When a query crosses its threshold, Nightingale, a self-hosted alerting engine, decides who hears about it and how, without moving data out of the stores you already run. Rules use PromQL, log queries, or SQL against Prometheus, VictoriaMetrics, Elasticsearch, Loki, ClickHouse, MySQL, or PostgreSQL, graded S1, S2, or S3 with a for-duration that absorbs brief spikes. Existing Prometheus alert rules import from YAML. Business groups give each team its own rules and dashboards, and sign-in works through OIDC, OAuth2, LDAP, or CAS. Once a rule fires, mute rules silence the noise, subscriptions add recipients, and event pipelines rewrite labels or route conditionally. Delivery reaches Slack, PagerDuty, Discord, Telegram, Jira, email, DingTalk, Feishu, WeCom, SMS, and voice calls, plus HTTP webhooks and scripts for anything else. Evaluation records, active and historical events, and notification results show what happened at each step. If an alert misbehaves, the built-in AI agent explains why it fired or never arrived, and it drafts rules, dashboards, and mutes from plain-language requests. Claude Code, Cursor, and other MCP clients can query alerts and manage alerting through /mcp, read-only by default and bound by the caller's own permissions. At remote sites, n9e-edge keeps evaluating and notifying when the link to the center drops. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Instead of a separate chatbot for each channel, Synaplan runs one self-hosted AI assistant for your team, website visitors, WhatsApp line, and inbox, and shows what every reply cost. In the web app, connect OpenAI, Anthropic, Gemini, Groq, Mistral, xAI, Hugging Face, or local Ollama. Each kind of work gets its own model, from chat and image to video and audio, and every answer carries a Free, Low, Mid, or High cost badge. A planner splits a big request into a task graph and sends each step to the model that fits. On your website, one script tag adds a chat widget, and a human operator can take over any conversation live. On WhatsApp Business and email, the assistant replies on the channel where the question arrived. Behind every channel sits one knowledge base: upload PDFs, Word and Excel files, or images with OCR, and semantic search feeds them into answers. Saved tasks run on demand or on a schedule, approvals pause any action that writes, and watched pages mail you a diff when a URL changes. Connections reach Microsoft 365, Dropbox, Nextcloud, ownCloud, WebDAV, CalDAV, Jira, and Confluence. An MCP server and an Anthropic-compatible endpoint let Claude, Cursor, and Claude Code use your instance. Users and groups share folders and assistants, and admins see usage and health. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Codync turns the coding agents already installed on your computer into named bots you can message from your phone, so the Claude Code or Codex session on your desk keeps working while you are away. Each bot wraps one agent in one project folder, with its own standing instructions, memory, and approval rules, and several bots run side by side on one machine. Message any bot from the iPhone app, the desktop app, or a terminal; group rooms put bots in one thread, and an @name mention routes a question to exactly one of them. Bots ask each other for reviews inside the room and quote-reply to specific messages. File changes arrive as approval cards naming the file and computer, with Allow once, Always allow, or Deny; finished and blocked work both ping you as push notifications. The connection between phone and computer is end-to-end encrypted through a free relay, your own relay, or directly over the same Wi-Fi or Tailscale. Watch the computer's screen from your phone, hand a bot a computer-use tool, or talk to it in a voice call, and approve every new device per computer with a six-digit code. Your existing agent subscription does the work; Codync never calls a provider API with your login, and there is no paid tier. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Cognee gives AI agents persistent long-term memory that survives across sessions, replacing the traditional stack of separate graph, vector, and session databases with a unified engine running on a single PostgreSQL instance. The memory-native API exposes four verbs (remember, recall, forget, and improve) enabling agents to persist context, retrieve cited answers, prune outdated knowledge, and self-improve from feedback. Under the hood, Cognee combines pgvector embeddings with a PostgreSQL-native graph store and cognitive-science-grounded ontology generation, delivering hybrid retrieval that fuses semantic similarity, structural graph traversal, and lexical search in a single query. Integrations span Claude Code, Cursor, LangGraph, OpenAI Agents, and any MCP-compatible client through a dedicated MCP server on port 8001, while the Python and TypeScript SDKs provide direct programmatic access. The platform supports swappable backends including Neo4j, FalkorDB, Qdrant, ChromaDB, Weaviate, Milvus, and LanceDB for teams with existing infrastructure. Built-in OpenTelemetry tracing, an experimental dashboard with knowledge graph visualization, multi-tenant user isolation, and audit trails ensure production readiness. Deploy via Docker Compose with optional profiles for PostgreSQL, Neo4j, Redis, and the web frontend. Reached v1.0 in April 2026 with 30,000+ stars. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Team and product documentation on a fast Vue frontend with PostgreSQL storage: Wiki.js is a Node.js wiki engine. Its distinguishing trait is per-page editor choice: authors pick Markdown with live preview, a WYSIWYG visual builder for non-technical writers, or raw HTML, page by page. Native Git synchronization commits every page change to GitHub, GitLab, Bitbucket, Azure DevOps, or any Git remote - bi-directionally, so edits made in the repository flow back into the wiki - giving documentation version-controlled backup for free. Authentication coverage is among the broadest of any self-hosted wiki: local accounts with self-registration, social login via Google, GitHub, Discord, and Slack, and enterprise SSO through LDAP/Active Directory, SAML, CAS, Auth0, Okta, Azure AD, Keycloak, and generic OAuth2/OIDC, with optional MFA. Built-in full-text search runs on PostgreSQL with zero setup, and external engines like Algolia or Solr can substitute. Page history with visual version comparison, granular group-based permissions per path, nested navigation menus, 50+ integration modules, and full localization round it out. AGPLv3-licensed with a 28k-star community.

Agentic SOC Platform compresses hours of manual security analysis into seconds by deploying specialized AI agents that autonomously triage, investigate, and enrich security alerts. The Python/Django backend processes SIEM webhooks through Redis Streams into a modular pipeline where LangGraph-orchestrated agents extract IOCs, correlate signals, and generate Cases with severity, confidence, impact, priority, and structured verdicts. The built-in SIRP provides full case management with Alerts, Artifacts, Enrichments, Tickets, and a Knowledge base that accumulates institutional memory for both human analysts and LLM agents. Native Splunk and Elasticsearch/Kibana integrations deliver unified log search through a standardized interface so agents and analysts share identical security context. The playbook engine combines traditional SOAR automation with AI-powered investigation — launching threat hunting agents, knowledge extraction, threat intelligence enrichment, and CMDB lookups from a single orchestration layer. MCP Plugin support exposes ASP capabilities to Claude Code, Codex, and OpenCode, enabling external AI agents to operate cases, search logs, query threat intelligence, and write custom modules directly. Python Modules adapt new alert sources while Playbooks orchestrate LLM analysis and automated response actions, scaling the platform with your security scenarios. Deploy via Docker Compose with all data staying inside your network. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

OpenStock delivers a production-ready financial market terminal that unifies real-time equity pricing, technical analysis, and multi-asset watchlists into a personal self-hosted dashboard. Investors can monitor equities across thirty international exchanges, inspect live candlestick charts powered by TradingView, and evaluate technical momentum oscillators without paying recurring platform subscriptions. The global command palette accessible via keyboard shortcuts enables instantaneous ticker discovery across global exchange symbols and economic sectors. Users can organize individual stock watchlists in MongoDB, configure automated price threshold alerts triggered every fifteen seconds, and review cross-platform sentiment scores synthesized from Reddit, X, and financial news feeds. The built-in automation engine schedules weekly digest reports and event-driven notifications dispatched directly to your inbox through Nodemailer transports. Responsive market heatmaps and top-mover widgets surface daily sector performance before the opening bell rings. Deployable via Docker Compose with dedicated MongoDB persistence, the platform scales across multi-key Finnhub rate limits effortlessly. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Sim Studio lets teams build, deploy, and monitor AI agent workflows by dragging blocks onto a visual canvas and wiring them into executable pipelines, backed by over 1,000 integrations. The React Flow editor represents each step as a node: LLM calls, tool invocations, conditional branches, and data transformations form directed acyclic graphs that run as complete agent pipelines. Every major LLM provider works natively, including OpenAI, Anthropic, Google Gemini, Groq, and Cerebras, plus local models through Ollama and vLLM. Integrations span Gmail, Slack, Microsoft Teams, Telegram, WhatsApp, Notion, Google Workspace, Airtable, GitHub, Jira, Linear, Perplexity, Firecrawl, PostgreSQL, Supabase, Pinecone, and Qdrant. Built-in tables provide a database layer, a file store offers shared team storage, and knowledge bases powered by PostgreSQL with pgvector enable retrieval-augmented generation. Finished workflows deploy as REST API endpoints, scheduled jobs, or Slack bots, with block-by-block execution traces for full observability. Real-time collaborative editing via Socket.io supports simultaneous multi-user construction. Alternatively, describe agent behavior in natural language and Sim assembles the workflow automatically. Built on Next.js App Router, Bun runtime, Drizzle ORM, and Tailwind CSS. 29,400+ GitHub stars and 100,000+ builders. Apache-2.0 licensed.

Agent Zero equips large language models with a persistent virtual Linux desktop, letting autonomous AI agents write code, research the web, and execute multistep tasks without supervision. Operating within an isolated container, the system opens an interactive XFCE graphical desktop in your browser canvas where the agent interacts with GUI applications like Blender and terminal sessions directly. Its embedded browser features interactive annotation tools, letting you click web elements to inspect stylesheet hierarchies, extract component markup, or submit automated testing instructions. You can cowork on spreadsheets, presentations, and Markdown specifications in real time alongside the agent, preserving document revisions through snapshot time travel. A multi-tier memory architecture backed by FAISS vector indexing and SearXNG web discovery retains problem-solving context across projects, while hierarchical delegation spins up specialized subordinate agents to parallelize complex engineering audits. The platform connects seamlessly to commercial LLMs via OpenAI, Anthropic, or OpenRouter, runs private local models through Ollama, and integrates custom toolkits via the Model Context Protocol and community Plugin Hub. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Cockpit puts Linux server administration in a web browser, rendering storage, networking, containers, and virtual machines as visual panels you click through instead of command-line syntax you memorize. It ships in every major Linux distribution and activates through systemd socket activation, consuming zero resources until someone connects on port 9090. What makes it different from other admin panels: every change through the web interface appears instantly at the command line, and every terminal change reflects in the browser in real time. No abstraction layer sits between the UI and the operating system, which means no configuration drift. Storage management covers disk partitioning, RAID arrays, LUKS encryption, LVM volumes, and NFS shares. Network configuration handles bonds, bridges, VLANs, and firewall zones through visual editors. Native Podman integration pulls images, creates containers, manages pods, and provides terminal access into running processes. KVM/libvirt support handles VM creation, cloning, snapshots, and live migration with console access. A built-in terminal provides shell access when the web interface is not enough, and the journal viewer filters systemd logs by severity and unit. Multi-server management connects additional hosts over SSH, presenting a unified dashboard across your entire infrastructure from one browser tab. Runs on a dedicated RepoCloud VPS with full root SSH access and browser serial console. LGPL licensed.

Eliminating repetitive sponsor reads and dynamic mid-roll commercials before an episode even reaches your headphones, MinusPod operates as a self-hosted podcast ad-removal server and RSS feed manager. You subscribe to shows inside the web dashboard using PodcastIndex search or OPML import, and the server generates clean replacement RSS feeds compatible with Pocket Casts, Overcast, Apple Podcasts, and Audiobookshelf. When a new episode drops via scheduled polling or instant Podping notifications, the pipeline transcribes the audio locally with faster-whisper or Parakeet, or routes it through a remote transcription API. Your choice of LLM provider, including Ollama, Anthropic Claude, OpenRouter, or any OpenAI-compatible endpoint, scans overlapping transcript windows to pinpoint sponsor reads, cross-promotions, and intros. Programmatic audio analysis reinforces AI detection by measuring EBU R128 loudness jumps, Chromaprint acoustic fingerprints, show jingles, and dynamically inserted ad transitions before FFmpeg splices the audio or marks segments as skippable Podcasting 2.0 chapters. A browser-based Ad Editor lets you audition pre-cut and post-cut audio, nudge start and end timestamps, and confirm detections that train global, network, and show-specific sponsor patterns. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With 3,300+ GitHub stars, 200+ releases, and v1.77 shipping in July 2026, Frappe CRM delivers enterprise CRM capabilities without per-seat licensing costs that plague Salesforce and HubSpot deployments. The Python backend running on Frappe Framework v15/v16 with MariaDB and Redis pairs with a Vue 3 frontend using Pinia state management, Vue Router, and the Frappe UI component library styled with Tailwind CSS v3. All-in-one lead and deal pages consolidate activities, comments, notes, tasks, call logs, and email history into a single scrollable view while the drag-and-drop Kanban board provides visual pipeline tracking across configurable stages. Built-in Twilio integration enables click-to-call with recording directly from deal pages, Exotel routes calls through agent mobile phones, and WhatsApp messaging connects via the Frappe WhatsApp module for conversational sales. A visual field layout editor lets non-technical users customize CRM forms, sidepanels, and grid views with real-time drag-and-drop without writing code. The Service Level Agreement engine tracks first-response and rolling-response times against configurable policies with automatic escalation. Meta integration captures leads from Facebook and Instagram ad campaigns directly into the pipeline. ERPNext connectivity extends CRM into invoicing, accounting, inventory, and purchasing with native data flow. Docker Compose deployment with a single command provisions a production-ready instance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Instead of scattering provider credentials and vendor-specific SDK logic across dozens of microservices, engineering teams route every LLM call through GoModel, an open-source AI gateway that unifies 34 model providers behind OpenAI-compatible and Anthropic-compatible endpoints. Pointing existing OpenAI or Anthropic SDKs at the gateway unlocks chat completions, the Responses API, Anthropic Messages, embeddings, batch jobs, and realtime audio across OpenAI, Anthropic, Gemini, Bedrock, Azure, Groq, DeepSeek, Ollama, and vLLM. Platform operators publish virtual model aliases that distribute traffic via weighted round-robin or lowest-cost routing while rotating multiple API keys per provider and failing over through circuit breakers during upstream outages. Sticky session routing keeps multi-turn agent conversations on the same target to preserve warm prompt caches, while exact-match and vector semantic caching via Qdrant, pgvector, Pinecone, or Weaviate cut duplicate token costs. Versioned workflows and pre-dispatch guardrails enforce prompt injection rules, rate limits, and hard USD spend budgets across hierarchical tenant user paths before requests are dispatched. The built-in admin dashboard offers live audit logs, per-tenant cost analytics, LiteLLM key migration, an interactive request playground, Model Context Protocol tool aggregation, and OpenTelemetry and Prometheus metrics. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Swing Music transforms your personal audio collection into a private streaming platform with a responsive interface modeled after modern on-demand music apps. The server scans local directories, normalizes messy metadata tags, and categorizes tracks by version labels such as Deluxe, Remaster, or Live editions. Listeners can explore automated Daily Mixes compiled from real listening activity, browse folder hierarchies directly, or curate custom collections across related artists and releases. Audio playback combines intelligent silence detection with configurable cross-fade transitions to deliver seamless, uninterrupted listening across web browsers and mobile devices. Integrated Last.fm scrobbling keeps external listening statistics updated in real time, while personal playback history powers internal analytics and favorites. Multi-user account support enables family members to preserve separate playlists, favorites, and mix recommendations on a shared audio library. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPLv3 licensed.

Security scanners each report in their own format, and DefectDojo is the self-hosted platform that imports those reports and keeps a single, triaged list of findings. Reports in mixed formats? More than 350 built-in parsers read output from Burp Suite, ZAP, Trivy, Tenable Nessus, SonarQube, Snyk, and Checkmarx, and Generic Findings Import covers tools without a parser through CSV or JSON files. The same scan every night? Reimport adds new findings, can close the ones that vanished, and reopens the ones that return, while deduplication ties repeat detections inside an asset to their original. Decisions already made? False positive, out of scope, and risk accepted statuses survive reimport, so nobody triages the same noise twice. A deadline on every fix? Severity-based SLA countdowns flag breaches and can notify the users assigned to each asset, and full risk acceptances carry notes, files, and an expiry date that returns findings to active by default. Many teams, many applications? Organizations, assets, engagements, and tests mirror how security work is organized, with permissions that cascade downward. Pipelines that should report themselves? The REST API and CI/CD engagements import results automatically, and findings push to Jira as tickets. Someone outside security wants a summary? Dashboards track metrics, and a widget-based report builder produces HTML reports that print to PDF. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Cold outreach dies in the spam folder long before a prospect reads it, and Warmbly is the open-source platform that keeps your mailboxes warm, capped, and credible while campaigns run from the accounts you already own. Connect Google Workspace, Microsoft 365, or any SMTP and IMAP mailbox, and Warmbly checks SPF and DMARC records, scores mailbox health, then warms each account gradually, starting near 10 messages a day and ramping toward a 40-per-day ceiling instead of blasting from day one. Campaigns run as multi-step sequences spread across many mailboxes, with per-mailbox daily caps, minimum spacing between sends, and weekday sending windows, so volume grows without one account absorbing all the risk. Opens, clicks, bounces, and complaints stream into a deliverability view with suppression handling, while every reply from every mailbox lands in one unified inbox your whole team can work in real time. A built-in CRM tracks contacts, pipelines, deals, tasks, and meetings next to the conversations that created them. Visual playbooks react the moment a reply, booking, bounce, or warmup dip arrives: branch on intent or confidence, let an AI step read the reply and act only with the actions you allow, open the deal, post to Slack, update HubSpot or Pipedrive, and test the whole path on a canvas before it goes live. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

A pile of paper becomes a searchable digital archive under Paperless-ngx, the community-maintained document management system. The pipeline is what makes it work: drop a file into the consumption folder (or let it poll an email inbox), and a worker hashes it for duplicate detection, routes it by type, runs OCRmyPDF with Tesseract (100+ languages) on anything without a text layer, and produces an archivable PDF/A with invisible selectable text embedded - so Ctrl+F works on your scans. Then the smart part: a scikit-learn classifier (TF-IDF plus multi-label prediction) trained on your own tagged documents automatically assigns tags, correspondents, and document types to new arrivals, alongside rule-based exact, keyword, and regex matching for deterministic cases. Full-text search includes relevance ranking, match highlighting, autocomplete, and "more like this" similarity search. Apache Tika integration extends consumption to Word, Excel, PowerPoint, and LibreOffice formats. The Django/Angular app adds custom fields, saved views on a customizable dashboard, bulk editing, workflow automation triggered on upload or matching, shareable public links with expiration, and a robust permissions system with per-document access control. Metadata lives in PostgreSQL with Redis-queued Celery workers processing documents in parallel. Your tax records, invoices, and contracts stay on your server - searchable in seconds, never in someone else's cloud.

PilotDeck introduces a WorkSpace-first architecture where each project receives its own isolated file system, memory store, and skill set, preventing context bleed between parallel tasks. White-box memory makes generation, extraction, storage, and retrieval fully visible, letting users audit, edit, pin, and rollback individual entries when the agent misremembers, while Dream Mode consolidates memory fragments during idle windows. Smart Routing auto-detects task difficulty and sends complex calls to flagship models like Claude Sonnet or GPT-4o while routing simple requests to lighter models, achieving claimed 70% cost savings through on-device and cloud co-orchestration with TokenSaver tiering and sticky session binding. Always-on background execution keeps agents running after the user closes the browser, with Discovery and Cron-based scheduling for recurring workflows. The platform natively supports the Model Context Protocol for first-class MCP server integration, community skills via ClawHub on npm, lifecycle hooks intercepting PreToolUse and UserPromptSubmit events, and custom memory store providers. Multi-provider fallback automatically switches to backup providers on timeout or rate-limit errors. The WebSocket and HTTP gateway serves web, CLI, desktop, and Feishu IM channels from a single configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.