Projects sharing features with Linsa.io

Memex is a browser extension knowledge base and personal information manager designed for indexing, annotating, and organizing web content into a searchable personal archive. It functions as a web annotation tool that allows users to add highlights and notes directly to webpages and PDFs. The system features an AI-powered document summarizer that generates concise answers and summaries based on indexed materials using cited references. It includes an encrypted content synchronizer that uses end-to-end encryption to mirror archives and annotations across multiple devices. The platform provide

Microbin is a self-hosted file sharing application and encrypted pastebin written in Rust. It provides a platform for hosting text snippets and binary files via unique links, functioning as both a secure file drop and a URL shortener. The system features client-side end-to-end encryption, ensuring the server does not see plaintext data before it is transmitted. It includes secure postbox portals for collecting documents from external clients and supports password-protected access control to restrict content visibility. The platform manages the upload lifecycle through time and view-based exp

PrivateBin is a self-hosted, zero-knowledge text hosting service and secret sharing tool. It utilizes browser-based AES 256-bit encryption to ensure that data is encrypted on the client side before transmission, meaning the hosting server cannot read or recover the original content. The project distinguishes itself by using URL fragments to distribute decryption keys, preventing the secret key from ever being sent to the server. It supports the distribution of both encrypted text and files, which are compressed and encrypted locally prior to storage. The platform includes capabilities for an

The application functions as a self-hosted file sharing platform that allows users to transfer files directly through the browser or via cloud storage. It provides decentralized file-sharing utilities that stream encrypted data between client browsers without intermediate storage servers, alongside mechanisms for managing object storage providers and local disk configurations. The system incorporates client-side encryption to secure file payloads within the browser prior to transmission, paired with fallback relay routing to bypass restrictive firewalls through secondary TURN servers when dir

Epicenter is a local-first knowledge management system and data orchestrator designed to structure information generated by large language models into validated schemas. It functions as a storage architecture that persists application data in human-readable files and databases to ensure user ownership and portability. The system distinguishes itself by projecting language model outputs into structured, schema-validated tables and utilizing conflict-free replicated data types to synchronize application state across multiple devices without a central server. This allows for offline access and c

Notesnook is a cross-platform note-taking application designed for private knowledge management. It functions as a secure personal information manager that prioritizes user data confidentiality by employing client-side end-to-end encryption for all stored notes, attachments, and metadata. By utilizing a local-first synchronization model, the application ensures that information remains accessible offline while maintaining a consistent state across desktop and mobile devices. The platform distinguishes itself through a focus on privacy-centric organization and secure information handling. User

Joplin is an open-source, cross-platform note-taking application designed for secure, private knowledge management. It functions as a local-first productivity platform, maintaining a complete relational database on the user's device to ensure offline availability and high-performance data retrieval. The application prioritizes data sovereignty by implementing an end-to-end encryption layer, which secures all information locally with a master key before any synchronization occurs. The platform distinguishes itself through a delta-based synchronization engine that transmits only specific file c

This project is a comprehensive zero-knowledge security suite designed for enterprise credential management, secrets orchestration, and password management. It provides a secure, end-to-end encrypted vault that allows users to store, synchronize, and manage sensitive information, including passwords, passkeys, and infrastructure secrets, across desktop, mobile, and browser environments. The platform distinguishes itself through a strict zero-knowledge architecture where all encryption and decryption occur locally on the client, ensuring that plaintext data remains inaccessible to the server.

Croc is a command-line utility for sending files and folders between computers using end-to-end encrypted peer-to-peer connections. It employs elliptic curve encryption and key agreement to secure data transmission between remote endpoints. The tool allows users to coordinate transfers using a shared code phrase and supports the operation of custom relay servers to facilitate connections without relying on public infrastructure. It also includes a proxy client to route encrypted traffic through SOCKS5 proxies. Additional capabilities include resumable data transmission for unstable connectio

Saber is an end-to-end encrypted note-taking application designed for handwritten content. It provides a digital ink canvas for creating documents and a system for organizing those notes within a hierarchy of nested folders. The application ensures privacy by encrypting both notes and device configurations on the client side before they are synchronized across devices. This process prevents the server from accessing stored content or user settings. The toolset includes digital ink annotation capabilities, such as text highlighting and layer-based stroke rendering. The user interface supports

Ockam is a zero-trust networking framework designed to secure data transit between distributed applications using an identity-based network overlay. It provides the primitives necessary to establish mutually authenticated and end-to-end encrypted connections, removing the reliance on traditional network-layer security. The project is distinguished by its use of attribute-based access control and verifiable credentials to manage trust at scale. It implements cryptographic identity rotation to maintain identity continuity and integrates with hardware-backed key management systems to secure priv

Remotely Save is a cloud storage synchronization tool and backup manager designed to keep local files and application data consistent across desktop and mobile devices. It functions as a cross-platform synchronizer that mirrors local data to remote servers using S3 and other cloud protocols. The project focuses on privacy and security through end-to-end encryption, which secures files with a user-defined password before they are uploaded to remote cloud services. It ensures data remains private on third-party servers by applying symmetric client-side encryption. The system includes capabilit

Whisper Money is an open-source personal finance management platform designed for self-hosted environments. It provides a private, secure infrastructure for tracking income and expenses, consolidating multiple bank accounts, and managing asset portfolios. By prioritizing user data ownership, the platform allows individuals to maintain full control over their financial records while monitoring cash flow and progress toward personal budget goals. The platform distinguishes itself through the integration of artificial intelligence to automate the categorization of transactions and the generation

Send is a self-hosted file transfer service designed for end-to-end encrypted file sharing. It provides a privacy-focused data transfer solution and ephemeral file storage where uploaded content is automatically deleted after a specified number of downloads or a set amount of time. The service ensures private file sharing by utilizing client-side encryption to protect data before it is uploaded. Decryption keys are distributed to recipients via URL hash fragments to ensure the server never has access to the keys. The platform supports encrypted data transfer and temporary file hosting. It us

Wealthfolio is a local-first personal finance tracker and multi-currency net worth calculator designed for managing investments, spending, and overall financial standing. It functions as an extensible portfolio management platform that allows users to maintain their data on their own devices, with an optional self-hosted Docker deployment for private server access. The platform is distinguished by an LLM-powered financial assistant that handles natural language transaction imports and portfolio querying. It further differentiates itself through a TypeScript-based SDK and plugin architecture,

Saber is a cross-platform handwriting application and digital ink organizer designed for creating, storing, and managing handwritten notes. It functions as an encrypted note synchronization tool that keeps private content consistent across phones, tablets, and computers. The application features a handwriting interface framework that supports digital document annotation and a hierarchical file system for arranging notes into nested folders. It utilizes client-side end-to-end encryption to secure data before transmission and synchronizes state across devices via a cloud relay. The system incl

This project is a synchronization plugin that mirrors notes, settings, and vault data across multiple devices. It functions as a self-hosted vault synchronizer, allowing users to maintain a personal knowledge base using a user-owned server. The system utilizes a CouchDB synchronization layer to maintain consistent document states across peers. Security is handled through end-to-end encryption, which encrypts vault content locally before transmission to ensure privacy on remote storage. The replication model supports both self-hosted data replication and peer-to-peer data transfer. It manages

Send is an end-to-end encrypted file sharing service that encrypts files on the sender's device before upload, ensuring the server never sees plaintext content. It generates secure download links that are designed for single use, automatically removing access after the first successful download, and associates each share with a time-limited access token that expires after a set duration. The service operates without requiring user accounts, lowering friction for ephemeral sharing, and uses cryptographic key derivation to generate decryption keys from the download URL, eliminating server-side

n2n is a peer-to-peer VPN that creates an encrypted mesh network by establishing layer 2 overlay networks. It uses UDP tunneling to connect remote computers into a shared virtual local area network, allowing devices to communicate as if they were on the same physical Ethernet switch. The system utilizes a centralized signaling registry and federated coordination nodes to facilitate peer discovery and node registration. It implements NAT traversal through UDP hole punching and UPnP port mapping, while using supernode relay routing to ensure connectivity when symmetric NATs prevent direct peer-

Electric is a Postgres data synchronization engine and replication proxy designed to enable local-first software. It replicates data from Postgres databases to client-side stores in real time using logical replication, allowing applications to maintain a local embedded database for offline access and low-latency updates. The system distinguishes itself by using shapes to filter and authorize specific subsets of database rows and columns before streaming them to clients or edge workers. It further supports multi-user collaboration by integrating a conflict-free replicated data type framework t

Deskreen is a wireless screen mirroring and virtual display tool that streams a computer screen or specific application windows to any device with a web browser. It functions as a virtual display streamer and a web-based secondary monitor, allowing users to extend their desktop workspace to remote devices over a local network. The system supports end-to-end encrypted screen sharing to protect display data and utilizes virtual display adapters to treat remote browsers as extended screens. It includes capabilities for multi-device broadcasting, enabling a single video source to be mirrored acro

itpol is a framework for cryptographic key management, digital signature policies, and security hardening. It provides an IT policy template library and infrastructure access frameworks to establish organizational security guidelines and governance. The project focuses on cryptographic identity management through the use of PGP and SSH keys, alongside a security hardening guide for workstations. It defines standards for software supply chain security, specifically regarding the signing of code commits and software releases to ensure provenance. The system covers a broad range of security cap

TagSpaces is an offline-first file tagging and organization platform that lets you manage local files with portable metadata stored directly in filenames or sidecar JSON files, eliminating the need for a central database. It functions as a full-text file search engine, a Kanban board file organizer, a local AI file assistant, an S3-compatible cloud file manager, and a web clipper and bookmark manager, all within a single application. The project distinguishes itself through a local-first architecture where all file operations, indexing, and AI processing run entirely on the device, with cloud

Pingvin Share is a self-hosted file sharing platform designed for uploading and distributing files via secure links. It provides a private alternative to third-party cloud services for managing file transfers. The platform integrates an external security engine to scan uploaded files for malware and threats before they become available. It supports identity management through OpenID Connect integration, allowing user authentication to be delegated to external identity providers. Storage is managed through a gateway that supports both local disk drives and S3-compatible cloud object storage.

Ockam is an end-to-end encryption framework and distributed identity provider designed to establish secure communication between applications and devices. It provides a secure network overlay that utilizes cryptographic identities and attribute-based access control to implement zero trust network access. The project distinguishes itself through metadata-driven multi-hop routing and a pluggable transport layer, allowing encrypted traffic to move across diverse network topologies without requiring virtual IP overlays. It specifically enables secure tunneling for legacy applications by wrapping

Acontext is an LLM orchestration backend and agent memory framework designed to manage session state and knowledge for AI agents. It functions as a context manager and orchestration layer that integrates model providers with a secure code sandbox and a zero-knowledge data store. The project is distinguished by its approach to knowledge distillation, capturing agent learnings as reusable Markdown skills and structured memory files. It provides a secure execution environment where shell commands and scripts run in isolated containers with the ability to mount these persistent skill files direct