A Luxembourg-based, OpenPGP password manager for teams sharing credentials. EU jurisdiction keeps it clear of the US CLOUD Act. SSO, directory sync and audit logs are paywalled.
Open Source Alternatives: The Sovereign Stack
A curated database of vetted open source alternatives to proprietary SaaS. Find tools that are safe, compliant, and ready for business.
Showing of 196 solutions
An offline password vault with no server and no vendor cloud. Credentials live in a local encrypted file you control. No central administration, so offboarding and backups are yours.
Apache-2.0 zero-trust overlay you embed into the app itself. The whole stack, controller included, is self-hostable with no capability paywall. NetFoundry sells only managed hosting and support.
BSD-licensed control server that runs official Tailscale clients on coordination infrastructure you host, no proprietary cloud. Volunteer-maintained; no GUI, RBAC, or commercial support.
WireGuard mesh VPN with a control plane you self-host, the EU-sovereign answer to Tailscale. OIDC SSO included; active-active HA, SCIM, and SIEM streaming are commercial.
MIT-licensed collaborative intrusion prevention that blocks malicious IPs from your logs and shares the signals network-wide, so every user gains herd immunity. Premium blocklists are paid.
Source-available (ELv2) network security monitoring on Suricata, Zeek, and the Elastic Stack. Self-hostable and airgappable; SSO and disk encryption require the paid Pro tier.
Open-core, dbt-native BI that turns metrics and dashboards into version-controlled code. The MIT core is self-hostable; SSO and fine-grained RBAC sit behind the paid tier.
A SQL-first query, dashboard, and alerting tool with 50+ data connectors and no paid tier. Databricks abandoned the hosted service in 2021; the community rebuilt it.
French, EU-sovereign backup on the open ISC-licensed Kloset format: immutable, deduplicated, encrypted snapshots. Centralized fleet management and KMS are a paid Enterprise tier. A young project.
Encrypted, deduplicated backups to storage you own, with a built-in GUI and a multi-client server mode. You hold the keys, back up to S3, B2, Azure or local disk, every feature free.
Encrypted, deduplicated backups to storage you own, from one static binary. You hold the keys (zero-knowledge), back up to S3, B2, SFTP or local disk, and every feature is free.
AGPL-licensed file sync and share, a fast self-hosted Dropbox alternative for large file libraries. The vendor is China-based, and SSO, audit logs and search sit behind a paid tier.
Germany's government-built alternative to Microsoft 365. A Kubernetes-based suite integrating Nextcloud, Element, OpenProject and Collabora, stewarded by a state-owned company for the public sector.
German-built, EUPL-licensed video conferencing for the European public sector. Self-hosted, GDPR-aligned, and the first VC service to earn Germany's BSI IT security label.
MIT-licensed Git forge self-hosted on one Go binary: issues, CI/CD and a package registry. Now steered by a US for-profit; SAML, audit logs and IP allowlisting sit behind a paid Enterprise tier.
Open-core DevSecOps platform: Git hosting, CI/CD and project management in one self-hostable app. The core is genuinely MIT, but SSO, merge approvals and compliance tooling are gated to paid tiers.
A self-hosted Git forge that replaces GitHub and GitLab, with issues, pull requests and CI/CD built in. Every feature is free software, with no paid tier and no managed option.
A self-hosted Django HRMS covering recruitment, payroll, attendance and performance, all free under LGPL-2.1. No module is paywalled; only SSO and managed hosting sit behind a paid tier.
An AGPLv3 bare-metal platform for VMs and containers, built to replace VMware vSphere. Clustering, HA and live migration are free; only the tested enterprise update track needs a subscription.
GPL-3.0 self-hosted HRMS for employee records, leave and time tracking. The free Starter edition covers core HR, but external API access, payroll connectors and advanced recruitment are paid-tier.
Mature open-source desktop office suite for documents, spreadsheets and presentations. Fully offline, no per-seat licence, native OpenDocument format, the exit route from Microsoft format lock-in.
A FreeBSD-based firewall and router that replaces Fortinet and Cisco, with IDS/IPS, VPN and traffic shaping built in. The paid edition only gates a hardened, slower release track, not features.
A self-hosted alternative to Microsoft 365: files, calendars, mail, chat and office, with every byte on infrastructure you control. Enterprise hardening and support are a paid subscription.