Almost four years after a free fix shipped, about one in eight Log4j downloads was still a vulnerable version. Now AI has bank regulators counting the days. Why private copies slow the fix down, what the banks' new alliance changes, and the question to ask your IT team.
Kai A. Hartung
The Dutch government has a Linux desktop on trial, no new money for its digital autonomy plans, and no total for what it pays Microsoft. Leaving shows up as line items someone must sign for. Staying hides in budgets nobody adds up.
Germany spent public millions on a "Sovereign Open Source" AI, then gated it and let a vendor sell it. Switzerland and the Netherlands show the difference: real openness is a mandate, not a label.
The year's most hyped AI model arrived with 40 million dollars and a wall of attention. Within days, open versions you can download and run yourself already existed. Here is what the celebration missed, and why it matters for digital sovereignty.
AGPL, self-hosted drop-in replacement for Microsoft Exchange: mail, calendar, and groupware with full Outlook and mobile compatibility, under EU jurisdiction. Free tier caps at 5 users.
Turns your coding agent into a design engine that outputs prototypes, slides, and UI as local files. Bring your own model, cloud or fully local via Ollama. Early-stage.
Browser-based video editor that runs on-device: no uploads, no watermark, no account. A local-first alternative to ByteDance's CapCut. Still early-stage.
An Apache-2.0 cloud platform (IaaS): build a multi-tenant private cloud on your own hardware, across KVM, VMware, and Proxmox hypervisors. The vendor-neutral answer to VMware Cloud Director.
An offline, open-source Markdown editor for researchers, with Zettelkasten note-linking and citation management. It stores everything as plain .md files, a GPL-licensed alternative to Obsidian.
An offline-first, open-source note app with end-to-end encryption and plain-Markdown storage. A self-hosted alternative to Evernote; sync to your own WebDAV or Nextcloud, with team features paywalled.
The vendor-neutral CNCF standard for traces, metrics, and logs. Instrument once and route your telemetry to any backend, ending the agent lock-in that makes Datadog and New Relic so sticky.
A distraction-free desktop Markdown editor with live preview that works directly on local .md files, with no account, telemetry, or cloud. A fully offline, MIT-licensed alternative to Typora.
MIT-core LLM observability for tracing, evals, and prompt management. A self-hosted alternative to LangSmith, with enterprise compliance controls gated behind a paid license key.
Self-hosted assembly and voting platform for parliaments, parties and associations: agendas, motions, elections and live secret ballots. SAML SSO and every feature ship under MIT, no paid tiers.
A BSL-licensed platform unifying transactional and marketing email in one Postgres deployment, with a visual builder and built-in analytics. SSO, RBAC and audit logs sit behind a paid key.
An open-core localization platform, Apache-2.0 at the core, built around in-context editing and a developer SDK. SSO, granular RBAC and use beyond 10 seats need a paid Enterprise licence.
An AGPL-3.0, self-hosted translation-management platform: API-first, with broad localization-format support. A lighter, project-based alternative to Git-centric localization tools.
An MIT-licensed, in-process analytical SQL database: the SQLite for analytics. Embedded and zero-dependency, it queries Parquet, CSV and JSON in place, with no server to run.
The community fork that revived Maybe Finance under AGPLv3 after the startup shut down. All-in-one personal finance: budgeting, accounts, net worth. Fully open and self-hosted, no paid tier.
GPL-3.0 continuous-localization platform that syncs translations with your Git repos. SSO and RBAC are in the open build, so there is no feature paywall. EU-based, self-hosted.
The Linux Foundation fork of Redis after its 2024 relicense: a BSD-licensed in-memory datastore for caching and real-time workloads. Fully open source, but no official managed cloud.
A new fee finally asks companies to pay for the open source they profit from, then hands them a legal way not to. Why it runs on goodwill, bills hardest the ones least able to dodge it, and what a working funding model still has to solve.
BSL 1.1 in-memory datastore: a multi-threaded, drop-in Redis and Memcached replacement for vertical scaling. Source-available, not open source; reselling it as a hosted service is barred.