Infrastructure & operations

Password and secrets manager for individuals, families and businesses with end-to-end encrypted vaults, passkeys, an SSH agent and a developer CLI

Go web server and reverse proxy that obtains and renews TLS certificates automatically and is configured with a short Caddyfile or a JSON API

Outbound-only connector (cloudflared) that publishes local web services and private networks through Cloudflare's edge without opening inbound ports

Container platform combining the Docker Engine runtime, the Compose and Build tooling, Docker Desktop for macOS and Windows, and the Docker Hub registry

Distributed search and analytics engine on Apache Lucene with full-text, aggregations, vector search and ES|QL; triple-licensed AGPL, SSPL and Elastic License

Dashboarding and alerting platform that visualizes metrics, logs and traces from Prometheus, SQL databases and dozens of other data sources

Identity-based secrets manager providing encrypted key-value storage, dynamic database and cloud credentials, PKI and encryption-as-a-service, under the Business Source License

Open-source system for scheduling, scaling and operating containerized workloads across a cluster of machines

Open-source LLM observability and evaluation platform: tracing, LLM-as-judge and human evals, prompt management, datasets and cost dashboards, self-hostable or as Langfuse Cloud

macOS's built-in service manager that starts, supervises and schedules daemons and per-user agents from property-list job definitions

Nonprofit certificate authority that issues free, automatically renewable TLS certificates through the ACME protocol

Production process manager for Node.js and other long-running programs with cluster mode, log handling, restart policies and boot-time startup scripts

WireGuard-based mesh overlay network with a hosted coordination service, identity-provider login, access policies, MagicDNS and features such as Tailscale SSH, Serve and Funnel

Minimal, high-speed VPN protocol and implementation built on modern cryptography, included in the Linux kernel and available on macOS, iOS, Windows, Android and BSD

Reference implementation of the SSH protocol from the OpenBSD project: remote shell, file transfer, port forwarding, key agent and certificate authority tooling

Encrypted, deduplicating backup program written in Go that stores snapshots in local, SFTP, S3-compatible and many cloud backends

Command-line tool that encrypts the values of YAML, JSON, ENV and INI files with age, PGP or cloud KMS keys so secrets can be committed to git

Agentless configuration management and orchestration tool that runs YAML playbooks over SSH, with collections for clouds, network gear and applications

Hosted ingress service that exposes local servers through public URLs via an agent or SDK, with Traffic Policy rules, API gateway features and reserved domains

Daemonless, rootless container engine with a Docker-compatible CLI, companion Buildah and Skopeo tools and a Podman Desktop GUI

Cloud-native reverse proxy and ingress controller that discovers routes from Docker, Kubernetes and other providers and automates TLS through ACME

Front-end cloud from the makers of Next.js that deploys web applications from git with preview environments, serverless and edge functions and a global CDN

W3C standard defining the browser API for creating and using public-key credentials, the basis of passkeys and FIDO2 hardware-key authentication

Open-source password manager with hosted and self-hosted server options, passkey support, organization sharing and a separate Secrets Manager for developers