Open Source Security & Privacy Tools Projects
Tools for protecting privacy, securing networks, and managing vulnerabilities and security threats.
AdGuard Home
Network-wide DNS-based ad and tracker blocker with parental controls, DNS rewrites, and detailed query logging.
AliasVault
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
1Password
Authentik
Open source identity provider and SSO solution that replaces Auth0 and Okta with a self-hostable, flexible authentication platform.
Auth0
Bitwarden
Bitwarden infrastructure/backend (API, database, Docker, etc).
1Password
Ente
🔒 End-to-end encrypted cloud for photos, videos and 2FA secrets.
Google Photos
ExifCleaner
Cross-platform desktop app that removes EXIF and hidden metadata from 90+ file formats before sharing.
BatchPurifier
Headscale
An open source, self-hosted implementation of the Tailscale control server
ExpressVPN
KeePassXC
Cross-platform community-driven port of KeePass Password Safe.
1Password
Midas
Open platform for governing execution authority at decision surfaces across agents, AI systems, and enterprise workflows.
NetBird
Self-hostable, zero-trust overlay network that combines a WireGuard-based mesh VPN with SSO, MFA, and granular access controls.
OTPHub
Simple OTP app for desktop and mobile.
Google Authenticator
Open Authenticator
Free, open-source cross-platform TOTP authenticator with self-hostable sync backend, built with Flutter.
Google Authenticator
OpenVPN
OpenVPN is an open source VPN daemon
ExpressVPN
Pangolin
Self-hosted identity-aware reverse proxy that securely exposes private services via encrypted tunnels without opening inbound ports.
Cloudflare
Passbolt
Open-source, security-first password manager designed for teams. End-to-end encryption, granular access control, and self-hostable.
1Password
Pi-hole
Network-wide DNS-based ad blocking that protects all devices on your network, including Smart TVs and IoT devices.
Proxly
A self-hosted tunneling tool — like ngrok, but on your own domain. Expose local dev servers through subdomains on your VPS.
ngrok
Scrambled Exif
Android app that removes EXIF metadata from photos via the share menu before sharing.
Metapho
Toofer
Local-first, web-based two factor authenticator app.
Google Authenticator
Trezur
Fast, secure, light-weight web-app to generate TOTP and HOTP tokens.
Google Authenticator
Vaultwarden
Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.
1Password
wg-easy
The easiest way to run a self-hosted WireGuard VPN with a web-based admin UI, automatic client management, and one-liner deployment.