform you host yourself on PostgreSQL.
Docusaurus
Turns Markdown and MDX docs into a static React site with versioning, translations and a blog. Needs Node.js 20; official search runs on Algolia DocSearch.
Excalidraw
Hand-drawn style diagrams on an open source whiteboard, in the browser or inside a React app. A self-hosted copy has no share links or live collaboration.
Mermaid
Write diagrams as text that lives in Git with the code: an MIT JavaScript library draws flowcharts, sequences and Gantt charts as SVG, and GitHub renders them.
2FAuth
TOTP and HOTP codes generated on your own server and read in any browser: a multi-user PHP web app that can share codes without ever revealing the secret.
Camoufox
Makes Playwright scrapers pass for real visitors: a Firefox build patched in C++, with fingerprints drawn from real traffic. Beta, meant to run behind proxies.
Polar
Sell software and subscriptions without filing VAT or sales tax: Polar resells on the developer's behalf. Apache-2.0 code, 5% + 50¢ a sale on the free plan.
MarkEdit
Edit Markdown on a Mac in an open-source app under 5 MB: strict GFM, multiple carets, your own CSS and JS. No full preview or export, and it requires macOS 26.
OpenSEO
Keyword research, rank tracking, backlinks and audits paid per DataForSEO request: an MIT-licensed SEO tool to self-host and drive from AI agents over MCP.
Formbricks
Surveys triggered inside your app or on your site by a click, page view or exit intent. Self-hostable AGPL core; segments, SSO and 2FA need a paid license.
LibreDesk
One shared inbox on your own server for support email, website chat and WhatsApp: an AGPL-licensed Go helpdesk with SLA alerts, backed by PostgreSQL and Redis.
Plane
Issues, sprints and roadmaps in an open-source tracker pitched against Jira and Linear. The AGPL self-hosted edition only gets the features of the free tier.
Zitadel
Give each B2B customer its own organization, users and login rules: an OIDC, SAML and SCIM identity server on PostgreSQL or in the cloud. AGPL since v3.
Coolify
Deploy apps, databases and services to servers you own, Heroku-style and open source. Coolify Cloud, from $5 a month, hosts only the dashboard, not your apps.
OpenScreen
Screen demos with no subscription: zooms that follow the cursor, webcam overlay, offline captions. Original repo archived; development moved to getopenscreen.
Papermark
Find out who opened a shared document and how long each page was read. Tracked links and data rooms, an AGPL core, and self-hosting that needs hosted services.
Codeberg
Free Git hosting for open source projects, run by a Berlin non-profit on Forgejo. Free licences only, and no projects written mostly by generative AI tools.
Matomo
Measure site traffic on your own server: GPL web analytics in PHP with server log import, paid heatmap plugins and a CNIL mode for consent-free tracking.
PostHog
Track what users do inside your app and test features behind flags: open source product analytics, in the cloud or self-hosted up to about 100k events a month.
Stirling PDF
Sign, redact, OCR and convert PDFs on your own machine or server instead of an online service. Open core, free up to five users, with automation capped monthly.
Penpot
Interface mockups that hand developers SVG, CSS and HTML: an open source Figma alternative, used in the cloud or self-hosted with PostgreSQL and Valkey.
Seafile
Sync files block by block to your own server, in libraries you can lock with a password. Community runs in Docker; full-text search and S3 storage are Pro-only.
Chatwoot
One shared inbox for website chat, email, WhatsApp and social DMs, on your own server. The core is MIT-licensed; Captain AI and SAML SSO need a paid plan.
Cap
Stops bots without image grids: the browser solves a proof of work and a Docker server you run checks it, with no cookie and no profiling. Apache 2.0.
Paperclip
Track several coding agents like Claude Code or Codex on one ticket board, with budgets and review gates: a self-hosted MIT server first released in March 2026.
Activepieces
Chain your apps into visual flows on your own servers. The core is MIT-licensed, while SSO, roles, team projects and AI agents on your instance need paid plans.
Cal.com
Booking pages you host yourself: Cal.com closed its code in April 2026, and the open part lives on as Cal.diy, MIT-licensed, without teams or workflows.
changedetection.io
Know when a web page changes, from your own server: text, price, stock or screenshots compared. Chrome is optional; the hosted plan costs $8.99 a month.
Documenso
Get PDFs signed by email link from your own server, under AGPL. The instance's certificate seals each file; advanced and qualified signatures cost extra.
Medusa
Build B2B stores, point-of-sale apps or marketplaces on TypeScript commerce modules and a headless API. The core is MIT; RBAC and SSO need a paid license.
Novu
Email, SMS, push, chat and an in-app inbox behind one API, with swappable providers. MIT open core; the free self-hosted edition allows one team member.
OneUptime
Uptime checks, on-call, status pages, logs and traces in-house: what self-hosting takes (three databases, 16 GB of RAM recommended) and what stays paid.
Playwright
Run one web test suite on Chromium, Firefox and WebKit with auto-waiting and failure traces, on patched builds rather than the Safari or Firefox your users run.
RustDesk
Remote control through a relay server you run yourself, free under AGPL. The web console, user accounts, 2FA and SSO stay in the paid, yearly Pro server.
Twenty
Shape a CRM around your own business, with objects and fields built in the UI or in TypeScript. Open source and free to self-host; SSO needs a paid key.
Umami
Traffic stats without cookies, on a single PostgreSQL database: MIT-licensed open source web analytics, self-hosted or on Umami Cloud, with events and funnels.
Uptime Kuma
Get alerted when a service goes down and show it on a status page: MIT-licensed self-hosted monitoring with HTTP, DNS and database checks on a single instance.
Usertour
Walk users through a web app with product tours, checklists and NPS surveys built in a visual editor: an open-core, self-hostable alternative to Appcues.
Dub
Short links on your domain, tied to the signups and sales they drive. Self-hosting the open core TypeScript app takes Vercel, PlanetScale, Upstash and Tinybird.
Zola
Build a static blog or docs site from Markdown with one Rust binary, Sass and image resizing included. 0.23 dropped shortcodes, and search ships with no UI.