Open-source alternatives to Brook

The AWS Cloud Development Kit is an infrastructure-as-code framework that enables developers to define and provision cloud resources using familiar programming languages. By utilizing construct-based synthesis, it translates high-level, object-oriented code into declarative templates, allowing for the automated management of complex cloud environments through a centralized, code-driven control plane. The framework distinguishes itself through its ability to model infrastructure as a dependency-aware resource graph, ensuring that components are provisioned and updated in the correct order. It

x-ui is a web-based management panel for Xray proxy protocols. It serves as a visual control center for configuring network transport settings, managing routing rules, and administering multiple user accounts. The project distinguishes itself through automated SSL certificate acquisition via DNS APIs to secure both the administrative interface and proxy tunnels. It also includes a Telegram notification bot that delivers scheduled traffic summaries, login alerts, and account expiration warnings. The system provides a comprehensive set of tools for traffic management, including real-time monit

nps is an intranet penetration proxy server that exposes internal network services to the public internet via secure TCP and UDP tunnels. It functions as a traffic forwarder and reverse proxy, enabling external access to local services, remote desktops, and internal APIs. The project is distinguished by a centralized web-based administration interface used to configure tunnels, manage user accounts, and monitor real-time bandwidth metrics. It supports domain-based request routing and provides a mechanism to secure public services using HTTPS encryption through digital certificates. The syste

Refinery is a modular content management system for Ruby on Rails applications. It provides a framework for organizing website pages, blog posts, and media assets through a customizable administrative interface. The system includes tools for digital asset management, allowing users to upload, optimize, and organize images and documents using flexible storage backends. It functions as a multi-language content manager for translating and delivering text across different global regions and as a role-based access control system to restrict administrative tool access based on user identities. The

Twill is a Laravel CMS toolkit and admin panel generator designed for building custom administrative consoles and content management systems. It serves as a headless CMS framework and a toolkit for defining content models and managing structured data through a dedicated administrative interface. The project features a visual block editor that allows publishers to arrange and configure reusable content sections via a drag-and-drop interface. It includes a dedicated digital asset manager for storing, cropping, and optimizing images and files across local or cloud storage, as well as a multiling

Passbolt is an open-source, self-hosted password manager designed for teams. It provides a centralized, encrypted vault where organizations can store, share, and manage credentials securely. The server exposes a JSON REST API that authenticates requests using either GPGAuth or JWT tokens, and all secrets are protected with OpenPGP end-to-end encryption, ensuring the server never has access to plaintext passwords. The platform distinguishes itself through a comprehensive role-based access control system that governs resource sharing and administrative actions. Teams can organize users into gro

Instant is a real-time backend as a service and relational graph database designed to synchronize data across clients automatically. It functions as a data synchronization layer that provides authentication, permissions, and relational data storage for web and mobile applications. The platform includes an optimistic UI framework that updates local interfaces immediately during writes and handles automatic server rollbacks. It also features a real-time presence system to broadcast transient user states, such as cursor positions and online status, to other connected clients. The system manages

Sqlpad is a web-based SQL client and multi-tenant workbench used for writing, executing, and saving queries across multiple relational and analytical databases. It functions as an ODBC database manager that enables users to manage database connections and explore schemas through a browser interface. The platform distinguishes itself as a collaborative environment where users can share SQL documents and coordinate data analysis. It integrates identity federation via OpenID Connect, SAML, LDAP, and OAuth, and provides a visualization system that renders query results into charts and tables. Th

TShock is a server management tool and plugin framework for dedicated Terraria servers. It functions as an administrative suite and anti-cheat tool designed to control player permissions, monitor game integrity, and extend server functionality. The project provides a framework for creating custom plugins that modify the game world and implement new commands. It enables internal state modification through bytecode injection, packet interception, and memory manipulation to bypass engine restrictions and alter live game environments. Administrative capabilities include a hierarchical role-based

KodExplorer is a web-based file manager and remote server administration tool that provides a desktop-like interface for organizing and managing files in a browser. It functions as an enterprise file sharing platform and an online document previewer, allowing users to view hundreds of file formats without local software installations. The system is distinguished by a plugin-based API gateway that exposes RESTful endpoints for third-party integrations and custom functional extensions. It also includes a browser-based code editor with syntax highlighting and autocomplete for over 120 languages,

Flask-AppBuilder is a rapid application framework built on Flask that automates the creation of admin interfaces and database-driven applications. It functions as an automatic CRUD generator and a SQL database admin interface, enabling the generation of user interfaces and REST APIs directly from data models. The framework includes a security system for managing user identities and access roles through role-based access control. It supports authentication via internal databases or external providers such as LDAP, OAuth, and OpenID. The platform covers broader capabilities including multi-dia

TheHive is a security incident response platform and multi-tenant case management system. It functions as a Security Orchestration, Automation, and Response (SOAR) tool and a threat intelligence platform designed to coordinate security investigations by managing alerts, cases, and observables. The platform is distinguished by its multi-tenant architecture, which isolates data across different organizations while supporting selective cross-tenant sharing. It features a SOAR automation engine capable of executing sandboxed JavaScript logic to automate workflows and trigger response actions thro

Kanboard is a self-hosted Kanban project management tool and productivity suite designed for tracking software tasks and team collaboration. It provides a visual system for managing workflows through the use of boards, columns, and cards. The project features an extensible plugin framework and a comprehensive API for programmatic task and project administration. It includes specialized identity management through LDAP integration, allowing for the synchronization of user accounts and group permissions from directory servers. The system covers a wide range of capabilities, including event-dri

Akaunting is a modular business enterprise resource planning system and self-hosted accounting software. It provides a comprehensive platform for small business financial management, centering on a double-entry bookkeeping system with a general ledger and chart of accounts. The platform is designed for extensibility through a module-based architecture and a dedicated marketplace for procuring third-party applications. It supports multi-tenant data isolation and utilizes role-based access control to manage granular user permissions. Its capability surface covers a wide range of business opera

Keystone is a GraphQL headless content management system and Node.js backend framework. It functions as a schema-driven data manager that automatically generates a GraphQL API and a React administrative dashboard based on a central data model configuration. The system uses an adapter-based database abstraction to decouple core logic from storage layers and a storage-provider abstraction for managing media assets via local or cloud drivers. It distinguishes itself through a component-based field rendering system and a hook-based middleware pipeline for data validation and automation. The fram

Overseerr is a self-hosted request portal and media automation orchestrator designed to manage the discovery and acquisition of movies and television series. It serves as a media discovery platform and a dedicated request manager for Plex media servers, providing a centralized interface for users to find content and submit requests. The system coordinates the media request workflow by connecting user submissions to automated download services. It synchronizes with media servers to track existing library content and prevent duplicate requests, while providing administrators with a dashboard to

jshERP is a SpringBoot-based enterprise resource planning system designed for small and medium enterprises. It serves as a multi-tenant SaaS platform that integrates financial accounting, inventory management, and production tracking into a centralized business resource planning environment. The system is distinguished by its multi-tenant architecture, which utilizes logical data isolation to provide private environments for independent organizations. It implements a rigorous business process automation model featuring multi-level approval workflows and hierarchical audit paths to verify and

This project is a comprehensive starter kit for building subscription-based web applications using Next.js and TypeScript. It provides a structural foundation for developing software-as-a-service platforms, incorporating integrated user authentication, payment tiers, and multi-tenant organization management. The framework distinguishes itself with a dedicated multi-tenant application architecture that organizes users into teams and organizations with workspace switching. It includes a built-in monetization layer via Stripe subscription integration for managing pricing tiers and billing cycles

osTicket is an open-source help desk software and ticket management system designed to centralize customer support inquiries from emails, web forms, and API requests. It functions as a multi-channel support tool that converts incoming communications into a structured queue for agent resolution and IT help desk management. The platform features a dedicated customer support portal where users can submit requests, track ticket status, and access a self-service knowledgebase of help articles and FAQs. It integrates secure OAuth2 email authentication to retrieve and send messages without storing l

Qor is a Go admin framework and backend toolkit used for building administrative interfaces, headless content management systems, and REST API generators. It provides a structured environment for implementing business application backends, specializing in the management of structured content and media assets. The project distinguishes itself through comprehensive multi-language content management, featuring locale-based data versioning and a dedicated system for internationalization and translation administration. It further differentiates its offering with a built-in state machine implementa

unopim is an AI-powered product information management system that serves as a centralized repository for managing product attributes, categories, and variations. It functions as a containerized product repository and a multi-channel data distributor, synchronizing consistent product information and pricing across diverse external sales platforms and marketplaces. The platform distinguishes itself through an LLM-based catalog manager that provides a conversational interface for executing data management tasks. This allows users to perform item creation, content enrichment, and quality scans u

Budibase is a low-code application platform and enterprise internal tool builder used to create custom business applications for organizational processes and reporting. It functions as a self-hosted backend as a service, providing the infrastructure to manage database integrations and expose public data interfaces for external application access. The platform includes an AI agent orchestrator for deploying autonomous agents that interact with business data and execute operational tasks. It differentiates itself through self-hosted infrastructure management, allowing the system to run on priva

This project is a rapid application development framework for building back-office interfaces and dashboards within Laravel applications. It functions as a backend management UI toolkit and schema-based UI generator that renders administration panels and data forms by mapping backend logic to pre-defined frontend components. The framework includes a role-based access control system to restrict application features and data based on user identity and assigned roles. It also provides a full-text search integration that uses interchangeable drivers to index and retrieve application content. Add

Organizr is a self-hosted service dashboard that aggregates links to all of your self-hosted applications into a single landing page for quick access. It functions as a unified tab manager, loading multiple services as individual tabs within one webpage to consolidate browser tabs and reduce clutter. The project provides role-based access control, restricting dashboard visibility and service links based on user authentication and permissions. It includes an external authentication gateway that validates credentials through Plex, Emby, LDAP, or sFTP, and a user management backend for creating,

Dependency-Track is a software composition analysis tool and vulnerability management system designed to track dependencies and supply chain risk. It functions as a platform for ingesting and analyzing CycloneDX software bills of materials to identify known vulnerabilities and license compliance issues within third-party software components. The system distinguishes itself by mirroring external vulnerability databases locally to enable fast offline analysis and using VEX documents to differentiate between technical vulnerabilities and actual contextual risks. It also integrates with identity

React-admin is a framework for building data-driven administrative interfaces that connect to REST or GraphQL backends. It provides a comprehensive suite of tools for managing the full lifecycle of administrative applications, including resource-oriented routing, declarative form scaffolding, and context-driven state management. By utilizing a modular adapter-based architecture, the framework abstracts backend communication, allowing developers to build consistent CRUD interfaces that handle data fetching, authentication, and synchronization automatically. The project distinguishes itself thr

Outline Apps is a suite of software components for establishing private proxy networks, consisting of cross-platform proxy clients, server administration interfaces, and identity-based access control systems. It enables the routing of device traffic through secure VPN or Shadowsocks server connections using unique access keys. The project provides tools for deploying and configuring VPN servers on cloud providers or Linux infrastructure. It includes a management interface for administering these servers and a system for generating access keys to authorize devices and enforce individual bandwi