All open source tools

Convert Android APK, DEX, and AAB files into readable Java source code with a free CLI and GUI decompiler that includes built-in deobfuscation.

Statlite

Monitor Spring Boot, Quarkus, and Micronaut apps from a self-hosted Go binary with SQLite history and built-in charts, no Prometheus stack needed.

Homeio

Replaces Portainer Business

Manage your home server from a browser-based desktop with Docker app management, file browsing, real-time metrics, and remote access via Tailscale.

iFixAi

Replaces Zenity

Monitor AI agents for unauthorized actions, hidden information, and policy violations with an independent Apache-licensed Python audit tool.

Sync private GitHub repos as a macOS drive with Finder integration, on-demand file downloads, real git history, and optional end-to-end encryption.

Bifrost

Replaces Portkey

Connect any AI SDK to 23+ LLM providers through a unified gateway, with automatic failover, semantic caching, MCP support, and 11µs overhead at 5,000 RPS.

Keda

Replaces Kedify

Scale Kubernetes workloads based on event metrics from 70+ built-in scalers, including queues, databases, and cloud services, with scale-to-zero support.

Pulse

Monitor Windows system events in plain language with a local AI assistant. MIT-licensed, read-only, no telemetry, and no cloud required.

Build and self-host a multi-protocol proxy core supporting XTLS, VLESS, and REALITY protocols for private network routing and censorship bypass.

Run a Pi-hole-style DNS ad-blocker on a $2 ESP32-C3 board, with a web dashboard and over-the-air blocklist and firmware updates.

OpenShell

Replaces E2B

Run autonomous AI agents in kernel-isolated sandboxes with declarative YAML policies for files, network access, and credentials.

openbao

Replaces Akeyless

Manage secrets, certificates, and keys with an open source, MPL-2.0-licensed fork of HashiCorp Vault governed by the Linux Foundation.

mvt

Replaces iVerify

Analyze Android and iOS devices for signs of spyware and targeted compromise using forensic artifact extraction and public indicator scanning.

Secure any codebase with a six-phase AI-agent audit that maps attack surfaces, hunts vulnerabilities, and validates each finding with an independent verifier.

Analyze Android APKs and find code references in milliseconds. A stateless decompiler front-end that treats APKs as databases, avoiding heavy preprocessing.

flowsint

Replaces IBM i2 Analyst's Notebook

Visualize entity relationships and investigate OSINT data on a self-hosted graph tool with pluggable domain, IP, social, and email enrichers.

Build a specialized offensive-security operator inside Claude with 78 structured SKILL.md files spanning web, AD, wireless, and exploit development.

pentagi

Replaces NodeZero by Horizon3.ai

Automate penetration testing with a multi-agent AI system that handles reconnaissance, planning, and exploitation using 20-plus built-in tools in Docker.

Run TCP tunnels through Yandex Docs or MAX WebRTC transports, surfacing a SOCKS5 proxy on localhost. GPL-3.0 Go tool with Android and iOS clients.

ship-safe

Replaces GitHub Advanced Security

Secure AI-native codebases with 29 parallel security agents that detect LLM vulnerabilities, MCP misconfigs, hardcoded secrets, and supply chain risks.

Orchestrate reverse engineering and penetration testing workflows with AI skill routing: 43 rules cover APK, binary, JS, CTF, firmware, and malware scenarios.

Search and download iOS, iPadOS, tvOS, and visionOS app packages from the Apple App Store via the command line. MIT-licensed CLI written in Go.

Doberman-Core

Replaces AuthZed

Secure AI coding agents at runtime with adaptive authorization, blocking dangerous tool calls before they execute. Apache 2.0, pip-installable, local-first.