SafeBucket
Self-hosted file sharing platform with direct S3 uploads, SSO, and role-based access control.
Open source alternative to:
SafeBucket is an open-source, self-hosted file sharing platform designed for teams that want full control over their data. Unlike traditional cloud storage solutions, SafeBucket ensures that files never touch your server — uploads and downloads go directly to your S3-compatible storage backend via presigned URLs, while the API handles only metadata, access control, and audit logging.
The platform is built with a security-first, SSO-first mindset. It integrates with any OIDC identity provider for authentication, supports multifactor authentication via TOTP, and enforces role-based access control at both the platform and bucket level. Every sharing action is scoped to buckets with explicit membership rules, and all activity is tracked in real-time audit logs.
SafeBucket's modular architecture allows you to swap out every infrastructure component. Use AWS S3 or self-hosted MinIO for storage, PostgreSQL or SQLite for the database, and NATS or SQS for event handling. It ships with Docker Compose templates for quick local deployment and is actively maintained with signed container images.
Categories:
Build with:
Frequently Asked Questions
How does SafeBucket let files bypass my application server?
SafeBucket uses presigned URLs so file uploads and downloads go directly between the browser and your S3-compatible storage backend. The API only handles metadata, access control, and audit logging, so large files never pass through or consume resources on the application server. This keeps the platform lightweight and keeps file data out of the application tier.
What authentication and access control options does SafeBucket support?
SafeBucket is SSO-first and integrates with any OIDC identity provider for authentication, with multifactor authentication supported via TOTP. Role-based access control is enforced at both the platform and bucket level, and every sharing action is scoped to buckets with explicit membership rules. All activity is tracked in real-time audit logs.
Can I plug in my own infrastructure with SafeBucket?
Yes — SafeBucket has a modular architecture where every component can be swapped. Use AWS S3 or self-hosted MinIO for storage, PostgreSQL or SQLite for the database, and NATS or SQS for event handling. It ships with Docker Compose templates for quick local deployment and is maintained with signed container images.
Repository details
Updated 8/13/2026, 8:00:14 PM
View RepositoryRepository activity
Compare SafeBucket with
Similar open source alternatives
Paperless-ngx
Self-hosted document management system with OCR, full-text search, and automatic tagging for your paper documents.
Google Drive
Twake Drive
The open-source alternative to Google Drive.
Google Drive
Syncthing
Continuous file synchronization program that syncs files directly between your devices — no cloud required.
Dropbox
OpenCloud
OpenCloud is an open-source platform for file management, sharing, and team collaboration. Easy to deploy, fully self-hostable, and built for modern workflows.
Google Drive
BluFiles
Self-hosted file sharing and management platform with file transfers, pastes, collections, and a REST API.
WeTransfer
ownCloud
ownCloud is the pioneering open-source file sync and sharing platform. Self-host your cloud for files, calendars, contacts, and collaboration — your data.
Google Drive