Directory

Agentless configuration management and orchestration tool that runs YAML playbooks over SSH, with collections for clouds, network gear and applications

Deduplicating backup archiver with compression and authenticated encryption that stores repositories on local disks or remote hosts over SSH

Go web server and reverse proxy that obtains and renews TLS certificates automatically and is configured with a short Caddyfile or a JSON API

Log-scanning intrusion-prevention daemon that temporarily bans IP addresses showing repeated authentication failures by updating firewall rules

Identity-based secrets manager providing encrypted key-value storage, dynamic database and cloud credentials, PKI and encryption-as-a-service, under the Business Source License

Open-source system for scheduling, scaling and operating containerized workloads across a cluster of machines

macOS's built-in service manager that starts, supervises and schedules daemons and per-user agents from property-list job definitions

Nonprofit certificate authority that issues free, automatically renewable TLS certificates through the ACME protocol

S3-compatible object storage server; the AGPL community edition was archived in April 2026 and succeeded by MinIO's AIStor Free and AIStor Enterprise editions

Event-driven HTTP server, reverse proxy, load balancer and mail proxy, distributed as open source under the 2-clause BSD license with a commercial Plus edition

Reference implementation of the SSH protocol from the OpenBSD project: remote shell, file transfer, port forwarding, key agent and certificate authority tooling

Community fork of Terraform under the Linux Foundation, keeping the HCL language, provider ecosystem and state model under the MPL-2.0 license

Production process manager for Node.js and other long-running programs with cluster mode, log handling, restart policies and boot-time startup scripts

Daemonless, rootless container engine with a Docker-compatible CLI, companion Buildah and Skopeo tools and a Podman Desktop GUI

Pull-based metrics monitoring system and time-series database with the PromQL query language, service discovery and the Alertmanager component

Open-source, local-first CLI and library for evaluating prompts, models, RAG pipelines and agents, with automated red teaming and CI integration

Command-line program to sync, copy, mount and serve files across dozens of cloud storage providers and protocols, with optional client-side encryption

Encrypted, deduplicating backup program written in Go that stores snapshots in local, SFTP, S3-compatible and many cloud backends

Open-source cluster resource manager and job scheduler for Linux clusters, allocating nodes, launching jobs and managing queues on many HPC systems

Command-line tool that encrypts the values of YAML, JSON, ENV and INI files with age, PGP or cloud KMS keys so secrets can be committed to git

Infrastructure-as-code tool that provisions cloud and SaaS resources from HCL configurations through a plan-and-apply workflow, licensed under BSL 1.1

Cloud-native reverse proxy and ingress controller that discovers routes from Docker, Kubernetes and other providers and automates TLS through ACME

Open-source scanner that finds known vulnerabilities, misconfigurations, exposed secrets and license issues in container images, file systems, git repositories, IaC and Kubernetes clusters

Minimal, high-speed VPN protocol and implementation built on modern cryptography, included in the Linux kernel and available on macOS, iOS, Windows, Android and BSD