AiSOC delivers an open-source AI Security Operations Center that unifies event ingestion, graph correlation, autonomous triage, and purple-team adversary emulation into a single self-hosted console. Security analysts triage alerts across an interactive Investigation Rail that visualizes six-event attack timelines, pivot-path entity graphs, and recommended containment steps. The underlying LangGraph agentic engine reasons over ingested telemetry, querying MITRE ATT&CK frameworks, CISA Known Exploited Vulnerabilities catalogs, and Shodan intelligence while recording every prompt, tool execution, and evidentiary citation in an immutable Investigation Ledger. Incident responders execute automated containment playbooks, including host network isolation, credential revocation in identity providers, and firewall blocklist updates with human-in-the-loop sign-offs. Threat hunters input plain-English hypotheses into the natural-language hunt workbench to generate and execute ES|QL, SPL, and KQL queries against historical telemetry stores. Platform operators connect over seventy vendor connectors spanning CrowdStrike, SentinelOne, Microsoft Defender, AWS Security Hub, Okta, and Cloudflare to normalize streaming events into Open Cybersecurity Schema Framework standards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Used daily by millions of educators and learners in over 65 languages and embedded as the default virtual classroom in Moodle Cloud, Canvas, Sakai, D2L, Jenzabar, and Schoology — together comprising more than 75% of the worldwide learning management system market — BigBlueButton has been the leading open-source web conferencing platform for education since its creation at Carleton University in 2007. The platform delivers WebRTC-based real-time audio, video, and screen sharing with a tldraw v2-powered multi-user whiteboard featuring infinite canvas support, allowing multiple participants to annotate slides and draw simultaneously. Breakout rooms support up to eight concurrent groups with collaborative whiteboards enabled by default, and polling with customizable response types lets instructors assess understanding in real time. The built-in Learning Analytics Dashboard answers three questions at a glance: who is attending, who is participating, and who is learning based on poll responses, providing actionable engagement metrics without requiring webcam surveillance. Session recording captures audio, video, slides, chat, and whiteboard annotations for asynchronous playback on any device. The plugin architecture introduced in version 3.0 enables custom extensions, while IMS LTI 1.0 compliance allows integration with Blackboard, Desire2Learn, Pearson Learning Studio, and any conformant platform without custom code. The REST API enables programmatic session management, user authentication, and recording access for custom frontends like the included Greenlight application. Version 4.0 introduces LiveKit-based media and a redesigned interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LGPL-3.0 licensed.

Most web links eventually break - the sobering statistic Shiori, a bookmark manager with archiving by default, is built on. Its answer is archiving by default - where possible, every bookmark you save gets a clean, readable offline copy parsed from the page, ads and navigation stripped, so the article survives even after the original URL dies. Conceived as a simple Pocket clone and written in Go, the entire server is a single binary using roughly 25-30 MB of RAM with SQLite out of the box (Postgres and MySQL supported) - genuinely the lightest archiving bookmark manager you can run. Saving is one click through the Firefox and Chrome extensions, and finding things again is where Shiori quietly outperforms its size: full-text search covers the archived page content, not just titles and tags, so you can find that article by a phrase you remember from paragraph six. Reader mode presents the cleaned text; archive mode shows the preserved page. It's dual-interface by design - a pretty web UI (installable as a PWA on mobile) and a complete CLI for terminal devotees - plus a REST API for scripting. Pocket imports work natively, and Netscape HTML handles browser imports and exports. Multi-user support included. MIT-licensed.

Google Workspace and Microsoft 365, replaced by a platform you actually control: Nextcloud is the self-hosted digital workspace. Files is the core: file storage and sync across desktop, mobile, and web clients, with sharing, versioning, and collaboration built in. Around it, Talk provides private text chat, audio/video conferencing with screen sharing, SIP integration, and persistent voice rooms; Groupware bundles calendar, contacts, and mail with delegation support; and Office offers two collaborative suites - the Collabora-based option with deep ODF support, and Euro-Office, whose local-processing architecture delivers strong Microsoft Office compatibility and fast browser rendering with reduced server load. The Nextcloud Assistant threads AI through the platform via a context-aware sidebar, Whiteboard covers visual collaboration, Flow handles automation, and an app ecosystem of hundreds of extensions adds everything from Kanban boards to end-to-end encryption. Hub 26 brings a lighter UI with a unified app switcher and Nextcloud Governance for organizations under strict regulatory requirements. This is the flagship of data sovereignty: your files, chats, calendars, and documents live on your server, under your jurisdiction, with GDPR compliance by architecture rather than by contract.

Every Redis client you already use connects to Kvrocks without a single code change, but instead of holding your entire dataset in RAM, data lives on SSD through RocksDB, turning terabytes of memory cost into pennies of disk. An Apache Software Foundation top-level project, Kvrocks supports strings, hashes, lists, sets, sorted sets, streams, bitmaps, JSON documents, TimeSeries data points, Bloom filters, Cuckoo filters, and HyperLogLog structures, all persisted to disk with in-memory caching for hot data access. Asynchronous replication using binlog similar to MySQL provides data durability across replicas, while Redis Sentinel integration enables automatic failover when master or replica nodes fail. The proxyless centralized cluster architecture distributes data across shards while remaining fully compatible with standard Redis cluster SDKs and clients. Token-based namespaces provide multi-tenant isolation with authentication per namespace, going beyond Redis SELECT's numbered database model. RocksDB's LSM-tree storage engine provides efficient compression through configurable compaction strategies, reducing disk footprint dramatically while maintaining sub-millisecond reads for cached keys. Migration tooling includes RedisShake for Redis-to-Kvrocks live migration and kvrocks2redis for reverse migration, enabling gradual adoption without service interruption. The kvrocks_exporter exposes Prometheus-compatible metrics for monitoring, and OpenTelemetry integration provides distributed tracing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

EveryOS gives the Linux server you already own a desktop it never had: open a browser and your machine greets you with windows you can move, snap, and stack, a dock, virtual desktops, widgets, and a launcher, all remembering exactly how you left them. Your files live in a private home with the usual folders, previews, a text editor, and a trash you can restore from, and plugging in a USB disk makes it appear on the desktop ready to mount. An app store installs self-hosted applications from catalogs and follows each deployment, later offering updates that keep your settings, rollbacks when one goes wrong, and backups of app data. The same workspace watches the machine itself: CPU, memory, disk, and network at a glance, systemd services and logs, available package updates, and a Docker view for containers and Compose projects. A real terminal opens in the browser under your own Linux account, Home Assistant arrives as a panel and desktop widgets with its tokens kept on the server, and an AI assistants app can find or install a local model server such as Ollama and chat with it privately. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Deploy autonomous conversational AI agents and coordinate complex multi-agent workflows through EDDI, an open-source orchestration middleware that turns declarative configuration files into secure, production-grade enterprise assistants. Engineering teams connect AI models from twelve different commercial and local providers, using bilateral Model Context Protocol tools to let external desktop clients and coding assistants interact directly with running conversational services. Autonomous agents collaborate through structured group interaction patterns including round table discussions, peer reviews, Delphi consensus rounds, and devil's advocate debates to refine generated solutions before delivery. Declarative workflow extensions automate external REST API calls with dynamic request templating, extracting structured properties into persistent conversation memory and chaining multi-step service interactions without custom script glue. Built-in secret vaults safely manage sensitive API credentials, while the centralized web dashboard provides live conversation inspection, token quota enforcement, and comprehensive audit logging for regulatory compliance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Follow every sale from first inquiry to final payment inside one self-hosted CRM. Cordys CRM splits the lead-to-cash cycle into connected modules: leads with custom forms and one-click conversion, customers with contact records and shared follow-up among team members, and opportunities that advance through configurable stages from needs confirmation to won or lost. Quotations and contracts come next, with contracts carrying payment plans, payment records, business titles, and invoice records so every collection stays traceable. Orders link to contracts and move through a customizable status flow covering shipment requests, partial and full shipment, inspection, and completion. Approval workflows route requests to reviewers and keep an approval history, and real-time notifications reach users while they work. Administrators draw the organization chart, assign role-based permissions, configure modules and form fields without code, and review system logs. An MCP server secured with per-user API keys lets MaxKB agents search records, create leads, customers, opportunities, and contacts, log follow-ups, and update accounts, while an Agents module embeds those assistants in the CRM and CRM Skills connect OpenClaw and WorkBuddy to the sales process. Sales data can feed DataEase dashboards, WeCom, DingTalk, and Lark integrations link departments and messages to the office platforms teams already use, and the interface ships in English and Chinese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed with FIT2CLOUD branding terms.

EmDash rebuilds the WordPress publishing experience as an open-source CMS, with drafts, revisions, scheduled posts, a media library, menus, widgets, and plugins that run in sandboxes and can only do what they declare. Writers get a rich-text editor with featured images, slugs, bylines, categories, and tags, plus signed preview links for unpublished work and a calendar of everything published or scheduled. Site builders define their own content types in a visual schema builder, choosing required and searchable fields, URL patterns, comments, SEO metadata, and edit locking so two people never overwrite each other. Uploads are drag and drop, with folders and filename search in the media library. Menus, sidebar widgets, reusable sections, and redirects with a 404 log shape the public site. Access is passkey-first, with OAuth and magic-link fallbacks, four roles from Contributor to Administrator, comment moderation, and personal API tokens. Coming from WordPress? Point the importer at a migration key, a site URL, or an exported XML file and it carries over posts, pages, media, and taxonomies. Plugins add hooks, settings, admin pages, dashboard widgets, custom blocks, and API routes after declaring capabilities such as content:read or email:send, while a built-in MCP server and CLI let AI assistants manage content directly. Blog, marketing, and portfolio templates give new sites a head start. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Gmail, Outlook, and every IMAP mailbox you own share one inbox, one search box, and one calendar in plMail, a mail client you host yourself. Accounts sit side by side with sending aliases, and new mail arrives on its own through IMAP IDLE, Gmail and Outlook push, and browser notifications. Credentials are encrypted before storage. Search understands from:, subject:, label:, has:, and before:, completes as you type, and highlights matched words. Filters are nested any, all, or none trees, and each shows how many real messages match before you save it. Drag several conversations at once onto folders, labels, or inbox tabs; a label adds itself without removing the mail from your inbox. A calendar sits beside the mail, with two-way sync for Google, Microsoft, and CalDAV. Move events on the week grid, answer invitations in place, and send share and booking links. An optional language model, pointed at your own Ollama server or any OpenAI-compatible endpoint, searches by meaning, drafts replies, summarizes threads, and sorts mail into tabs once you switch it on. Attach files from and save them to Drive, OneDrive, Dropbox, Nextcloud, Immich, and Paperless-ngx. Sign in through Authentik, Keycloak, or any OpenID Connect provider, and pick from 41 themes. Android and iOS apps connect to your own server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

VitoDeploy replaces a pile of SSH sessions and shell scripts with one browser tab for provisioning servers and deploying websites, on a control panel you host yourself. Spin up a server on AWS, Akamai (Linode), DigitalOcean, Vultr, Hetzner, or Proxmox in a few clicks. Attach any Ubuntu machine you already own as a custom server. Add sites built with PHP, Laravel, or WordPress, or run Node.js and Bun apps behind a reverse proxy. Pull code from GitHub, GitLab, Gitea, or Bitbucket. Set environment variables and HTTP basic authentication. Issue Let's Encrypt, wildcard, or custom SSL certificates. Create MySQL, MariaDB, or PostgreSQL databases, manage their users, and send backups to Amazon S3, Wasabi, FTP, SFTP, Dropbox, or local disk. Manage firewall rules, cron jobs, Supervisor workers, Redis, and multiple PHP versions from the same screens. Watch CPU, memory, and disk use for each server, then open a live SSH shell without leaving the page. Agencies split clients into projects, invite teammates as Admins or Users, and send alerts to Slack, Discord, Telegram, or email. Workflows automate deployments, backups, and maintenance. Plugins, DNS record management, export and import of your setup, and a REST API round out the toolkit. The panel itself needs only 1 GB of RAM and 1 CPU core, then manages your other machines over SSH. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

webtrees turns a GEDCOM family file into a private, collaborative genealogy website where relatives anywhere browse ancestors, add photos and sources, and edit together under privacy rules the owner controls. Import a file and each person gets a page of facts, events, and citations, with tabs for families, sources, places, media, and albums and a navigator that jumps to parents, spouses, children, and siblings. Pedigree, fan, hourglass, compact, descendant, interactive, lifespan, relationship, and timeline charts show the same people from different angles, and a pedigree map plots ancestors' birthplaces on OpenStreetMap. Lists sort and filter individuals, families, sources, notes, repositories, and media, with branches that group people by surname. A calendar surfaces births, deaths, marriages, and anniversaries for any day, month, or year, in Gregorian, Julian, Jewish, Hijri, or Jalali dates. Printable PDF reports cover Ahnentafel, family group, descendancy, birth, death, and cemetery records, and search offers general, advanced, and search-and-replace modes for authorized users. Privacy rules apply per site, tree, user, record, and fact, so only authorized users see living people and sensitive details. Editors propose changes, moderators approve them, one site hosts several trees, and the interface comes in more than 60 languages. GEDCOM export lets every tree move to desktop genealogy programs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Your house already has lights, locks, sensors, thermostats, and speakers from many brands, and Home Assistant gives them one local control room with no vendor cloud in the loop. To close the shutters when the outdoor temperature holds above 25 °C, or to be alerted when the garage door is left open, build the routine in the visual editor: When, And if, Then do. Scenes, scripts, and blueprints package it for reuse, and run traces show what it did. More than 1,500 integrations cover Zigbee, Z-Wave, Matter, Thread, MQTT, ESPHome, Bluetooth, Hue, and Sonos, and network discovery offers known devices for one-step setup. To see the house at a glance, drag tile, thermostat, gauge, graph, and map cards into a dashboard, then put it on a TV with Home Assistant Cast. The Energy dashboard answers where the power goes, drawing solar, grid, battery, gas, and water as one distribution diagram with cost totals and per-appliance tracking. To talk to the house, use Assist: natural-language commands, wake words, and custom sentences run locally or through Home Assistant Cloud. The map panel shows who is home, plotting people against zones such as Home, Work, and School from the iOS and Android companion apps. Areas and labels keep large setups tidy, and multi-factor authentication guards each account. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Named from the German "Ich schrei sonst" - roughly "or I'll scream" - Isso is a lightweight Python/JavaScript commenting server, a drop-in Disqus replacement for people who noticed what Disqus does to reader privacy and page load times. The design premise is printed right in the docs: comments are not Big Data. So the backend is a single SQLite file rather than a database cluster, and the entire client is one embeddable JavaScript file - 65 kB, 20 kB gzipped - that you drop into any static site, blog, or CMS. Commenters write in Markdown, need no account, and can edit or delete their own comments within a configurable window (15 minutes by default). Spam control comes from an optional moderation queue: held comments stay invisible until you activate them via an admin interface or email notification links. Migration is a first-class feature, with importers for Disqus and WordPress exports, so years of existing threads move over intact. Because everything is server-rendered from your own instance, no third party tracks your readers, and real-world switchers report smaller pages and faster loads than the Disqus embed. MIT-licensed, running since 2012.

OpenCode Manager is a mobile-first command center for AI coding agents. Install the PWA on your phone or tablet and you get real-time streaming chat, multi-repository Git operations, and scheduled automation right in your pocket. Git integration handles SSH-authenticated repo cloning, worktree management, unified diffs, and branch operations across all your projects in one dashboard. Chat with coding agents through Server-Sent Events streaming that supports slash commands, @-mentions for files, Plan and Build modes, and Mermaid diagram rendering for architecture discussions. Schedule reusable prompts to run against any repository on intervals or cron expressions, with each run tracking history and linking to sessions so you can pick up exactly where automation left off. MCP server configuration adds local and remote HTTP servers with OAuth support, plugging into the broader Model Context Protocol ecosystem. A dedicated assistant workspace provides an isolated AI environment with auto-provisioned skills for managing schedules, notifications, and settings. Multiple AI providers are supported including Anthropic, GitHub Copilot, and OpenAI-compatible services, each configurable with custom system prompts and granular tool permissions. Push notifications alert you to session events, agent questions, errors, and task completions across all managed repositories.

Backed by nearly 20,000 GitHub stars and ranked number one in G2's Enterprise User Satisfaction for eleven consecutive quarters, Bitwarden is the open-source password manager trusted by millions worldwide. The zero-knowledge encryption architecture ensures all vault data — passwords, passkeys, credit cards, identities, secure notes, and file attachments — is encrypted exclusively on client devices using AES-256 with PBKDF2-SHA256 or Argon2id key derivation and RSA-2048 for organization key exchange. Cross-platform clients span a web vault, browser extensions for Chrome, Firefox, Safari, Edge, Opera, Vivaldi, and Brave, native desktop apps for Windows, macOS, and Linux, mobile apps for iOS and Android, and a CLI for scripting. Bitwarden Send enables time-limited, password-protected sharing of text and files, while the built-in TOTP authenticator generates two-factor codes alongside stored credentials. Enterprise deployments integrate with identity providers through SAML 2.0 and OpenID Connect SSO, automate provisioning via SCIM or Directory Connector supporting LDAP, Active Directory, Azure AD, Okta, and OneLogin, and enforce security policies with custom roles and granular permissions. Emergency access allows designated contacts to request vault view or takeover through configurable waiting periods with cryptographic key exchange. The Secrets Manager stores API keys, tokens, and infrastructure credentials with native GitHub Actions, GitLab CI/CD, Ansible, and Terraform integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 82,000 GitHub stars and 700,000+ downloads, LobeHub has evolved from its origins as LobeChat into a comprehensive multi-agent AI collaboration platform where humans and autonomous agent teams co-evolve. The platform's Agent Harness architecture functions as an operating system between AI models and applications, handling prompt presets, tool orchestration, lifecycle hooks, planning, filesystem access, and sub-agent management across 25+ model providers including OpenAI, Anthropic Claude, Google Gemini, DeepSeek, Mistral, Groq, AWS Bedrock, Azure OpenAI, and local models through Ollama. Agent Groups enable sophisticated collaboration with sequential, parallel, iterative, and debate orchestration modes, allowing multiple specialized agents to tackle complex workflows simultaneously. The Agent Builder creates production-ready agents from natural language descriptions with auto-configuration, drawing from a marketplace of 505+ pre-built agents and 10,000+ MCP-compatible skills and plugins. Pages provide collaborative document editing with multi-agent co-authoring, while Schedules automate agent runs around the clock without human supervision. The knowledge base leverages PostgreSQL with pgvector for RAG-powered retrieval, and Personal Memory gives agents transparent, editable context that evolves through continual learning. The full self-hosted stack deploys via Docker Compose with PostgreSQL, Redis, RustFS for S3-compatible storage, and SearXNG for private web search, all configurable through environment variables. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LobeHub Community licensed.

Polaris puts app deploys, file storage, team chat, tasks, and a password vault behind one login on a server you control. Deploy from a Git repository or an image with databases, volumes, environment variables, logs, a terminal, and a domain, published through your own domain, a Cloudflare tunnel, or DuckDNS. Enroll more machines over SSH with one generated command, then watch their containers and metrics and schedule backups with restore. Drive spans local disks, SFTP, S3-compatible storage, SMB, NFS, Google Drive, OneDrive, and Dropbox, with password-protected public links, expiry, and drop points for people without an account. Vault works with the Bitwarden apps and extensions and encrypts in the browser, so the server never sees your master password. Chat brings channels, threads, direct messages, voice and video calls, screen sharing, and a soundboard, while Tasks adds lists, boards, sprints, goals, and time tracking, and can hand work to coding agents over MCP. Calendar syncs both ways with Google, Microsoft 365, and CalDAV and offers booking pages. Game servers run Minecraft, ARK, and FiveM, a firewall blocks countries, networks, and bots, and one-click Marketplace installs add more apps. The interface comes in English and Spanish. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.