Projects sharing features with Guacamole Server

OS.js is a browser-based desktop environment built entirely with JavaScript that runs a full graphical interface with windows, file management, and applications inside any modern web browser without requiring local software installation. It provides a web desktop platform that manages application windows as DOM elements with z-ordering, resizing, and event routing, while offering an abstracted virtual filesystem layer that unifies access across multiple storage backends through a common read/write interface. The platform connects to remote servers and desktops using SSH, VNC, or Xpra protocol

Pomerium is an identity-aware reverse proxy designed to provide zero-trust access control for internal infrastructure. It functions as a centralized gateway that verifies user identity, device context, and group membership for every request before granting access to protected applications, services, or API servers. By integrating directly with external identity providers, it replaces traditional VPNs with granular, policy-based access enforcement. The platform distinguishes itself by extending zero-trust principles beyond standard web traffic to include non-HTTP protocols, such as TCP and UDP

NetBird is a zero-trust networking platform that builds secure, encrypted peer-to-peer overlay networks using the WireGuard protocol. It functions as a software-defined perimeter, connecting distributed infrastructure across cloud environments and physical locations while hiding network resources from the public internet. By integrating with external identity providers, the platform enforces granular access control and identity-based segmentation for every user and device. The platform distinguishes itself through extensive automation and programmatic management capabilities. It provides a ce

Opserver is a cross-platform monitoring server and infrastructure dashboard designed for tracking system health, performance metrics, and backend service availability. It functions as an external metric aggregator and enterprise health oversight tool, centralizing data from third-party monitoring sources into a single view. The system integrates with incident response services like PagerDuty to map user identities and manage notification workflows. It also connects with external directory and identity providers to handle user authentication and permission assignments. The platform covers sev

Inbox Zero is an AI-powered email automation platform and inbox organizer. It uses large language models to automatically categorize, label, and archive emails, while providing a conversational interface for managing workflows and drafting responses through natural language. The project distinguishes itself by integrating real-time calendar availability into its drafting process and generating AI-summarized meeting briefings. It supports a pluggable AI provider interface with model fallback chains, allowing it to connect to various cloud or local LLM providers. Users can also control their in

Leantime is an open-source project management platform designed to track tasks, milestones, and workflows using Kanban boards and Gantt charts. It functions as a strategic planning tool that links daily operational tasks to high-level business goals and long-term objectives, while also serving as a time tracking and billing system for managing work hours and client estimations. The platform differentiates itself through an integrated AI-powered project assistant that decomposes complex tasks, generates status reports, and provides project insights. It further distinguishes its offering with a

This project is a comprehensive zero-knowledge security suite designed for enterprise credential management, secrets orchestration, and password management. It provides a secure, end-to-end encrypted vault that allows users to store, synchronize, and manage sensitive information, including passwords, passkeys, and infrastructure secrets, across desktop, mobile, and browser environments. The platform distinguishes itself through a strict zero-knowledge architecture where all encryption and decryption occur locally on the client, ensuring that plaintext data remains inaccessible to the server.

KasmVNC is a web-based VNC server and remote access solution that provides a secure gateway for accessing remote desktop environments through a web browser. It implements the Remote Frame Buffer protocol to transmit pixel data and serves as a secure remote access gateway with integrated user auditing and input controls. The project distinguishes itself through extensive hardware acceleration, using GPU-accelerated frame capture and graphics acceleration to support graphics-intensive tasks with low latency. It employs a multi-threaded compression pipeline and dynamic encoding negotiation to ma

HedgeDoc is a self-hosted documentation platform and real-time collaborative Markdown editor. It serves as a digital workspace for creating shared technical notes and managing knowledge through a privately hosted system. The platform enables multiple users to write and format Markdown documents simultaneously in a shared live environment. It integrates external identity providers such as LDAP, SAML, and social platforms via OAuth2 to manage user access and authentication. The system includes capabilities for content publishing, including exporting notes to GitHub Gists and generating automat

Next Terminal is an enterprise bastion host platform that brokers and audits remote access to servers and devices. It functions as a centralized gateway unifying access to Windows, Linux, and legacy systems through a single authenticated interface, supporting RDP, SSH, VNC, Telnet, and HTTP protocols. The platform combines certificate management, policy-based access control, reverse tunnel agents, session recording, and web proxy interception into a unified security gateway. It deploys lightweight agents in internal networks that build reverse tunnels to a central site, eliminating per-locati

Inngest is a durable execution framework and event-driven automation engine designed to orchestrate background workflows. It enables developers to build resilient, stateful processes by memoizing function steps, ensuring that long-running tasks can automatically resume from the last successful operation after failures, timeouts, or infrastructure restarts. The platform distinguishes itself through its event-driven architecture, which uses a schema-validated bus to trigger functions and coordinate complex, multi-step logic. It employs an onion-model middleware approach for cross-cutting concer

Casibase is an open-source platform that orchestrates multi-turn conversations with large language models and manages retrieval-augmented knowledge bases from a single interface. It provides a unified system for connecting to over 30 AI model providers, ingesting documents into vector embeddings for semantic search, and running autonomous agent loops that can drive a browser, search the web, execute commands, and integrate with external tools. The platform distinguishes itself by combining AI conversation management with infrastructure and application orchestration capabilities. It includes a

Buildbot is a Python-based continuous integration framework and distributed build orchestrator. It functions as a build automation engine that coordinates the retrieval of source code, the execution of build steps, and the reporting of results through a central controller and a network of remote worker agents. The system is distinguished by a plugin-based extensibility architecture and a master-worker distribution model. It allows for dynamic build modification at runtime and supports a pluggable database backend for persisting system state and historical build data. The project covers a bro

FreeRDP is a full software implementation of the Remote Desktop Protocol, providing both client and server capabilities for remote session management. It functions as an RDP client library and a standalone remote desktop client, enabling remote connectivity and interoperability across different operating systems. The project includes a dedicated network device redirector and an RDP gateway client to handle authentication and proxy routing. It allows developers to integrate remote desktop functionality into third-party software applications via its client library. The software covers a wide r

This project provides KVM over IP hardware and software for remote computer management. It functions as an ATX power management controller, a remote serial console server, and a virtual media emulator. A WebRTC remote access gateway is used to bypass NAT and firewalls for low-latency hardware control via a web browser. The system is distinguished by its ability to simulate physical peripherals at the hardware level, including HID device emulation for keyboard and mouse input and USB mass storage emulation for streaming ISO images. It features a UART-to-web bridge for remote serial console acc

Natpass is a web-based remote access gateway and orchestrator designed to manage remote server instances, desktop streaming, and cloud development environments through a browser. It functions as a centralized portal for executing shell commands and accessing graphical desktops on remote servers without the need for local clients. The system includes a remote IDE host and a remote desktop streamer, enabling server-side development environments and the transmission of a remote machine's visual interface directly to a web browser. It also features a natural language documentation query tool for

Tailscale is a zero-trust networking overlay that connects distributed devices and services into a private, encrypted mesh network. By utilizing a high-performance, user-space implementation of the WireGuard protocol, it establishes secure peer-to-peer tunnels across diverse network topologies without requiring complex firewall configuration. The platform operates on a centralized control plane that manages global network state, authentication, and policy distribution, ensuring that connectivity is governed by identity rather than traditional IP-based rules. What distinguishes Tailscale is it

BookStack is a self-hosted knowledge base platform designed for organizing, storing, and managing structured documentation. It utilizes a hierarchical content model that arranges information into nested trees of books, chapters, and pages, supported by a dedicated search index for rapid retrieval across the entire knowledge base. The platform distinguishes itself through deep integration with enterprise identity providers, allowing organizations to centralize authentication and access control via LDAP, SAML, or OIDC. It provides extensive administrative control over the content lifecycle, inc

mcp-context-forge is a Model Context Protocol federation gateway that unifies diverse AI tool servers and APIs into a single consistent interface for discovery and execution. It acts as a centralized proxy that aggregates multiple servers and APIs, allowing AI agents to access and invoke a unified set of tools, prompts, and resources. The project distinguishes itself through a multi-protocol translation bridge that converts communication between standard I/O, SSE, gRPC, and REST to enable interoperability between disparate tool servers. It includes a comprehensive LLM evaluation framework for

oauth2_proxy is an OAuth2 reverse proxy and authentication gateway that protects upstream services by requiring users to authenticate through external identity providers. It acts as a secure login layer for backend applications that lack built-in user authentication. The project provides centralized access control by restricting entry based on email domains, organization membership, or approved user lists. It integrates with identity providers via issuer URLs and client secrets, and supports additional authentication methods such as htpasswd files. The gateway manages secure identity forward

Openfire is an XMPP communication server and enterprise messaging platform designed for real-time collaboration. It serves as a communication hub providing instant messaging, presence tracking, and multi-user chat capabilities for organizational use. The server supports federated network routing via an XMPP federation gateway, allowing users across different domains to exchange messages. It is designed for high availability through server node clustering and multi-node synchronization to balance client traffic and ensure continuous uptime. The platform integrates with external directory serv

Olares is a comprehensive suite of self-hosted identity, storage, AI, and orchestration services designed for private infrastructure management. It functions as a Kubernetes home server orchestrator, enabling the deployment of containerized applications, AI models, and GPU resources on local hardware to replace third-party cloud services. The platform distinguishes itself through a combination of self-hosted AI infrastructure for running large language models and image generators, alongside a decentralized identity manager that uses cryptographic keys and OIDC for trustless authentication. It

This project is an Android password manager application that provides an end-to-end encrypted vault for storing and synchronizing login credentials, secure notes, and identities. It functions as a secure storage system using zero-knowledge encryption to ensure that only the user can decrypt their stored data. The application integrates directly with the Android system to provide an autofill service that populates usernames and passwords into mobile apps and browser login fields. It also serves as a passkey management wallet for FIDO2 cryptographic passkeys and a time-based one-time password a

xboot is a full-stack development platform and low-code application framework pairing a Spring Boot backend with a Vue.js frontend. It provides a scaffolding environment for enterprise application development, focusing on rapid development through automated code generation for business logic, interfaces, and data operations. The platform features a visual workflow orchestrator for modeling and executing multi-step business process automation and an identity and access manager implementing OAuth2, single sign-on, and social login integration. It includes a distributed system utility suite that

Grist is a relational spreadsheet platform that combines the flexibility of a spreadsheet with the power of a relational database. At its core, it manages structured data across multiple linked tables, using a relational database engine to organize information while providing a familiar grid interface. The platform supports Python-based formulas for complex calculations and data transformations, with automatic recalculation when referenced cells change. The system is designed for self-hosted deployment, storing data in either portable SQLite files or enterprise-grade PostgreSQL databases. It

This project is a blockchain education platform that integrates a React frontend with Solidity smart contracts to create a decentralized application. It functions as a learning system that generates personalized educational roadmaps and tracks user progress using decentralized technology. The platform employs a hybrid identity integration system, verifying users through both traditional email providers and blockchain wallet connections. This allows for user identity management and account verification to control access to protected areas of the application. The codebase covers the deployment

Firezone is a zero trust network access platform that uses WireGuard to provide identity-based connectivity to internal network resources. It functions as a virtual private network that synchronizes authentication and user groups via OpenID Connect providers. The system implements a group-based access control engine to enforce least privilege by restricting network resources to specific user groups. It utilizes holepunching and relay protocols for NAT traversal to establish encrypted tunnels through firewalls without requiring inbound ports. The platform includes a control plane for managing