Directory

Self-hosted identity provider with OIDC, SAML, LDAP, RADIUS and SCIM support and a built-in application proxy, with an MIT core and an enterprise edition

Go web server and reverse proxy that obtains and renews TLS certificates automatically and is configured with a short Caddyfile or a JSON API

Distributed search and analytics engine on Apache Lucene with full-text, aggregations, vector search and ES|QL; triple-licensed AGPL, SSPL and Elastic License

Identity-based secrets manager providing encrypted key-value storage, dynamic database and cloud credentials, PKI and encryption-as-a-service, under the Business Source License

Open-source identity and access management server providing single sign-on with OpenID Connect, OAuth 2.0 and SAML, user federation and fine-grained authorization

Open-source system for scheduling, scaling and operating containerized workloads across a cluster of machines

Nonprofit certificate authority that issues free, automatically renewable TLS certificates through the ACME protocol

S3-compatible object storage server; the AGPL community edition was archived in April 2026 and succeeded by MinIO's AIStor Free and AIStor Enterprise editions

Apache-2.0 search and analytics suite forked from Elasticsearch and Kibana, governed by the OpenSearch Software Foundation

Production process manager for Node.js and other long-running programs with cluster mode, log handling, restart policies and boot-time startup scripts

Daemonless, rootless container engine with a Docker-compatible CLI, companion Buildah and Skopeo tools and a Podman Desktop GUI

Pull-based metrics monitoring system and time-series database with the PromQL query language, service discovery and the Alertmanager component

Command-line program to sync, copy, mount and serve files across dozens of cloud storage providers and protocols, with optional client-side encryption

Open-source cluster resource manager and job scheduler for Linux clusters, allocating nodes, launching jobs and managing queues on many HPC systems

Infrastructure-as-code tool that provisions cloud and SaaS resources from HCL configurations through a plan-and-apply workflow, licensed under BSL 1.1

Cloud-native reverse proxy and ingress controller that discovers routes from Docker, Kubernetes and other providers and automates TLS through ACME

Self-hosted uptime monitor with HTTP, TCP, DNS, ping and keyword checks, many notification channels and public status pages

W3C standard defining the browser API for creating and using public-key credentials, the basis of passkeys and FIDO2 hardware-key authentication