Directory

Agentless configuration management and orchestration tool that runs YAML playbooks over SSH, with collections for clouds, network gear and applications

Self-hosted identity provider with OIDC, SAML, LDAP, RADIUS and SCIM support and a built-in application proxy, with an MIT core and an enterprise edition

Deduplicating backup archiver with compression and authenticated encryption that stores repositories on local disks or remote hosts over SSH

Log-scanning intrusion-prevention daemon that temporarily bans IP addresses showing repeated authentication failures by updating firewall rules

Identity-based secrets manager providing encrypted key-value storage, dynamic database and cloud credentials, PKI and encryption-as-a-service, under the Business Source License

Open-source identity and access management server providing single sign-on with OpenID Connect, OAuth 2.0 and SAML, user federation and fine-grained authorization

S3-compatible object storage server; the AGPL community edition was archived in April 2026 and succeeded by MinIO's AIStor Free and AIStor Enterprise editions

Event-driven HTTP server, reverse proxy, load balancer and mail proxy, distributed as open source under the 2-clause BSD license with a commercial Plus edition

Apache-2.0 search and analytics suite forked from Elasticsearch and Kibana, governed by the OpenSearch Software Foundation

Reference implementation of the SSH protocol from the OpenBSD project: remote shell, file transfer, port forwarding, key agent and certificate authority tooling

Community fork of Terraform under the Linux Foundation, keeping the HCL language, provider ecosystem and state model under the MPL-2.0 license

Daemonless, rootless container engine with a Docker-compatible CLI, companion Buildah and Skopeo tools and a Podman Desktop GUI

Pull-based metrics monitoring system and time-series database with the PromQL query language, service discovery and the Alertmanager component

Open-source, local-first CLI and library for evaluating prompts, models, RAG pipelines and agents, with automated red teaming and CI integration

Command-line program to sync, copy, mount and serve files across dozens of cloud storage providers and protocols, with optional client-side encryption

Open-source cluster resource manager and job scheduler for Linux clusters, allocating nodes, launching jobs and managing queues on many HPC systems

Command-line tool that encrypts the values of YAML, JSON, ENV and INI files with age, PGP or cloud KMS keys so secrets can be committed to git

Infrastructure-as-code tool that provisions cloud and SaaS resources from HCL configurations through a plan-and-apply workflow, licensed under BSL 1.1

Cloud-native reverse proxy and ingress controller that discovers routes from Docker, Kubernetes and other providers and automates TLS through ACME

Open-source scanner that finds known vulnerabilities, misconfigurations, exposed secrets and license issues in container images, file systems, git repositories, IaC and Kubernetes clusters

Self-hosted uptime monitor with HTTP, TCP, DNS, ping and keyword checks, many notification channels and public status pages

W3C standard defining the browser API for creating and using public-key credentials, the basis of passkeys and FIDO2 hardware-key authentication