Open Source App Cloud Marketplace

With over 32,000 GitHub stars and a decade of production use since 2013, Dokku is the original self-hosted Heroku alternative — a Docker-powered PaaS that turns any single Ubuntu server into a full application platform with a simple git push. Deploy applications written in Node.js, Python, Ruby, Go, Java, PHP, Scala, and Clojure using Heroku-compatible buildpacks, Cloud Native Buildpacks via pack-cli, standard Dockerfiles, or pre-built Docker images, with automatic language and framework detection handling the rest. Every deployment runs through zero-downtime checks that health-test new containers before routing traffic via the built-in Nginx reverse proxy, which handles virtual host configuration, WebSocket proxying, and HTTP/2 support automatically. The official plugin ecosystem provides managed datastores including PostgreSQL, MySQL, MariaDB, MongoDB, Redis, RabbitMQ, and Elasticsearch, each provisioned with a single CLI command and linked to apps via environment variables. Automated TLS certificates arrive through the Let's Encrypt plugin with auto-renewal, while persistent storage volumes, cron job scheduling, user ACL management, and process scaling round out the platform capabilities. The entire system is CLI-driven — no web dashboard — keeping resource overhead minimal enough to run multiple applications on a $5/month VPS. Dokku also supports Lambda function builds, custom builder plugins, and app.json-based healthcheck configuration for advanced deployment workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Open Agent Builder delivers a visual canvas for orchestrating AI agent workflows without writing Python scripts or managing complex codebases. The React Flow-powered drag-and-drop interface supports seven node types — Agent, Scraper, Transform, If/Else, Loop, User Approval, and MCP Tool — each configurable with provider-specific settings for Anthropic Claude (Haiku 4.5 and Sonnet 4.5), OpenAI GPT-5, Groq, or any OpenAI-compatible endpoint. The LangGraph orchestration engine handles state management, conditional routing, and human-in-the-loop approval gates while Firecrawl integration converts any website into structured, LLM-ready data through scrape, crawl, and map operations. E2B sandboxed code execution powers Transform nodes for secure data manipulation without risking host system integrity. Real-time streaming updates show execution progress node-by-node as workflows run, with Convex providing reactive database synchronization for workflow state and execution history. The TypeScript-first architecture (96.8% TypeScript) built on Next.js 16 App Router with Tailwind CSS delivers a responsive interface across devices. Clerk handles multi-user authentication with JWT integration for secure workspace isolation. Deploy via npm install and environment configuration with Firecrawl, Convex, and Clerk API keys. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Consolidate application hosting, web analytics, error tracking, and performance monitoring into Temps, an open-source developer platform that replaces disparate SaaS subscriptions with a single compiled Rust binary. Engineering teams deploy full-stack web applications, background daemons, and microservices directly from Git repositories with automated TLS certificate provisioning powered by an embedded Cloudflare Pingora reverse proxy. The centralized web console unifies real-time visitor analytics, conversion funnels, and rrweb-powered session replay recordings without third-party tracking scripts. Integrated error monitoring ingests runtime exceptions with full stack traces and source map resolution, while continuous health checks evaluate container CPU utilization, memory thresholds, and network throughput across custom alerting rules. Developers manage infrastructure through an extensive command line interface containing over 440 operations across 69 command groups, or deploy drop-in skill files that allow AI coding assistants like Claude Code and Codex to provision preview environments autonomously. The platform also provides serverless key-value storage, S3-compatible blob buckets, and native transactional email routing with custom DKIM validation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Resolvr gives your Technitium DNS server the clean, readable dashboard it deserves, turning raw query traffic into an overview you can understand at a glance. Four tabs divide the picture: Traffic charts queries over time with allowed and blocked stacked together and a seven-day heatmap of when your network is busy; Resolution shows where answers come from, cache, upstream, blocked, or authoritative, with response times and a flow diagram of each lookup; Top lists rank your chattiest clients and most-requested domains; and Infrastructure tracks DHCP scope usage, zones, and cache growth. Every chart is a doorway: click one and you land in Query Logs already filtered to what you clicked. Pick any device on the Clients page to see its queries, block rate, DHCP lease, and favourite domains. Query Logs themselves filter by client, name, protocol, response code, and time window, export to CSV, and can live-tail as new lookups arrive. Blocked Zones manages your feeds, your own blocked domains, and a checker that tells you whether a name is blocked and which feed caught it. Run a Technitium cluster and each panel gains a scope chip, comparing nodes side by side or merging their logs into one timeline. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Browser tests, load tests, uptime checks, public status pages, and an AI incident investigator all live in one self-hosted dashboard called Supercheck. Write browser, API, database, custom, and k6 performance tests in a built-in code editor, or record a flow with the Chrome and Edge Recorder extension and save it as a Playwright script. Group tests into scheduled jobs, trigger them from CI with trigger keys, and review run logs, screenshots, traces, and reports. Five monitor types cover HTTP endpoints, website SSL expiry, ping, TCP and UDP ports, and scheduled synthetic browser journeys, with administrator-defined check locations and alerts to email, Slack, Discord, Telegram, Microsoft Teams, or webhooks. Status pages publish component health with 90-day uptime, incidents, scheduled maintenance, badges, and subscriber notifications under a subdomain or custom domain. When something breaks, the incident workspace collects evidence, drafts an evidence brief, and runs a read-only AI investigation across connectors such as GitHub, Prometheus, Grafana, and Kubernetes, while Copilot answers questions about that evidence. Requirements link expectations to tests and show coverage, and AI can extract them from a PRD. Organizations, projects, six roles, API keys, and audit trails keep teams in their lanes, and the CLI pulls, diffs, and deploys resources as code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

ThoughtDAG turns a long AI conversation from a scroll you cannot rearrange into a map you can edit, branch, and reconnect. Every question and answer becomes a node on an infinite canvas, and the wires between nodes are not decoration: they decide exactly what context the model sees next. Follow a promising thread, park a side question on its own branch, or cut a wire when an early assumption starts poisoning later answers, all without deleting the work that led there. Zoom out to read the shape of an investigation, then zoom back in to full answers, attachments, and highlighted passages. Drop in documents and files as material nodes, ask questions from them, and preview precisely what will be sent before a model runs. Past coding agent sessions can be opened as read-only graph mirrors, so a discussion that started in a terminal can be inspected, cited, and continued on the canvas. Memory lives in readable dossiers that collect decisions and open questions per topic, with sources attached, and relevant dossiers join new questions when you ask. Export a backup, a Markdown context chain, or a thought map that shares the structure of your thinking without dumping the whole transcript. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Backed by 1,080+ GitHub stars and maintained by Percona with the latest release v3.8.1 in June 2026, Percona Monitoring and Management delivers the open-source database observability platform that provides a single pane of glass across MySQL, PostgreSQL, MongoDB, Valkey, and Redis databases deployed on-premises, cloud, or hybrid environments. The Go-powered PMM Server collects metrics from lightweight PMM Client agents with minimal performance impact, storing time-series data in ClickHouse for fast querying across configurable retention periods. Query Analytics ranks every query by load across all database engines from one unified dashboard, drilling from fleet-level performance down to individual problematic queries with explain plans, per-query metrics, and anomaly detection. Real-time Query Analytics streams live MongoDB operations updated every 1-5 seconds for immediate troubleshooting of lock contention and long-running queries. Built-in Percona Advisors continuously scan connected databases for security gaps, misconfigurations, and performance problems, distilling decades of DBA expertise into automated actionable recommendations. Percona Alerting integrates with 15+ notification channels including Slack, PagerDuty, email, and webhooks to trigger on custom metric thresholds. Database-specific dashboards visualize InnoDB storage engine details, WiredTiger cache metrics, PostgreSQL tuple activity, replication lag, and cluster health with annotations for root-cause correlation. Deployment options include Docker single-container setup, Podman rootless execution, and Helm charts for Kubernetes with Ingress controller support and ConfigMap management. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Tududi is a self-hosted planner that turns a pile of tasks into a plan for the day, keeping projects, notes, goals, and habits on a server you control. One Add box files an Inbox item, Task, Note, or Project and understands natural-language dates, recurrence, tags, projects, and people, so "every first monday #home" becomes a recurring task without opening a form. The Today page switches between planning mode, with a timeline or list beside your calendar and optional AI help to sketch the day, and doing mode, with a Next card and a hint when a free slot fits a small task. Tasks have subtasks and live in projects and areas, projects link to season or year goals, and saved views, project templates, and optional Eisenhower and Kanban boards organize the work. Habits support build or quit goals with streaks, a strength score, and a history grid, while notes offer linked pages, backlinks, and mermaid diagrams. Households and teams share projects with read-only or read-write access, assign tasks to people, and follow an Everyone board; members without email sign in through one-time links. Telegram captures tasks and can send daily summaries, CalDAV syncs with reminder apps, OIDC handles single sign-on, and an MCP server lets Claude or Cursor manage tasks. AI stays off until you enable it and add a provider; local models work too. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A training institute can run its courses, batches, trainers, and students from a single self-hosted TutorLoom installation it fully controls. One deployment serves many organizations at once, and every query is scoped to the organization, so trainers and learners only ever see their own data. Institute admins manage people and time-boxed batches, inviting trainers and students one by one or in bulk from CSV and Excel files. Courses are built as levels, chapters, and steps mixing videos, documents, tasks, and quizzes, with prerequisites and sequential unlocking so learners follow the path you designed instead of wandering. Students work through a guided step-by-step roadmap on the web or in the mobile app, watching completion fill in as they go and earning points and levels along the way. When learners submit work, trainers review everything in a single grading queue, approving or rejecting with a score and written feedback, then export progress to Excel when management asks for a report. Finishing a course produces a PDF completion certificate automatically. One account can hold several roles at once, so a trainer who also administers an institute switches portals without signing out. Branded email notifications keep learners informed under your own institute's name, and a documented REST API with interactive documentation powers the web app, the mobile app, and your own integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

For teams that need ISO 27001, NIS2, and GDPR evidence without handing compliance data to a SaaS vendor, ISMS Builder is a self-hosted information security management system for policies, risks, assets, audits, and incidents. Compliance managers move policies from draft through review to approved and archived, and recipients confirm each one through a token link that needs no login. Security officers close gaps in a Statement of Applicability that cross-maps BSI IT-Grundschutz, NIS2, EUCS, the EU AI Act, and the Cyber Resilience Act, with ISO 27001 controls imported from their own licensed copy. Risk owners keep treatment plans, turn Greenbone and OpenVAS reports into risk drafts, and score assets for confidentiality, integrity, availability, and authenticity. Data protection officers run records of processing, processor agreements, impact assessments, data subject requests, a 72-hour timer, and a deletion log with email alerts. The CISO inbox collects incidents, including reports from a public form that needs no login, beside a 30-item NIS2 Article 21 checklist and Article 23 deadline alerts. Auditors work from a findings register, a compliance matrix, and an exportable audit log of every create, update, delete, and login. Administrators enforce TOTP two-factor sign-in, choose among German, English, French, and Dutch, run semantic search locally through Ollama, and publish approved policies to Nextcloud or ownCloud as PDFs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Your front desk phone rings at midnight and nobody sane is awake; QuickVoice answers it with an AI agent you configured, on servers you own, with call recordings you control. Build agents in the web console: write the prompt, pick speech-to-text, language model, and voice, set the first message, then link a real phone number from Twilio or Telnyx through LiveKit SIP trunks. Inbound callers get a receptionist that answers questions from your uploaded knowledge base, PDFs and web pages chunked and embedded for live retrieval, while outbound mode fires single quick calls or batch campaigns for reminders and follow-ups. Agents can invoke allowlisted MCP tools mid-call, so checking an order status or booking a slot happens inside the conversation instead of after it. Every call lands in the log with transcript, recording, and metadata, searchable from the analytics dashboard, and privacy controls redact personal data by default, can suppress recordings entirely, and sweep old transcripts on a retention schedule. Multi-language voices, per-agent runtime overrides for campaigns, organization accounts with API keys and audit logs, and Stripe billing hooks round out a platform built for teams who would rather inspect their voice stack than rent a black box. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When cybersecurity instructors and competition organizers host Capture The Flag tournaments, GZCTF orchestrates isolated per-team challenge containers, dynamic anti-cheat flags, and live exponential scoreboards from a single web platform. Event administrators can configure four distinct challenge modes covering static attachments, team-specific dynamic attachments, shared static containers, and isolated dynamic containers where unique flags are injected into each team's environment at launch. A customizable exponential scoring engine adjusts point values automatically as more teams solve a problem while awarding first, second, and third blood bonuses to top contenders. Built-in flag-sharing detection monitors every submission in real time, flagging suspicious cross-team flag reuse alongside live event streams and container logs. Participants can group into divisions, track their ranking trajectory on interactive score timelines, and upload post-game writeups directly into the portal for organizer review and batch archiving. Built-in network proxying forwards challenge traffic over WebSocket tunnels with optional packet capture so referees can audit exploit payloads during active matches. Multi-language localization, customizable branding, invitation gates, and email domain restrictions adapt the portal to university courses, corporate security drills, or international tournaments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

DashBeam sends files and folders of any size straight from one device to another, end to end encrypted, with no cloud account, no size limits, and nothing parked on a third party server in between. Drop in a file and share it through a short code, a link, or a QR scan; whoever receives it needs no account and can collect it in a plain browser tab with nothing installed. On the same network, nearby machines appear on their own, so pairing two devices and sending between them takes a couple of clicks instead of a cable or a memory stick. Pair a device once and it stays reachable by its identity, so your machines can exchange files from anywhere without swapping fresh tickets every time. Interrupted transfers resume where they stopped, and hopping from Wi-Fi to cellular mid-send does not drop the connection. One share can fan out to several receivers at once, and devices you mark as trusted can accept files automatically, which suits pushing builds, media libraries, or backups around a small fleet. You can preview what is arriving before downloading it, and a local history records every completed transfer. The repository also ships Docker Compose stacks for your own relay and discovery server, so even the encrypted fallback path can run entirely on machines you own. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

VoidAccess is a self-hosted dark web OSINT platform that takes a single investigation question and returns a sourced report, a searchable relationship graph, and indicators you can load straight into your defenses. One query fans out in parallel to more than a dozen Tor search engines, code hosts, paste sites, security feeds, and curated onion seeds, then follows newly discovered onion links while mandatory safety gates drop prohibited queries, URLs, and content. A thirteen-step pipeline refines the question, collects across English, Russian, and Chinese sources, filters signal from duplicates and dead ends, enriches what survives, and extracts the entities that matter. It recognizes threat actors, ransomware groups, malware families, IP addresses, domains, onion addresses, file hashes, cryptocurrency wallets across seven chains, exposed credentials with secrets masked, messaging handles, CVEs, and MITRE ATT&CK techniques. Everything lands in an interactive graph with communities and infrastructure clusters, so you can start from one wallet or handle and walk the neighborhood it belongs to, cross-referenced against earlier investigations. Scheduled monitors watch for changes and send Telegram or email alerts when your targets move. Finished work exports as STIX 2.1, MISP events, Sigma and YARA rules, CSV, JSON, and bundled IOC packages, with multi-user access for a team. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your files already live in five places; filex puts them in one tree and serves that tree back out through almost any protocol. Mount local disks, S3 buckets, SFTP servers, WebDAV shares, FTP sites, and SMB network drives side by side, then copy in one storage and paste into another without thinking about where anything physically sits. The same tree is reachable as S3, SFTP, FTPS, NFS, and WebDAV, so rclone, restic, the AWS CLI, WinSCP, or FileZilla all work against it with the same per-user and per-folder permissions as the web interface. Sharing leaves the server under your control: public links carry a PIN, an expiry, and a download limit, and file-request links let people upload into a folder without seeing its contents. Anything deleted stays recoverable inside a retention window, overwritten files keep version snapshots, and encrypted folders are sealed in the browser so the server never receives a key. People sign in with OIDC single sign-on, LDAP or Active Directory, or the host machine's own accounts, with roles, groups, and tenants plus folder-level exceptions. A desktop app keeps chosen folders in sync within about a second, the file manager embeds into other products as a web component, and an MCP server plus REST API let agents work the same tree. It runs from one static binary or container on port 5212. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Lurker keeps you present in every IRC channel you care about, holding your connections open around the clock and recording everything said so a retro, searchable web client can hand it all back whenever you return. Invite your friends and each person gets their own set of networks under one roof, while admins decide which networks members may join and which channels newcomers are pointed at. Nothing said while you were away is lost: the full history is searchable by nick, channel or network, and clicking a result jumps straight to that moment, whether it happened an hour or a year ago. The everyday annoyances are handled too, with drafts that follow you between devices, a highlight and ignore system that cuts noise, bookmarks and private notes on users, reactions, replies, and image uploads that are optimized, stripped of metadata and stored on your own disk or S3. If you prefer your old client, the built-in bouncer speaks the soju and ZNC dialects with SASL, network discovery, on-demand scrollback and read markers that stay in sync everywhere, and DCC file transfers with an XDCC queue still work. Optional companion containers generate inline link previews in isolation and keep your IRC connections alive across restarts of the main service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

With 17,000 GitHub stars, 460+ contributors, and deployments across telecommunications, automotive, and financial services running on over 10,000 CPU cores at the largest known installations, Apache APISIX delivers a fully dynamic API gateway achieving 140,000 QPS on eight cores with sub-millisecond latency through NGINX's event-driven architecture and LuaJIT-compiled plugin execution. The 100+ open-source plugins cover authentication (JWT, OAuth 2.0, OIDC, Keycloak, LDAP), observability (Prometheus, Datadog, SkyWalking, OpenTelemetry), traffic management (rate limiting, circuit breaking, canary releases, traffic splitting), and security (CORS, IP restriction, CSRF protection) — all hot-reloadable without process restarts via etcd-based real-time configuration synchronization. Multi-protocol support handles HTTP, gRPC, MQTT, TCP, UDP, and WebSocket traffic for both north-south API access and east-west service mesh communication. AI gateway capabilities proxy requests to 20+ LLM providers with semantic caching, token-aware rate limiting, provider failover routing, and content moderation. Custom plugins extend the gateway in Lua, Go, Java, Python, or WebAssembly. Radixtree route matching handles 100,000+ routes without performance degradation. Functions as a Kubernetes ingress controller with native service discovery for Consul, Nacos, and Eureka. Deploy via Docker or Helm charts with horizontal scaling through etcd cluster coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

OctoBot provides a free and fully configurable cryptocurrency trading platform that runs on your own server. The bot automates investment strategies across 15+ exchanges including Binance, Coinbase, MEXC, Hyperliquid, Kucoin, OKX, and Bybit, supporting spot, futures, and perpetual markets. The AI trading system connects to any OpenAI-compatible API or local Ollama server, enabling strategies powered by ChatGPT, Llama, Mistral, or any custom model for market analysis and signal generation. TradingView integration accepts PineScript indicator signals and strategy alerts via webhooks, while built-in technical analysis covers RSI, Moving Averages, MACD, Bollinger Bands, and other standard indicators. The modular tentacle architecture allows community-developed plugins to extend strategy logic, evaluators, data sources, and exchange interfaces. The backtesting engine replays historical market data against any configured strategy, reporting profit and loss, drawdown, win rate, and trade-by-trade breakdown before committing real funds. Paper trading provides risk-free live simulation with the same execution logic as production. The web dashboard displays real-time portfolio value, open positions, trade history, and strategy performance with interactive charts. Telegram bot integration enables remote monitoring, notifications, and command execution from mobile devices. Docker deployment runs the full stack in a single container with persistent volume storage for configuration and trade data. On RepoCloud, deploy OctoBot on a dedicated VPS with root SSH access, persistent storage for your trading data and strategy configurations, and complete control over exchange API keys and AI model connections, all under the GPL-3.0 license.