# Privacy-Focused

Open-source identity and access management

Keycloak is an open-source IAM solution with 25K+ GitHub stars by Red Hat. Provides SSO, social login, LDAP/Active Directory federation, standard protocol support (OIDC, OAuth 2.0, SAML), fine-grained authorization, user federation, and admin console. Features identity brokering, multi-tenancy via realms, and client adapters for Java, JavaScript, and Node.js. Self-hosted with no per-user licensing, making it ideal for organizations needing full control over identity infrastructure.

Private Markdown knowledge base

Knowledge management app based on local Markdown files with powerful linking and graph visualization. Bidirectional links, graph view, canvas for spatial thinking, templates, daily notes, and 5,000+ community plugins. All data is stored as plain .md files with no vendor lock-in. Custom themes, Vim mode, and Dataview support database-like queries. Sync and Publish are paid add-ons; the core app remains free for personal use.

Run LLMs locally with one command

Tool for running large language models locally on your machine with a simple CLI interface. Download and run Llama 3, Mistral, Gemma, Phi, Code Llama, and dozens of other open-source models with a single command. Features model management, GPU acceleration (NVIDIA/AMD/Apple Silicon), OpenAI-compatible API server, Modelfile for customization, and multi-model switching. Ideal for offline AI development, privacy-sensitive use cases, and local testing. 120K+ GitHub stars.

Self-hosted AI platform with ChatGPT-like interface for local and cloud LLMs.

Extensible, self-hosted AI platform with 290M+ Docker pulls and 124K+ GitHub stars. Supports Ollama, OpenAI-compatible APIs, and any Chat Completions backend. Features built-in RAG, multi-user RBAC, voice/video calls, Python function workspace, model builder, and web browsing. Runs entirely offline with enterprise features including SSO and audit logging.

Open-source authentication with self-hosting

SuperTokens is an open-source authentication solution with 14K+ GitHub stars providing email/password, passwordless, social login, MFA, session management, and user management. Designed for self-hosting with Docker — full control over user data with no vendor lock-in. Pre-built UI components for React, Vue, and vanilla JS. Backend SDKs for Node.js, Python, and Go. Managed cloud option also available. Emphasizes security with rotating refresh tokens and anti-CSRF protection by default.

AI assistant for code review, generation, and explanation

Bito is an AI-powered development platform combining a codebase intelligence engine with agentic code review capabilities. Its AI Architect maintains a live knowledge graph of your software system — mapping APIs, modules, and dependencies — and delivers that deep context to coding agents for more accurate suggestions. Bito solves the problem of AI tools producing generic feedback by grounding analysis in your specific codebase architecture.

Privacy-first open-source web analytics with session replays

Rybbit is an open-source, privacy-friendly alternative to Google Analytics with real-time dashboards, session replays, funnels, journeys, Web Vitals, retention, custom events, and error tracking. It uses a cookieless model, is AGPL-3.0 for self-hosting, and now uses rybbit.com as its canonical public site.

Git-native AI agent session capture and reasoning traceability

Checkpoints by Entire captures the full reasoning context behind AI-generated code directly in Git. Entire records transcripts, prompts, files touched, token usage, and tool calls alongside every commit. Session metadata lives on a separate branch keeping your history clean, with rewind capabilities to restore any previous agent checkpoint when things go sideways.

Open-source AI coding agent for the terminal

Open-source terminal-based AI coding agent built in Go by the SST team, with a rich TUI (Bubble Tea) supporting 75+ model providers including OpenAI, Anthropic, Gemini, Bedrock, Groq, and OpenRouter. Features vim-like editing, persistent SQLite sessions, and LSP integration for 40+ languages. Fully free with no vendor lock-in, it has rapidly grown to 95k+ GitHub stars.

Open-source personal AI agent for messaging apps

OpenClaw is a free, open-source AI agent framework that turns any LLM into an autonomous personal assistant accessible through messaging apps like WhatsApp, Telegram, Discord, and Signal. Running entirely on your local machine via a Node.js gateway, it connects AI models to system tools, browsers, files, and APIs for multi-step task execution with persistent memory across sessions.

Git-friendly offline API client

Open-source API client for testing REST, GraphQL, and gRPC APIs as a lightweight, privacy-focused alternative to Postman. Stores API collections as plain files in your Git repository for easy version control and team collaboration. Features environment variables, scripting, collection runner, and a declarative syntax called Bru. Offline-first with no cloud account required. Available on macOS, Windows, and Linux. 44K+ GitHub stars and growing rapidly among developers leaving Postman.

Multi-agent CLI pair programmer with FORGE, MUSE, and SAGE agents

Model-agnostic terminal coding tool with 3 specialized agents: FORGE for code editing, MUSE for planning and review, and SAGE for research. Connects to hundreds of LLM providers and models with local-first privacy and conversational Git integration. Apache 2.0 licensed. A thoughtfully designed multi-agent approach that separates concerns between coding, thinking, and information gathering for more reliable results.

Kubernetes-native framework for DevOps AI agents

kagent is a Kubernetes-native AI agent framework developed at Solo.io and accepted into the CNCF sandbox. It provides a structured environment for running DevOps-focused agents directly within Kubernetes clusters, with a dedicated kmcp toolkit for cloud-native operations. Unlike general-purpose agent frameworks, kagent targets platform engineers and SREs who need AI assistance with cluster management, troubleshooting, and infrastructure automation workflows.

Natural language interface for running code on your computer

Open Interpreter is an open-source natural-language interface for computers. It runs Python, JavaScript, shell commands, and other code locally through a ChatGPT-like terminal workflow, with user approval before execution. It can use hosted providers or local models, but its main tradeoff is safety: approved commands can access local files, apps, and system resources.

AI code assistant for enterprise

AI code completion assistant that runs locally or in the cloud with a focus on privacy and enterprise security. Trains on your codebase for personalized suggestions. Supports 30+ languages across VS Code, JetBrains, Neovim, and other IDEs. Features whole-line and full-function completions, natural language to code, and unit test generation. On-premise deployment option for air-gapped environments. SOC 2 certified. One of the earliest AI code assistants, now competing with Copilot and Supermaven.

Password manager with dev tools

Leading password manager and digital identity protection platform that securely stores, organizes, and auto-fills passwords, credentials, sensitive documents, and secrets across devices. 1Password uses AES-256 zero-knowledge encryption with Watchtower breach alerts, Travel Mode, secure sharing, and developer features including CLI tools, SSH agent integration, and CI/CD secrets management.

TypeScript-native open-source auth library

Better Auth is an open-source TypeScript-native auth library with 10K+ GitHub stars providing a comprehensive, framework-agnostic solution. Features email/password, social OAuth, magic links, passkeys, 2FA, session management, and organization support. Works with Next.js, Nuxt, SvelteKit, Astro, and any Node.js framework. Database adapters for PostgreSQL, MySQL, SQLite, MongoDB, Drizzle, and Prisma. Zero vendor lock-in alternative to Clerk and Auth0.

Open-source password management

Open-source password manager with end-to-end AES-256 encryption, zero-knowledge architecture, and full source code on GitHub for independent security audit. Bitwarden offers cross-platform clients, auto-fill, password generator, TOTP storage, encrypted sharing, self-hosting, and enterprise features like SSO, SCIM directory sync, plus a developer secrets manager for API keys and certs.

Open-source agentic browser that runs local AI agents in your browsing workflow.

BrowserOS is a privacy-first, open-source agentic browser for running AI assistants locally inside real browsing sessions instead of handing every task to a remote cloud browser.

Run open-source LLMs on your phone, fully offline and private

Google AI Edge Gallery is an open-source mobile app that lets you download and run large language models like Gemma directly on Android and iOS devices with zero cloud dependency. Built on MediaPipe and LiteRT, it features AI chat with reasoning mode, multimodal image analysis, real-time audio transcription, and autonomous agent skills—all running entirely on-device for complete privacy. A reference implementation for developers building offline-first AI experiences.

Local-first AI notepad for meetings and voice notes

Hyprnote is a local-first AI notepad designed for capturing and processing meeting notes and voice recordings. It runs entirely on-device for privacy, transcribes audio using local models, and generates structured summaries, action items, and follow-ups. Built with Rust and Tauri for native desktop performance. Over 8,000 GitHub stars with strong privacy-focused community adoption.

Google's production on-device LLM inference framework

LiteRT-LM is Google's official open-source framework for running large language models on-device across Android, iOS, Web, Desktop, and Raspberry Pi. Already deployed in Chrome and Pixel hardware, it provides production-grade on-device LLM inference with 1.4K+ GitHub stars. Apache 2.0 licensed.

Open-source cross-platform file sharing over local network

LocalSend is a free, open-source application for secure peer-to-peer file and message sharing between nearby devices over your local network. It works on Windows, macOS, Linux, Android, iOS, and Fire OS without requiring an internet connection or third-party servers. Each device generates TLS/SSL certificates for encrypted HTTPS communication, making it a privacy-first alternative to AirDrop that works across all operating systems.

Lightweight session management for TypeScript

Lucia is a lightweight open-source auth library for TypeScript providing session management primitives without abstracting the database layer. Gives developers core building blocks — session creation, validation, invalidation — while they own the schema and auth logic. Supports any database through a simple adapter. Works with Next.js, SvelteKit, Astro, Express, and Hono. For developers wanting full control over auth implementation with minimal overhead and zero vendor lock-in.

Hyperextensible Vim-based text editor

Modern fork of Vim with Lua-based plugin architecture and built-in LSP support. Lightweight yet endlessly extensible, it serves as the foundation for AI-enhanced development workflows through plugins like Avante, Codecompanion, and Copilot.lua. With 85k+ GitHub stars, it's the terminal editor of choice for developers who value speed, customization, and keyboard-driven efficiency.

Privacy-friendly Google Analytics alternative

Plausible Analytics is an open-source, lightweight, privacy-friendly web analytics tool trusted by 17,000+ paying customers including Hugging Face and Basecamp. It provides essential website metrics on a single-page dashboard without cookies, personal data collection, or GDPR consent banners. The tracking script is 75x smaller than Google Analytics. Self-hostable via Docker or available as managed EU-hosted SaaS.

Apple's Safari-native MCP server for web debugging agents

Safari MCP Server is Apple's safaridriver-based MCP server in Safari Technology Preview, giving compatible coding agents local access to Safari page content, console logs, network requests, screenshots, JavaScript evaluation, interactions, viewport controls, and accessibility/performance checks.

Self-hosted UI and API for Ansible, Terraform, and scripts

Semaphore UI provides a web interface and REST API for running Ansible playbooks, Terraform and OpenTofu configurations, Bash scripts, and PowerShell commands from a centralized self-hosted platform. With over 13,000 GitHub stars and 2 million Docker pulls, it replaces AWX and manual terminal execution with a polished dashboard for scheduling, access control, notifications, and execution history across mixed infrastructure automation environments.

Hunt down social media accounts by username across 400+ platforms

Sherlock is a Python CLI tool that searches for a given username across 400+ social networks and websites simultaneously. It is widely used in OSINT investigations, security audits, red teaming exercises, and digital footprint analysis. Sherlock is included in Kali Linux and Parrot Security distributions and has over 76,000 GitHub stars, making it one of the most popular open-source security tools.

Zero-config VPN for developers

Mesh VPN built on WireGuard that creates secure networks between devices with zero configuration. Access dev servers, self-hosted services, and home labs remotely from anywhere. Handles NAT traversal automatically with MagicDNS for easy device naming, making it the simplest way to securely connect distributed development environments and infrastructure.

Self-hosted AI accounting for freelancers and small teams

TaxHacker is an open-source, self-hosted AI accounting app that automatically extracts financial data from receipts, invoices, and bank statements using LLMs. It supports 170+ currencies and 14 cryptocurrencies with historical exchange rate conversion, multi-project accounting, and custom AI extraction fields. Works with OpenAI, Gemini, Mistral, or local models via Ollama—deploy with Docker and keep all financial data under your control.

IaC orchestration layer for scaling Terraform and OpenTofu

Terragrunt is an infrastructure-as-code orchestration tool that wraps Terraform and OpenTofu to keep configurations DRY, manage remote state, and coordinate multi-module deployments. The 1.0 release introduced stacks, filters, run reports, and backward compatibility guarantees after 900+ releases and tens of millions of infrastructure deployments. It provides a thin orchestration layer that eliminates duplication across environments without replacing the underlying IaC tools.

Open-source AI code editor focused on privacy

Open-source AI code editor with zero data retention and direct API connections. Supports local models via Ollama and LM Studio, ensuring complete privacy over your code. Built as a VS Code fork with agent mode and MCP support, offering the familiar VS Code experience while giving developers full control over which AI models they use and where their data goes.

AI dictation tool built for developers and power users

Voice-to-text tool designed specifically for developers and power users. Dictate code, documentation, and messages with high accuracy using AI-powered speech recognition. Integrates with IDEs and productivity apps, learning your vocabulary and technical jargon over time to deliver faster and more precise transcription than generic dictation tools.

Hot-swap between local LLM models via OpenAI-compatible API

llama-swap is an open-source tool that manages multiple local LLM models behind a single OpenAI-compatible API endpoint. It automatically loads and unloads models on demand, letting developers hot-swap between different models without restarting services. With 3.1K+ GitHub stars, it solves the common pain point of running multiple specialized models on limited hardware.