Open Source App Cloud Marketplace

AiSOC delivers an open-source AI Security Operations Center that unifies event ingestion, graph correlation, autonomous triage, and purple-team adversary emulation into a single self-hosted console. Security analysts triage alerts across an interactive Investigation Rail that visualizes six-event attack timelines, pivot-path entity graphs, and recommended containment steps. The underlying LangGraph agentic engine reasons over ingested telemetry, querying MITRE ATT&CK frameworks, CISA Known Exploited Vulnerabilities catalogs, and Shodan intelligence while recording every prompt, tool execution, and evidentiary citation in an immutable Investigation Ledger. Incident responders execute automated containment playbooks, including host network isolation, credential revocation in identity providers, and firewall blocklist updates with human-in-the-loop sign-offs. Threat hunters input plain-English hypotheses into the natural-language hunt workbench to generate and execute ES|QL, SPL, and KQL queries against historical telemetry stores. Platform operators connect over seventy vendor connectors spanning CrowdStrike, SentinelOne, Microsoft Defender, AWS Security Hub, Okta, and Cloudflare to normalize streaming events into Open Cybersecurity Schema Framework standards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Running a school means juggling lesson plans, timetables, attendance, behaviour notes, and grades all at once; Gibbon gives teachers, students, parents, and administrators one shared web system for that daily work. Teachers build lessons from reusable Smart Blocks, assemble them into units with learning outcomes, set and collect homework online, and grade the results in a colour-coded markbook that stays linked to every class. The timetabling engine builds schedules from reusable day structures, ties them to real calendar dates, handles exceptions, books rooms and facilities, and shows every student and teacher exactly where they should be. Attendance can be taken by form group, class, or individual student, with future absences recorded ahead of time and reports ready for emergencies or truancy follow-up. Behaviour records log the good alongside the bad using your school's own descriptors and severity levels, notify form tutors when something needs attention, and surface patterns across a student's history. Each student's profile pulls timetable, attendance, behaviour, library, and assessment information into one page, while activities sign-ups, a school-wide resource library, and departmental scope-and-sequence views keep the wider community connected. Because every module can be switched on or off per role and extended with community modules, the same platform fits a small primary school and a large secondary school in 26 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With over 24,000 GitHub stars and active development since 2014, Firefly III is the self-hosted personal finance manager that gives you complete control over your financial data without ever contacting external servers. The double-entry bookkeeping system tracks every transaction with source and destination accounts, ensuring accurate balance calculations and audit trails across checking, savings, credit card, cash, and asset accounts. Budget management sets monthly spending limits by category with visual progress tracking and rollover support for unused allocations. Rule-based transaction automation applies categorization, tags, and budget assignments automatically based on configurable conditions matching description, amount, source, and destination patterns. Recurring transactions schedule regular bills, subscriptions, and income entries with automatic creation on configured dates. Piggy banks divide savings accounts into virtual sub-accounts for goal tracking with target amounts and deadlines. Financial reports include income versus expense summaries, budget performance charts, category breakdowns, tag reports, and net worth tracking with weekly, monthly, and yearly time ranges. Multi-currency support handles any currency with configurable exchange rates for international finance tracking. The REST JSON API covers nearly every feature for integration with external tools, import utilities, and the companion Firefly III Data Importer for bank statement processing. Two-factor authentication provides account security. Self-hosting deploys via Docker containers or directly on PHP 8.5+ with MySQL or PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Put one governed doorway in front of every service you run: Apache ShenYu is an API gateway that proxies, secures, and manages traffic for HTTP, Dubbo, gRPC, WebSocket, and MQTT backends from a single entry point. Every request flows through an ordered, hot-pluggable plugin chain, so you compose exactly the behavior each route needs instead of accepting a fixed gateway feature set. Selectors give you coarse, service-level routing and rules refine it down to individual methods, matched against headers, paths, and parameters. Authentication and edge security come from JWT, OAuth 2.0, request-signing, and WAF plugins, while rate limiting, circuit breaking, and load balancing protect fragile upstreams from traffic spikes. You reshape calls in flight with request, response, and parameter mapping, and convert protocols so a gRPC or Dubbo service answers ordinary HTTP clients. Newer releases add AI gateway plugins that proxy LLM calls with prompt processing, token limits, and sensitive-word filtering, plus an MCP server plugin for exposing tools to AI agents. The ShenYu Admin console on its own port manages plugins, selectors, rules, users, and permissions, then pushes changes live to every gateway replica over WebSocket, ZooKeeper, Nacos, etcd, or HTTP long polling. Metrics, tracing, and logging plugins stream operational data to Kafka or Elasticsearch, and client SDKs for Java, Go, Python, and .NET let services register themselves automatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

In-app, website, link, and email surveys feed one open-source experience management platform: Formbricks. Its distinguishing strength is targeted in-app research: a JavaScript SDK triggers surveys on user events and attributes, with segmentation rules like "power users who have not seen a survey in 10 days," so questions reach the right cohort at the right moment instead of a mass email blast. The no-code editor offers 20+ question types including NPS, CSAT, CES, matrix, ranking, and file upload, with skip logic, conditional branching, best-practice templates, and full brand theming. Responses feed built-in analytics with summaries and CSV/JSON export, and integrations push data to Slack, Notion, Google Sheets, Airtable, Zapier, and n8n, with webhooks and an open API on every tier. Because self-hosted surveys load from your own domain rather than a blacklisted third-party script host, ad blockers do not suppress them - in-app surveys reach users that Hotjar-style tools silently miss, which measurably raises response rates. Self-hosting also removes the third-party sub-processor from your privacy policy entirely: survey responses often contain PII, and keeping them on your own server matters for GDPR-sensitive and regulated industries. The Community Edition has no response caps or tier-gated features, so core functionality and your data stay accessible regardless of any subscription. Next.js on PostgreSQL, AGPLv3.

Google Workspace and Microsoft 365, replaced by a platform you actually control: Nextcloud is the self-hosted digital workspace. Files is the core: file storage and sync across desktop, mobile, and web clients, with sharing, versioning, and collaboration built in. Around it, Talk provides private text chat, audio/video conferencing with screen sharing, SIP integration, and persistent voice rooms; Groupware bundles calendar, contacts, and mail with delegation support; and Office offers two collaborative suites - the Collabora-based option with deep ODF support, and Euro-Office, whose local-processing architecture delivers strong Microsoft Office compatibility and fast browser rendering with reduced server load. The Nextcloud Assistant threads AI through the platform via a context-aware sidebar, Whiteboard covers visual collaboration, Flow handles automation, and an app ecosystem of hundreds of extensions adds everything from Kanban boards to end-to-end encryption. Hub 26 brings a lighter UI with a unified app switcher and Nextcloud Governance for organizations under strict regulatory requirements. This is the flagship of data sovereignty: your files, chats, calendars, and documents live on your server, under your jurisdiction, with GDPR compliance by architecture rather than by contract.

Between your databases and everything that consumes data - BI tools, embedded analytics, AI agents - sits Cube (formerly Cube.js), an open-source semantic layer. Metrics, dimensions, joins, and access rules are defined once as code in YAML, JavaScript, or Python, forming a governed data model that every downstream consumer shares, so "revenue" means the same thing in every dashboard. Caching is two-level: an in-memory cache absorbs bursts of identical queries, and declared pre-aggregations - rollup tables built in the warehouse or in Cube Store, Cube's distributed columnar engine, and refreshed in the background - deliver sub-second latency while cutting warehouse compute costs. The query planner routes each request to cache, rollup, or source automatically. Consumers connect through a Postgres-compatible SQL API (any tool that speaks Postgres works), plus REST, GraphQL, and a Meta API for model introspection. Row-level security and multi-tenancy are enforced in the layer itself, upstream of every client. Sources include Snowflake, BigQuery, Databricks, Postgres, MySQL, Presto, and Athena. Headless by design - bring your own UI.

When checkout slows to a crawl somewhere across forty services, Pinpoint draws you the map of what is actually talking to what and where the time went. The ServerMap renders your whole topology live: services, databases, message queues, and external APIs as nodes whose edges carry transaction counts and error rates, so the unhealthy dependency announces itself visually. Click a node and the scatter chart plots every request against its response time; drag across the suspicious cluster and the CallStack opens those exact transactions at code level, method by method, SQL statement by SQL statement, until the bottleneck has nowhere to hide. The Inspector watches each application's CPU, memory, garbage collection, TPS, and JVM arguments, while realtime active-thread charts show stuck work as it happens. Agents attach to Java, PHP, and Python applications without changing a line of code, and applications already instrumented with OpenTelemetry send their traces straight in over OTLP. Group applications into services so each team sees its own Service Map, then arm alarm templates for slow counts, error rates, and thread saturation before users notice. Error Analysis gathers exceptions and error logs grouped by route, and URI metrics rank your hottest endpoints by cost. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Your net worth is scattered across banks, brokers, a pension, and a mortgage, and no single screen shows all of it at once. Aurelio Finance gathers those pieces on your own server: record each institution's cash and holdings as dated situations, then let later transactions roll them forward so today's balance always traces back to a photograph of what you held and the events after it. Every position is priced from the market with its cost basis, gain, and dividends, while the look through view opens your ETFs and funds to show real exposure by country, sector, company, and currency, so overlapping funds stop hiding concentration. Recurring investment plans, homes and other real assets, and the loans against them sit beside income, expenses, and your savings rate, and each financial goal shows the return it needs to be reached. When you want a second opinion, Ask Aurelio reads your own records, can search the web, and proposes changes as cards you confirm or reject, never silently editing your data. Its analysis mode goes further, letting an analyst and a confidant argue over your portfolio before a synthesis tells you what to look at first, and surviving ideas land on a watchlist that your totals never count. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Saki Panel is a self-hosted operations console that manages your game servers, containers, and background processes across multiple Linux machines, with an AI assistant sitting inside the workspace when something breaks. Start, stop, restart, and monitor nine kinds of instances, from Minecraft and Steam game servers to Docker containers, Compose stacks, Node and Python apps, and plain shell commands. Remote nodes connect over SSH and report CPU, memory, and disk metrics to a cluster dashboard, so every machine is visible in one place. When an instance crashes, Saki Watch records the exit and its error fingerprint, then helps diagnose the cause from live logs, files, and metrics instead of making you copy text between a terminal and a chat window. Proposed fixes appear as diffs that need your approval, are graded by risk level, and can roll back automatically if verification fails after a patch. Day to day work happens in the same console: a web terminal, a file manager with an editor and archive support, database tools for SQLite, MySQL, PostgreSQL, and Redis, and cron-scheduled tasks with full run history. Role-based access with dozens of permission codes, audit logs, and incident notifications through webhooks or Telegram keep a small team in control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Running a proper mail server used to mean stitching together half a dozen daemons; maddy folds the whole stack into one binary with one configuration file. It receives mail as your MX, sends as your MTA, stores messages for IMAP clients, and signs and verifies with DKIM, SPF, DMARC, DANE, and MTA-STS so other servers actually trust what you send. The design is composable: checks, modifiers, tables, and delivery targets snap together in the config, so spam scoring, address rewriting, and routing rules read like a pipeline instead of a pile of interlocking config files. Outbound mail queues with retries and backoff, inbound delivery lands in IMAP storage backed by SQLite or PostgreSQL, and a built-in ACME client keeps TLS certificates renewed, including DNS-01 providers. Milter support lets existing filters join the pipeline, authentication spans SASL mechanisms and Dovecot delegation, and Prometheus metrics watch queue length and delivery health from your usual dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Getting a language model into the chat apps people already use takes a single self-hosted server running AstrBot, which answers in QQ, Telegram, Discord, Slack, Lark, DingTalk, LINE, and WeCom. The model itself is a setting. OpenAI-compatible endpoints, Anthropic, Google Gemini, DeepSeek, Ollama, and LM Studio all work, with fallback models and retry limits for failed requests, and Dify, Coze, or Alibaba Cloud Bailian can take over a conversation too. A bare model cannot act, so the built-in agent calls MCP servers and Skills, delegates to SubAgents, runs scheduled tasks, and executes code in an isolated sandbox. It cannot read your files either, so a knowledge base takes PDF, Word, Markdown, and EPUB uploads and searches them with hybrid dense and BM25 retrieval. Personas shape each bot's personality, and Whisper or Edge TTS adds speech. When an answer looks wrong, the ChatUI shows thinking, tool calls, token counts, and latency, and a per-message trace timeline shows how the bot got there. Because the panel steers the bot, administrator IDs, session whitelists, optional TOTP login, and HTTPS protect it. Backups live under System Settings, and the plugin market installs any of more than 1,000 extensions in one click. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Upload a report, ask a "what if" question in plain language, and MiroFish builds a small simulated society that plays out the answer before you commit to a decision. It reads your seed documents, whether news, policy drafts, financial signals, or a novel, and extracts entities and relationships into a GraphRAG knowledge graph. Entities from the graph become agents with a profession, a biography, and interest tags, and the app estimates simulation rounds from the simulated time span, with a custom mode for shorter runs. Agents post and react on two simulated platforms at once, a feed-style plaza and a topic community, while a live monitor tracks rounds, elapsed simulated time, and actions. A ReportAgent then plans an outline and writes the prediction report section by section with the InsightForge, PanoramaSearch, QuickSearch, and InterviewSubAgent tools. Afterward you can keep questioning the ReportAgent, chat with any individual agent, or send a survey question to a selected group and read their answers. Typical uses include rehearsing public relations responses, testing policy drafts against likely reactions, and exploring alternate endings for a story. The interface switches between English and Chinese, and you bring your own model: any OpenAI SDK compatible LLM endpoint works, Zep Cloud stores agent memory, and the project suggests starting under 40 rounds because runs consume many tokens. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 126,000 GitHub stars and adoption across professional studios, research labs, and independent creators, ComfyUI has become the most widely used node-based interface for generative AI workflows — supporting image, video, audio, and 3D content creation through a single visual canvas. The graph editor natively supports Stable Diffusion 1.5, SDXL, SD3.5, Flux.1, Flux.2, HunyuanDiT, Lumina Image 2.0, HiDream, Qwen Image, and Pixart for image generation, plus Wan 2.1 and 2.2, LTX-Video, HunyuanVideo 1.5, CogVideoX, and Mochi for video, ACE-Step and Stable Audio for audio, and Hunyuan3D 2.0 for 3D models. Built-in tools handle inpainting, outpainting, ControlNet conditioning, LoRA and Hypernetwork loading, ESRGAN upscaling, area composition, model merging, and GLIGEN spatial control without writing code. The execution engine implements asynchronous queue processing with partial graph re-execution, running only changed nodes between iterations, and smart VRAM management that offloads models on GPUs with as little as 1 GB of memory. API nodes optionally connect to closed-source models through Comfy API while the core runs fully offline. Reusable subgraphs and App Mode expose complex workflows as simplified interfaces for non-technical users. The V3 custom node schema enables stateless execution with async support and process isolation. The TypeScript and Vue frontend ships as a PyPI package with stable releases every two weeks. Workflows save as JSON and embed in generated PNG, WebP, and FLAC files for reproducibility. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL v3.0 licensed.

Ziwei Doushu casts a complete Zi Wei Dou Shu chart, the twelve-palace Purple Star astrology chart, from a birth date, birth double-hour, and gender, and shows you the whole board instead of a single fortune line. Enter the details and the engine places the fourteen major stars and supporting stars across the twelve palaces, marks each star's brightness on a seven-tier scale, and layers the Four Transformations for the natal chart, the current decade, and the current year, including flying-star self-transformations. Births near an hour boundary stay accurate because true solar time correction combines birthplace longitude with the equation of time, and the calendar edge cases are handled openly: China's 1986 to 1991 daylight-saving years, four selectable leap-month conventions, and the late Zi hour day change. Switch between natal, decade, and annual views to watch the same life read at three speeds, then look up what you are seeing. A star encyclopedia explains the fourteen major stars in each of the twelve palaces, a pattern library of more than 1,100 rules names the classic configurations on the board, and a classics library offers full-text search across public-domain source texts. Compatibility charting compares two people side by side, dark and light themes keep long study sessions comfortable, and the layout adapts to phones. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 14,000 GitHub stars, 1 million managed identities on Logto Cloud, and continuous releases through version 1.42.0 in July 2026, Logto has emerged as the most credible open-source alternative to Auth0, Clerk, and AWS Cognito by packaging OIDC, OAuth 2.1, enterprise SSO, multi-tenancy, and RBAC into a single MPL-2.0 codebase that self-hosts for free with no per-MAU pricing surprises. Every Logto tenant operates as a fully compliant OpenID Provider supporting PKCE-only public clients, DPoP token binding, and RFC 9068 JWT access tokens. Pre-built sign-in flows handle email, phone, social login via Google, Facebook, Azure AD, and dozens of connectors, passkey authentication, and multi-factor verification through TOTP and WebAuthn. Organizations enable first-class multi-tenancy where users belong to multiple tenants with per-organization RBAC scopes on API resources. Enterprise SSO connects to Okta, Entra ID, and any SAML or OIDC identity provider. SDKs for over 30 frameworks including React, Next.js, Angular, Vue, Flutter, Go, and Python integrate authentication into SPAs, web apps, mobile apps, APIs, machine-to-machine, and CLI tools. The admin console provides user management, audit logs, webhook event subscriptions, and custom domain configuration. Personal Access Tokens and token exchange support AI agent architectures and MCP server authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

With over 21,000 GitHub stars and six years of steady development through version 3.1.0, Neko transforms any Docker container into a fully interactive browser or desktop environment streamed to web browsers via WebRTC with sub-300-millisecond glass-to-glass latency. The Go backend captures X server display frames using the Pion WebRTC library while the Vue.js frontend renders the remote session with native audio synchronization, delivering a significantly smoother experience than Apache Guacamole or noVNC which rely on image-over-WebSocket approaches. Multiple users simultaneously view and collaboratively control the same session with real-time input synchronization and host-managed control passing between participants. Pre-built Docker images cover Firefox, Chromium, Google Chrome, Tor Browser, Brave, Vivaldi, and Microsoft Edge alongside full desktop environments including XFCE and KDE for running any Linux application. Neko Rooms provides multi-tenant deployment with a REST API for programmatic room provisioning, while Neko Apps extends the platform with additional containerized applications beyond browsers. Sessions persist on the server independently of client connections — close your laptop, reconnect from your phone, and resume exactly where you left off. Optional VPN and Tor integration routes traffic through encrypted tunnels for privacy-sensitive browsing. RTMP broadcasting streams sessions to external platforms. The embeddable client supports iframe integration for custom portals and applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With 6,800 GitHub stars and over a decade of development since its 2014 release, ONLYOFFICE Docs delivers a self-hosted Microsoft Office replacement with pixel-perfect OOXML rendering and real-time collaborative editing supporting both Fast (character-by-character) and Strict (manual save) co-authoring modes. The suite encompasses five full-featured editors — Document Editor for DOCX/ODT/EPUB/HTML, Spreadsheet Editor with 500+ functions and pivot tables, Presentation Editor with animations and transitions, Form Creator for fillable PDF forms with field validation, and PDF Editor for annotation and conversion — all operating within a unified web interface. Format support spans 50+ types including DOCX, XLSX, PPTX, ODT, ODS, ODP, PDF, CSV, RTF, TXT, and Markdown with server-side conversion between any supported pair. The JavaScript plugin API enables extending editor functionality through a marketplace of ready-made plugins for ChatGPT integration, speech-to-text, OCR, Zotero citations, and Thesaurus. Ready-to-use connectors integrate with Nextcloud, ownCloud, Seafile, Moodle, Odoo, Confluence, SharePoint, Alfresco, Liferay, and Chamilo, while WOPI protocol compliance enables integration with any WOPI-compatible platform. JWT authentication secures all API communications between host applications and the document server. Deploy via Docker with a single command or DEB/RPM packages on Ubuntu, Debian, CentOS, or RHEL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3 licensed.