brainstate

AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT

PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig

  1. mr-grj/ciphermoth

    A self-hosted password manager that speaks to nobody. One master password, no accounts, no cloud, no telemetry & your vault lives on your hardware.

    Python★ 26MITGitHub ↗

  2. chartingshow/crypto-firewall

    🎁 Securing your crypto journey, one block at a time.

    JavaScript★ 26GPL-3.0GitHub ↗

  3. SysAdminDoc/Openshop

    Private browser image editor with layers, PSD interchange, local export, and an installable offline shell. Open it online or keep one HTML file.

    HTML★ 26MITGitHub ↗

  4. wardnet/wardnet

    Wardnet is a self-hosted network privacy gateway that runs on linux (docker or bare metal). It sits alongside an existing home or small-office router, and acts as the warden of every device's connection to the internet

    Rust★ 26GPL-3.0GitHub ↗

  5. techjewel/mdread

    A quiet reading room for your markdown — local-first, privacy-first reader. Drop a file or folder, read, edit, download. No backend. Live: https://mdread.app

    JavaScript★ 26MITGitHub ↗

  6. PickGear/PalmNote

    PalmNote —— 本地优先(local-first)的生活记录应用:记账、物品管理、生活规划与离线密码本。数据全部保存在本机,无需注册、无需联网,支持中英文。

    Kotlin★ 26GPL-3.0GitHub ↗

  7. audion-lang/audion

    Hack music. General purpose language for interactive music, audiovisual art, performance and installation

    Rust★ 25GPL-3.0GitHub ↗

  8. dannysheehan/nft-blocklist

    Atomic nftables IP blocklist manager in Go — curated threat feeds, allowlist protection, shrink guard, systemd timers, fail2ban-friendly dynamic sets, pluggable notifications. Successor to the iptables/ipset blacklists script.

    Go★ 24MITGitHub ↗

  9. wwewtech/vpn_telegram_2026

    Рабочие VPN Telegram-боты для России: актуальный список 2026 (VLESS, WireGuard, Shadowsocks)

    JavaScript★ 24MITGitHub ↗

  10. Yacin1102/Knoten

    Connect everything with direct, encrypted WireGuard tunnels. Self-hostable, with no central traffic point.

    Go★ 24MITGitHub ↗

  11. jmrplens/cs-routeros-bouncer

    CrowdSec bouncer for MikroTik RouterOS: manages address lists and firewall rules via the RouterOS API

    Go★ 22MITGitHub ↗

  12. littlewolf9527/xdrop

    Distributed XDP/eBPF firewall with wire-speed packet filtering and a central management controller.

    Go★ 22MITGitHub ↗

  13. MultiX0/LocalDrive

    Open source, self-hosted Google Drive alternative. One Go binary runs the server, with Flutter apps for Android, iOS, Windows, macOS, Linux and the browser. Files, folders, versions, trash, link sharing and a photo gallery, on hardware you own. English and Arabic.

    Dart★ 22MITGitHub ↗

  14. neizsche/canihavesex.today

    Self-hosted, open-source period & fertility tracker. Private by design — no ads, no tracking.

    TypeScript★ 21AGPL-3.0GitHub ↗

  15. mattijsmoens/sovereign-shield

    Deterministic AI defense framework: immutable input filtering, n-model cryptographic hash consensus, and self-learning adaptive rules. Zero dependencies. Hardware-sealed.

    Python★ 21GitHub ↗

  16. AetherAI3/AntiFlock

    Self-hosted counter-surveillance for the networks you control: map device and network exposure, verify trusted routes, and hold sensitive actions when the trusted path drops — every decision signed into a local audit log. Go + React, Apache-2.0. Pre-alpha, simulation-first.

    Go★ 21Apache-2.0GitHub ↗

  17. CleanTalk/security-malware-firewall

    Security & Malware scan by CleanTalk

    PHP★ 20GitHub ↗

  18. hwdsl2/docker-headscale

    Docker image to run a Headscale server, a self-hosted, open-source Tailscale-compatible mesh VPN coordination server. Auto-generates config and pre-auth key on first start. MagicDNS support, helper script for user/node management. Multi-arch: amd64, arm64.

    Shell★ 20GitHub ↗

  19. MurylloEx/Mini-WAF

    An agnostic Minimalistic Web Application Firewall for your purposes in NodeJS servers.

    TypeScript★ 19MITGitHub ↗

  20. networking-incubator/coraza-kubernetes-operator

    Web Application Firewall (WAF) for Kubernetes Gateways

    Go★ 19Apache-2.0GitHub ↗

  21. 0xciph3r/ARFL

    Privacy-respecting bandwidth marketplace — A decentralised VPN protocol powered by Bitcoin.

    Go★ 19GitHub ↗

  22. HouderCODERS/Houder-VPN

    HouderVPN — Simple Windows VPN Client | Server Selection | One-Click Connection | Easy Setup

    ★ 19GitHub ↗

  23. jp1337/easywall

    Web interface for the nftables firewall on Linux, written in Go. The apply undoes itself after 120 seconds unless you confirm it — you cannot lock yourself out. Debian & Docker install.

    Go★ 18GPL-3.0GitHub ↗

  24. RockxyApp/Shieldxy

    Open-source, auditable application firewall and connection monitor for macOS.

    Swift★ 18AGPL-3.0GitHub ↗

  25. juergen2025sys/NETSHIELD

    Automated IPv4 threat intelligence: combined blacklist from 100+ feeds with confidence scoring. Updated every 3h.

    Python★ 17MITGitHub ↗

  26. ZerosAndOnesLLC/AiFw

    AiFw - AI-Powered Firewall for FreeBSD — No garbage collectors. Pure Rust, C, and C++ on pf. Open-source (MIT). Web UI, DHCP, DNS, NAT, VPN, geo-IP, ML threat detection.

    Rust★ 17MITGitHub ↗

  27. Sanexxxx777/server-hardening-playbook

    Practical Linux server hardening — every item is failure → fix → verify. SSH, firewall, service binding, secrets, DB auth, and more.

    Shell★ 17MITGitHub ↗

  28. mehdieidi/tunelo

    tunelo encrypts and tunnels UDP traffic (e.g. WireGuard) over a transport protocol like websocket or TCP. Helping to use VPNs in restricted areas.

    Go★ 16MITGitHub ↗

  29. MNSH-Nexo/NexoShield

    🛡️ Professional Server Hardening & Anti-DDoS Toolkit with optional SOCKS5 Proxy

    Shell★ 16MITGitHub ↗

  30. CleanTalk/php-usp

    UniForce - Universal Security plugin and Firewall for websites

    PHP★ 15GitHub ↗

more →