Open Source App Cloud Marketplace

Big repositories, small questions: Open Kritt is a self-hosted platform that splits vulnerability research into focused tasks for AI agents and returns ranked, de-duplicated findings. Build a workflow as a tree of prompt steps, where each step declares the structured output it must produce and the next level launches one fresh agent per result. Scan remote or local repositories along with their dependencies, using Codex, Claude Code, or Grok Build as the harness. Every workflow ends in one fixed finding schema covering file, line, vulnerability type, trigger flow, and a malicious input example. Post-scripts then validate each finding, build a proof of concept, or write the report. Markdown severity rankers tell the model how to prioritize for your bounty program, and repeated findings collapse automatically. Model access comes from a Codex login or OpenAI, Anthropic, DeepSeek, OpenRouter, or xAI keys, with an Active switch to choose which accounts take new work. A dashboard tracks blueprints, scans, and findings, a headless command-line tool imports workflows and launches scans on servers without a browser, and finished scans export as one ZIP with a share-safe manifest. Built-in workflows, including an entry-point-driven hunt, give you a starting point. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Sensors watch your infrastructure so your engineers do not have to watch it at 3 a.m. StackStorm is event-driven automation: Python sensors poll or listen to external systems (monitoring alerts, ticket updates, chat messages, webhooks, timers) and inject each event as a trigger. Rules match triggers against criteria you define and fire the response automatically, mapping the event payload straight into action parameters. Actions do the work: SSH commands, REST calls, and integrations for AWS, Docker, OpenStack, Puppet, Jira, Slack, and hundreds more from community packs, or your own scripts wrapped with a few lines of metadata. Multi-step responses become workflows that sequence actions with conditions, branching, and data passed between tasks, handling everything from disk-full remediation to full deployment pipelines. Everything bundles into packs, the shareable units that group sensors, rules, actions, and workflows per product or per automation, installable from the StackStorm Exchange or your own Git repositories. The web UI runs actions, explores workflow executions down to individual task results in real time, manages rules, and installs packs, while every execution, manual or automated, lands in an audit trail with its triggering context. ChatOps aliases even let the team trigger approved automations from chat. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

CheckCle provides a complete uptime monitoring and infrastructure observability platform that deploys with a single Docker container and stores all data in embedded SQLite via PocketBase. The Go backend runs three microservices — a service operation engine handling HTTP, HTTPS, DNS, Ping, and TCP checks at configurable intervals, a distributed regional check agent for multi-location network testing, and a server monitoring agent collecting CPU, RAM, disk usage, and network metrics via gRPC. The React frontend built with Vite, TypeScript, Tailwind CSS, and shadcn-ui subscribes to PocketBase WebSocket endpoints for real-time dashboard updates without polling. SSL and domain monitoring tracks certificate issuers, expiration dates, days remaining, and validation status. The incident management system records UP, DOWN, WARNING, and PAUSE states with full history, while scheduled maintenance windows prevent false alerts during planned downtime. Public status pages provide external stakeholders with live service health information. Health heatmaps visualize uptime performance and outage patterns over time. Notification channels include email, Telegram, Discord, and Slack, with multiple alert targets per monitored service. The one-click agent installation script supports Debian, Ubuntu, CentOS, Red Hat, Alpine, and Windows in beta. Docker deployment runs on port 8090 with a single persistent volume at /mnt/pb_data, requiring minimum 1 vCPU and 500MB RAM. On RepoCloud, deploy CheckCle on a dedicated VPS with root SSH access, persistent storage for your monitoring database, and complete control over agent endpoints and notification configurations, all under the MIT license.

An e-ink frame on your kitchen wall should show your calendar, not beg a cloud subscription for permission; Larapaper is the self-hosted TRMNL server that keeps those screens yours. Devices on your network announce themselves and auto-join, and the admin panel tracks each unit's battery, WiFi strength, firmware, and current screen, from the official TRMNL OG and X to SeeedStudio DIY kits, reTerminal panels, Kindle and Kobo e-readers, and Raspberry Pi displays. Content comes from wherever you like: native plugins and recipe mashups, more than a thousand catalog recipes importable from TRMNL and the community, your own Liquid or Blade markup written in the web editor, or a simple POST to the screen API from any script. Playlists rotate screens on a schedule, so the morning shows trains and weather while the afternoon shows the build board. The render pipeline draws with headless Chrome, converts through ImageMagick to each device's exact palette, and caches results so sleepy e-ink clients wake, fetch, and sleep again in seconds. Run it beside the official cloud as a proxy when you want hybrid coverage, on SQLite for a shelf box or Postgres for a fleet, with dark mode in the admin and Docker Compose for deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Simon is a lightweight self-hosted system monitor that shows live CPU, memory, disk, and network metrics for your server and its Docker containers in one web dashboard, with threshold alerts and a built-in file browser. Open the dashboard to watch real-time gauges alongside historical charts, so a slow memory leak becomes visible hours before it takes a service down. Every running container appears with its own CPU and memory stats, and its logs open in a searchable viewer, so routine diagnosis never needs a terminal session on the host. The file browser lets you navigate the directories you choose to expose, preview file contents, upload with drag and drop, create folders, and move or delete items. Downloads support range requests, which means large files resume cleanly after a dropped connection and media files stream instead of failing halfway. Alert rules fire when CPU, memory, disk, or network activity crosses thresholds you set, and notifications arrive through Telegram, ntfy, Gotify, Pushover, Pushbullet, Matrix, or any custom webhook. Prebuilt notification templates get common setups running in minutes, and password authentication keeps the dashboard private on a public server. Resource-constrained machines benefit most: the monitor runs comfortably on single-board computers and small instances where heavier monitoring stacks would consume the very memory they exist to watch. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Holding internet service providers accountable for promised bandwidth requires continuous, automated measurement, and MySpeed turns any server into an always-on connection performance analyzer that tracks download speeds, upload throughput, ping latency, and jitter around the clock. Instead of running manual browser tests only when video calls stutter, you can schedule recurring speed checks using custom Cron expressions and switch freely between Ookla, LibreSpeed, and Cloudflare testing servers to verify routing performance across different upstream networks. Interactive statistics views render gradient speed timelines, ping and jitter graphs, hourly performance breakdowns that expose peak-hour congestion, and standard deviation consistency charts, using smart 300-bucket downsampling so multi-month histories load instantaneously. Failed tests are flagged with visual markers on the timeline, while built-in health checks dispatch instant alerts to Discord, Telegram, Signal, WhatsApp, Gotify, email, or custom webhooks whenever bandwidth drops below your target thresholds or outages occur. Administrators can link multiple remote MySpeed instances into a single dashboard to compare bandwidth across branch offices, pause scheduled runs during heavy file transfers, export historical logs, and scrape real-time telemetry into Prometheus and Grafana. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your customer relationships deserve better than a spreadsheet and a prayer: SuiteCRM gives sales, support, and marketing teams one shared system for every account, contact, lead, and deal. Track opportunities through your pipeline with stages, amounts, and close dates, then quote and invoice directly from the won deal without retyping a single line item. Support agents work cases with queues, assignments, and email threading, while marketers build target lists, run email campaigns, and measure opens and clicks against the same records sales uses. Reports query across any modules with grouping, aggregation, and charts, export to CSV or PDF, land on dashboards as dashlets, and arrive by scheduled email so Monday's pipeline review writes itself. Workflow rules react to record changes by sending notifications, creating tasks, updating fields, or calling webhooks, quietly handling the follow-up work humans forget. Roles and security groups decide exactly which teams see which records, down to individual fields, and the audit log remembers every change. Administrators reshape the system without code in Studio, adding fields (including image and file fields), rearranging layouts, and building whole custom modules, while the REST API connects SuiteCRM to your website forms, telephony, and accounting tools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Poznote serves as an all-in-one personal knowledge base and digital workspace designed to bridge unstructured thinking and structured documentation. The platform pairs a responsive Markdown editor with live side-by-side rendering, KaTeX mathematical notation, and interactive Mermaid diagram compilation. Creative thinkers can switch instantly to an embedded Excalidraw infinite canvas to sketch system architectures, design mind maps, and create interface wireframes alongside their written notes. Every directory within the workspace can be toggled into an agile Kanban board where nested folders become customizable workflow columns and notes transform into draggable task cards. Task management views aggregate checklists across documents into unified priority queues with due date reminders and completion filters. An integrated bi-directional Git synchronization engine connects user workspaces directly to personal GitHub or Forgejo repositories, versioning edits automatically on save. The software also provides an integrated Model Context Protocol server that enables AI coding assistants to search notes, create documents, and query knowledge repositories securely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Scheduling infrastructure, not just a booking page - Cal.com is the leading open-source scheduling platform. Share a link, attendees pick a slot, and real-time sync against Google Calendar, Outlook, and CalDAV prevents double-booking. Beyond the basics it covers team workflows: round-robin distribution, collective availability across multiple hosts, recurring meetings, and routing forms that ask bookers questions and send them to the right team member - the feature sales and support teams usually pay enterprise prices for. Paid bookings run through Stripe, video calls through the built-in Cal Video (Daily.co) or Zoom and Google Meet, and an app store connects 100+ tools including HubSpot, Zapier, and n8n. The API-first architecture with webhooks and embeds makes it practical to build scheduling into your own product, white-labeled with your domain and branding. Built on Next.js and Prisma over PostgreSQL, translated into 65+ languages, with the self-hostable community codebase maintained under an open-source license.

Build, deploy, and monitor chatbots and LLM-powered agents on one open-source conversational AI platform: Botpress. Its Studio is a visual development environment: a drag-and-drop canvas arranges conversation logic with nodes for messages, questions, choices, and actions, while a built-in emulator simulates conversations for debugging before anything goes live. Agents ground their answers in a knowledge base assembled from uploaded documents, ingested websites, and past conversations via retrieval-augmented generation, and the LLM layer connects to multiple model providers - GPT-4, Claude, Mistral - with a configurable model strategy. An autonomous engine handles reasoning, tool orchestration, persistent memory across sessions, and sandboxed code execution, and custom code actions in TypeScript extend agents past prebuilt workflows. Over 100 integrations deploy the same bot to WhatsApp, Telegram, Slack, Microsoft Teams, and web chat, and connect it to HubSpot, Zendesk, Zapier, and arbitrary APIs and webhooks. Human handoff, conversation analytics, and quality monitoring cover production operation. Originating in 2017 from a Montreal team, the community edition is developed openly on GitHub.

Your apps keep using the OpenAI SDK while Antirion, a self-hosted AI gateway, decides which provider answers, what each team may spend, and what gets logged. Clients speak the OpenAI, Anthropic, Gemini, or Bedrock APIs, and Antirion translates between them, so a Claude deployment can answer an OpenAI-style call, streams included. Add providers such as Amazon Bedrock, Vertex AI, Mistral, Groq, DeepSeek, or a vLLM server, then publish them as named Models. Routing rules send traffic by team or project with fallback chains, weighted splits, least-cost or least-latency targets, retries, hedging, and circuit breakers. Budgets and rate limits in dollars or tokens apply per organization, team, project, and key, with projections and alerts before money runs out. Guardrails check for personal data, secrets, keywords, and regex matches, then block, redact, flag, or divert. Exact and semantic caching answers repeated prompts without calling a provider. The request log records every attempt, route, token count, cost, and guardrail verdict, with Prometheus metrics and OTLP traces. An MCP gateway and A2A proxy put tools and agents behind the same keys. Sign in with OIDC, SAML, or GitHub, provision users with SCIM, and review every change in the audit log. Changes you choose can require a change request or a second person's approval, and the Playground sends requests from the console. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Gmail, Outlook, and every IMAP mailbox you own share one inbox, one search box, and one calendar in plMail, a mail client you host yourself. Accounts sit side by side with sending aliases, and new mail arrives on its own through IMAP IDLE, Gmail and Outlook push, and browser notifications. Credentials are encrypted before storage. Search understands from:, subject:, label:, has:, and before:, completes as you type, and highlights matched words. Filters are nested any, all, or none trees, and each shows how many real messages match before you save it. Drag several conversations at once onto folders, labels, or inbox tabs; a label adds itself without removing the mail from your inbox. A calendar sits beside the mail, with two-way sync for Google, Microsoft, and CalDAV. Move events on the week grid, answer invitations in place, and send share and booking links. An optional language model, pointed at your own Ollama server or any OpenAI-compatible endpoint, searches by meaning, drafts replies, summarizes threads, and sorts mail into tabs once you switch it on. Attach files from and save them to Drive, OneDrive, Dropbox, Nextcloud, Immich, and Paperless-ngx. Sign in through Authentik, Keycloak, or any OpenID Connect provider, and pick from 41 themes. Android and iOS apps connect to your own server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Picture a small staff of AI agents clocking in on your own server, each with a name, a specialty, its own model, and a private Linux desktop it can click around in. Every agent works inside a disposable Docker workstation with a shell, persistent files, and a Chromium browser, so it can research the web, write and run code, and finish multi-step tasks without touching your own files. You watch an agent click and type in real time, and when a login, payment, or one-time code needs a human, you take over the desktop, then hand it back with a note and let it continue. Pair a Telegram bot by scanning a QR code and you can assign work, answer questions, and receive results from your phone, with no public URL or port forwarding. Routines turn recurring requests into schedules, so a morning briefing, a price watch, or a weekly report runs by itself and reports back when it is done. Each agent can use a different model, from OpenAI, Anthropic, Google, xAI, Groq, Mistral, or DeepSeek to a local Ollama endpoint, and every reply shows its cost while a monthly budget pauses paid models automatically. Agents remember what matters about you across every thread, and logins or cards you save sit in an encrypted vault the agents themselves never see. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

PiGallery2 turns any mounted folder of images and home videos into a high-speed web gallery without modifying your raw files or forcing migration into a database silo. The server scans directories in read-only mode, keeping folder structures intact while generating responsive previews with hardware-accelerated Sharp processing. Users can inspect detailed camera EXIF metadata, toggle custom full-screen lightboxes with swipe gesture navigation, and stream high-definition MP4 or WebM video clips. Embedded GPS coordinates automatically pin photos onto interactive OpenStreetMap or Mapbox views, allowing travel albums to display alongside synchronized GPX track routes. Powerful boolean search expressions filter across dates, keywords, camera models, and Adobe XMP face regions without requiring expensive background machine learning models. Built-in link sharing creates password-protected access links with custom expiration dates for friends and family. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Warpgate is a clientless bastion host and privileged access management gateway that lets engineering teams secure, assign, and audit access to internal SSH servers, databases, Kubernetes clusters, web applications, and remote desktops from a single portal without installing VPN clients. Connect directly from standard tools like OpenSSH, VS Code Remote, psql, mysql, kubectl, or native RDP clients using formatted credentials, or launch browser-based SSH terminals, RDP desktops, and VNC sessions straight from the web interface. Administrators map users and roles to specific internal targets with granular 1:1 permissions, enforcing multi-factor authentication via TOTP and Single Sign-On through OpenID Connect providers like Google Workspace, Microsoft Entra ID, and Okta with automatic group-to-role provisioning. Every interactive terminal command, database query, HTTP request, and remote desktop session is captured in real time so security auditors can watch active connections live or replay historical recordings on demand from the web dashboard. Built-in brute-force defense automatically blocks suspicious IP addresses and locks compromised accounts, while temporary access tickets, just-in-time session approvals, encrypted credential storage, and S3-compatible recording archival support enterprise compliance workflows across multi-node clusters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Routerly is the one front door for every AI model your apps use: point your OpenAI or Anthropic client at it, and it chooses the right model for each request, enforces your budget, and keeps the receipts. Nothing in your code changes except the base URL, and from that moment streaming chat completions and messages flow to OpenAI, Anthropic, Gemini, Mistral, Cohere, xAI or your own Ollama models behind a single token. Nine routing policies score every candidate in parallel: cheapest, fastest, healthiest, most capable, biggest context, least rate-limited, fairest, most budget left, and one that asks a small model to judge which model fits the task. When the winner errors or times out, the next candidate takes over automatically, and the recorded routing trace shows exactly why each model won or lost. Guardrails can block or log content that breaks your rules, and phone numbers, card numbers, SSNs, IBANs and emails can be scrubbed out before anything reaches a provider. Every call is logged with tokens, USD cost and latency, and hard limits per model, project and token reject overspending requests before a provider can charge for them. Projects keep separate tokens, model lists and budgets for each team or tool, role-based permissions decide who may change what, and alerts land in Slack, email, webhooks or PagerDuty when budgets or providers misbehave. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Kula watches a Linux server every second and turns CPU, memory, disks, network, containers, and applications into a live dashboard you can open before trouble becomes downtime. Follow total and per-core CPU, load averages, memory and swap pressure, disk I/O, filesystem space, temperatures, GPU load, and network throughput as charts update live in the browser. Drag to zoom into history, switch to focus or TV mode for a wall display, and check the System Info page when you need the hardware story behind a spike. Watch Docker, Podman, and cgroup containers beside host metrics, then add PostgreSQL, MySQL or MariaDB, nginx, and Apache monitoring or define custom metrics for the odd service only your team understands. Scrape the Prometheus endpoint into an existing observability stack, open the terminal UI over SSH for a quick live read, or ask the optional local Ollama assistant to discuss charts without sending data to a cloud service. Protect the dashboard with optional Argon2id logins and multiple users, schedule storage snapshots, and keep the whole tool working on closed networks with no external calls. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

No cookies, no fingerprinting, no cross-site tracking, no personal data collection - Umami's privacy contract is the foundation of the open-source web analytics platform. IP addresses are hashed rather than stored, which makes it GDPR, CCPA, and PECR compliant by default - the consent banner can come off the site entirely. The tracking script is under 2 KB, roughly 20x smaller than Google Analytics, so measurement stops being a page-weight tax. The dashboard covers the core metrics - pageviews, visitors, bounce rate, visit duration, referrers, browsers, devices, and countries - with any date range and filtering by country or device. Beyond pageviews, custom events track clicks, form submissions, and signups via a data attribute or one JavaScript call, and advanced reports add funnels, user journeys, retention and cohort analysis, goals, and automatic UTM campaign tracking. Anonymous session views show individual visitor activity without identifying anyone. Teams share websites with role-based access, one instance manages unlimited sites, and a full REST API exposes every metric programmatically. MIT-licensed and self-hosted on PostgreSQL or MySQL via Docker, your analytics data never leaves your infrastructure.