Starred by over 6,500 users on GitHub and trusted by organizations including Toyota, CTFd has been the leading open-source platform for hosting cybersecurity competitions since 2015, providing everything needed to run professional Capture The Flag events through a clean web-based administration panel without touching a database query. The framework supports both individual and team-based competitions with automatic tie resolution, configurable score freezing, and scoregraphs comparing the top teams with detailed progress tracking. Challenge creation offers static and regex-based flags, dynamic scoring that adjusts point values based on solve count, unlockable hints purchasable with points, file attachments uploaded to local storage or Amazon S3-compatible backends, and challenge attempt limits with automatic bruteforce protection. Version 3.8 introduced challenge logic fields controlling flag submission behavior with any, all, and team modes, integrated dynamic scoring into the standard challenge type, participant ratings and reviews on challenges, and admin-stored challenge solutions viewable after competition. The Markdown-based content management system enables custom pages for rules, FAQs, and resources, while SMTP and Mailgun integration handles email confirmation and password recovery. The plugin architecture supports custom challenge types, flag validators, and scoring algorithms, while the theme system provides complete visual customization. Import and export functionality preserves entire competition configurations for archival and reuse across events. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

SurveyKing combines survey creation and online examination in a single platform — generate complete questionnaires from plain English via built-in LLM integration, administer timed exams with anti-cheating proctoring, and collect structured data through 20+ question types including matrix questions, cascading selectors, file uploads, and electronic signatures. Built on Spring Boot 3 with a React and TypeScript frontend using the UMI framework and Ant Design components, version 1.12 delivers each question type with independent validation rules, data type controls, and formula calculations. The AI engine connects to mainstream LLMs for survey generation from natural language prompts and provides real-time answer explanations during practice sessions. Exam mode features item banks with Word and Excel bulk import, fixed and randomized question selection, composite paper assembly, live proctoring dashboards with anti-cheating controls, automatic and manual grading with per-question scoring, and PDF score report archiving. The visual logic designer and DSL expression engine handle show/hide conditions, required rules, skip branching, quota controls, randomization, and cross-tabulation analysis with SPSS export. Role-based access controls support multi-user collaboration with department and permission management via Spring Security and JWT authentication. Redis handles caching and queuing while MyBatis Plus manages database operations. Deploy via a single Docker command with embedded H2 for trials or Docker Compose with MySQL for production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

By turning any browser into an interactive trivia controller and live scoreboard, Razzia gives event hosts, educators, and communities a self-hosted multiplayer quiz platform that replaces Kahoot. Players join in seconds with a six-digit room PIN or scannable QR code on their smartphones, while the host drives the shared screen from a password-protected manager console. Build quizzes directly inside the browser-based editor or import portable JSON files with single-choice, multiple-choice, numeric estimation, and ungraded survey questions. Attach images, audio clips, or video files up to 100 MB to any prompt, group questions into themed round categories, and display explanatory notes when correct answers are revealed. Scoring adapts to your rules: reward fast responses with time-weighted points, apply strict, balanced, or lenient multi-select grading, deduct penalties for wrong guesses, or switch to survey mode to gather live audience polls without a leaderboard. Hosts can lock rooms mid-game, enable automatic nickname generation, hide question prompts on player screens, and configure auto-advance timers between rounds. Drop a custom theme file and logos into the branding folder to white-label colors, fonts, and backgrounds, or connect physical ESP32 hardware buzzers over the documented WebSocket protocol. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Organizers running sports leagues, gaming tournaments, and community athletics can deploy Bracket as an open-source competition control hub that coordinates multi-stage events without recurring SaaS subscription fees. Competition directors can configure multi-tier tournament topologies combining single elimination, double elimination, round-robin pools, and dynamic Swiss format brackets within a unified event schedule. An interactive calendar grid enables operators to drag and drop fixtures between designated courts, assign start times, and balance player recovery intervals across multiple playing areas. Public dashboard displays generate real-time match outcomes, court assignments, and standings boards that spectators can monitor on mobile devices or overhead venue monitors with customized team logos. Club administrators can manage multiple regional athletic organizations, register rosters through bulk CSV spreadsheet imports, and coordinate simultaneous divisions spanning amateur and championship flights. Integrated OpenAPI REST endpoints allow external scoring overlays, live stream graphic generators, and automated result bots to query match statuses or submit verified referee scorecards programmatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Turn company knowledge into structured courses in minutes: ClassroomIO's AI course builder takes your documents, policies, or topic outlines and generates complete lessons with exercises using Gemini, GPT-4o, or Claude — then an in-lesson AI tutor helps employees study the material at their own pace. The SvelteKit 5 and Hono API architecture backs a platform purpose-built for employee compliance training, customer education, and partner certification programs. Programs group courses into cohorts with team management, progress tracking, and goal setting. Live Kahoot-style quizzes drive real-time engagement during training sessions with automatic scoring and leaderboards. Exercises support multiple question types with automatic grading for multiple choice and AI-assisted evaluation for open-ended responses — teachers review and override all AI decisions. Branded certificates with custom IDs reward course completion. Custom domain mapping through Cloudflare lets organizations serve their learning portal under their own brand. MinIO provides S3-compatible storage for documents and video uploads. The REST API and signed webhooks enable programmatic enrollment and completion tracking, while an MCP server on npm supports AI-native authoring workflows. An embeddable widget drops the course catalog onto any website. Better Auth handles sessions and OAuth with optional SSO. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Frappe LMS is a learning management system built on the same Frappe Framework that powers ERPNext. The 3-level course hierarchy organizes content into courses, chapters, and lessons supporting videos, PDFs, SCORM packages, and rich HTML content with heading, code block, and list formatting through the redesigned inline lesson editor. Batch management groups learners by course and duration with scheduled instructor-led live sessions through integrated Zoom and Google Meet, where learners see upcoming classes on their batch dashboard. The assessment engine supports single-choice, multiple-choice, and open-ended quiz questions alongside assignment submissions as PDFs or documents, with progress tracking monitoring completion rates and quiz performance across all enrolled courses. Certificate generation uses built-in templates or custom designs to validate course completion, while the job board connects certified learners with opportunities. Course monetization integrates payment processing to transform courses into revenue streams with financial tracking. Role-based access controls assign Instructor, Learner, Admin, and Manager permissions, while course package import and export enables sharing structured content between instances. The platform integrates with ERPNext HR and CRM modules through the Frappe ecosystem with RTL language support and notification slide-overs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

Moodle gives teachers a place to build courses and learners a place to work through them, with quizzes, assignments, grading, and progress tracking on a learning platform you host yourself. Custom or weekly sections sit beside a course index, and Previous and Next buttons walk learners through activities in order. The activity chooser adds forums, wikis, glossaries, lessons, H5P content, and SCORM packages. Question banks can be shared across courses and track every edit, and quizzes combine calculated, ordering, and essay questions with due dates and Safe Exam Browser settings. Assignments offer in-browser PDF annotation, rubrics, and marking guides, and with a marking workflow several markers can leave separate feedback before grades are released. Peer assessment runs through workshops, competency frameworks feed learning plans, and Open Badges recognize achievement. With learning outcomes enabled, a course page lists each outcome beside the activities linked to it. Learners follow deadlines on a dashboard timeline, message classmates, and take course content offline in the official mobile app. Sign-in works through email self-registration, LDAP, Shibboleth, OAuth 2, or LTI, and enrollment through keys, cohorts, flat files, or PayPal. Administrators assign roles, build custom reports, and upload plugin ZIP files. AI actions can run on providers including OpenAI, Azure AI, Gemini, Ollama, and Anthropic Claude, and a course-level report shows how students use them. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0-or-later licensed.

LearnHouse delivers a modern open-source learning platform that replaces proprietary course builders with a self-hosted alternative shipping a rich feature set out of the box. The Tiptap-powered block editor supports videos, documents, embeds, quizzes, and file uploads in a Notion-like interface with real-time co-editing powered by Hocuspocus and Yjs CRDT synchronization over WebSocket. AI tutoring integrates Google Gemini and LlamaIndex for RAG-powered context-aware assistance that adapts to course content, while interactive Playgrounds use AI to generate simulations, diagrams, and learning exercises. The platform handles the full course lifecycle: chapters and activities organize into collections and learning paths, assignments support automated and manual grading, and code blocks execute student submissions in 30+ languages with auto-grading. Analytics dashboards track learner engagement, progress, and completion rates in real time. The backend runs on FastAPI with SQLModel and Alembic migrations against PostgreSQL 16 with pgvector for AI embeddings, while Redis handles caching and session management. The frontend builds on Next.js 16 with React 19 and Tailwind CSS v4. Deployment uses an interactive CLI wizard that configures domain, database, admin account, SSL via Let's Encrypt, and optional features like email via Resend, S3 storage, and Google OAuth, then generates a Docker Compose stack ready to start. On RepoCloud, deploy LearnHouse on a dedicated VPS with root SSH access, persistent PostgreSQL storage for your course data, and complete control over AI provider keys and branding customization, all under the AGPL v3 license.

With over 3,200 GitHub stars, 900 forks, and backing from the team behind ERPNext, Frappe Helpdesk delivers a modern, streamlined alternative to Zendesk and Freshdesk with unlimited agents, no per-seat pricing, and full source code access under the AGPL-3.0 license. Built on the Frappe Framework with a Python backend and Vue 3 frontend using Frappe UI, the application collects customer inquiries from email, web forms, and the customer portal into a centralized ticketing queue with complete conversation history and threaded replies. Customizable SLA rules define response and resolution timelines by ticket type or team, triggering automatic alerts and escalations when deadlines approach or are missed. Assignment rules route incoming tickets to the appropriate agents based on priority, issue type, or workload balancing, while manual reassignment and transfer between teams remains available at any time. The customer self-service portal lets users submit tickets, track status, and search a knowledge base of published help articles that reduce repetitive support requests. Agents access saved reply templates for consistent, rapid responses to common queries. Custom fields, configurable workflows, and saved views adapt the interface to match each organization's support process. Real-time updates via WebSocket push ticket changes instantly to all connected agents. The PWA-compatible interface provides mobile access without a native app. Frappe Framework compatibility spans versions 15 and 16. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

For self-hosters who want Git-driven container deployments without surrendering control of their existing reverse proxy or host networking, Dockerizalo provides a lightweight web platform that clones repositories, builds Docker images, and manages running services from a single dashboard. Point an application entry at any Git-compatible repository or public container registry image, configure custom build paths, and let the platform build and launch the container directly on your host Docker engine. A built-in template library accelerates database provisioning with pre-configured variables, networks, and persistent storage mounts. Through the web interface, operators manage environment secrets, bind-mounted volumes, custom Docker labels, and published TCP or UDP ports while coexisting peacefully alongside Caddy, Nginx, or Traefik setups. Per-application HTTP webhook triggers let teams automate continuous delivery from GitHub, GitLab, Gitea, or custom CI pipelines on every push event. Real-time paginated build and runtime container log streams prevent memory exhaustion on chatty APIs while keeping every deployment event visible. Configurable image retention policies automatically prune older tags and remove dangling images after each rollout so disk space stays clean. Multi-user account management allows homelab administrators to invite collaborators to the dashboard without sharing a single root credential. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Used by over 30,000 teams and 650+ enterprise customers managing more than 5.2 million containers, Rancher has earned recognition as a Leader in the Gartner Magic Quadrant for Container Management and the Forrester Wave for Multicloud Container Platforms. The platform provides a single pane of glass for provisioning, upgrading, and securing Kubernetes clusters across Amazon EKS, Google GKE, Microsoft AKS, RKE2, K3s, and any CNCF-conformant distribution. Multi-Cluster Management enables centralized authentication via Active Directory, LDAP, SAML, GitHub, and OpenID Connect with granular role-based access control at the cluster, project, and namespace levels. Fleet, the built-in GitOps engine, delivers continuous deployment across hundreds of clusters simultaneously using Helm charts, Kustomize, or raw YAML manifests from any Git repository. The integrated app catalog provides one-click deployment of Prometheus monitoring, Grafana dashboards, Longhorn persistent storage, Istio service mesh, and hundreds of community Helm charts. Rancher supports air-gapped installations for disconnected environments, CIS benchmark scanning for security compliance, and automated backup and restoration of cluster configurations. The dashboard offers real-time workload monitoring, log aggregation, pod shell access, and namespace-scoped resource quotas. Cluster templates enforce organizational standards through Helm-based provisioning policies that ensure consistent configurations across environments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

The Kubernetes project's own answer to cluster management UIs: maintained under SIG UI governance, Headlamp's roadmap tracks Kubernetes releases and its design philosophy reflects community needs rather than a vendor's product strategy. The React interface provides full read-write capabilities adapted to each user's RBAC permissions — delete, scale, edit, and restart buttons appear only when the authenticated user holds the corresponding cluster role, preventing accidental unauthorized actions. Multi-cluster support surfaces workloads across development, staging, and production from a single view without context switching. The plugin architecture drives extensibility through a curated catalog: an AI Assistant plugin answers natural-language cluster queries and performs operations via configurable LLM keys, Flux handles GitOps, Karpenter manages nodes. Integrated terminals provide browser-based exec access to running pods, live log streaming follows container output with filtering, and the YAML editor displays inline Kubernetes API documentation alongside resource definitions. Deployment creation forms let you configure containers, environment variables, volumes, and replicas without writing manifests. Side-by-side cluster comparison views surface differences in workload distribution. Works with any distribution: EKS, GKE, AKS, Minikube, Docker Desktop. Helm chart installation via the Headlamp repository with images on GitHub Container Registry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

The first container registry to reach CNCF graduated status with over 29,000 GitHub stars since VMware open-sourced it in 2016, Harbor transforms the basic Docker Distribution into a hardened enterprise registry with vulnerability scanning, supply chain signing, multi-datacenter replication, and project-level access control out of the box. Trivy scans every pushed image against the NVD, GitHub Advisory Database, and distribution-specific vulnerability feeds, with scan-on-push policies that block deployment of images exceeding configurable severity thresholds. Artifact signing through Cosign keyless signatures and Notation enforces content trust policies ensuring only cryptographically verified images reach production clusters. Policy-based replication synchronizes images and Helm charts between Harbor instances across multiple datacenters using repository, tag, and label filters with automatic retry and bandwidth throttling — enabling hybrid-cloud and disaster-recovery topologies. The RBAC model isolates projects with per-project quotas, robot accounts for CI/CD automation, webhook notifications, and audit logging that tracks every pull, push, delete, and configuration change. LDAP, Active Directory, and OIDC authentication integrate with existing identity providers, while the proxy cache transparently caches images from Docker Hub, Quay, and other upstream registries to reduce pull latency and rate-limit exposure. The RESTful API with embedded Swagger UI, tag retention policies, garbage collection scheduling, and immutable artifact rules complete the lifecycle management. Deploy via Docker Compose or Helm Chart on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

GCHQ open-sourced its "Cyber Swiss Army Knife", and CyberChef became the web app security analysts, incident responders, and CTF players reach for when data needs decoding, decrypting, or dissecting. Its interface is four panes: paste or drag input (files up to 2GB), search a categorized library of hundreds of operations, drag them into a recipe with arguments, and read the output. Operations span Base64, hex, and XOR encoding; AES, DES, and Blowfish encryption; classical ciphers from Caesar to Railfence; hashes and checksums; compression; regex and string extraction of IPs, domains, and URLs; timestamp conversion; and parsers for IPv6, X.509 certificates, and more. Recipes chain arbitrarily - convert from a hexdump then decompress, decrypt AES pulling the IV from the cipher stream, or let the Magic operation auto-detect several layers of nested encoding. Auto Bake re-runs the recipe live as input or arguments change, Step executes one operation at a time for debugging, and flow control (forks, subsections, registers) applies different operations to different parts of the data. Recipes save to files or share as URLs encoding the full pipeline. Crucially, CyberChef is entirely client-side JavaScript - nothing uploads anywhere - and self-hosting guarantees an unmodified copy inside your own network, where malware artifacts belong.

Autonomous red team execution without manual script coordination is what PentaGI delivers through a multi-agent penetration testing platform engineered for automated security assessments. Security engineers configure testing scopes, target IP ranges, domain lists, and rules of engagement through an interactive web console with real-time execution graphs. Autonomous agent personas break down high-level assessment goals into discrete tactical phases, orchestrating network port discovery, service banner fingerprinting, web application crawling, and CVE verification. Specialized agents query integrated Graphiti knowledge graphs and local vulnerability repositories to synthesize attack paths, validate exploitability, and confirm finding veracity before issuing alerts. Operators monitor live agent terminal streams, inspect sandboxed tool executions, and adjust active LLM provider routes across OpenAI, Anthropic, or local Ollama endpoints. The template editor allows red teams to compose reusable testing playbooks with customizable security prompt chains, safety constraints, and automated remediation reporting. Audit logs capture full command histories, raw tool outputs, and LLM reasoning steps to generate compliance-ready technical documentation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Xalgorix delivers AI-driven penetration testing that proves vulnerabilities exist rather than guessing, pairing an autonomous LLM agent with an independent exploit verifier that re-exploits every finding before it reaches your report. The 22-phase methodology mirrors how a skilled human pentester works through an engagement, covering reconnaissance, subdomain enumeration, port scanning, web crawling, parameter fuzzing, SQL injection testing, XSS detection, authentication bypass, API testing, and more. Select all phases or pick specific ones per target. The platform ships with 85+ offensive security tools preinstalled (nmap, nuclei, httpx, subfinder, katana, ffuf, gobuster, sqlmap, masscan, dalfox, feroxbuster) plus 14 built-in agent tools for browser automation, terminal execution, and note-taking. Connect your own LLM provider (OpenAI, Anthropic, DeepSeek, Gemini, Groq, Ollama, or MiniMax) so no scan data or target information leaves your infrastructure. The web dashboard on port 9137 provides live WebSocket telemetry showing tool calls, agent reasoning, and findings as scans progress. A findings index with CVSS scoring and severity filters organizes results, and branded PDF reports include your company name and logo. Wildcard and multi-target scans handle red team attack-surface mapping, while source-code scanning audits repositories directly without requiring a deployed target. A REST API enables scripted scans and SIEM pipeline integration, and webhooks push notifications to Discord or Telegram. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.