14 applications / Identity & security tools
Identity providers, password vaults, secrets services and DNS tools have different trust boundaries. This collection is for evaluating the software and operational responsibility involved, with compatibility and recovery checked before deployment.
Explore the applications
KeycloakGive applications a central sign-in service.
authentikBring sign-in policies into one administration space.
AutheliaAdd an authentication layer to protected services.
KanidmManage identities with a focused directory service.
BitwardenRun an official Bitwarden server environment.
PassboltShare team credentials with defined access.
OpenBaoBuild a controlled service for application secrets.
AdGuard HomeApply DNS filtering to a network you manage.
Pi-holeManage network-level DNS filtering.
step-caOperate a certificate authority for your own systems.Browse this collection
14 applications to explore
SecurityYour codes. Your own home.
View hosting & requirementsSecurityApply DNS filtering to a network you manage.
View hosting & requirementsSecurityAdd an authentication layer to protected services.
View hosting & requirementsSecurityBring sign-in policies into one administration space.
View hosting & requirementsSecurityRun an official Bitwarden server environment.
View hosting & requirementsTurn supported security signals into response rules.
View hosting & requirementsGive application secrets a managed lifecycle.
View hosting & requirementsSecurityManage identities with a focused directory service.
View hosting & requirementsSecurityGive applications a central sign-in service.
View hosting & requirementsSecurityBuild a controlled service for application secrets.
View hosting & requirementsSecurityShare team credentials with defined access.
View hosting & requirementsSecurityManage network-level DNS filtering.
View hosting & requirementsSecurityOperate a certificate authority for your own systems.
View hosting & requirements
SecurityYour password workspace, self-hosted.
View hosting & requirementsChoose with confidence
Use test accounts and non-production secrets. Verify denied access as well as successful access, rotate a credential and rehearse recovery from a separate administrative account. Document the keys and dependencies a restore requires.
A central sign-in service can become essential to every connected app. A vault or certificate authority protects especially important material. Understand what stops working if the service is unavailable.
Write down how administrators regain access and restore the system. Some tools need encryption keys or user-held recovery material in addition to a server backup.
Proxy rules, client settings and network access are part of the security model. Review them with someone qualified to operate the system before it protects sensitive services.
Bring to the hosting conversation: Authentication model, key custody, privileged access, networking and recovery procedures.
