Open Source Security & Privacy Tools Projects

Network-wide DNS-based ad and tracker blocker with parental controls, DNS rewrites, and detailed query logging.

Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.

Open source identity provider and SSO solution that replaces Auth0 and Okta with a self-hostable, flexible authentication platform.

Bitwarden infrastructure/backend (API, database, Docker, etc).

Open-source, end-to-end encrypted cloud for photos, videos, and 2FA secrets — a privacy-first Google Photos and iCloud Photos alternative.

Cross-platform desktop app that removes EXIF and hidden metadata from 90+ file formats before sharing.

Headscale is an open-source, self-hosted implementation of the Tailscale control server. Build your own private WireGuard mesh VPN without a vendor lock-in.

KeePassXC is a cross-platform, community-driven port of KeePass Password Safe. Store credentials locally in an encrypted database, with no cloud required.

Open platform for governing execution authority at decision surfaces across agents, AI systems, and enterprise workflows.

Self-hostable, zero-trust overlay network that combines a WireGuard-based mesh VPN with SSO, MFA, and granular access controls.

Simple OTP app for desktop and mobile.

Free, open-source cross-platform TOTP authenticator with self-hostable sync backend, built with Flutter.

OpenVPN is an open source VPN daemon

Self-hosted identity-aware reverse proxy that securely exposes private services via encrypted tunnels without opening inbound ports.

Open-source, security-first password manager designed for teams. End-to-end encryption, granular access control, and self-hostable.

Network-wide DNS-based ad blocking that protects all devices on your network, including Smart TVs and IoT devices.

A self-hosted tunneling tool — like ngrok, but on your own domain. Expose local dev servers through subdomains on your VPS.

Android app that removes EXIF metadata from photos via the share menu before sharing.

Toofer is a local-first, web-based two-factor authentication app that stores your TOTP secrets directly in your browser. Private, simple, fully offline.

Fast, secure, light-weight web-app to generate TOTP and HOTP tokens.

Vaultwarden is an unofficial, Bitwarden-compatible server written in Rust. Self-host your password vault with low resource use and full client compatibility.

The easiest way to run a self-hosted WireGuard VPN with a web-based admin UI, automatic client management, and one-liner deployment.