Best tools for DevOps Automation

Modern data pipeline orchestration with built-in AI

Mage AI is an open-source data pipeline orchestration tool positioned as a modern alternative to Apache Airflow. It provides a visual pipeline editor, native AI integrations for generating pipeline code, real-time streaming support, and built-in data quality checks. Mage handles batch and streaming workloads with a developer-friendly notebook-style interface and deploys to any cloud provider.

Open-source AIOps alert management platform

Keep is an open-source AIOps platform that provides a single pane of glass for all alerts from monitoring tools like Datadog, PagerDuty, Grafana, and 50+ integrations. It uses AI to correlate, deduplicate, and enrich alerts, reducing noise and helping on-call teams focus on real incidents. Keep includes workflow automation, bidirectional sync with ticketing systems, and a modern web dashboard.

Open-source feature flags and remote configuration

Flagsmith is an open-source feature flag and remote config platform with 15+ SDKs, a clean REST API, and simple Docker deployment. It supports boolean, multivariate, and string flags with segment-based targeting, A/B testing via flag variations, and environment-based workflows. Flagsmith provides a straightforward self-hosted alternative to LaunchDarkly with full API-first design under a BSD-3-Clause license.

Open-source feature flags and A/B testing platform

GrowthBook is an open-source platform for feature flags, A/B testing, and product experimentation. It includes Bayesian and frequentist statistics engines, warehouse-native analytics connecting to BigQuery, Snowflake, and Databricks, and SDKs for 15+ languages. GrowthBook supports targeting rules, gradual rollouts, and an MCP server for AI agent integration. Self-hostable via Docker.

Native Linux containers on macOS via Apple Virtualization

Apple Containerization is Apple's official Swift package for running Linux containers natively on macOS using the Virtualization framework. It provides near-native performance without Docker Desktop's heavyweight VM, supporting OCI images, container networking, and a command-line interface. The library leverages Apple Silicon hardware acceleration for minimal overhead container execution on Mac development machines.

Self-hosted SSH and server management platform

Termix is a self-hosted SSH and server management platform that provides a modern web-based terminal, connection management, SFTP file transfer, and multi-device sync without subscription fees. It serves as an open-source alternative to Termius, offering team collaboration features, connection sharing, and a clean interface for managing SSH connections across servers, all deployable via Docker.

Open-source zero-trust networking with WireGuard

NetBird is an open-source zero-trust networking platform that creates encrypted WireGuard overlay networks between devices without opening ports or configuring firewalls. It provides peer-to-peer connectivity with NAT traversal, access control policies, DNS management, and a web dashboard for team management. NetBird replaces traditional VPNs with a simpler, more secure mesh networking approach for self-hosted infrastructure and remote teams.

Full-stack monitoring with session replay and tracing

Highlight.io is an open-source full-stack monitoring platform that combines session replay, error monitoring, logging, and distributed tracing in a single tool. It captures user sessions as replayable videos alongside frontend errors, backend logs, and traces, letting teams see exactly what users experienced when issues occur. Self-hostable via Docker with a generous free tier on their managed cloud service.

High-performance WebAssembly runtime for cloud and AI

WasmEdge is a CNCF sandbox WebAssembly runtime optimized for cloud-native, edge, and AI workloads. It provides a lightweight, secure, and portable execution environment that is faster than containers and safer than native processes. WasmEdge supports LLM inference via LlamaEdge, serverless functions, microservices, and plugin extensions for networking, AI, and cryptography across Linux, macOS, and Windows.

Headless browsers in Docker for automation at scale

Browserless is a headless browser-as-a-service platform that deploys Chrome, Firefox, and WebKit in Docker containers for web scraping, testing, and AI agent automation. It provides Puppeteer and Playwright-compatible APIs, a built-in MCP server for connecting AI assistants to browser automation, screenshot and PDF generation, and connection pooling for high-concurrency workloads. Available as self-hosted open source or managed cloud.

OpenAI API management gateway for 100+ LLM providers

One API is a self-hosted LLM API gateway that provides a unified OpenAI-compatible interface for managing multiple model providers including OpenAI, Azure, Anthropic, Google, and dozens of Chinese providers. It handles load balancing, quota management, rate limiting, token tracking, and channel-based routing through a web dashboard. Widely adopted in the Chinese developer ecosystem with over 18,000 GitHub stars.

Open-source high-performance key/value datastore

Valkey is a Linux Foundation-backed open-source fork of Redis 7.2.4 under BSD 3-Clause license, created after Redis changed to restrictive licensing. It provides a drop-in Redis replacement for caching, message queues, and real-time data workloads. Valkey 9 adds JSON, Bloom filters, vector search, cluster scaling to 2000 nodes, and over one billion requests per second in benchmarks. Backed by AWS, Google, Oracle, and Ericsson.

Run GitHub Actions locally for fast feedback

Act is an open-source tool that runs GitHub Actions workflows locally using Docker containers that match GitHub's execution environment. It provides instant feedback on workflow changes without pushing to a repository, supports matrix builds, secret management, and artifact handling. Act can also replace Makefiles by using workflow files as task definitions, making it useful for both CI/CD development and local task automation across development teams.

GitHub's Kubernetes controller for autoscaling GitHub Actions runners

actions-runner-controller (ARC) is GitHub's official Kubernetes controller for managing self-hosted GitHub Actions runners. It automatically scales runner pods up and down based on workflow demand, provisioning runners when jobs queue and terminating them when complete. Supports runner groups, custom runner images, and organization-level runner management. Over 6,100 GitHub stars.

Lightweight microVM execution layer for AI agent code sandboxing

Vercel Sandbox provides a lightweight microVM execution environment for running untrusted code generated by AI agents safely. It creates isolated sandboxes that prevent generated code from accessing the host system, network, or other processes. Designed for AI coding platforms that need to execute user or agent-generated code without security risks to the host infrastructure.

Self-hosted cloud development environments for teams and AI agents

Coder provisions self-hosted cloud development environments on any infrastructure including Kubernetes, Docker, AWS, GCP, and Azure. Developers connect through VS Code, JetBrains IDEs, or browser-based editors to standardized environments with pre-configured dependencies. Features template-based provisioning, automatic shutdown, and audit logging. Over 12,800 GitHub stars with growing AI agent use cases.

Google's application kernel for container sandboxing and security

gVisor is Google's open-source container runtime sandbox that provides an additional layer of isolation between containerized applications and the host kernel. It implements a user-space application kernel that intercepts system calls, preventing container escapes and limiting the attack surface. Used in Google Cloud Run, GKE Sandbox, and other Google Cloud services. Over 18,000 GitHub stars.

Self-hosted MCP gateway for managing multiple servers behind a single endpoint

MCPJungle is a self-hosted gateway that aggregates multiple MCP servers behind a single endpoint. It provides server discovery, health checking, access control, and request routing so AI clients connect to one gateway rather than managing individual server connections. Supports server grouping, authentication, and monitoring dashboards for production MCP deployments.

Protocol bridge converting MCP stdio transport to HTTP/SSE endpoints

mcp-proxy is a protocol bridge that converts MCP servers using stdio transport into HTTP and Server-Sent Events endpoints accessible over the network. This enables remote MCP server hosting, load balancing, and sharing servers across multiple AI clients. Supports both directions: wrapping stdio servers with HTTP and connecting to remote SSE servers through local stdio. Over 2,400 GitHub stars.

CLI package manager for MCP servers with profile-based configuration

MCPM is a command-line package manager for MCP servers that handles installation, configuration, and profile management. It supports profile-based server grouping where different AI workflows use different sets of MCP servers. Features a server registry, automatic dependency resolution, and configuration file management for Claude Desktop and other MCP clients.

MCP server manager for installing and running Model Context Protocol servers

MCPorter is a management tool for discovering, installing, and running MCP servers. It provides a registry of available servers, handles dependency installation, manages configuration, and starts servers with proper environment setup. Simplifies the process of connecting AI agents to external tools through MCP by abstracting server lifecycle management. Over 5,700 GitHub stars.

CNCF vendor-neutral standard for distributed traces, metrics, and logs

OpenTelemetry is the CNCF standard for generating, collecting, and exporting telemetry data including distributed traces, metrics, and logs. It provides instrumentation SDKs for every major programming language, the OpenTelemetry Collector for data processing and routing, and semantic conventions that ensure consistent telemetry across services. The second most active CNCF project after Kubernetes.

ClickHouse-powered APM with 100% trace sampling and affordable retention

Uptrace is an OpenTelemetry-native APM platform that stores traces, metrics, and logs in ClickHouse for high-performance querying with 100% trace sampling. Unlike platforms that sample traces to control costs, Uptrace retains every trace for complete visibility into system behavior. Self-hosted under BSL license or available as a managed cloud service with affordable per-event pricing.

eBPF auto-instrumentation for OpenTelemetry without code changes

Odigos provides automatic OpenTelemetry instrumentation for Kubernetes applications using eBPF, requiring zero code changes or SDK integration. It detects running applications, identifies their programming language, and attaches appropriate instrumentation to generate distributed traces, metrics, and logs. CNCF project that routes telemetry to any OpenTelemetry-compatible backend including Jaeger, Grafana, and Datadog.