KeePassXC
An offline password vault with no server and no vendor cloud. Credentials live in a local encrypted file you control. No central administration, so offboarding and backups are yours.
OpenTechHub
The intelligence portal for the sovereign business. Discover vetted open source alternatives, strategic reviews, and playbooks to escape vendor lock-in and build a technology stack you truly own.
Latest Solutions
Browse Directory
OpenZiti
Apache-2.0 zero-trust overlay you embed into the application itself — the whole stack, controller included, is self-hostable with no capability paywall. NetFoundry sells only managed hosting and support.
Headscale
BSD-licensed control server that runs official Tailscale clients on coordination infrastructure you host — no proprietary cloud. Volunteer-maintained; no GUI, RBAC, or commercial support.
NetBird
WireGuard mesh VPN with a control plane you self-host — the EU-sovereign answer to Tailscale. OIDC SSO included; active-active HA, SCIM, and SIEM streaming are commercial.
CrowdSec
MIT-licensed collaborative intrusion prevention that blocks malicious IPs from your logs and shares the signals network-wide, so every user gains herd immunity. Premium blocklists are paid.
Security Onion
Source-available (ELv2) network security monitoring on Suricata, Zeek, and the Elastic Stack. Self-hostable and airgappable; SSO and disk encryption require the paid Pro tier.
Lightdash
Open-core, dbt-native BI that turns metrics and dashboards into version-controlled code. The MIT core is self-hostable; SSO and fine-grained RBAC sit behind the paid tier.
Redash
A SQL-first query, dashboard, and alerting tool with 50+ data connectors and no paid tier. Databricks abandoned the hosted service in 2021; the community rebuilt it.
Plakar
French, EU-sovereign backup on the open ISC-licensed Kloset format: immutable, deduplicated, encrypted snapshots. Centralized fleet management and KMS are a paid Enterprise tier. A young project.
Resources
Essential frameworks for the modern decision-maker. Deep dives on licensing, deployment standards, and security to secure your digital stack.
Latest Intelligence
View all posts
Digital Sovereignty isn't for Sale.
"Buy European" has become Europe's answer to digital dependence. But a European vendor is one acquisition away from being American, and hosting on home soil won't stop US law. Real sovereignty isn't where your software comes from. It's whether you can leave it.
Kai A. Hartung
·
2 min read
You do not need an Open Source Program Office.
Every digital sovereignty talk ends the same way: set up an OSPO, and the idea gets filed under someday. But the office is not the point. It is a container for the jobs your vendor used to do, priced into the license fee and now yours to own. Name who owns them and you are ahead of most.
Kai A. Hartung
·
2 min read
Google released a folder of text files.
Google published the Open Knowledge Format, an open, vendor-neutral way to hold the knowledge your AI reads: nothing but text files. Then it bundled its own tooling beside it, every piece pointing back to Google Cloud. The format is worth taking. The strings are worth cutting.
Kai A. Hartung
·
2 min read