Open-source alternatives to Osx Optimizer

xhyve is a macOS virtual machine manager and virtualization tool that leverages the native hypervisor framework to run guest operating systems in userspace. It provides a virtualization layer for executing guest systems with hardware acceleration. The project features a hardware pass-through hypervisor that maps physical host devices directly to guest virtual machines to increase performance. It includes a remote framebuffer server and VNC access to enable interaction with the guest display and input devices from external devices. The tool covers virtual hardware emulation for storage, netwo

BLEUnlock is a macOS automation tool and proximity-based system controller that monitors the range of trusted Bluetooth Low Energy devices to automate screen security and hardware-based unlocking. It functions as a background utility that identifies and filters nearby devices by their unique identifiers and signal strength to trigger system actions. The system automatically manages screen lock states, waking the display and unlocking the computer when a paired device enters a defined signal range, or locking the screen and starting the screensaver when the device moves out of range. Beyond s

Mjolnir is a macOS automation framework and extensible scripting engine. It provides a system for creating custom productivity workflows, managing application states, and controlling the macOS desktop interface programmatically. The project functions as a global hotkey manager that binds keyboard shortcuts to trigger automated scripts across the operating system. It includes a macOS application controller to inspect active windows and manage system-wide user interface interactions. The environment supports extensibility through a pluggable package management system, allowing for the installa

Hydra is a scriptable productivity platform for macOS that functions as a global hotkey manager, window manager, and automation tool. It allows users to extend system functionality by executing scripts and custom functions to automate repetitive operating system tasks. The system enables the binding of specific keyboard shortcuts to trigger scripts from any active application. It provides capabilities to inspect and modify the state of running application windows to organize the desktop workspace. The platform supports a module-based extension model, allowing for the installation of third-pa

MTMR is a MacBook Touch Bar customizer that replaces the default interface with personalized buttons and layouts to trigger macOS system actions. It serves as an automation interface and hardware controller, allowing users to execute shell scripts, open URLs, and manage system settings like brightness, volume, and media playback through a touch-sensitive surface. The project functions as a widget engine and gesture mapper, providing a framework to display real-time system metrics and external data via plugins. It utilizes an event-driven system to assign automation scripts to multi-finger swi

seL4 is a formally verified microkernel whose C implementation is backed by machine-checked mathematical proofs of correctness, confidentiality, integrity, and availability. It enforces strict isolation between processes through hardware-enforced address space separation and a capability-based access control system, where each process holds explicit rights only to the resources it has been granted. The kernel exposes hardware resources through a minimal API of system calls that manage threads, address spaces, and inter-process communication, with synchronous IPC supporting sender-identifying b

This project is a comprehensive security hardening and privacy management guide for macOS. It provides a set of instructions and checklists for reducing the system attack surface through manual configuration, policy enforcement, and a layered defense strategy. The guide emphasizes a system auditing framework, using binary analysis, system logs, and packet inspection to verify that security controls and application sandboxing are functioning as intended. It offers tool-agnostic recommendations, defining security goals while allowing users to select their own third-party software for implementa

This project is a security hardening guide and privacy configuration manual for macOS. It provides a comprehensive set of instructions for configuring system settings to improve privacy, reduce the attack surface, and implement a malware defense framework. The guide covers technical methods for validating software notarization, verifying application sandboxing, and auditing system activity. It distinguishes itself by providing detailed workflows for restricting high-risk features and applying advanced security configurations to protect the operating system. The documentation covers several k

Runtipi is a home server dashboard and orchestration tool designed for deploying and managing containerized applications. It provides a web-based interface for discovering and installing software from a curated app store, utilizing a Docker Compose orchestrator to handle the deployment of self-hosted services. The system integrates a reverse proxy and SSL manager to route external traffic to internal containers, automating HTTPS certificate renewal and domain assignment. It also features a built-in backup and update manager that uses cron-based scheduling to perform automatic security patchin

python-dotenv is a library and command line interface for managing environment variables in Python applications. It functions as a configuration parser and loader that reads key-value pairs from files and injects them into the system environment, enabling the decoupling of application configuration from source code. The project provides a command line interface for manipulating and editing environment variables within configuration files. It also includes a mechanism for recursive variable interpolation, allowing dynamic placeholders within configuration files to be resolved using existing en

This library is a PHP environment variable loader and configuration parser. It extracts key-value pairs from local text files to populate global server and system environment arrays, ensuring that sensitive credentials and application settings remain separate from the source code. The tool implements twelve-factor app configuration principles by mapping local files to process-level variables. It utilizes a regex-based parser to identify variable assignments while stripping comments and whitespace, and it includes guards to prevent local configuration files from overwriting existing host-level

RyTuneX is a utility suite designed for managing operating system features, removing bloatware, and controlling data privacy settings. It functions as a system optimizer and debloater that allows users to uninstall preinstalled applications and tune system configurations to improve performance and reliability. The project includes a privacy manager to disable telemetry and block data collection tracking. It provides a dashboard for modifying system behaviors and hardware specifications through a simplified interface, including toggle switches for native operating system features. The suite c

PiKVM is an IP-KVM remote access solution for out-of-band server management. It enables remote control of a host computer's hardware and operating system through a web browser or VNC client, allowing access to the BIOS or boot sequence when the main operating system is unresponsive. The system provides remote hardware control by managing physical power switches and GPIO triggers. It emulates human interface devices, such as keyboards and mice, and supports the emulation of mass storage to mount virtual disk images for bare metal operating system installation and recovery. Additional capabili

m-cli is a suite of command line utilities designed for macOS system administration, hardware management, networking, and security permissions. It provides a terminal-based interface to configure system preferences and manage hardware components. The project allows for the direct control of physical system components, such as fan speeds, battery states, and display brightness. It also provides utilities for network administration, including the management of Wi-Fi connections, DNS settings, VPNs, and firewall rules. The tool covers a broad range of administrative capabilities, including powe

Tmuxinator is a configuration-driven session manager and workspace automation tool for tmux. It acts as a terminal multiplexer orchestrator that translates structured project definitions into shell commands to define and launch complex window and pane layouts. The project distinguishes itself through declarative configuration and lifecycle management. It utilizes YAML-based mapping and template-based variable injection to create reusable session configurations, while providing hook-based execution to trigger custom scripts during startup, restart, or shutdown. Its broader capabilities includ

Rayhunter is an IMSI catcher detection tool and cellular network monitor designed to identify cell-site simulators and fake base stations. It functions as an SDR signal analyzer that tracks tower connectivity, logs GPS locations, and monitors for network downgrades or disabled encryption on mobile hardware. The system distinguishes itself through heuristic-based traffic analysis used to detect suspicious identity requests, malformed system information, and the use of null ciphers. It includes a remote device management interface consisting of a REST API and web dashboard for controlling detec

SpotX is a desktop client patcher designed to modify the Spotify application. It functions as an ad-blocking modifier and UI customizer that removes advertisements and promotional content from the music player. The project includes tools to disable automatic updates, ensuring that custom patches and visual themes remain active. It also provides a telemetry blocking patch to prevent the application from sending usage data and analytics to the service provider. The tool enables interface customization to hide specific sections, such as podcasts and audiobooks, from the homepage. These modifica

Privatezilla is a Windows privacy hardening tool designed to audit security settings, remove pre-installed software, and block outbound telemetry data. It functions as an operating system security auditor and a telemetry blocker to restrict data transmission from third-party applications. The project provides automated utilities for removing built-in applications and cloud services. It employs firewall rules and host file restrictions to prevent unauthorized information collection and stop data transmission to external servers. The tool covers a broad range of system management capabilities,

Surfboard is a cross-platform network client and VPN manager that provides a graphical interface for establishing secure tunnel connections. It functions as a multi-protocol proxy client and a rule-based traffic router, directing outbound requests to specific proxies or bypassing them based on domain and IP patterns. The application acts as a connection orchestrator, allowing users to import, organize, and switch between multiple virtual private network profiles and server configurations. It implements various proxy standards to route traffic through remote servers for privacy and access. Th

This project is a comprehensive guide for configuring macOS for software engineering. It provides instructions for setting up a development environment, optimizing system settings, and enhancing the terminal experience to increase productivity. The guide focuses on several core areas of system customization, including the automation of software installation via Homebrew and the configuration of the Zsh shell with plugins, themes, and productivity aliases. It details a strategy for managing dotfiles using symbolic links to synchronize configuration files across multiple machines. Additional c

Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the Windows operating system through policy enforcement. It provides a collection of security presets and templates to implement official hardening standards across multiple devices. The project distinguishes itself through a comprehensive execution control system, featuring a manager for Windows Application Control and a kernel protection suite. It implements strict trust models, including kernel-mode driver whitelisting, signed policy implementation on the EFI partition, and code inte

IronOS is a low-level soldering iron firmware and thermal control system. It serves as a comprehensive embedded UI framework and hardware controller designed to manage heating elements, temperature regulation, and power delivery for soldering tools. The project distinguishes itself through a specialized USB-PD power controller that negotiates standards like USB-PD EPR and Quick Charge to maximize available wattage. It also features a wireless BLE hardware controller for monitoring real-time telemetry and modifying system parameters from a remote application. The system covers broad capabilit

ly is a console display manager and terminal-based user login manager. It authenticates users through a text-based interface and launches desktop environments, window managers, or shell sessions, specifically including support for the X Window System. The project provides a Linux power manager that enables system shutdown and reboot actions directly from the login screen. These power actions can be triggered using dedicated physical keyboard function key shortcuts. The system manages sessions by scanning for standard desktop entry files to discover available environments and allows for the c

This project is a process management toolkit for Docker containers. It provides utilities for supervising container processes, rendering boot templates, streaming logs, and verifying service dependencies. The toolkit includes a service dependency checker that blocks application startup until required network sockets, web endpoints, or local files are available. It also features a configuration template renderer to generate application files from environment variables during the boot process, and a log streaming utility that pipes file updates to standard output using polling and rotation hand

Azure Linux is a general purpose Linux operating system optimized for virtual machines and containers within the Azure cloud environment. It serves as a hardened cloud operating system designed to reduce the attack surface for deployments across virtualized cloud environments and bare-metal platforms. The project utilizes a declarative Linux build system that employs configuration overlays to modify distribution packages. This approach allows for the customization of system components and the generation of package specifications without forking the base upstream source. The distribution cove

SwiftBar is a macOS menu bar customizer and plugin-based status monitor that displays the output of executable scripts and shell commands directly in the system menu bar. It functions as a shell script dashboard, rendering real-time data and script results as interactive menu items and dropdowns. The project distinguishes itself by acting as an automation interface that integrates with system shortcuts and external URL schemes to trigger actions and update status indicators. It supports the installation of community-made scripts and the packaging of complex plugin assets into local directorie

Auto-unlocker is a collection of utilities designed to modify virtualization software libraries to bypass system restrictions on guest operating systems. It primarily functions as a binary patcher that enables the selection and booting of macOS guests within VMware. The project modifies core system libraries to unlock hidden operating system selection options and bypass boot checks for unsupported guests. It also includes a guest tools installer that downloads and applies the driver packages necessary for hardware integration and performance. The toolset provides capabilities for managing vi