Open-source alternatives to Konga

This is a role-based access control system for Laravel applications that manages user permissions and roles within a database. It provides a database permissions manager to assign specific abilities to users and roles, utilizing authorization gates to restrict access to routes and interface elements. The project features a wildcard permission system that uses pattern matching to grant broad access across multiple related permissions. It also supports team-scoped access control, allowing users to maintain different roles and permission levels across separate organizational contexts or teams.

Platform is a framework for building back-office applications and administrative dashboards using Laravel. It functions as a schema-driven UI framework and CRUD generator that automatically constructs database management interfaces, input forms, and validation rules from programmatic model definitions. The project distinguishes itself through a comprehensive backend UI kit that supports advanced data capture, including geographic coordinate mapping, tabular JSON data matrices, and marketing metadata tracking. It features a robust role-based access control system for managing resource visibili

NestJS Access Control is a role-based and attribute-based authorization framework designed for the NestJS ecosystem. It provides a declarative system for securing application routes and resources, allowing developers to enforce granular access policies through metadata-driven decorators. The framework distinguishes itself by supporting hierarchical role inheritance, which enables the resolution of complex permission sets by traversing parent and child role relationships. It also facilitates dynamic authorization management, allowing security rules to be loaded asynchronously from external dat

This project is a Go-based identity and access management system that functions as a centralized authentication and authorization server. It provides a framework for managing user identities and controlling access to resources within enterprise environments. The system implements a role-based access control model, where permissions are grouped into roles and mapped to specific user accounts to manage resource access levels. The codebase covers the implementation of user authentication systems, identity management, and backend security patterns. It utilizes a database-backed identity store an

SpringBoot-Shiro-Vue is a permission management framework and role-based access control system. It provides a backend implemented with Spring Boot and a frontend built with Vue.js to manage user roles and map them to specific interface and API access rights. The project utilizes a token-based authentication system to verify user identities and enable stateless communication between the frontend and backend. It implements granular UI permission control to show or hide specific buttons and interface elements based on the current user's assigned access rights. The framework covers API security

Stack is an open-source identity provider that manages user authentication, passkeys, and OAuth tokens. It provides an identity infrastructure that handles user data storage and authentication flows via a centralized administrative dashboard. The platform differentiates itself by integrating a multi-tenant user management system that organizes users into team workspaces through invitation flows. It includes a secure secret vault for storing encrypted API keys and user tokens using encryption keys that remain hidden from the service provider. The system covers a broad range of administrative

Shopizer is a Java-based e-commerce platform designed for managing digital storefronts. It provides a centralized headless backend that coordinates product catalogs, shopping carts, and order processing workflows. The system is built as a containerized application ready for deployment and scaling within Kubernetes clusters on cloud infrastructure. It utilizes a headless architecture to decouple business logic from the presentation layer via a RESTful interface. The platform covers commerce management through inventory tracking, merchant account coordination, and order fulfillment workflows.

This project is a self-hosted question and answer platform and knowledge management system. It provides a centralized repository for documented answers and community discussions used to support users and resolve technical issues. The system functions as a plugin-based community forum, utilizing a modular extension system to add custom features and tools. It employs a decoupled architecture with a RESTful API backend to separate business logic from the user interface. The platform covers several domain areas including internal knowledge management, customer help centers, and community Q&A hos

This project is a Vue 3 e-commerce administration dashboard designed as a centralized backend manager for online stores. It provides a web-based interface for overseeing store settings, product catalogs, and general business workflows using the Element Plus component library. The system integrates a business intelligence dashboard for visualizing financial metrics and operational performance through interactive charts and reports. It features a content management system for editing rich text and controlling promotional banners, alongside a role-based access control interface to restrict sensi

Mail for Good is a bulk email marketing platform designed for managing subscriber databases, designing templates, and executing high-volume outreach campaigns. It functions as an email list management tool that facilitates contact data imports and the capture of new leads. The platform features an analytics dashboard for monitoring delivery metrics, tracking bounce rates, and measuring recipient engagement. It includes a role-based access control system to manage user permissions and secure the coordination of shared marketing accounts and campaigns. The system covers a broad range of capabi

vue-framework-wz is a Vue.js admin dashboard framework and modular frontend boilerplate designed for building administrative interfaces. It provides an enterprise UI component library and a role-based access control system to manage user logins and restrict access to protected administrative routes. The framework features a command-line tool for managing optional plugin dependencies to optimize bundle size. It includes an automated navigation system that generates multi-level sidebars, breadcrumbs, and tabbed browsing interfaces based on the application routing configuration. The project cov

This project is a Spring Boot administrative framework and enterprise backend boilerplate designed for building management systems. It provides a foundation for enterprise-level applications using a reactive programming model and non-blocking data access patterns. The framework includes a reactive CRUD system for database operations and a role-based access control system to manage user accounts and administrative permissions. It further distinguishes itself with a centralized data dictionary for maintaining standardized labels and values across application modules. The system's broader capab

This project is a rapid application development framework for building back-office interfaces and dashboards within Laravel applications. It functions as a backend management UI toolkit and schema-based UI generator that renders administration panels and data forms by mapping backend logic to pre-defined frontend components. The framework includes a role-based access control system to restrict application features and data based on user identity and assigned roles. It also provides a full-text search integration that uses interchangeable drivers to index and retrieve application content. Add

Geeker-Admin is a Vue.js admin dashboard framework designed for building backend management interfaces. It utilizes Vue 3, TypeScript, and Vite to provide a foundation for creating data-driven administration panels. The framework features a configurable data table engine that generates complex grids automatically from predefined configuration objects. It incorporates a role-based access control system to restrict access to specific pages and interface elements based on user permissions. The system includes a centralized state management store for persistent global data and page state preserv

Laravel Boilerplate is a pre-built admin panel and application scaffolding for Laravel that provides a complete backend foundation including user management, role-based permissions, and a CoreUI interface. It serves as a starting point for web application development by bundling essential administrative features into a single, ready-to-use package. The project distinguishes itself through a comprehensive identity management system that combines multi-language support across over 20 locales with two-factor authentication and user impersonation capabilities. Its role-based access control system

Blog.Core is a production-ready backend boilerplate for building enterprise APIs and microservices using ASP.NET Core. It provides a foundational infrastructure for distributed systems, including tools for database-first scaffolding and the implementation of multi-tenant API frameworks. The project distinguishes itself through automated data layer generation, which produces entity models and repository layers directly from database schemas. It implements a centralized identity management system using standard identity server protocols to handle authentication and authorization across multiple

Vue Manage System is a type-safe administrative dashboard framework built with Vue 3 and Element Plus. It serves as a management template for backend systems, integrating role-based access control to restrict pages and actions based on assigned user permissions. The project distinguishes itself through a comprehensive set of administrative tools, including a data visualization dashboard with interactive charts and a content management system featuring rich text editing and image cropping utilities. It utilizes TypeScript for static typing and Pinia for centralized state management. The syste

LoopBack Next is a Node.js API framework used for building REST and multi-protocol APIs. It functions as an OpenAPI server implementation that can either generate machine-readable specifications from code or produce implementation controllers and models from existing specifications. The framework distinguishes itself through a central dependency injection container and a repository-pattern data access layer. This architecture decouples application logic from component construction and persistent storage, allowing for a pluggable system where data sources and business logic are isolated throug

Ferry is an open-source workflow engine designed to manage ticket-based processes across departments. It provides a platform for submitting, tracking, transferring, and closing tickets, with personal and all-ticket views for full lifecycle management. The system is built around a configurable process template designer that supports serial, parallel, and conditional node routing, enabling flexible approval sequences. The platform distinguishes itself through dynamic variable-based approver assignment, where task approvers can be determined by organizational variables such as direct supervisor,

Logto is an open-source identity provider that serves as a centralized authentication and authorization server for web, mobile, and command-line applications. It implements the OpenID Connect and OAuth 2.1 standards to handle secure user sign-in and the issuance of identity tokens. The platform is specifically designed as a multi-tenant authentication framework for software-as-a-service environments, featuring built-in organization management and tenant isolation. It includes an enterprise single sign-on gateway to integrate external identity providers and supports role-based access control t

This project is a business intelligence suite and SQL data visualization platform used for data analysis, reporting, and monitoring. It provides a web application for exploring datasets and building interactive dashboards, complemented by a web-based SQL query editor for analyzing raw data from connected stores. The platform features a semantic data layer to define standardized metrics and dimensions, ensuring consistent data interpretation across reports. It includes a security framework with role-based access control to manage user permissions and authentication across shared dashboards. T

EasyAdminBundle is a tool for automatically generating backend management interfaces for Symfony applications. It builds administrative screens and forms by mapping database entity definitions to user interface components, providing a web-based system for managing database records through searchable lists and CRUD forms. The project supports the creation of separate administration backends tailored for different user roles or external collaborators. It includes a security layer for restricting dashboards, menus, and data fields based on role-based access control and user security tokens. The

This project is a React admin dashboard boilerplate designed for building backend administrative interfaces. It provides a pre-configured development stack that integrates a Redux state management framework, a role-based access control system, and a standardized Axios HTTP client wrapper. The system includes a mock API development environment that serves fake data through a local server to decouple frontend development from backend availability. It uses Vite for module bundling and provides a component-library based UI for constructing management interfaces. The platform covers a broad range

Incus is a unified orchestration platform for managing system containers, OCI application containers, and virtual machines through a single control plane. It brings together cluster infrastructure management, secure multi-tenancy, software-defined networking, and pluggable storage backend orchestration into one cohesive system exposed via a full REST API and command-line interface. What distinguishes Incus is its ability to run multiple instance types side by side—full Linux system containers, OCI application containers, and QEMU virtual machines—all managed with consistent tooling. Networkin

Keygen is a software licensing and distribution API platform designed to validate product keys, manage user entitlements, and enforce device activation policies. It provides a comprehensive set of identity and licensing services that enable software vendors to control access to desktop and server applications while tracking usage limits and seat counts across hardware machines. The platform includes enterprise identity provider integration using standard SAML protocols, single sign-on authentication, and role-based access control with granular permission restrictions to secure system operatio

Frappe is a Python-based low-code web framework used for building data-driven business applications. It functions as a full-stack meta-framework that integrates a Python backend with a JavaScript frontend, providing a development environment for rapid application prototyping and deployment. The framework employs a model-driven architecture that automatically generates database schemas, REST API endpoints, and administrative interfaces based on defined metadata. This system is complemented by a command-line scaffolding tool for creating standardized project directory structures and boilerplate

Spring Security is a comprehensive security framework for Java applications that provides authentication and authorization for both web and non-web environments. It functions as an implementation of authentication and authorization logic integrated with the Java runtime environment to protect sensitive resources from unauthorized access. The framework includes toolkits for implementing OpenID Connect and OAuth 2.0 authorization servers and clients, as well as tools for integrating SAML 2.0 identity providers to enable cross-domain single sign-on. It utilizes a role-based access control system