OpenlaneOpen
Continuous compliance automation across many frameworks
Openlane automates the evidence collection and control tracking behind SOC 2, ISO 27001, GDPR, and a dozen other frameworks, mapping shared controls once rather than per framework.
Collection
OSI-approved open-source projects gaining stars fastest over the last thirty days.
Continuous compliance automation across many frameworks
Openlane automates the evidence collection and control tracking behind SOC 2, ISO 27001, GDPR, and a dozen other frameworks, mapping shared controls once rather than per framework.
Self-hosted keyword, backlink, and rank tracking
OpenSEO covers keyword research, backlink analysis, competitor monitoring, and rank tracking in one self-hosted application, using DataForSEO as the data source so you pay for the data rather than the seat.
Turn any website into clean, model-ready data
Firecrawl handles the unglamorous part of feeding the web to a language model: rendering JavaScript, following pagination, stripping navigation and cookie banners, and returning markdown or structured JSON that a model can actually use.
AI coding agent for terminal, editor, and desktop
OpenCode is a coding agent that runs where you already work rather than in a separate chat window. The same session can be driven from a terminal, an editor extension, or a desktop client, and it keeps context across all three.
Local voice dictation with AI cleanup for macOS
VoiceInk transcribes speech on the machine itself using a local Whisper model, then runs the raw transcript through a cleanup pass that removes filler and applies punctuation.
Screen recorder with editing and instant shareable links
Cap records screen and camera, then gives you an editor with backgrounds, automatic zooms, and cursor smoothing before you share a link. It is built in Rust on Tauri, so the binary is small and recording does not tax the machine it is recording.
Web and product analytics in one cookie-free dashboard
OpenPanel merges the two dashboards most teams keep open side by side: page-level web analytics and event-level product analytics. Funnels, retention curves, and session replay sit next to traffic sources rather than in a separate product.
A modern CRM that does not fight the way you work
Twenty rebuilds CRM around the interaction patterns people already know from modern productivity tools: keyboard navigation, inline editing, flexible record views, and a data model you can extend without a consultant.
Autonomous agents that complete real engineering tasks
OpenHands runs agents that plan and execute multi-step engineering work: reading a repository, editing files, running tests, and iterating until a task is done. Each agent works inside a sandboxed runtime rather than on the host machine.
Run open language models locally with one command
Ollama reduced local model hosting from an afternoon of CUDA troubleshooting to a single pull command. It handles model download, quantisation selection, GPU offloading, and memory management, and exposes an OpenAI-compatible endpoint on localhost.
Schedule and analyse posts across 30+ social networks
Postiz is a self-hostable scheduler for teams that publish to many networks and do not want to pay per seat for the privilege. It covers planning, drafting, approval, and publishing, with AI assistance for turning one post into per-network variants.
Self-hosted photo and video backup for your own server
Immich replaces a cloud photo service with software that runs on hardware you own. Mobile apps for iOS and Android back up new photos and videos in the background, so the library on your server stays current without you thinking about it.
Deploy applications to your own servers with one click
Coolify is a deployment platform that runs on servers you already pay for. It builds from a Git repository, provisions databases, issues certificates, and handles rollbacks, without the per-instance pricing of a hosted platform.
Error tracking that speaks the Sentry protocol
GlitchTip accepts events from the official Sentry SDKs, which means adopting it is a DSN change rather than an instrumentation project. Stack traces, breadcrumbs, releases, and issue grouping all work as expected.
One chat interface for every model you run or connect
Open WebUI is the front end that turns a local inference server into something a household or a team can actually use. It handles accounts, conversation history, document retrieval, and model switching, and speaks to both local runtimes and hosted APIs.
End-to-end encrypted photo storage across devices
Ente stores photos and videos encrypted on the client, so the server holds ciphertext it cannot read. Sync, albums, and sharing all work on top of that constraint rather than around it.
Collaborative wiki with real-time editing and diagrams
Docmost is a documentation workspace with real-time collaborative editing, nested spaces, and diagram support built in rather than embedded from elsewhere.
Inference engine that runs LLMs on almost any hardware
llama.cpp is the layer most local model tooling is built on. It is a C and C++ inference engine with no Python runtime, aggressive quantisation support, and hand-tuned kernels for a remarkably wide range of hardware.
Localisation platform with in-context translation editing
Tolgee's distinguishing feature is that translators work in the running application. Alt-click a string in the app and the editor opens over it, with surrounding context visible, which removes most of the ambiguity that produces bad translations from a spreadsheet.
Let AI agents drive a real browser
Browser Use gives an agent a real browser rather than an HTTP client. It handles the translation between a model's intent and DOM actions, keeps a structured representation of the page in context, and recovers from the usual navigation failures.
Drag-and-drop builder for agents and RAG pipelines
Langflow turns pipeline construction into a graph you can see. Components are Python underneath, so a flow that outgrows the canvas can be exported and run as code rather than rebuilt.
Secret management for applications and infrastructure
Infisical stores application secrets, syncs them into the platforms that need them, and rotates the ones that support rotation. Environments and folders keep development and production credentials properly separated.
No-code database and application builder you can host
Baserow is a spreadsheet-shaped database with the API and permission model of a real backend underneath. Non-technical colleagues get grid, gallery, kanban, and calendar views; engineers get a REST API and webhooks over the same data.
Remote desktop you can point at your own relay server
RustDesk is remote desktop software where the relay server is a binary you can run yourself. That is the whole argument: the same convenience as the commercial tools, without your screen sessions transiting a vendor's infrastructure.
Postgres-powered backend platform for production apps
Supabase gives an application everything it needs on the server side without hiding the database behind a proprietary abstraction. The primitive is plain Postgres, and the platform layers authentication, generated APIs, storage, realtime subscriptions, and edge functions on top of it.
Link management and attribution for modern marketing
Dub is a link platform rather than a shortener. Every link carries analytics, UTM handling, device and geographic targeting, and conversion attribution back to the click that produced it.
Surveys and in-product research on your own infrastructure
Formbricks covers both link surveys and in-product micro-surveys triggered by user behaviour, which is the combination most research tooling splits across two paid products.
Conversational forms built on a visual flow canvas
Typebot builds forms that behave like a conversation: one question at a time, branching on answers, with the flow assembled visually rather than written in code.
Collaborative whiteboard with a hand-drawn look
Excalidraw's sketchy rendering is not decoration. Diagrams that look provisional invite comment, where a crisp vector diagram signals a decision already made, so it is unusually good at the early part of a design conversation.
Lightweight web analytics without cookies or personal data
Plausible answers the handful of questions most sites actually ask - what pages get read, where readers came from, what converted - and deliberately declines to answer the rest. There are no cookies, no cross-site identifiers, and no consent banner needed.
Local-first smart home automation with no cloud dependency
Home Assistant runs on a box in your house and talks to devices directly rather than through their manufacturers' servers. That single design decision is why automations keep working when the internet is down, and why a discontinued cloud service does not brick your lights.
Free 2D and 3D game engine with no royalties
Godot ships a complete engine, editor, and export pipeline under the MIT licence, which means no royalties, no revenue thresholds, and no licensing conversation before a project starts.
Self-hosted newsletter and mailing list manager
Listmonk is a single Go binary and a Postgres database that handles subscriber lists, segmentation, campaigns, and bounce processing at a scale that would be expensive on a hosted platform.
Design and prototyping built on open web standards
Penpot stores designs as SVG and uses CSS layout primitives - flex and grid - as its layout model, so what a designer builds maps onto what a developer implements rather than needing translation.
Document signing you can host and audit yourself
Documenso handles electronic signature collection with the signing certificate, audit trail, and field placement you expect, while keeping the documents on infrastructure you control.
Documents, whiteboard, and database in one canvas
AFFiNE puts a document editor and an infinite canvas over the same content. A page can be read as a document or arranged spatially as a whiteboard, and edits in one mode are edits in the other.
Video editor that runs entirely in the browser
OpenCut is a timeline video editor that installs nothing and uploads nothing. Media stays in the browser, processing happens locally through WebCodecs, and there is no account step before you can cut a clip.
Issue tracking and planning without per-seat pricing
Plane covers the ground between a lightweight tracker and a full project suite: issues, cycles, modules, and roadmaps, with views that suit both engineers and the people asking them for dates.
Scheduling infrastructure you can host and extend
Cal.com covers the booking link case well, but its real distinction is that scheduling is exposed as infrastructure. Availability, event types, and bookings all have APIs, and the booking page can be embedded rather than linked.
Typo-tolerant search that is fast to run and fast to tune
Meilisearch is a search engine you can be productive with in an afternoon. Indexing is a POST, relevance is tuned through an ordered list of ranking rules, and results come back typo-tolerant by default.
A control layer for customer-facing AI agents
Parlant addresses the problem that stops most support agents from shipping: a model that is helpful ninety-five percent of the time is not safe to put in front of customers. It manages behaviour through explicit, context-matched guidelines rather than one long prompt.
Lightweight password vault server for Bitwarden clients
Vaultwarden reimplements the Bitwarden server API in Rust so that it runs comfortably on a Raspberry Pi or a small VPS, while the official Bitwarden desktop, mobile, and browser clients connect to it unchanged.
Customer conversations from every channel in one inbox
Chatwoot collects website chat, email, WhatsApp, Instagram, and SMS into a single agent inbox with shared assignment, canned replies, and a help centre.
Speech recognition that runs anywhere, with no runtime
whisper.cpp is a C and C++ port of the Whisper speech recognition model with no Python dependency, quantised weights, and hardware acceleration across Apple Silicon, CUDA, and plain CPU.
Commerce building blocks rather than a fixed storefront
Medusa is a set of commerce modules - cart, orders, pricing, inventory, fulfilment - exposed as APIs you compose, rather than a themed storefront you customise around the edges.
Self-hosted uptime monitoring with a clean status page
Uptime Kuma monitors HTTP endpoints, TCP ports, containers, and certificates, and notifies through almost a hundred channels. Setup is a container and a few minutes.
API client that runs in the browser and stays fast
Hoppscotch is an API client that opens in a tab. Requests, collections, environments, and history are all there, and it starts in the time a desktop client takes to check for updates.