Open Source App Cloud Marketplace

PinePods delivers a centralized, self-hosted podcast ecosystem that liberates personal listening histories, audio files, and show subscriptions from commercial streaming walled gardens. Users can discover new shows through built-in search connectors across Podcast Index, iTunes, and YouTube, streaming audio and video episodes with variable playback speed, chapter markers, and synchronized transcripts. A persistent queue and custom playlist builder keep media sequences orderly across web browsers, desktop installations, and mobile clients with native CarPlay and Android Auto support. Built-in gPodder server synchronization enables seamless cross-device progress tracking with third-party podcast apps like AntennaPod. Automatic episode downloader engines monitor subscribed feeds, archiving new releases to local server storage according to customizable retention rules and storage quotas. Multi-user authentication secures household access through OIDC single sign-on and two-factor TOTP verification, while an integrated terminal client lets command-line enthusiasts manage queues directly over SSH. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Quote to cash in one web application - create quotes, convert them to invoices, record payments, track customers: iDURAR is an open-source ERP and CRM platform for small and medium-sized businesses. Built on the MERN stack (MongoDB, Express, React, Node.js) with Ant Design components and Redux state management, it presents a clean SaaS-style interface that needs little onboarding. Core modules cover invoice management with PDF generation and email delivery, payment recording against invoices, quote and proforma handling, customer records, and accounting views over the resulting data. Multi-currency support and localization make it usable for internationally operating teams. Because the whole stack is JavaScript with an API-first backend, extending it - custom fields, new modules, integrations - is approachable for any Node/React developer rather than requiring a specialist ERP skill set. Deployment is straightforward via Docker with a MongoDB instance. Licensed under AGPL-3.0 with free commercial use; a hosted enterprise version exists but the self-hosted edition is fully functional.

Starred by over 6,500 users on GitHub and trusted by organizations including Toyota, CTFd has been the leading open-source platform for hosting cybersecurity competitions since 2015, providing everything needed to run professional Capture The Flag events through a clean web-based administration panel without touching a database query. The framework supports both individual and team-based competitions with automatic tie resolution, configurable score freezing, and scoregraphs comparing the top teams with detailed progress tracking. Challenge creation offers static and regex-based flags, dynamic scoring that adjusts point values based on solve count, unlockable hints purchasable with points, file attachments uploaded to local storage or Amazon S3-compatible backends, and challenge attempt limits with automatic bruteforce protection. Version 3.8 introduced challenge logic fields controlling flag submission behavior with any, all, and team modes, integrated dynamic scoring into the standard challenge type, participant ratings and reviews on challenges, and admin-stored challenge solutions viewable after competition. The Markdown-based content management system enables custom pages for rules, FAQs, and resources, while SMTP and Mailgun integration handles email confirmation and password recovery. The plugin architecture supports custom challenge types, flag validators, and scoring algorithms, while the theme system provides complete visual customization. Import and export functionality preserves entire competition configurations for archival and reuse across events. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Customermates delivers a modern CRM purpose-built for teams who want practical customer management without enterprise-heavy complexity. The platform manages contacts, organizations, deals, services, and tasks through clean pipeline workflows while integrating AI agent capabilities, REST API access, webhook events, n8n automation connections, and Model Context Protocol tooling for AI-native operations. Team collaboration features include role-based permissions, comprehensive audit logging tracking every data change, and workspace organization for multi-team deployments. The deal pipeline provides customizable stages with drag-and-drop management, while task assignments and service tracking connect directly to contact and organization records for complete relationship context. API-first architecture exposes all CRM data through documented endpoints enabling custom integrations, reporting dashboards, and third-party tool connections. The n8n integration enables no-code workflow automation for lead routing, follow-up sequences, notification triggers, and cross-system data synchronization. Self-hosting requires only two files — a Docker Compose configuration and environment variables — with the published image at ghcr.io/customermates/customermates:latest running database migrations automatically on first boot. PostgreSQL provides the data layer with no additional infrastructure dependencies beyond a reverse proxy for TLS termination. The Community Edition includes unlimited users, unlimited records, full API access, n8n automation, and audit logging at zero cost. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Created in March 2026 and rapidly gaining traction in self-hosting communities, DockPanel delivers the most feature-dense free server panel available — 811 API endpoints, 153 one-click Docker app templates across 14 categories, and full multi-server management, all running on three Rust binaries consuming under 50MB of combined RAM. The panel handles the complete server lifecycle: sites with automatic SSL via Let's Encrypt, MySQL and PostgreSQL databases in Docker containers, Git push-to-deploy using Nixpacks for automatic language detection without Dockerfiles, blue-green zero-downtime deployments with automatic rollback on failed health checks, DNS management, mail servers, monitoring dashboards, and encrypted backups to S3, SFTP, Backblaze B2, or Google Cloud Storage. Security receives production-grade attention with per-image CVE scanning that gates deployments, a built-in WAF, passkey authentication alongside Argon2 password hashing, HttpOnly JWT sessions with blacklist-on-logout, rate limiting on auth endpoints, and fail2ban integration — all verified through an 18-vulnerability pentest with zero remaining issues. Infrastructure as Code support exports your entire server configuration to YAML, and the developer CLI provides status, diagnose, and export commands for automation. GPU passthrough enables AI workload hosting, reseller accounts support white-label branding for agencies, and ARM64 compatibility covers Raspberry Pi and Oracle Cloud free-tier deployments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Streaming personal music collections with neural discovery and intelligent playlist curation is what Kima accomplishes as a modern self-hosted audio server that replaces Spotify and Apple Music. Listeners organize their FLAC, MP3, and AAC audio files into responsive grid layouts that scale up to eight columns on ultra-wide displays while automatically fetching album covers, artist biographies, and synchronized line-by-line lyrics. The built-in Vibe System utilizes CLAP neural network audio embeddings to map an entire music collection across two-dimensional clusters and three-dimensional interactive galaxy views, enabling users to explore acoustic relationships or queue smooth sonic paths between distant tracks. Music fans can import playlists directly from Spotify, Deezer, and YouTube using deterministic ISRC matching, while automated Made For You mixes generate era-specific playlists, workout stations, and discovery queues based on individual listening habits. Integrated podcast search pulls subscriptions from iTunes with automatic episode tracking across devices, while native Audiobookshelf connectors synchronize spoken-word chapter positions and playback progress directly into the unified web player. OpenSubsonic API endpoints allow mobile users to stream libraries through native clients like Symfonium and DSub using scoped authentication tokens, while administrators manage multi-user accounts with time-based two-factor authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Kodus AI automates pull request code review with inline AI comments across GitHub, GitLab, Bitbucket, and Azure DevOps, supporting any LLM provider at cost with zero token markup. The multi-service TypeScript architecture deploys via Docker Compose, running an API server, background worker, webhooks service, and React dashboard backed by PostgreSQL with pgvector, MongoDB, and RabbitMQ. Integration covers both cloud platforms and their enterprise flavors (GitHub Enterprise Server, GitLab Self-Managed, Bitbucket Data Center) using standard OAuth flows and webhook signing to keep the review loop entirely inside your network. The platform is model-agnostic with Bring Your Own Key support for Claude, GPT, Gemini, Llama, and any OpenAI-compatible endpoint including locally-hosted models. Custom review rules combine your team's coding standards with requirements pulled from Jira, Linear, and Notion, automatically checking every PR against documented specifications. The CLI enables local reviews against working trees, staged diffs, branches, or specific commits, integrating into CI/CD pipelines as pre-merge gates. Source code is never stored and never used for model training, with all data encrypted in transit and at rest. 1,270+ stars and 129+ releases since March 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Turn company knowledge into structured courses in minutes: ClassroomIO's AI course builder takes your documents, policies, or topic outlines and generates complete lessons with exercises using Gemini, GPT-4o, or Claude — then an in-lesson AI tutor helps employees study the material at their own pace. The SvelteKit 5 and Hono API architecture backs a platform purpose-built for employee compliance training, customer education, and partner certification programs. Programs group courses into cohorts with team management, progress tracking, and goal setting. Live Kahoot-style quizzes drive real-time engagement during training sessions with automatic scoring and leaderboards. Exercises support multiple question types with automatic grading for multiple choice and AI-assisted evaluation for open-ended responses — teachers review and override all AI decisions. Branded certificates with custom IDs reward course completion. Custom domain mapping through Cloudflare lets organizations serve their learning portal under their own brand. MinIO provides S3-compatible storage for documents and video uploads. The REST API and signed webhooks enable programmatic enrollment and completion tracking, while an MCP server on npm supports AI-native authoring workflows. An embeddable widget drops the course catalog onto any website. Better Auth handles sessions and OAuth with optional SSO. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Traffic analytics, real-user performance monitoring, and client-side error tracking - normally three tools - in one cookieless, privacy-first dashboard: Swetrix. The Community Edition ships the same core engine as the cloud product - a NestJS API with ClickHouse for high-volume event storage, MySQL for relational data, and Redis for caching, fronted by a React dashboard and a ~5 KB tracking script with official packages for 20+ frameworks including Next.js, WordPress, and Shopify. Traffic analytics cover pageviews, referrers, UTM campaigns, geolocation, sessions with page flows, funnels, and custom events - all anonymized server-side with no cookies, no cross-device tracking, and no consent banner required for GDPR compliance. Performance monitoring records real-user metrics per pageview: TTFB, DNS and TLS timing, and render times, so regressions surface in the same place as traffic. Error tracking captures unhandled JavaScript exceptions automatically with formatted stack traces, filename/line metadata, affected browsers and pages, first/last-seen timestamps, and a resolve workflow - replacing a separate error monitoring subscription for many teams. Alerts fire to email, Slack, Telegram, Discord, or webhooks on traffic spikes, new errors, and custom events. If Plausible covers your traffic questions but you also want to know why the site broke, Swetrix answers both.

Running a single AI agent is straightforward; running a team of specialized agents that delegate tasks, share memory, and coordinate through structured workflows requires an orchestration layer, and that is exactly what SwarmClaw provides. Define a hierarchy of agents in an org chart where a Coordinator (your CEO agent) delegates research tasks to a Researcher, coding tasks to a Developer, and design tasks to a Designer, each configured with its own LLM provider, tool permissions, and skill set. The Task Board presents a Kanban view of all work items across Backlog, Queued, Running, and Completed columns, with each task card showing its assigned agent, tags, due dates, and approval gates that pause execution until a human reviews and approves. Agents execute work using built-in tools for file operations, shell commands, browser automation, and persistent memory, plus any MCP server you connect via stdio, SSE, or streamable HTTP transport. Durable structured sessions support branching logic, repeat loops, parallel branches with explicit joins, and restart-safe run state that survives crashes without losing progress. Over 23 LLM providers ship built-in: Claude Code CLI, OpenAI, Anthropic, Google Gemini, DeepSeek, Groq, Mistral, xAI Grok, Fireworks, Ollama, and more. Connectors push messages to Discord, Slack, and Telegram, while cron schedules and webhooks trigger agent runs automatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Personal, minimalist, database-free bookmarking - Shaarli is a philosophy as much as an app. Everything lives in a single compressed datastore file inside data/: no MySQL, no PostgreSQL, backup by copying one directory. That write-once/read-many file is usually served straight from OS disk caches, which is why a decade-old Shaarli instance with tens of thousands of links still responds instantly. Designed deliberately single-user, it saves URL, title, unlimited-length description, and tags (with autocomplete, renaming, and merging), marks entries public or private, and automatically strips utm_source and fb tracking parameters from saved URLs. That description field is why the community uses Shaarli as far more than bookmarks: a microblog, read-it-later queue, code-snippet base, pastebin, and shared clipboard between machines. Sharing is one click via bookmarklet or Android apps; consumption is per-tag RSS/Atom feeds plus a daily digest feed; search is full-text with tag filtering. A REST API opens it to any client, a plugin and theme system extends the PHP core (Markdown rendering, thumbnails), and import/export uses browser-standard Netscape HTML - your data enters and leaves freely. LDAP login is supported, no telemetry is sent anywhere, and the UI degrades gracefully without JavaScript. The anti-cloud Delicious.

CheckCle provides a complete uptime monitoring and infrastructure observability platform that deploys with a single Docker container and stores all data in embedded SQLite via PocketBase. The Go backend runs three microservices — a service operation engine handling HTTP, HTTPS, DNS, Ping, and TCP checks at configurable intervals, a distributed regional check agent for multi-location network testing, and a server monitoring agent collecting CPU, RAM, disk usage, and network metrics via gRPC. The React frontend built with Vite, TypeScript, Tailwind CSS, and shadcn-ui subscribes to PocketBase WebSocket endpoints for real-time dashboard updates without polling. SSL and domain monitoring tracks certificate issuers, expiration dates, days remaining, and validation status. The incident management system records UP, DOWN, WARNING, and PAUSE states with full history, while scheduled maintenance windows prevent false alerts during planned downtime. Public status pages provide external stakeholders with live service health information. Health heatmaps visualize uptime performance and outage patterns over time. Notification channels include email, Telegram, Discord, and Slack, with multiple alert targets per monitored service. The one-click agent installation script supports Debian, Ubuntu, CentOS, Red Hat, Alpine, and Windows in beta. Docker deployment runs on port 8090 with a single persistent volume at /mnt/pb_data, requiring minimum 1 vCPU and 500MB RAM. On RepoCloud, deploy CheckCle on a dedicated VPS with root SSH access, persistent storage for your monitoring database, and complete control over agent endpoints and notification configurations, all under the MIT license.

Continuous infrastructure monitoring meets automated SSL expiration tracking in Kuvasz, a self-hosted uptime platform that alerts DevOps teams before outages disrupt production operations. Operators can configure granular health checks across HTTP endpoints, ICMP ping targets, and raw TCP ports with custom polling intervals down to seconds. Automated SSL inspectors track certificate validity, issuing early warning notices before cryptographic chains expire and disrupt production traffic. A push monitoring system receives incoming heartbeat signals from background cron jobs, database backups, and recurring automation scripts, triggering alerts whenever expected pings fail to arrive on schedule. Multi-channel dispatchers route incident notifications through Slack, Discord, Telegram, Microsoft Teams, PagerDuty, and custom webhook payloads with adjustable failure count thresholds to eliminate transient false alarms. Maintenance windows let teams schedule planned downtime through one-off intervals or recurring cron expressions, automatically muting notifications during deployment cycles. Public and private status pages publish categorized system health metrics, historical latency charts, and incident timelines to keep internal stakeholders and end users informed. An integrated Model Context Protocol server allows AI assistants to query monitoring states and toggle checks directly via conversational interfaces. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

GoRaven transforms AI chat from a question-answer window into a full engineering workstation where agents read files, write code, run shell commands, query databases via MCP tools, and deliver structured results — orchestrating across OpenAI, Claude, DeepSeek, Gemini, Qwen, GLM, and Ollama with task-based routing that allocates the right model for each job based on cost and capability. Built on a Go backend using the Freedom framework with Iris HTTP and a React/TypeScript frontend powered by Vite and Tailwind CSS, each user operates in an isolated workspace with team-shared project areas and centrally managed model quotas. The skill marketplace packages prompts, scripts, and workflows as reusable installable units with automatic dependency resolution and centralized versioning. MCP toolchain integration connects agents to internal APIs, databases, private services, and CLI tools so they query data, invoke services, and trigger actions directly. RAG-powered knowledge bases ingest policies, documentation, and business data for real-time retrieval during planning, coding, and Q&A with source attribution. Long-running task support decomposes complex work through a main agent coordinating sub-agents that execute in parallel across sessions. Plugin hooks inject custom logic at conversation start and end, tool calls, and SSE event streams without forking core code. The operations dashboard tracks usage metrics, model consumption, and team activity. Supports SQLite, MySQL, or PostgreSQL with Redis or local memory caching. Deploy with a single Docker command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Invoicerr nails the exact billing sequence freelancers actually use: draft a quote, send it to the client, collect a legally-binding electronic signature via a secure browser link, convert the approved quote into an invoice, and generate a branded PDF — no DocuSign account, no external signing service, no enterprise complexity. The React frontend with NestJS backend uses Prisma ORM with your choice of SQLite for instant local setup or PostgreSQL for production workloads. Quotes and invoices are first-class objects with independent status tracking — unread, sent, viewed, signed for quotes; paid for invoices — not a single form with a label swap. The e-signature system generates secure-token signing links that clients open in their browser to review and sign documents without needing any account or external service. PDF generation renders quotes, invoices, and receipts with your company logo, name, VAT number, colors, and custom email templates so documents reflect your brand identity rather than the software's defaults. Authentication supports JWT tokens or OIDC providers stored in cookies. The REST API backend enables future integrations with mobile and desktop clients. A plugin system with community-made features and outgoing webhooks extends functionality without forking core code. International-friendly with customizable currencies. Deploy with Docker Compose using the prebuilt image from GitHub Container Registry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Most design tools stop at prototyping; Quant-UX also measures how real users actually perform with the prototype. The visual editor creates prototypes that behave like real apps - functional input widgets, animations, form validation, data binding across screens, and business logic modeled with REST requests and decision elements. Design systems are first-class, with components, design tokens, and master screens; if you design elsewhere, drop in image files or import from Figma. Testing is a shared link or QR code - no installs on the tester's side. Define user tasks up front, and Quant-UX records every session: click heatmaps show where users found (or missed) actionable elements, user journey graphs expose lost users, drop-off charts reveal where tasks stall, and success rates and task KPIs are extracted automatically into a dashboard. An A/B test operator wires two design variants into one prototype and compares task duration, success rate, and interaction counts. In-prototype surveys collect qualitative feedback alongside the numbers, and an AI assistant generates prototype fragments like styled forms on request. The RepoCloud deployment runs the full stack - frontend, backend, and WebSocket server containers over MongoDB - so all test recordings and research data stay on your infrastructure.

Xalgorix delivers AI-driven penetration testing that proves vulnerabilities exist rather than guessing, pairing an autonomous LLM agent with an independent exploit verifier that re-exploits every finding before it reaches your report. The 22-phase methodology mirrors how a skilled human pentester works through an engagement, covering reconnaissance, subdomain enumeration, port scanning, web crawling, parameter fuzzing, SQL injection testing, XSS detection, authentication bypass, API testing, and more. Select all phases or pick specific ones per target. The platform ships with 85+ offensive security tools preinstalled (nmap, nuclei, httpx, subfinder, katana, ffuf, gobuster, sqlmap, masscan, dalfox, feroxbuster) plus 14 built-in agent tools for browser automation, terminal execution, and note-taking. Connect your own LLM provider (OpenAI, Anthropic, DeepSeek, Gemini, Groq, Ollama, or MiniMax) so no scan data or target information leaves your infrastructure. The web dashboard on port 9137 provides live WebSocket telemetry showing tool calls, agent reasoning, and findings as scans progress. A findings index with CVSS scoring and severity filters organizes results, and branded PDF reports include your company name and logo. Wildcard and multi-target scans handle red team attack-surface mapping, while source-code scanning audits repositories directly without requiring a deployed target. A REST API enables scripted scans and SIEM pipeline integration, and webhooks push notifications to Discord or Telegram. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Bugsink has earned over 1,800 GitHub stars as the lightweight self-hosted error tracking platform that replaces Sentry without per-event billing by accepting error reports from any Sentry-compatible SDK across Python, JavaScript, Node.js, Ruby, Java, PHP, Go, and every other language Sentry supports. Simply update the DSN in your existing Sentry configuration and Bugsink captures the same stack traces, local variables, request context, and breadcrumbs that Sentry processes, displayed through a focused interface designed for debugging rather than dashboarding. Automatic issue grouping collapses duplicate error events into single actionable issues based on exception type, message, and stack frame context, turning thousands of raw events into a manageable list. Issue status tracking supports resolved, resolved-in-next-release, and muted states with automatic regression detection when resolved issues recur. Release tracking associates events with deploy versions to correlate error spikes with specific rollouts. Tag-based search filters issues by environment, release, user, browser, operating system, or any custom key-value pair sent by the SDK. Alerting notifies your team through Slack, Discord, Mattermost, and email when new issues appear or resolved issues regress, with per-project webhook configuration and user-level notification preferences. Per-project retention policies with automatic event eviction manage storage growth. A REST API with OpenAPI documentation enables custom integrations and dashboards. Source map support links minified JavaScript to original source. Deploy via Docker with the bugsink/bugsink image. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. PolyForm Shield licensed.