MIT-licensed platform that builds, versions and hosts docs-as-code from Git, with pull-request previews and search. Self-hosting sidesteps the paid hosted tiers but runs a heavy multi-service stack.
Open Source Alternatives: The Sovereign Stack
A curated database of vetted open source alternatives to proprietary SaaS. Find tools that are safe, compliant, and ready for business.
Showing of 196 solutions
Real-time distributed OLAP datastore for user-facing analytics at high concurrency. Apache-governed. A heavy multi-node cluster; managed ops and anomaly detection are the commercial StarTree.
Real-time analytics database for sub-second queries on streaming and batch data, Apache-governed. A heavy distributed cluster to operate; managed ops and the Pivot BI console are the commercial Imply.
Real-time MPP OLAP database that queries open lakehouse tables directly. Apache-licensed, Linux Foundation-governed. A distributed cluster to run; masking and managed ops are the commercial cloud.
Real-time MPP data warehouse, MySQL-compatible and Apache-governed, built to leave cloud warehouses like Snowflake. A distributed cluster to run; SSO and managed ops sit with the commercial VeloDB.
OCI-native container registry in a single static binary with RBAC, scanning and replication built in, no external database. Apache-licensed, no paid tier. A younger CNCF Sandbox project than Harbor.
Red Hat's Apache-licensed container registry with integrated Clair scanning, geo-replication and RBAC in the free core. Multi-service stack; roadmap steered by Red Hat and tied to OpenShift.
Minimal Apache-licensed OCI registry, formerly Docker Registry: stores and serves container images with pluggable S3 or filesystem storage. No built-in auth, RBAC or UI; you wrap it or run Harbor.
CNCF-graduated registry that stores, scans and signs OCI images. RBAC, replication and audit logging in the free Apache core, no paid tier. A multi-service stack, so weigh the operational weight.
High-performance web server, reverse proxy and load balancer with a permissive BSD core, proven at internet scale. Active health checks, JWT auth and dynamic config sit behind the paid Plus tier.
Web server and reverse proxy in a single Go binary that issues and renews HTTPS certificates automatically. Apache-licensed with no paid tier: every feature ships in the open build.
Reverse proxy and Kubernetes ingress that self-configures from service discovery, so routes update without restarts. MIT core, single binary. Advanced auth, WAF and multi-cluster are paid tiers.
Self-hosted AGPL Rust server reimplementing the Bitwarden API, unlocking the org policies, event logs and SSO the official tiers gate. One container. Single-maintainer, weigh the bus-factor risk.
Documentation sites on Astro, with self-hosted full-text search built in rather than bolted on. Mix React, Vue, or Svelte components in one site. Still pre-1.0 after three years.
Vue and Vite powered documentation sites. Markdown in, static HTML out, with a build fast enough that large sites stay pleasant. The stable line has been quiet for about a year.
The documentation generator behind Python itself. One plain-text source builds a website, a PDF, and an API reference pulled from your code. reStructuredText is the learning tax.
Documentation as code. Your content stays as Markdown in your own Git repo and ships as static HTML you host anywhere. Search is the one piece you still solve yourself.
An authoritative-only DNS server from the Dutch non-profit NLnet Labs, run by DNS root servers and many TLDs. Minimal attack surface by design, BSD-3. It serves zones only, not recursion.
A validating recursive DNS resolver from the Dutch non-profit NLnet Labs. Resolve from the root servers yourself, so no public resolver sees your lookups. A focused resolver, not a full server.
The reference DNS implementation much of the internet runs on, governed by the non-profit ISC, not a company. Authoritative and recursive, MPL-2.0. Configuration is manual and zonefile-driven.
Carrier-grade open source DNS used by ISPs and telcos: authoritative server, recursor and load balancer in one GPLv2 codebase. EU-owned via Open-Xchange. The management UI and support are a paid tier.
A self-hosted DNS ad-blocker with encrypted DNS and DHCP built in, blocking ads across every device. Auditable GPL code that phones nothing home. A modern sinkhole, not a full authoritative server.
A network DNS sinkhole that blocks ads and trackers for every device, with no client software. Runs fully offline, so its US parent never sees a query. A focused ad-blocker, not a full DNS server.
A self-hosted DNS server, both a privacy resolver and a full authoritative server. Encrypted DNS, DNSSEC, clustering and SSO are all free, no paid tier. Development rests on one maintainer.