Open Source Alternatives: The Sovereign Stack

A curated database of vetted open source alternatives to proprietary SaaS. Find tools that are safe, compliant, and ready for business.

Showing of 183 solutions

openDesk

openDesk

Germany's government-built alternative to Microsoft 365. A Kubernetes-based suite integrating Nextcloud, Element, OpenProject and Collabora, stewarded by a state-owned company for the public sector.

OpenTalk

OpenTalk

German-built, EUPL-licensed video conferencing for the European public sector. Self-hosted, GDPR-aligned, and the first VC service to earn Germany's BSI IT security label.

Gitea

Gitea

MIT-licensed Git forge self-hosted on one Go binary: issues, CI/CD actions and a package registry. Now steered by a US for-profit; SAML, audit logs and IP allowlisting sit behind a paid Enterprise tier.

GitLab

GitLab

Open-core DevSecOps platform: Git hosting, CI/CD and project management in one self-hostable app. The core is genuinely MIT, but SSO, merge approvals and compliance tooling are gated to paid tiers.

Forgejo

Forgejo

A self-hosted Git forge that replaces GitHub and GitLab, with issues, pull requests and CI/CD built in. Every feature is free software, with no paid tier and no managed option.

Horilla

Horilla

A self-hosted Django HRMS covering recruitment, payroll, attendance and performance, all free under LGPL-2.1. No module is paywalled; only SSO and managed hosting sit behind a paid tier.

Proxmox VE

Proxmox VE

An AGPLv3 bare-metal platform for virtual machines and containers, built to replace VMware vSphere. Clustering, HA and live migration are free; only the tested enterprise update track needs a subscription.

OrangeHRM

OrangeHRM

GPL-3.0 self-hosted HR management system for employee records, leave and time tracking. The free Starter edition covers core HR, but external API access, payroll connectors and advanced recruitment are gated to a paid tier.

LibreOffice

LibreOffice

Mature open-source desktop office suite for documents, spreadsheets and presentations. Fully offline, no per-seat licence, native OpenDocument format, the standard exit route from Microsoft format lock-in.

OPNsense

OPNsense

A FreeBSD-based firewall and router that replaces Fortinet and Cisco appliances, with IDS/IPS, VPN and traffic shaping built in. The paid edition only gates a hardened, slower release track, not features.

Nextcloud

Nextcloud

A self-hosted alternative to Microsoft 365: files, calendars, mail, chat and office in one suite, with every byte on infrastructure you control. Enterprise hardening and support are a paid subscription.

Beekeeper Studio

Beekeeper Studio

GPLv3 modern SQL editor with a polished, friendly UI: the free Community Edition covers the common relational databases. Enterprise and NoSQL drivers, SSO, team cloud workspaces, and AI sit behind the paid Ultimate edition.

DBeaver

DBeaver

Apache-licensed universal database client connecting to 80+ relational engines, a genuinely free, no-lock-in Community Edition. NoSQL and cloud drivers, SSO, and Vault integration are gated behind the paid PRO editions.

data-peek

data-peek

Fast, minimalist desktop SQL client with MIT source code: free for solo and personal use, but for-profit teams of two or more need a paid licence (or build the binary from source). Single-maintainer project.

ShareX

ShareX

Screen-capture power tool for Windows: screenshots, screen recording, and scriptable capture-to-link workflows across 80+ upload destinations. No cloud, no account, no telemetry. Windows-only; GPL-3.0.

LocalSend

LocalSend

Moves files directly between devices on your local network. No cloud, no account, no internet hop. A cross-platform, offline alternative to AirDrop and WeTransfer (Windows, macOS, Linux, iOS, Android). Apache-2.0; single-maintainer project.

Varlock

Varlock

Schema-driven .env management adding type-safety, validation, and AI-safe secret redaction over plain .env files: keeps credentials out of AI prompts, logs, and client bundles.

OpenHands

OpenHands

MIT-core autonomous AI software engineer that resolves whole coding tasks in a sandboxed runtime you host yourself, though SSO, RBAC, and audit logs sit behind a commercial enterprise tier.

Coder

Coder

AGPL-licensed platform for self-hosted cloud development environments: provision Terraform-defined workspaces and govern AI coding agents on infrastructure you control, with no per-seat SaaS fees.

CryptPad

CryptPad

Zero-knowledge encrypted office suite (docs, sheets, slides, forms): the server stores only ciphertext, so even the admin can't read your files. AGPL, EU-based; the full suite is free, only managed hosting is paid.

herdr

herdr

AGPL terminal multiplexer for running AI coding agents in parallel panes, tracking which is working, waiting, or done. A single local Rust binary, no cloud; a one-maintainer project with a commercial-license waiver.

Mem0

Mem0

A memory layer for AI agents: extracts and recalls facts across sessions so the LLM stops re-sending full history. Apache-2.0, self-hostable on Postgres and Qdrant; SSO and audit logs are Enterprise-gated.

Chroma

Chroma

AI-native embedding database for RAG: runs embedded via pip or as a Docker server, with portable SQLite/Parquet storage for clean data exit. Apache-2.0, but the OSS core ships without built-in authentication.