Network Security (VPN, Firewall, WAF)
20 self-hosted open source alternatives in this category
20 self-hosted open source alternatives in this category
20 services found

Network-wide ad blocking via DNS sinkhole
DNS sinkhole that blocks ads, trackers, and malicious domains network-wide with a web dashboard, per-client controls, and optional DHCP/DNS features.

The Cyber Swiss Army Knife for data analysis and decoding
Browser-based tool for decoding, encoding, encryption, and data analysis using a drag-and-drop “recipe” workflow for security, DFIR, and engineering tasks.

Network-wide ads and tracker blocking via DNS
Self-hosted DNS server with ad/tracker blocking, custom filtering, parental controls, encrypted DNS, and per-client statistics for home networks.

Web UI for Nginx reverse proxy with Let's Encrypt SSL
Web-based reverse proxy manager for Nginx with hosts, streams, access lists, and automatic Let's Encrypt certificates via an easy admin UI.

Self-hosted WAF for protecting web apps and APIs
SafeLine is an open-source web application firewall (WAF) that protects web apps and APIs from common attacks using HTTP traffic inspection, rules, and management UI.


Identity-native infrastructure access for SSH, Kubernetes, RDP and DBs
Open-source platform that provides unified, audited, identity-based access to servers, Kubernetes clusters, databases, and desktops without static credentials.

Self-hosted secure tunneling and access gateway
Pangolin provides a self-hosted access gateway for securely exposing internal apps via tunnels, with identity-aware access controls and a web UI.


All-in-one secure mail server with modern spam filtering
Stalwart is an all-in-one mail server (SMTP/IMAP/JMAP) with built-in anti-spam/DMARC, web admin UI, and flexible routing for running your own email infrastructure.

Private messaging without user IDs or phone numbers
Privacy-first messenger using SimpleX relays and end-to-end encryption, designed to avoid user identifiers, phone numbers, and centralized identity.


Web application firewall and security reverse proxy
Self-hosted WAF and reverse proxy built on NGINX, with a web UI, ModSecurity/OWASP rules, automatic HTTPS, and hardened defaults for securing web apps.


Web-based SSH terminal and host management workspace
Self-hosted web app for managing SSH connections, organizing hosts, and accessing terminals from a browser with a focus on team-friendly workflows.

Authoritative, recursive DNS with web UI and ad blocking
Self-hosted DNS server with recursive resolver, authoritative zones, DoH/DoT, ad-blocking, DHCP, and a web UI with optional app-based extensibility.

Smart SSH bastion with web UI, RBAC, and audit logs
Self-hosted SSH bastion and access gateway with web UI, RBAC, just-in-time access, session recording, and audit logging for servers and infrastructure.

High-performance TCP/HTTP load balancer and reverse proxy
HAProxy is a fast, reliable load balancer and reverse proxy for TCP/HTTP(S), with TLS termination, health checks, advanced routing, and built-in observability features.

Fast DNS proxy with ad-blocking and safe browsing
Lightweight DNS proxy and local DNS server with blocklists, allowlists, custom DNS rules, caching, and optional DoH/DoT upstream for network-wide ad and tracker blocking.

Lightweight reverse proxy with a web UI and built-in tools
Self-hosted reverse proxy and HTTP(S) gateway with a web UI, TLS support, routing rules, and traffic/security utilities for homelabs and small servers.


Clientless remote desktop gateway for RDP, VNC, and SSH
Web-based remote access gateway that provides clientless RDP, VNC, and SSH sessions via a browser, with centralized authentication and connection management.

Nginx reverse proxy with automated SSL certificates
Dockerized Nginx reverse proxy with automatic Let’s Encrypt SSL, security hardening, and a large set of ready-to-use proxy configurations.

Web-based SSH and Telnet client for your browser
A lightweight web SSH/Telnet client with a terminal UI, bookmarks, and optional authentication for securely accessing remote hosts from a browser.


Centralized SSH access gateway for fleets of devices
ShellHub is a self-hosted SSH access gateway for managing and auditing remote access to servers and IoT devices with RBAC, device inventory, and session visibility.