Web-Check
Enter a URL and get a dashboard of everything publicly discoverable about its security posture, server architecture, and technology stack: Web-Check is an all-in-one OSINT tool for analyzing any website. One scan surfaces IP info and server location, the full SSL certificate chain with issuing authority and validity, DNS records (A, MX, NS, CNAME, TXT) with DNSSEC status, HTTP response headers interpreted for security directives like HSTS, CSP, and X-Frame-Options, cookies and their flags, WHOIS domain info, robots.txt crawl rules, a sitemap-derived page map, the redirect ledger, open ports, traceroute, detected technologies, third-party trackers, associated hostnames, site performance, and even carbon footprint. Each card explains what the data means and why it matters, which makes the tool double as a security education resource - junior engineers learn headers and attack surfaces by scanning real sites. Practical uses span pre-deployment security audits (catch missing headers and misconfigurations before they ship), privacy compliance checks (identify trackers and cookie behavior for GDPR work), competitive tech-stack research, and network debugging via DNS and redirect inspection. Built by Lissy93 in TypeScript, it deploys as a single Docker container, and self-hosting keeps your reconnaissance targets and audit activity off third-party services.
RStudio Server
Open a browser tab, sign in, and the whole RStudio workbench is waiting there, running against R on a Linux server instead of your laptop. The familiar four-pane layout holds a source editor, an R console, Environment and History tabs, and Files, Plots, Packages, Help, and Viewer tabs. The editor opens R scripts, R Markdown, Quarto, and Python files, with code completion, diagnostics, section outlines, and a visual mode for Quarto documents. A Terminal tab and a Python console sit beside the R console, and the Data Viewer sorts, filters, and searches data frames and nested lists. Editor breakpoints and tracebacks help debug functions, while Background Jobs run long scripts in separate R sessions so the IDE stays usable. Shiny apps and Plumber APIs run as background jobs with live reload, and a Git pane handles diffs, commits, pushes, and branches. The Connections tab browses databases, and finished reports go to Posit Connect, shinyapps.io, Quarto Pub, or RPubs. Optional Posit Assistant adds an AI chat pane that works with the model provider you choose, and administrators can switch it off. Because everything runs server-side, a class, a lab, or a team can share one large-memory machine and keep computation next to the data without installing anything locally. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
ntopng
Network traffic stops being a mystery once ntopng names the hosts, applications, and protocols behind every flow, live in your browser. To find the host saturating an uplink, open the dashboard, which ranks top talkers, countries, autonomous systems, and protocols beside historical charts. To see what a suspicious host is contacting, open its page for traffic, ports, DNS queries, TLS details, and visited sites, plus a map of its conversations. Deep packet inspection recognizes applications such as Facebook, YouTube, and BitTorrent, so charts name the app behind the bytes instead of relying on port numbers alone. The console reads packets from a SPAN port or TAP and NetFlow, sFlow, or IPFIX records from routers and switches through nProbe, so it can cover a single switch or many remote sites. Behavioural checks raise alerts for flows, hosts, and interfaces and send them to email, Discord, Telegram, or webhooks. Active monitoring probes remote hosts over ICMP and HTTP/S, and network discovery lists the devices on your local network. A REST API and Lua scripting pull statistics into your own tools and add custom checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
GeoLens
Transforming scattered spatial files into an interactive data catalog, GeoLens empowers engineering and GIS teams to organize geospatial assets, execute semantic searches, and build interactive 3D maps on self-hosted infrastructure. Users can ingest shapefiles, GeoJSON boundaries, database tables, and Cloud-Optimized GeoTIFF rasters into a centralized inventory with automatic source freshness auditing. Natural language queries evaluate dataset relevance across spatial boundaries and thematic tags, allowing analysts to uncover hydrology networks or zoning footprints without knowing exact layer names. The browser-based composition canvas lets cartographers extrude three-dimensional building footprints, overlay elevation terrain contours, color features by attribute values, and reorder layer hierarchies with drag-and-drop ease. Finished map projects publish immediately as secure shareable web links or responsive embeds for external dashboards. Desktop GIS operators can connect directly from QGIS or ArcGIS through native OGC API Features and STAC endpoints to query live vector tiles and run spatial filters. Teams can export filtered geometries into GeoPackage, FlatGeobuf, GeoParquet, or PMTiles archives to support downstream analysis workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Watchtower
Watchtower puts AI-driven security assessments into one web console, where sessions probe your attack surface while every request, finding, and piece of evidence is captured as it happens. The AI session console follows the attack surface, session progress, tool calls, and findings as an assessment runs, so you can watch an engagement unfold instead of reading a log afterwards. A built-in proxy workflow records HTTP and HTTPS traffic history with highlighted patterns, and any captured request can be sent to the Repeater for editing, replay, and response comparison. Mobile work is covered too: connect phones over USB or wireless, capture app traffic separately from accessibility control, and import WeChat mini-program packages to configure an assessment session. A public vulnerability intelligence library can be searched by component, severity, and source and kept synchronized locally, giving assessments current context without sending your targets anywhere. Findings are managed by source, severity, and status, each linked back to its supporting evidence, and the report editor assembles them with a live preview, impact notes, and remediation guidance. The dashboard tracks assets, tasks, AI sessions, token usage, and runtime resources, and task admission is budgeted against physical memory so heavy scans do not starve the host. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
D-Tale
If your data lives in a pandas DataFrame, D-Tale gives it a spreadsheet-style grid, a column profiler, and a chart builder in the browser, started with one call from a notebook or script. In the grid you sort, filter, and edit cells inline, lock, hide, reorder, rename, or reformat columns from their menus, and open a Describe view with each column's distribution, summary statistics, outliers, and missing values, while highlight modes color dtypes, outliers, and numeric ranges across the whole table. Correlation matrices, a predictive power score, and duplicate reports sit beside dataframe functions that add numeric, binned, date, random, and type-converted columns, and Merge & Stack combines dataframes, including ones uploaded from Excel files. The chart builder draws line, bar, stacked, pie, wordcloud, heatmap, 3D scatter, surface, and map charts with grouping and aggregation, exports them as standalone HTML, and a network viewer graphs relationships between nodes. Whatever you build in the interface can be exported as reproducible Python code, and data can be saved as CSV or TSV. Launch it from Jupyter, Google Colab, Kaggle, a terminal, or the command line with a CSV path, protect it with optional authentication, and choose light or dark themes and English or Chinese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LGPL-2.1 licensed.