Open-source alternatives to Sshwifty

Natpass is a web-based remote access gateway and orchestrator designed to manage remote server instances, desktop streaming, and cloud development environments through a browser. It functions as a centralized portal for executing shell commands and accessing graphical desktops on remote servers without the need for local clients. The system includes a remote IDE host and a remote desktop streamer, enabling server-side development environments and the transmission of a remote machine's visual interface directly to a web browser. It also features a natural language documentation query tool for

mdserver-web is a Linux server management panel and plugin-based server orchestrator. It provides a web interface for administering Linux servers, allowing users to execute shell commands and monitor system resources through a browser. The project features a modular plugin system used to deploy web stacks and databases via custom administrative plugins and service scripts. It includes a web-based terminal emulator for running shell instructions and a system resource monitor that uses visual dashboards to track processor and memory usage. The software covers additional administrative capabili

dsvpn is a point-to-point virtual private network tool that establishes encrypted tunnels between two specific endpoints. It functions as a network driver utility that routes raw operating system traffic through a virtual interface for encapsulation and secure transmission. The project distinguishes itself by encapsulating IP packets within TCP streams, allowing secure connections to bypass restrictive network firewalls and filters that block non-standard protocols. It uses symmetric encryption with pre-shared secret keys to authenticate participants and protect data transmission. The softwa

Zellij is a terminal multiplexer and workspace manager designed to organize command-line sessions into persistent, reconfigurable layouts. It functions as a terminal plugin framework, allowing users to extend their environment with modular, event-driven components that interact with the host through a structured message-passing protocol. The project distinguishes itself through a layout-engine-based architecture that decouples visual pane arrangements from process execution, enabling automated and repeatable terminal workflows. It includes integrated support for web-based remote access, facil

HestiaCP is a Linux web hosting control panel designed for the centralized administration of web servers, databases, and DNS records. It serves as a management suite for hosting email services and managing multiple PHP language runtimes for various web applications and user accounts. The project distinguishes itself through integrated security orchestration, providing a Linux firewall orchestrator with automated brute-force detection and an SSL certificate automator for the issuance and renewal of security certificates. It includes a DNS zone manager with clustering support, as well as a mail

This project is a community-curated directory of open-source software designed for deployment in private server environments and home labs. It serves as a comprehensive resource for discovering independent, self-hosted alternatives to mainstream cloud services, enabling users to maintain full data ownership and control over their digital infrastructure. The directory is structured through a hierarchical taxonomy that organizes a vast collection of applications into logical categories, ranging from media management and data analytics to private communication and team productivity tools. It dis

TablePro is a cross-platform database management client designed for browsing, querying, and administering both SQL and NoSQL databases. It functions as a unified workspace that integrates a code-centric SQL editor with schema visualization tools, allowing developers to manage complex data models and execute queries across diverse database engines. The application distinguishes itself through an agentic AI integration layer that connects language models directly to database tools, enabling automated query generation, optimization, and error fixing with configurable approval gates. It features

Nezha is a multi-server infrastructure monitor and website uptime monitor that provides a centralized dashboard for tracking real-time resource utilization and system health. It functions as a protocol server and alerting engine, utilizing remote agents to collect telemetry data across multiple operating systems. The system distinguishes itself with a web-based remote administration interface, allowing users to execute maintenance commands and manage scheduled tasks on remote hosts via a browser-based terminal. It also integrates a Model Context Protocol server to provide a secure HTTP entry

This project is a multimodal AI proxy and content generation hub that provides a unified web interface for interacting with multiple large language models and generative AI services. It functions as a secure API access gateway, routing requests from a single dashboard to various external AI backends using configurable base URLs and API keys. The platform is delivered as a cross-platform progressive web application, allowing for installation on Linux, Windows, and MacOS. It distinguishes itself by consolidating text, image, audio, and video generative controls into a standardized interface, su

Devilbox is a containerized development environment that provides a reproducible suite of web servers, databases, and language runtimes managed through a unified configuration. It functions as a Docker-based local development stack for LAMP and MEAN software stacks and as a manager for switching between different versions of these services to match specific project requirements. The system distinguishes itself by automating local network orchestration. It includes a Docker-based virtual host manager that automatically maps local directories to custom domains and a local DNS and SSL orchestrat

GeminiProChat is a web-based chat interface for interacting with Gemini Pro and other large language models via API. It is provided as a containerized application and a progressive web app that can be installed as a standalone native application on mobile and desktop devices. The system includes password-protected access to prevent unauthorized use of AI API quotas. It allows for the configuration of specific model names and base URLs through environment variables to route requests to different AI service endpoints. The application renders AI responses using markdown and syntax highlighting

Microbin is a self-hosted file sharing application and encrypted pastebin written in Rust. It provides a platform for hosting text snippets and binary files via unique links, functioning as both a secure file drop and a URL shortener. The system features client-side end-to-end encryption, ensuring the server does not see plaintext data before it is transmitted. It includes secure postbox portals for collecting documents from external clients and supports password-protected access control to restrict content visibility. The platform manages the upload lifecycle through time and view-based exp

Lets-chat is a self-hosted team communication platform and XMPP chat server designed for private messaging. It provides a containerized communication environment for small teams to exchange messages and files, featuring a programmable REST API for automating conversations and managing messages from external tools. The platform functions as an XMPP gateway and server, ensuring interoperability with other compliant messaging clients. It distinguishes itself by supporting enterprise identity management, allowing administrators to verify user identities through local accounts or external director

This project is a TypeScript mobile application scaffold and framework template for building cross-platform iOS and Android applications. It provides a standardized architectural starting point that emphasizes a separation of concerns by isolating business logic from the user interface. The template functions as an architecture kit with built-in support for environment-aware configurations, allowing different API secrets and settings across development and production builds. It also serves as an internationalized starter project featuring dynamic visual theme injection and multi-language loca

esm is an ECMAScript module loader and JavaScript module path resolver. It functions as a runtime system that executes standard JavaScript modules without requiring a separate build or bundling process. The project provides a compatibility bridge for CommonJS interoperability, wrapping CommonJS exports into synthetic modules to allow imports and exports between different module systems. It includes a dynamic module cache that stores resolved instances in memory to prevent redundant file system reads and repeated execution. The system handles runtime path resolution and file extension detecti

Firezone is a zero trust network access platform that uses WireGuard to provide identity-based connectivity to internal network resources. It functions as a virtual private network that synchronizes authentication and user groups via OpenID Connect providers. The system implements a group-based access control engine to enforce least privilege by restricting network resources to specific user groups. It utilizes holepunching and relay protocols for NAT traversal to establish encrypted tunnels through firewalls without requiring inbound ports. The platform includes a control plane for managing

v2ray-wss is a Linux proxy deployment script and installer used to set up V2Ray proxy servers for secure network routing and traffic obfuscation. It functions as a multi-protocol proxy server and gateway, enabling the deployment of encrypted tunnels on Linux distributions. The project specifically provides a WebSocket proxy gateway that routes traffic through Nginx and WebSockets to mask proxy connections as standard web traffic. It supports both domain-based configurations for users with registered domains and domainless proxy setups for users without a dedicated domain. The system automate

Termora is a cross-platform SSH client, terminal emulator, and serial communication tool. It provides a unified interface for managing local shell sessions, secure remote server connections, and direct hardware communication through serial port protocols. The project distinguishes itself by combining diverse remote access tools into one environment, including a VNC remote desktop client, an SFTP file transfer client, and a proxy tool for SSH tunneling and port forwarding. It further supports network hardware management through vendor-specific terminal emulation to ensure compatibility with va

Vibetunnel is a remote shell infrastructure project consisting of a headless terminal server, a remote shell manager, and a web-based terminal proxy. It provides the backend and connectivity tools necessary to execute processes on cloud instances and stream the resulting output to a web browser. The system distinguishes itself through secure tunneling connectivity and real-time terminal state synchronization. It uses encrypted tunnels to expose local shell environments to the internet and includes a terminal session recorder to capture activity in a playback-ready format for sharing and revie

Gotty is a web-based terminal emulator that functions as a secure remote shell gateway. It exposes command-line processes as interactive web applications, allowing users to access and manage terminal sessions directly through a standard browser without requiring local terminal software. The system distinguishes itself by integrating with terminal multiplexers to enable shared, real-time collaboration among multiple remote clients. It enforces security through a combination of TLS-encrypted network transport and configurable access control mechanisms, including basic authentication and client

Websockify is a WebSocket-to-TCP proxy and tunneling server that enables web browsers to communicate with servers or applications that only support standard TCP connections. It functions as a network bridge and connection broker, translating bidirectional WebSocket frames into raw TCP packets to facilitate remote browser access to backend services. The system acts as a secure socket gateway that supports multi-tenant socket routing, allowing multiple clients to be directed to different backend targets based on unique URL tokens or hostnames. It secures data in transit by wrapping connections

Termix is a centralized web-based gateway for managing remote SSH connections and terminal sessions. It provides a browser-based interface that enables users to access, control, and monitor remote servers, containerized applications, and file systems from a single, unified dashboard. The platform distinguishes itself through robust security and session management capabilities. It integrates with external identity providers for single sign-on and enforces role-based access control to manage user permissions. To ensure reliable administration, it maintains stateful session persistence, allowing

This project is a portable implementation of the secure shell toolset designed for deployment across diverse operating systems and platforms. It provides a suite of tools for secure remote login and command execution based on the secure shell protocol. The implementation includes a sandboxed server that isolates processes to limit the impact of potential vulnerabilities on the host operating system. It also functions as a cryptographic key manager for generating and storing security keys to replace or supplement password-based authentication. The project covers encrypted file transfer for mo

Wetty is an HTTP browser terminal emulator that provides shell access over HTTP and HTTPS connections. It functions as a web-based remote shell and SSH browser gateway, allowing users to execute shell commands on remote hosts directly within a web browser. The project integrates SAML2 identity propagation to authenticate users through external providers and map those web identities to system accounts. It also supports embedding the terminal interface within iframes for integration into other web applications or dashboards. The system covers remote server administration and secure terminal pr

Blink is a mobile terminal platform for iOS that combines an SSH and Mosh client with a local shell emulator, snippet manager, and SSH key storage. It renders terminal output using Chromium's HTerm engine for fast display and maintains persistent remote sessions across network changes through the Mosh protocol. The platform supports SSH key-based authentication, WebAuthn hardware security keys, and SOCKS5 proxy tunneling for secure remote access. The terminal environment is built around gesture-based session navigation, allowing users to switch between multiple shells with swipe and pinch ges

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n