HomeLabInfo gives your homelab one dashboard where the network itself and everything running on it finally appear together, instead of scattered across router pages and terminal sessions. It watches for new devices the instant they ask the network for an address, identifies who made them, and can fire a webhook so you hear about a stranger joining your LAN before you notice it yourself. Scans keep track of which devices are online and which have gone quiet, and the interactive topology view lets you arrange the map of switches, access points, NAS boxes, and servers the way your rack actually looks. Lightweight agents installed on each machine report their containers back to the hub, so running and stopped containers, uptime, health, and host CPU, memory, and disk all show in one place without opening a separate tool per server. When an agent falls behind, its card tells you a newer version exists instead of leaving you guessing. You can add a username and password login before putting the dashboard anywhere beyond your desk, and arrange container layouts that stay put between visits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

NetMap answers the four questions every homelab owner asks in four different tools: what is on my network, what address did it get, is it still up, and why is the firewall shouting about it. Devices you add appear automatically on a visual canvas where you can drag them into place, draw the links between them, and group them into VLANs or separate sites, and the layout is still there when you come back. Behind the map, every device is watched continuously: ping times graphed over history, service checks on the ports you care about, a heartbeat strip that betrays intermittent dropouts, and an uptime percentage that settles arguments. Address management stops being a spreadsheet: define subnets, import the leases your router already handed out, see used and free addresses as a grid, and get warned before a duplicate assignment causes a mysterious outage. Firewall logs stream in live and each entry links to the device it concerns, ready to search by address, port, or protocol. When something new appears, a network scan discovers hosts with their names, hardware addresses, and open ports for review before they join the inventory. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Mapping every physical server, virtual machine, container, and network link across a sprawling homelab into a live interactive canvas, Circuit Breaker gives infrastructure operators real-time topology visualization, IP address management, and rack elevation modeling on a single screen. Operators can switch between hierarchical, concentric, cortex ring, radial, and force-directed graph layouts where animated edges reflect link speeds and color-coded status rings display live hardware health. Automated discovery scans local subnets using nmap, SNMP, and ARP while querying Proxmox VE clusters, TrueNAS storage pools, and UniFi controllers, staging newly detected nodes in a review queue before adding them to the map. For multi-site labs or isolated VLANs, lightweight remote agents connect outbound over Noise-encrypted links after fingerprint approval to report host telemetry and run scoped network scans without opening inbound firewall ports. Rack diagrams let administrators drag servers into U slots with cabling overlays using a built-in catalog covering Dell, HPE, Supermicro, Ubiquiti, MikroTik, Synology, and APC gear alongside live iDRAC, iLO, and UPS metrics. Role-based access control, OIDC single sign-on, TOTP multi-factor authentication, encrypted full-state snapshots, and a SHA-256 hash-chained audit log keep multi-user operations accountable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

No spreadsheet has to track which service owns which port, because portracker discovers every service and port on your servers and keeps the list current from a self-hosted dashboard. Begin with a single port, shown with its owning service, its source (Docker or the host system), and its address, with internal container ports told apart from ports published to the host. Step back and ports gather into services: expandable cards carrying an icon, a health dot, and a port count, in list, grid, or table layouts, where a Why this status popover names the failing component and the rule that fired. Step back again and each server gets its own panel with hostname, OS, CPU, memory, and uptime, plus TrueNAS apps, VMs, and LXC containers once an API key is added. Step back once more and the whole fleet appears, because other portracker instances can be linked as peers, a VM's instance can be nested under its host, and every server can be searched at once. Along the way, rename services, hide the noisy ones, attach notes, act on a selection in bulk, or press Generate port for an unused number before deploying something new. Optional sign-in with a first-run setup wizard, an autoxpose link that shows public URLs and SSL status, light and dark themes, and keyboard shortcuts finish the picture. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Homelable turns your entire homelab into a live, interactive network canvas where every device, link, and service shows its real-time status at a glance. Run an nmap-powered network scan against your subnets and the tool fingerprints services, queues unknown devices for review, and drops approved hosts onto a drag-and-drop canvas with 15 native node types covering routers, switches, hypervisors, NAS boxes, IoT sensors, and more. Import your full Zigbee2MQTT mesh (controllers, routers, end devices with link quality indicators) and Z-Wave JS device trees in one click, preserving the actual RF topology without manual wiring. Proxmox integration pulls in hosts, VMs, and LXC containers so you can nest virtual machines inside their parent hypervisor node on the canvas. The Rack Canvas mode documents the physical side of your lab: create racks with configurable U-height, mount gear into slots, and patch ports across devices to track your cabling. Health checks run every 60 seconds using ping, HTTP, HTTPS, TCP, SSH, or Prometheus scrape endpoints, with WebSocket push delivering green, red, or pending status pulses directly to the canvas. Split your infrastructure across multiple canvases organized by site, rack, or purpose, and share a read-only Live View URL with anyone on your network. A built-in Model Context Protocol server lets AI assistants like Claude query and modify your topology through natural language. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

TapMap draws a computer's live network connections on an interactive world map, so you can watch which applications are talking to which services, where those services sit, and what normal looks like for that machine. A local pipeline scans active sockets, extracts the remote addresses, and enriches them with geolocation from databases stored on the machine itself. Every connection carries the owning application or process, its network operator, and the operating system's verification status for that app, and places that share a location are highlighted when connections overlap. The same view lists local open ports, both TCP listeners and bound UDP sockets, established services on your LAN, and public services whose location could not be mapped. A rolling 30-day history turns raw connections into awareness: an Insights panel surfaces new applications, providers, countries, and ports, plus the most frequent activity, while a Significant Connections log records first sightings and failed verifications. A Daily Activity Report goes further, sorting applications into seen-once, occasional, recurring, and stable patterns, analyzing provider concentration, and charting country activity with detailed timelines. New significant connections can raise a desktop notification or publish to an MQTT broker you configure. Nothing is sent anywhere by default: processing happens locally, with no telemetry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

From the first rack to the last circuit, Nautobot is the open-source network source of truth that records what your network should look like and runs automation against it. Built-in models cover locations, racks, devices, interfaces, cables, VLANs, VRFs, IP prefixes, circuits, and contacts, so one searchable record replaces the spreadsheet and the wiki. Teams encode their own standards with custom fields, user-defined relationships, computed fields, and validation rules. Config contexts attach JSON or YAML data, such as syslog servers, to devices by location, role, platform, or tag. Jobs run your own automation code from the web UI, REST API, or command line, on a schedule, or through hooks when an object changes, with approvals and logs built in. Query the data over REST or GraphQL, and let the GraphiQL editor autocomplete a device and interface query you can save inside Nautobot. When an object is created, updated, or deleted, webhooks notify outside systems, with Jinja2-templated bodies and HMAC SHA-512 signatures. Git repositories can carry export templates, Jobs, and config contexts too, so YAML data and Jinja2 templates get pull request review before Nautobot syncs them. Open-source Apps add Golden Configuration for config backup, compliance, and remediation, Device Lifecycle for hardware tracking, SSoT for syncing other systems, and ChatOps. Object permissions and change logging keep a shared instance auditable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Every server, switch port, virtual machine, and network VLAN in a homelab or small IT environment can be cataloged, visualized, and exported through RackPeek's unified web interface and command-line toolkit. Operators record rack-mounted servers, managed switches, routers, firewalls, wireless access points, and uninterruptible power supplies alongside their CPU, memory, and storage specifications in a clean browser dashboard. Beyond physical gear, the inventory tracks operating systems, containerized or bare-metal services, IP subnets, and port-to-port cable connections while organizing assets with searchable tags and key-value labels. From that structured inventory, the interactive visualization engine renders live physical wiring diagrams and logical subnet-grouped service maps that export directly as high-resolution PNG graphics or Mermaid flowcharts. Because all state lives in a single human-readable configuration file backed by built-in Git repository synchronization, teams can version-control infrastructure changes or push automated updates through the authenticated REST API with dry-run diff previews. Day-to-day administration becomes faster with built-in generators that turn your cataloged hosts into ready-to-use Ansible inventory files, SSH client configurations, and tag-filtered hosts tables. Line-and-column validation feedback in the web editor catches schema mistakes immediately before changes are committed. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Trusted by thousands of organizations worldwide with over 14,700 GitHub stars, Snipe-IT has been the gold standard in open-source IT asset management since 2013. Built on Laravel 12 with PHP 8.2+, it provides a comprehensive web-based platform for tracking every physical and digital asset in your organization — from laptops and servers to software licenses, accessories, consumables, and components. The check-in/check-out system assigns assets to users with full audit trails, digital signature acceptance, and automated email notifications for checkouts, approaching deadlines, expiring warranties, and low inventory. License management handles multi-seat software with seat-by-seat tracking, compliance monitoring, and expiration alerts. Custom fields let you capture organization-specific metadata, while the advanced search engine supports logical operators including and/or conditions, exact matching with is:value, fuzzy exclusions with not:value, and null checks. SCIM 2.0 integration synchronizes users, groups, locations, companies, and managers from identity providers like Azure Entra ID and Okta. Enterprise authentication supports LDAP, Active Directory, Google Secure LDAP, and SAML 2.0 single sign-on. The reporting dashboard generates custom asset reports with saved templates, depreciation schedules, and audit logs. QR code labels enable instant mobile asset lookup via barcode scanners. The full-featured JSON REST API powers custom integrations, with community-built SDKs, MCP servers, and third-party mobile apps including SnipeMate and Snipe-Scan. Deploy via Docker Compose with MariaDB 11 in minutes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

GLPI combines helpdesk ticketing, hardware inventory, license compliance, CMDB, and project management in a single PHP application with over 6,200 GitHub stars and 500,000+ Docker pulls, offering a unified ITSM platform that replaces ServiceNow, Freshservice, and ManageEngine without per-agent pricing. The ITIL-aligned service desk handles incidents, problems, changes, and service requests with configurable SLA management, approval workflows, satisfaction surveys, and business rules that automate ticket routing, escalation, and categorization. Native dynamic inventory through the GLPI Agent discovers Windows, Linux, and macOS endpoints with deep hardware profiling, while network discovery scans switches, printers, and infrastructure devices automatically. Software and license management tracks per-user and per-core license allocations with compliance reporting, expiration alerts, and financial cost tracking across the asset lifecycle from purchase through depreciation to disposal. Data center infrastructure management provides rack visualization with U-level positioning, PDU tracking, and connection mapping. The integrated forms editor builds custom request portals for end-users, while the self-service portal lets users submit tickets, browse the service catalog, and reserve assets. Webhooks trigger external HTTP calls on events, and the High-Level REST API v2 exposes every resource for automation. A plugin marketplace offers 90+ extensions for monitoring integration, advanced reporting, and authentication. Deploy via Docker with the glpi/glpi image alongside MySQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv3 licensed.

DumbAssets delivers a deliberately simple physical asset tracker that does exactly one thing well — keeping tabs on everything you own, from server racks down to individual HDDs, with hierarchical component nesting that mirrors real-world organization. The Node.js backend stores all data in JSON files within a single /data directory, making backups trivial with one folder copy while the PWA-enabled frontend provides responsive access from any device with light and dark theme persistence. Assets track model numbers, serial numbers, purchase dates, warranty expiration dates, and custom descriptions while sub-components nest infinitely — attach a Dell R730 to your server rack, then attach individual drives, CPUs, and NICs to that server with separate warranty and maintenance schedules for each. The Apprise notification engine fires configurable alerts for warranty expirations and maintenance events with direct links back to the specific asset in the web interface. Photo uploads attach visual records to any asset, receipt storage keeps purchase documentation alongside the item it covers, and a flexible tagging system enables cross-cutting organization beyond the hierarchy. PIN authentication with brute-force protection secures the interface, while search covers names, models, serials, and descriptions with sorting by warranty status, tags, components, or alphabetical order. Deploy with a single Docker command mapping port 3000 and one data volume. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL v3 licensed.

Fleet lets IT and security teams query every device in their organization like a SQL database, using osquery to surface installed software, running processes, configurations, and vulnerabilities within seconds across macOS, Windows, Linux, iOS, Android, and ChromeOS. The Go-based server exposes a web console and REST API for centralized device management, with MDM capabilities built on nanoMDM for Apple device enrollment, configuration profiles, and remote lock or wipe. Vulnerability management cross-references installed software inventories against NVD and OVAL CVE databases, automatically flagging known vulnerabilities with severity scores and remediation guidance. Software deployment handles OS updates using Apple Declarative Device Management, Windows Update, and custom installer packages distributed through S3-compatible storage. A GitOps workflow enables infrastructure-as-code management where device policies, osquery queries, and configuration profiles live as YAML files in Git repositories, with CI/CD pipelines pushing changes through the fleetctl CLI. The fleetd agent bundle includes osquery for telemetry, Orbit for version management, and Fleet Desktop providing end users a menu bar status indicator. Integrations connect to Snowflake, Splunk, Elastic, Jira, Zendesk, Vanta, and GitHub Actions for automated compliance reporting. CIS benchmark policies verify security baselines across operating systems. Deployment requires MySQL for persistence and Redis for caching, running as Docker containers or on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Network traffic stops being a mystery once ntopng names the hosts, applications, and protocols behind every flow, live in your browser. To find the host saturating an uplink, open the dashboard, which ranks top talkers, countries, autonomous systems, and protocols beside historical charts. To see what a suspicious host is contacting, open its page for traffic, ports, DNS queries, TLS details, and visited sites, plus a map of its conversations. Deep packet inspection recognizes applications such as Facebook, YouTube, and BitTorrent, so charts name the app behind the bytes instead of relying on port numbers alone. The console reads packets from a SPAN port or TAP and NetFlow, sFlow, or IPFIX records from routers and switches through nProbe, so it can cover a single switch or many remote sites. Behavioural checks raise alerts for flows, hosts, and interfaces and send them to email, Discord, Telegram, or webhooks. Active monitoring probes remote hosts over ICMP and HTTP/S, and network discovery lists the devices on your local network. A REST API and Lua scripting pull statistics into your own tools and add custom checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Netra watches your network from the side, plugged into a switch mirror port, and turns everything it sees into a live picture of your traffic without ever sitting in the forwarding path. A single binary loads its eBPF collectors in the kernel, so aggregation happens before packets reach user space and multi-gigabit mirror feeds stay observable instead of dropping samples. The dashboard opens on totals, protocol share, and traffic trends, then lets you drill into flows by address, port, domain, or service, check which countries your traffic talks to on a world map, and read the internal topology as a live graph. Domains surface passively from TLS handshakes, public addresses are enriched with country and organization data, and heuristic detectors flag scanning, flooding, and single-host surges, pushing alerts to your team chat with an optional AI-written explanation. You can ask the built-in assistant questions about real recorded history, connect external MCP servers so it can call your own tools while it answers, and stream flows onward to Kafka for other consumers. History rolls into compressed columnar files on a schedule and stays queryable for a month by default. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Instead of wrestling with raw command-line flags and YAML configuration files for every device on your self-hosted Headscale mesh VPN, Headplane gives you a Tailscale-style web administration console to manage machines, users, DNS records, and access policies from any browser. From the machines overview, network administrators can inspect connected nodes, view Tailnet IPv4 and IPv6 addresses, rename devices, reassign ownership across users, toggle key expiration, and approve advertised subnet routes or exit nodes in a couple of clicks. Built-in Access Control List (ACL) management lets you edit security policies, define user groups, assign node tags, and configure auto-approvers without manually SSHing into your control server. When someone needs immediate shell access to a remote Linux host on the mesh, the integrated WebSSH console opens an interactive terminal session right inside the browser tab over Tailscale SSH. You can also manage MagicDNS settings, configure split DNS nameservers, and add custom DNS records that automatically reload your Headscale instance. Multi-user administration supports OpenID Connect (OIDC) single sign-on with identity providers like Okta, Authentik, Authelia, and Google Workspace, alongside granular role assignments and pre-authentication key generation for unattended server enrollment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 34,000 GitHub stars and backing from a well-funded engineering team, Tailscale has fundamentally simplified how developers and system administrators think about secure networking. The client daemon establishes WireGuard tunnels directly between devices using sophisticated NAT traversal techniques, achieving direct peer-to-peer connections in the vast majority of network configurations without requiring port forwarding, firewall rules, or VPN concentrators. When direct connections prove impossible due to restrictive network environments, DERP relay servers provide encrypted fallback paths. MagicDNS assigns human-readable hostnames to every device on the network, eliminating the need to remember IP addresses across a tailnet. Subnet routing allows nodes to advertise access to entire local networks, enabling remote access to office resources, home labs, or cloud VPCs through a single gateway node. Exit node functionality routes all internet traffic through a designated device for privacy protection or geographic flexibility. Access control lists define granular policies for which devices and users can communicate with which services, enforced cryptographically at the network layer. The authentication layer integrates with identity providers including Google, Microsoft, GitHub, Apple, and OIDC-compliant systems for single sign-on access. Taildrop enables direct encrypted file transfers between devices without cloud intermediaries. The tailscale CLI provides complete network management from the terminal including status monitoring, route advertisement, and node configuration. Running Tailscale on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console provides a permanent, always-on node in your mesh network. BSD-3-Clause licensed with an active open-source community.