DevOps & Deployment

Instant isolated dev environments powered by Nix

Devbox is an open-source command-line tool that creates instant, reproducible development environments using Nix packages without requiring you to learn Nix. Define your project dependencies in a simple devbox.json file and get isolated shells with access to over 400,000 package versions. It eliminates dependency conflicts between projects and ensures every team member works in an identical environment, with support for devcontainers, Docker, and cloud deployment.

Kubernetes dashboard with 360-degree visibility

Devtron is an open-source Kubernetes management dashboard that provides a 360-degree view of cluster resources with fine-grained RBAC for multi-cluster environments. Its upcoming agentic AI feature automates debugging and cluster optimization, while the current platform offers centralized visibility, GitOps-based deployment workflows, and security policy enforcement across distributed Kubernetes infrastructure.

Open-source IaC orchestration that runs Terraform plans and applies from pull request comments

Digger is an open-source infrastructure-as-code orchestration tool for running Terraform and OpenTofu plan/apply workflows from pull request comments. It uses the team’s existing VCS and CI runners instead of adding a separate runner fleet, supports GitHub, GitLab, and Azure DevOps style workflows, and stores PR-level locks and plan cache in the user’s cloud account.

Cloud infrastructure for developers

Cloud infrastructure provider offering Droplets (VMs), managed Kubernetes, app platform PaaS, managed databases (PostgreSQL, MySQL, Redis, MongoDB), Spaces (object storage), serverless functions, and a CDN. Known for developer-friendly docs, simple pricing from $4/month, and a clean API/CLI. Popular with startups and indie devs as a simpler AWS alternative. 1-click marketplace apps and extensive community tutorials.

Simple cloud hosting for developers

Managed PaaS layer built on top of Kubernetes by DigitalOcean. Auto-deploy from GitHub and GitLab with support for Docker containers, static sites, and worker services. Integrates with DO managed databases and Spaces storage, offering a simpler and more affordable cloud platform for teams who want Heroku-like convenience without the enterprise price tag.

Self-hosted collaborative wiki and documentation platform

Docmost is an open-source collaborative wiki offering real-time editing, spaces with granular permissions, page history, and rich diagram support via Draw.io, Excalidraw, and Mermaid. Designed as a self-hosted Confluence and Notion alternative for teams needing data sovereignty, it provides nested pages, comments, and full-text search. Over 19,700 GitHub stars and 52 releases demonstrate strong community adoption.

The smallest PaaS implementation

Dokku is a Docker-powered, open-source mini-Heroku that gives you the smallest PaaS implementation for deploying applications on your own server. Push with Git, build via Heroku buildpacks or Dockerfiles, and get automatic subdomains, SSL, zero-downtime deploys, and add-on plugins for databases and services. Ideal for self-hosted developers who want Heroku ergonomics without the cloud vendor bill.

Open-source PaaS alternative to Vercel, Heroku, and Netlify

Dokploy is a free open-source platform-as-a-service for self-hosting applications without cloud vendor lock-in. It provides automated deployments from Git repositories, built-in SSL certificates, database provisioning, Docker and Docker Compose support, and a clean web dashboard for managing multiple applications on your own servers. With 18,000+ GitHub stars, it fills the gap for teams wanting Vercel-like deployment simplicity on their own infrastructure.

Universal secrets management platform

Doppler is a secrets management platform that centralizes environment variables and configuration across applications, CI/CD pipelines, and cloud infrastructure. Features automatic secret syncing to 150+ integrations including AWS, GCP, Azure, Vercel, Netlify, Docker, and Kubernetes. Provides versioned secret history, access controls with audit logs, secret rotation, environment-specific configs, and a CLI for local development. Replaces scattered .env files with a single source of truth.

Visual app builder for CRUD and admin tools

DronaHQ is a visual application builder for CRUD interfaces and admin tools that uses AI to assist in creating complex logic flows and database connections. It provides a low-code platform for building maintainable business applications at scale, targeting internal operations teams who need custom tools with database integrations, form builders, and workflow automation without full custom development.

Open-source control plane for AI workloads across multi-cloud GPU infrastructure

dstack is an open-source platform that orchestrates AI training and inference workloads across heterogeneous GPU infrastructure spanning multiple clouds, Kubernetes clusters, and bare-metal servers. It abstracts away cloud-specific APIs so teams define GPU requirements declaratively and dstack automatically provisions the cheapest available resources from AWS, GCP, Azure, Lambda, or on-premises hardware.

Pluggable JavaScript and TypeScript linter

ESLint is the standard open-source linter for JavaScript and TypeScript with 26K+ GitHub stars. Statically analyzes code to find problems, enforce coding conventions, and automatically fix issues. Features a pluggable rule architecture with 300+ built-in rules and thousands of community plugins for React, Vue, Angular, Node.js, and more. Flat config system in ESLint v9 simplifies configuration. Integrates with every major editor, CI/CD pipeline, and build tool in the JavaScript ecosystem.

Your CI/CD scripts as code. Consistent, reproducible builds.

Build automation framework that combines Dockerfile and Makefile syntax for repeatable, containerized builds. Earthly runs every step in a container so builds produce identical results on dev laptops and CI, augmenting Make/Gradle/npm/cargo with cross-language reproducibility. Features parallel target execution, layer caching, multi-platform builds, and references across Earthfiles or repositories.

Kernel-space host intrusion detection system

Elkeid is ByteDance's open-source HIDS for hosts, containers, Kubernetes, and serverless workloads. Its kernel-level data collection via Kprobe hooks captures process lineage, privilege escalation attempts, file access patterns, and network connections with minimal overhead. Includes an Agent for telemetry, Detector for rule evaluation, Controller for policy management, and a Dashboard for alerts and investigation.

Dependency lifecycle management and risk reduction

Endor Labs is a dependency management platform that goes beyond vulnerability scanning to assess the overall risk of open-source dependencies. Evaluates maintainer activity, code quality, popularity trends, licensing, and operational risk alongside CVEs. Features reachability analysis to determine if vulnerabilities are actually exploitable in your codebase. Provides dependency selection guidance for choosing safer alternatives. Reduces alert fatigue by prioritizing truly risky dependencies.

Cloud native runtime security for Kubernetes

Falco is a CNCF graduated open-source runtime security tool that detects unexpected behavior and threats across containers, Kubernetes, and cloud workloads in real time. Originally created by Sysdig, Falco monitors Linux kernel syscalls using eBPF and applies customizable detection rules to alert on malicious activity like container escapes, cryptojacking, unauthorized file access, and anomalous network connections. It supports 50+ alert output channels including SIEM integration.

Python web framework with HTMX, no JavaScript needed

FastHTML is an open-source Python web framework by Answer.AI that renders HTML directly from Python functions using HTMX. It eliminates the JavaScript build step entirely, letting developers create interactive web apps with pure Python. FastHTML is designed for AI demo apps, admin tools, and internal tooling where full-stack simplicity matters more than SPA complexity. Built by Jeremy Howard's team.

Security operations resilience for SOC teams

Fig provides a Security Operations Resilience platform designed for modern SOC teams facing both unplanned and planned changes. Features drift detection to catch unplanned infrastructure changes, automated drift repair with testing, planned change modeling to simulate initiatives before deployment, version control, and automatic deployment with rollbacks. Helps teams maintain security coverage while shipping risk-free at 10x speed and focusing on strategic cyber work.

Unified multi-cloud cost management with MegaBill

Finout unifies cloud costs from AWS, Azure, GCP, Snowflake, and other providers into a single MegaBill dashboard with AI-based anomaly detection for flagging unusual spend patterns. Priced at approximately 1% of cloud spend, it solves the multi-tool cost fragmentation problem for organizations managing complex infrastructure budgets across multiple cloud and SaaS providers.

Open-source microVMs for secure serverless and AI agent sandboxing

Firecracker is an open-source virtual machine monitor that creates lightweight microVMs with sub-150ms cold starts, originally built by AWS for Lambda and Fargate. With 28,000+ GitHub stars, it provides kernel-level isolation for running untrusted code safely and powers the sandboxing infrastructure behind AI coding agents like Devin and E2B.

Open-source feature flags and remote configuration

Flagsmith is an open-source feature flag and remote config platform with 15+ SDKs, a clean REST API, and simple Docker deployment. It supports boolean, multivariate, and string flags with segment-based targeting, A/B testing via flag variations, and environment-based workflows. Flagsmith provides a straightforward self-hosted alternative to LaunchDarkly with full API-first design under a BSD-3-Clause license.

Usage metering and billing infrastructure for AI, API, and SaaS products

Flexprice is an AGPL-3.0 open-source platform for real-time usage metering, usage-based pricing, credits, entitlements, and billing workflows. It helps engineering and finance teams turn token, API, and feature events into billable usage across managed-cloud or self-hosted deployments. Use it when a product needs finance-grade chargeback and customer usage controls, not only LLM traces.

Free open-source local AWS emulator as a drop-in LocalStack replacement

Floci is a free open-source AWS emulator designed as a lightweight drop-in replacement for LocalStack Community Edition. It runs on port 4566 with the same endpoint conventions, supporting S3, SQS, DynamoDB, RDS, ElastiCache, API Gateway, Cognito, IAM, and twenty-plus other services. The Docker image is ninety megabytes versus LocalStack's one gigabyte and starts in twenty-four milliseconds.

GitOps toolkit for Kubernetes — continuous delivery the cloud-native way.

Flux is a CNCF graduated GitOps tool for keeping Kubernetes clusters in sync with configuration sources like Git repositories, Helm charts, and OCI artifacts. Lightweight, composable, and designed to work with existing tools. The primary alternative to ArgoCD in the GitOps space.

Run your app close to users

Global application hosting platform that runs full-stack apps, databases, and services close to users in 30+ regions using lightweight Firecracker micro-VMs. Deploy Docker containers or use built-in builders for Rails, Laravel, Django, Node.js, and Go. Features persistent volumes, private networking, auto-scaling, PostgreSQL/Redis managed databases, and a powerful CLI. Ideal for latency-sensitive apps needing multi-region presence. Generous free allowance with pay-as-you-go pricing.

Blazing fast Solidity development toolkit

Foundry is a blazing-fast portable toolkit for Ethereum smart contract development written in Rust. It provides Forge for testing and deploying Solidity contracts with native Solidity tests that run orders of magnitude faster than JavaScript-based alternatives, Cast for interacting with EVM chains from the command line, Anvil as a local testnet node, and Chisel as a Solidity REPL. Foundry has become the standard toolchain for serious Solidity development.

Free and open-source Kubernetes IDE for managing clusters visually

Freelens is a free open-source Kubernetes IDE that provides a visual desktop interface for managing clusters, workloads, and configurations. Forked from the original Lens project after its licensing change, Freelens offers the same powerful cluster management experience with real-time monitoring, log viewing, and resource editing under the MIT license.

Self-hosted customer identity management with no per-user pricing

FusionAuth is a customer identity and access management platform that can be self-hosted or cloud-deployed with no per-user fees. It supports OAuth2, OIDC, SAML, passwordless login, social providers, MFA, and advanced threat detection. Features a drag-and-drop theme builder for login page customization and supports multi-tenant application architectures with unlimited users on the community edition.

Open-source GPU control plane for scalable AI model serving

Open-source GPU cluster manager that configures vLLM, SGLang, TensorRT-LLM or custom engines, serves models through compatible APIs, and provisions SSH-accessible GPU instances across on-premises, Kubernetes and cloud environments.

Run AI coding agents in GitHub Actions from Markdown

Open-source GitHub CLI extension for defining repository automations in Markdown and running Copilot, Claude Code, Codex, Gemini or custom agents inside hardened GitHub Actions workflows.

Built-in CI/CD for GitLab

GitLab's built-in CI/CD pipeline system defined via .gitlab-ci.yml files in your repository. Features multi-stage pipelines, parallel jobs, matrix builds, environments with deployment tracking, merge train for serialized merges, auto DevOps for zero-config CI/CD, container registry, and security scanning (SAST/DAST). Supports self-hosted runners and Kubernetes executors. Tightly integrated with GitLab's merge requests and issue tracking. A leading alternative to GitHub Actions for GitLab users.

Production-grade Terraform modules and infrastructure library

Gruntwork provides a library of battle-tested, production-grade Terraform modules covering AWS, GCP, and Azure infrastructure patterns. Modules handle networking, compute, databases, security, monitoring, and compliance with best practices built in. Terragrunt, their open-source Terraform wrapper with 15k+ stars, adds DRY configuration, remote state management, and multi-account orchestration.

AI-powered CI/CD and DevOps platform

Enterprise DevOps platform with AI-driven deployment verification, auto-rollback, and pipeline optimization. AIDA AI assistant helps debug failed deployments. Open-source tier (Gitness) available. Covers CI/CD, feature flags, cloud cost management, and security testing in a single unified platform for engineering teams.

Enterprise secrets management and data protection

HashiCorp Vault is a source-available secrets management tool with 32K+ GitHub stars providing centralized management of tokens, passwords, certificates, API keys, and encryption keys. Features dynamic secrets that are generated on-demand with automatic revocation, encryption as a service, identity-based access with fine-grained policies, and audit logging. Supports 100+ integrations including AWS, GCP, Azure, Kubernetes, and databases. The enterprise standard for secrets management at scale.

Instant GraphQL and REST APIs on any database

Hasura auto-generates real-time GraphQL and REST APIs directly from your database schema—PostgreSQL, MySQL, SQL Server, MongoDB, and more. It provides fine-grained row-level and column-level access control, event triggers on database changes, remote schema stitching, and real-time subscriptions out of the box. Available as a managed cloud service or self-hosted, Hasura eliminates weeks of boilerplate API development while maintaining full control over authorization logic.

Cloud platform for app deployment

Heroku is one of the original platform-as-a-service providers, letting developers deploy and scale web apps with a simple git push heroku main. Pioneered buildpacks, dyno-based scaling, and the add-on marketplace for managed Postgres, Redis, workers, and observability. Now a Salesforce product supporting Node.js, Ruby, Python, Java, Go, PHP, and custom Docker containers.

AI-native API gateway by Alibaba with MCP server hosting and LLM routing

Higress is an open-source AI-native API gateway developed by Alibaba that combines traditional API management with LLM-specific capabilities like token-based rate limiting, model routing, prompt caching, and MCP server hosting. Built on Envoy and Istio, it provides enterprise-grade traffic management while natively understanding AI workload patterns including streaming responses, long-lived connections, and multi-model fallback chains.

FOCUS-native multi-cloud cost management and FinOps platform

Holori is a multi-cloud cost management platform built on the FOCUS billing data standard. It provides unified cost visibility across AWS, Azure, GCP, and other cloud providers with automated tagging, budget alerts, and optimization recommendations. Features interactive infrastructure diagrams that link architecture visualization directly to cost data for contextual spending analysis.

Open-source secrets management platform

Infisical is an open-source secrets management platform with 16K+ GitHub stars for syncing environment variables and secrets across teams, CI/CD pipelines, and infrastructure. Features end-to-end encryption, automatic secret rotation, dynamic secrets, access controls with audit logs, and native integrations with AWS, GCP, Azure, Kubernetes, Docker, GitHub Actions, and Vercel. Replaces scattered .env files with a centralized, encrypted secrets store accessible via dashboard, CLI, SDK, or API.

Durable workflow orchestration for serverless and edge

Inngest is a workflow orchestration platform that replaces queues, state management, and scheduling with durable step functions. Write functions in TypeScript, Python, or Go that survive failures, sleep for days between steps, and retry only failed steps. SDKs integrate natively with Next.js, Vercel, and serverless platforms. Free tier includes 50,000 runs/month. Used by Resend, Mintlify, and Ocoya for background jobs, AI orchestration, and event-driven workflows.

Leading open-source service mesh for Kubernetes microservices

Istio is the most widely adopted open-source service mesh for Kubernetes, providing traffic management, security, and observability for microservice architectures. It uses Envoy proxy sidecars to intercept and manage service-to-service communication with mutual TLS, fine-grained traffic routing, circuit breaking, and distributed tracing. CNCF Graduated project used in production by Google, IBM, and Salesforce.

Cloud-native POSIX filesystem on object storage

JuiceFS is a high-performance distributed POSIX filesystem built on object storage like S3 and metadata engines like Redis or MySQL. It enables seamless data sharing across thousands of clients with low latency and elastic throughput. JuiceFS ships with a Kubernetes CSI driver, Hadoop SDK compatibility, and FUSE mount support for AI training, big data analytics, and shared storage workloads. Apache 2.0 licensed with 13K+ GitHub stars.

Terminal dashboard for Kubernetes

K9s is an open-source terminal UI with 28K+ GitHub stars for managing Kubernetes clusters interactively. Provides a real-time dashboard with resource navigation, log tailing, shell access to pods, port forwarding, and RBAC visualization — all from the terminal without kubectl commands. Features Vim-style navigation, custom resource views, plugin system, cluster metrics, and multi-cluster support. Dramatically reduces the complexity of daily Kubernetes operations for developers and SREs.

Kubernetes-native model inference platform

KServe is an open-source Kubernetes-native platform for deploying and managing ML model inference at scale. It provides standardized inference protocols, autoscaling including scale-to-zero, canary rollouts, A/B testing, and multi-model serving. KServe supports all major ML frameworks including TensorFlow, PyTorch, scikit-learn, XGBoost, and LLM runtimes like vLLM and Triton through pluggable serving runtimes.

Heterogeneous CPU-GPU inference and SFT for large MoE models

Open-source framework for running and fine-tuning large Mixture-of-Experts models with heterogeneous CPU-GPU execution, optimized kernels, limited VRAM and SGLang or LLaMA-Factory integrations.

Deploy web apps anywhere

Zero-downtime deployment tool created by 37signals (Basecamp/HEY) that deploys Docker containers to any VPS or bare metal server over SSH without requiring Kubernetes. Manages rolling deploys, health checks, SSL via Let's Encrypt, container registry, and load balancing with Traefik. Simple YAML-based config. Ideal for small teams deploying Rails, Node.js, or any Dockerized app. Ships as a Ruby gem. 12K+ GitHub stars and a growing alternative to complex container orchestration.

Open-source AIOps alert management platform

Keep is an open-source AIOps platform that provides a single pane of glass for all alerts from monitoring tools like Datadog, PagerDuty, Grafana, and 50+ integrations. It uses AI to correlate, deduplicate, and enrich alerts, reducing noise and helping on-call teams focus on real incidents. Keep includes workflow automation, bidirectional sync with ticketing systems, and a modern web dashboard.

Declarative orchestration for data, AI, and infra

Kestra is an open-source orchestration platform that uses declarative YAML to define event-driven and scheduled workflows for data pipelines, infrastructure automation, and AI workloads. With over 1,200 plugins, it connects to databases, cloud services, APIs, and SaaS tools without custom glue code. Kestra reached version 1.0 LTS with agentic AI capabilities, SDKs for Python, TypeScript, Java, and Go, and SOC 2 compliance. Clients include Leroy Merlin, Huawei, Tencent, and Decathlon.