Open-source alternatives to Bitwarden Core

Shiori is a self-hosted bookmark manager and webpage archiving tool. Written in Go, it functions as a backend service that allows users to save, organize, and search for web links while maintaining a private collection of online resources. The system ensures content availability by creating offline copies of saved pages, preventing data loss if the original source is removed. It is distributed as a containerized application to provide consistent installation and deployment across different operating systems. The software provides a dual-interface access model, featuring both a web-based mana

2FAuth is a self-hosted two-factor authentication server and credential vault. It functions as a web-based authenticator app used to organize and generate time-based one-time passwords and other security codes for multiple accounts in a central location. The system distinguishes itself as an API-driven security manager, allowing authentication codes to be integrated into automated workflows and external applications. It also supports shared security credentialing through the use of isolated vaults and shared folders for team collaboration. The project covers a broad range of security and dat

Fonoster is a conversational AI framework and multi-tenant communications platform as a service. It serves as a programmable voice gateway and SIP telephony platform, enabling the creation of voice-based assistants and automated communication workflows using large language models. The project distinguishes itself through a vendor-agnostic speech integration engine that abstracts speech-to-text and text-to-speech providers. It features a multi-tenant architecture that isolates telephony resources and user identities into distinct organizational workspaces. The system covers a broad range of t

WebClient is an encrypted productivity suite consisting of integrated web tools for secure email, calendar, drive, and password management. It serves as an end-to-end encrypted email client, a secure cloud storage interface, and a private calendar management application. The project includes specialized interfaces for a variety of secure services, including a web-based VPN controller, a secure cryptocurrency wallet interface, and an encrypted video conferencing client for real-time audio and video meetings. The suite covers broader capabilities for managing digital identities, organizing enc

LastPass CLI is a command-line tool for managing secure credentials, authenticating user identities, and synchronizing encrypted password vaults directly from the terminal. It provides a terminal interface for storing, retrieving, and organizing sensitive account data with local encryption and remote synchronization, functioning as an encrypted vault management tool for handling credential storage across devices using remote authorization endpoints. The application communicates with remote servers over HTTPS while securing user credentials locally and in transit using client-side symmetric en

Buttercup is a cross-platform password manager and encrypted credential store designed to protect passwords and secrets across multiple operating systems. It functions as a secure vault for storing sensitive credentials, utilizing encryption for all data stored on local or remote devices. The application distinguishes itself through a provider-agnostic cloud synchronization model, which allows encrypted vault files to be synchronized between a local filesystem and various external cloud storage providers. The system maintains data security via client-side encryption and ensures data integrit

This project is a premium account management system and encrypted credential vault. It functions as an authentication secret manager designed to organize and retrieve high-priority credentials and tokens required for maintaining access to specialized service tiers. The system operates as a symmetric secret store, using encryption to prevent the plaintext exposure of sensitive login details. It features a layered credential vault that separates authentication secrets by service provider and access level, while utilizing permission-based filtering to restrict the retrieval of premium credential

This project is a full stack project generator and boilerplate for the MEAN stack, combining MongoDB, Express, Angular, and Node.js. It provides a pre-configured architecture and scaffolding tools to bootstrap JavaScript applications with a database, backend server, and frontend framework. The project includes a Dockerized application template to ensure consistent deployment and local development across different hardware configurations. It features a Node.js API scaffold that integrates token-based security, request validation, and interactive API documentation. The codebase covers broader

This project is a Git credential helper that automates the storage and retrieval of authentication secrets for remote repository operations. It functions as an OAuth token manager and an operating system vault storage interface to ensure authentication secrets are encrypted at rest. The tool acts as a cross-platform authentication broker, enabling the sharing of secure credentials between a host operating system and a Linux subsystem. It also serves as an enterprise proxy gateway, routing authentication traffic through corporate proxy servers to reach restricted repository endpoints. The sys

Typebot is a visual chatbot builder and conversational platform designed for lead generation and data collection. It provides a drag-and-drop workflow designer that converts visual nodes into structured conversation logic, allowing users to build interactive forms and chatbots with conditional routing. The platform is designed as a self-hosted conversational infrastructure, enabling the deployment of the entire application stack on private servers using Docker and PostgreSQL. This allows for complete control over data storage and server maintenance. The system integrates with external servic

Walle-web is a continuous delivery platform and DevOps release manager designed to automate the deployment, rollback, and release of code across multiple server environments. It functions as a container deployment orchestrator and multi-environment server manager, providing a centralized web interface for coordinating application delivery. The system distinguishes itself through a combination of canary release management and containerized application delivery. It utilizes a RESTful deployment API to integrate external tools into the delivery pipeline and employs hook-based workflow orchestrat

LinkStack is a self-hosted social bio tool and link aggregator used to create personalized landing pages that consolidate multiple outbound links for social media profiles. It functions as a multi-user link manager, allowing multiple registered users to independently manage their own collections of links on a single installation. The platform includes a customizable profile page builder with a selection of templates and themes to control the visual appearance of landing pages. It also provides tools for managing legal and contact page content through a graphical editor. The system includes a

KeeWeb is a web-based password manager and vault that allows users to open and edit encrypted databases through a browser interface. It functions as a cross-platform tool for managing password vaults using the KeePass database format. The application provides a self-hosted password vault that can be deployed as a single HTML file or via Docker. It integrates with remote storage providers using OAuth to synchronize encrypted database files across multiple devices. The system includes capabilities for secure credential generation, two-factor authentication management through time-based one-tim

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

Cachet is a self-hosted, open-source status page system designed to communicate service uptime, incident history, and infrastructure performance to end users. It provides a centralized dashboard for managing the operational lifecycle of system components, tracking service disruptions, and scheduling maintenance windows. The platform distinguishes itself through a comprehensive RESTful API that enables programmatic status page management and automated incident reporting. It supports deep integration with external monitoring tools, allowing for the synchronization of performance metrics and the

eShopOnContainers is a .NET microservices reference application designed to demonstrate cloud-native architecture patterns. It serves as a sample distributed system that implements domain-driven design and utilizes containerized services. The project is developed as a cross-platform sample compatible with Windows, Linux, and macOS. It utilizes Docker for containerized application deployment and supports orchestration via Azure Kubernetes Service to manage the scaling and availability of its services. The system covers microservices architecture design, asynchronous service communication, and

ZenML is an extensible machine learning orchestration framework designed to manage the end-to-end lifecycle of data pipelines and AI agent workflows. It functions as a durable orchestrator that executes machine learning tasks as directed acyclic graphs, ensuring that every step is containerized for consistent performance across local, cloud, and hybrid infrastructure. By decoupling pipeline code from underlying compute and storage backends, the platform allows developers to define infrastructure-agnostic stacks that remain portable across diverse environments. The project distinguishes itself

fbctf is a Capture The Flag platform designed for hosting cybersecurity competitions. It provides a scoring engine to track participant progress and an orchestration tool to manage the transition from event configuration to an active state. The system utilizes a containerized deployment framework to launch the infrastructure and environments required for live events. It includes an identity integration that authenticates participants via external directory servers to provide organization-wide access control. The platform covers the administration of competition content and security goals, te

Peppermint is a self-hosted suite of business tools comprising a customer support ticketing system, a client relationship management system, and a markdown-based project notebook. It provides a centralized workflow for resolving technical requests and tracking chronological interaction logs to maintain context within professional relationships. The application is delivered as a containerized business tool, utilizing Docker to ensure consistent deployment and availability across different hosting platforms. It employs a process manager to monitor the application runtime and trigger automatic r

CookLikeHOC is a dockerized web application that serves as a culinary recipe database and digital cookbook. It provides a structured collection of ingredient lists and cooking instructions derived from restaurant provenance reports to enable the reproduction of authentic meals. The project focuses on traditional Chinese cooking and restaurant recipe replication, specifically tracking culinary provenance to ensure consistent flavor profiles. It includes curated data for regional dishes, braised meats, vegetables, and beverage recipes. The application is designed for containerized deployment t

Multica is an autonomous coding agent manager and LLM agent orchestration platform. It coordinates teams of autonomous agents to execute coding tasks and manage their lifecycles through a centralized dashboard. The system provides multi-tenant agent workspaces that isolate agents, settings, and project issues into distinct organizational boundaries. The platform distinguishes itself through an agent skill library that captures successful task solutions as reusable, versioned skills. These skills are shared across the agent team and pinned using content hashes to ensure consistent behavior acr

Cutter is a binary analysis platform and graphical user interface for the Rizin reverse engineering framework. It provides an environment for analyzing the internal logic and data structures of compiled binaries through integrated disassembly and visualization. The platform supports a containerized deployment model to provide isolated environments for binary analysis, which is used to examine suspicious binaries without risking the host system. It is an extensible security tool that allows for the addition of custom analysis capabilities and visualizers via native plugins and scripts. The to

Dim is a self-hosted media server and manager designed to index and organize local media libraries for remote access and playback. It functions as a private web-based portal that allows users to stream locally stored video and audio content over a network. The system operates as a local media indexer that scans storage to structure and beautify collections, creating a consistent user interface for managing digital content. It uses metadata-driven beautification to enrich raw file lists into organized libraries. The application is deployed as a containerized service, utilizing static path map

This project is a GraphQL web application with a React frontend that utilizes server-side rendering to generate HTML on the server for improved initial load times and search engine indexing. The application supports both static site generation for fast delivery via pre-rendered HTML files and containerized deployment to ensure consistent runtime behavior across different environments. The project includes capabilities for GraphQL data integration, frontend asset optimization through code-splitting, and component UI verification using snapshot testing. It also provides a mechanism for managin

This project is a WhatsApp chatbot that integrates large language models and image generation into the WhatsApp messaging platform. It acts as a bridge connecting WhatsApp messages to OpenAI services to provide automated text and visual responses. The bot features the ability to convert spoken audio messages into written text using automated speech recognition, facilitating conversational interactions via voice. It also functions as a generative image bot, creating custom visual assets from text descriptions. The system is designed for containerized deployment, using Docker to package the ap

wireguard-ui is a web-based management interface and configuration generator for WireGuard VPN servers. It provides an authenticated administrative dashboard that allows users to manage VPN tunnels and peer connections through a graphical interface instead of manually editing configuration files. The project automates the creation of cryptographic key pairs and produces connection files and QR codes for distributing network settings to clients. It includes tools for tracking client metadata, such as names and email addresses, to identify individual users associated with specific connection se

Reaction is an event-driven, headless commerce platform designed to decouple backend business logic from the frontend presentation layer. It utilizes an API-first architecture with a GraphQL data layer to manage online sales and retail operations. The platform supports multi-tenant resource sharing, allowing multiple independent storefronts to be hosted and managed within a single installation. It features a plugin-based extension system that enables the integration of third-party services and custom business logic through composable workflows. The system covers core retail capabilities incl