Fleet management for Macs & servers
Administer many machines from one Mac; audits, deploys and drift detection over SSH.
Link macOS, Linux, BSD and Windows servers over SSH (Windows via its built-in OpenSSH Server) and operate them as a fleet: run one command across every node, compare a file's checksum to find configuration drift, tail logs, health-check sites over loopback, check TLS expiry across the fleet, and deploy with rsync. Windows hosts are also auto-detected on the network (MS-RPC/SMB fingerprinting), including VMs (Parallels/Hyper-V/VMware). Privileged actions use a saved sudo password through the helper.
Old Macs and Raspberry Pis, too
Old hardware doesn't have to be orphaned. Keep that vintage Xserve or Mac mini still running macOS Server useful by managing it remotely over SSH; services, sites, certificates and security, from your current Mac. And because a Raspberry Pi runs Debian-based Linux, FrontierStack links it like any other Linux node: manage packages, services, Docker, cron and storage on a whole shelf of Pis (and other single-board computers) from one window.
Services we install or monitor for this
This preset shows 421 services in 24 categories. FrontierStack can install, connect or monitor them for this job.
Security Tools81
- AbuseIPDB; Crowd-sourced IP reputation / blocklist (cloud API)
- AdGuard; Ad/tracker blocker app + AdGuard DNS & VPN (commercial)
- Admin By Request; Endpoint privilege management / just-in-time admin (agent + API)
- Airlock Digital; Application allowlisting & execution control (agent + API)
- AlienVault OTX; Open Threat Exchange IOC feed (cloud)
- AutoElevate (CyberFOX); MSP privilege elevation & local-admin control (agent + API)
- BeyondTrust EPM; Endpoint Privilege Management for Mac (agent + API)
- binwalk; Firmware / embedded-file carving & analysis (self-hosted)
- Bitdefender GravityZone; Endpoint protection / EDR (macOS agent + API)
- BlockBlock; Monitor & block persistence in real time (self-hosted)
- Burp Suite; Web app security testing; intercepting proxy & scanner (macOS app)
- capa; Detect capabilities in executables (self-hosted)
- CAPE Sandbox; Malware sandbox w/ config extraction (self-hosted)
- Censys; Internet-wide host & certificate search (cloud API)
- ClamAV; Open-source antivirus engine (self-hosted)
- Cloudmersive; Virus-scan & content-protection API (cloud / self-host)
- Cortex; Observable analysers & responders engine (self-hosted)
- CrowdSec; Behavioural detection + IP blocking (crowd-sourced)
- CrowdStrike Falcon; Cloud-native EDR/XDR (macOS sensor + API)
- Cuckoo Sandbox; Automated malware-analysis sandbox (self-hosted)
- CyberArk EPM; Endpoint Privilege Manager (agent + API)
- CyberChef; The cyber-Swiss-army-knife for data
- Fail2ban; Bans IPs after suspicious activity (intrusion prevention)
- Fleet; Self-hosted osquery fleet manager (web UI + API)
- Fuzzilli; Coverage-guided JavaScript engine fuzzer (reviewed local binaries)
- Google Safe Browsing; Is your site flagged as malicious by Chrome? (cloud API)
- GreyNoise; Is this IP scanning everyone, or targeting you? (cloud API)
- GRR Rapid Response; Remote live-forensics / IR framework (self-hosted)
- Hands Off!; Per-app network + disk access control (app)
- Huntress; Managed EDR/MDR for SMB & MSPs (agent + API)
- Hybrid Analysis; Malware sandbox (Falcon Sandbox); API
- Intego NetBarrier; Intego's two-way Mac firewall (NetBarrier X9 / Intego ONE)
- IntelOwl; OSINT / threat-intel analysis platform (self-hosted)
- Jamf Protect; Mac-native endpoint security (agent + API)
- KnockKnock; Reveal persistently installed Mac software (self-hosted)
- Kolide; Device trust & posture (osquery-based agent + API)
- LimaCharlie; API-first SecOps cloud / EDR (agent + API)
- Little Snitch; Commercial network monitor & firewall (macOS app)
- LuLu; Free open-source outbound firewall (macOS app)
- Malwarebytes; Anti-malware (macOS app; business via Nebula API)
- Microsoft Defender for Endpoint; Microsoft EDR for macOS (agent + Graph API)
- MISP; Threat-intelligence sharing platform (self-hosted)
- Mozilla Observatory; Graded HTTP header & TLS scan for your own sites (free API)
- Murus; GUI front-end for the macOS pf firewall (app)
- NetBarrier; Two-way macOS firewall (Intego, app)
- Nuclei; Template-based vulnerability scanner (self-hosted CLI)
- oletools; Analyse malicious Office docs / OLE (self-hosted)
- OpenCTI; Cyber threat-intelligence platform (self-hosted)
- OpenEDR; Open-source endpoint detection & response (self-hosted)
- OpenPhish; Live phishing-URL feed (cloud)
- OpenVAS / Greenbone; Vulnerability scanning (self-hosted)
- OPSWAT MetaDefender; Multi-engine malware scanning & file CDR (self-hosted / API)
- osquery; Query your endpoint like a database (agent)
- OSSEC; Host-based IDS: log, file-integrity & rootkit monitoring
- OWASP ZAP; Open-source web-app security scanner (DAST); spider, active scan, proxy
- pfBlockerNG; IP & DNS blocklists for pfSense (DNSBL ad/malware blocking)
- Phishing Catcher; Catch phishing domains from CT logs (self-hosted)
- radare2; Reverse-engineering framework / disassembler (self-hosted)
- Radio Silence; Lightweight macOS outbound firewall (app)
- Santa; macOS binary allowlisting / blocklisting (self-hosted)
- SentinelOne; Autonomous EDR/XDR (macOS agent + API)
- Shodan; Search engine for internet-exposed hosts and services (cloud API)
- Snort; The classic network IDS (self-hosted)
- Sophos Central; Endpoint protection / MDR (macOS agent + API)
- Strix; AI-assisted penetration testing from the local CLI
- Suricata; High-performance IDS/IPS engine (self-hosted)
- TheHive; Security incident-response platform (self-hosted)
- ThreatLocker; Zero Trust app allowlisting & endpoint control (agent + cloud portal)
- URLhaus; Malware-URL feed & lookup API (cloud · abuse.ch)
- urlscan.io; Sandboxed URL scanning; see what a link really does (cloud API)
- Vallum; Per-app outbound firewall & throttle (app)
- Velociraptor; Endpoint visibility & DFIR hunting (self-hosted)
- Vibe Proxy; AI-assisted web security testing & intercepting proxy
- VirusTotal; Multi-engine file/URL reputation (API)
- Volatility 3; Memory-forensics framework (self-hosted)
- Wireshark; Packet capture and protocol analysis for network diagnosis
- Yakit; Open-source web security testing platform & MITM (macOS app)
- YARA; Pattern-matching engine for malware (self-hosted)
- YARA-X; YARA rewritten in Rust; faster CLI scanner (self-hosted)
- Zeek; Network security monitor / traffic analysis (self-hosted)
- Zenarmor; Next-gen firewall / DPI layer for OPNsense & pfSense (formerly Sensei)
Monitoring46
- Alertmanager; Route and deduplicate Prometheus alerts (self-hosted)
- AppSignal; Application errors, performance, uptime and deploys (SaaS)
- Atatus; APM, logs, infrastructure and real-user monitoring (SaaS)
- Atera; RMM, patching, ticketing and automation (SaaS)
- Beszel; Lightweight server monitoring hub + agents
- Checkmk; Auto-discovering IT monitoring (self-hosted)
- Datadog; Hosted metrics, logs, traces and synthetics (SaaS)
- Dynatrace; Enterprise observability and AIOps platform
- FirstWave NMIS; Open network fault, performance and configuration monitoring
- Glances; Cross-platform system monitor (web/API)
- GoAccess; Real-time access-log analyser (CLI/HTML)
- Grafana; Dashboards for any data source (self-hosted)
- Healthchecks.io; Cron & heartbeat monitoring (cloud or self-hosted)
- Homepage; Self-hosted services dashboard (gethomepage.dev)
- Honeycomb; Observability for high-cardinality events and traces
- Infraon IMS; Unified infrastructure, network and configuration monitoring
- LibreNMS; Auto-discovering SNMP network monitoring (switches, routers, servers)
- ManageEngine Applications Manager; Application, server, VM and capacity monitoring
- ManageEngine OpManager Nexus; Unified network, server and IT operations management
- Matomo; Full-featured self-hosted web analytics
- N-able N-central; Unified endpoint management, RMM and patching
- Nagios Core; The classic check-based monitor (self-hosted)
- Netdata; Real-time system metrics dashboard
- Netreo; Full-stack infrastructure and business-service observability
- New Relic; Hosted APM, infrastructure and logs (SaaS)
- NinjaOne; Endpoint monitoring, patching and automation (SaaS RMM)
- Node Exporter; Unix host metrics for Prometheus (self-hosted)
- ntopng; Live traffic analysis; who is talking to whom, and how much
- NUT (Network UPS Tools); UPS monitoring server (upsd) for many devices
- Paessler PRTG; Network, server and infrastructure monitoring (Windows or hosted)
- Pandora FMS; Infrastructure, application, log and synthetic monitoring
- PeaNUT; Modern web dashboard for NUT UPS servers
- Plausible; Lightweight, privacy-first analytics
- Prometheus; Time-series metrics & alerting (self-hosted)
- Pulseway; Mobile-first RMM, patching and endpoint automation
- Scrutiny; S.M.A.R.T. drive health dashboard
- Sentry; Error tracking and performance monitoring
- Server Density; Hosted server, service and container monitoring
- Site24x7; Infrastructure, application, network and experience monitoring (SaaS)
- Speedtest Tracker; Scheduled internet speed tests + history
- Umami; Simple, privacy-focused analytics (Node)
- Uptime Kuma; Self-hosted uptime monitor
- UptimeRobot; Cloud uptime/SSL monitoring with status pages
- Windows Exporter; Windows host metrics for Prometheus (remote)
- Zabbix; Enterprise monitoring; agents, SNMP, triggers (self-hosted)
Policy, Compliance & Governance46
- Amundsen; Open-source data discovery & metadata engine (self-hosted)
- Apache Atlas; Metadata & governance for the Hadoop/data ecosystem (self-hosted)
- Aserto / Topaz; Authorization built on OPA + Zanzibar (self-hosted / cloud)
- AuditBoard; Connected risk, audit & compliance platform (cloud)
- Authzed / SpiceDB; Zanzibar-style permissions database (self-hosted / cloud)
- AWS Config; Native AWS resource configuration & compliance (API)
- AWS Security Hub; Aggregated AWS security findings & standards (API)
- BigID; Data discovery, privacy & governance at scale (cloud)
- Checkov; Static policy scanning for IaC (self-hosted CLI)
- Cloud Custodian; Rules engine for cloud governance & remediation (CLI)
- CloudQuery; Cloud asset inventory as SQL (self-hosted CLI)
- Conftest; Test config files against OPA/Rego policies (CLI)
- DataGrail; Privacy platform; DSR & data mapping automation (cloud)
- DataHub; Open-source metadata platform & data catalogue (self-hosted)
- Drata; Continuous compliance automation & audit readiness (cloud)
- Eramba; Open-source GRC platform (self-hosted)
- Everlaw; Cloud litigation & eDiscovery platform (cloud)
- Google Vault; Retention, legal hold & eDiscovery for Google Workspace (cloud)
- HashiCorp Sentinel; Policy as code for the HashiCorp stack (CLI)
- Hyperproof; Compliance operations & evidence management (cloud)
- immudb; Immutable, cryptographically-verifiable database / audit log (self-hosted)
- Kyverno; Kubernetes-native policy engine, no new language (self-hosted)
- LogicGate Risk Cloud; No-code GRC & risk workflow platform (cloud)
- Logikcull; Self-service eDiscovery & legal hold (cloud, Reveal)
- Microsoft Purview; Data governance, compliance, retention & eDiscovery (cloud)
- MineOS; Data-governance & privacy operations platform (cloud)
- OneTrust; Privacy, GRC & data governance suite (cloud)
- OPA Gatekeeper; OPA policy admission controller for Kubernetes (self-hosted)
- Open Policy Agent (OPA); General-purpose policy engine, Rego (self-hosted CLI)
- OpenControl; Compliance-as-code documentation toolkit (self-hosted CLI)
- OpenFGA; Open-source fine-grained authorization (Zanzibar-style, self-hosted)
- OpenGRC; Open-source governance, risk & compliance (self-hosted)
- OpenMetadata; Open-source metadata, catalogue & lineage platform (self-hosted)
- Osano; Consent management & privacy compliance (cloud)
- Permify; Open-source fine-grained authorization service (self-hosted)
- Prowler; Open-source multi-cloud security & compliance scanner (CLI)
- Scout Suite; Multi-cloud security-auditing tool (CLI)
- Secureframe; Compliance automation across 40+ frameworks (cloud)
- Securiti; Data privacy, security & governance platform (cloud)
- SimpleRisk; Open-source risk management (self-hosted)
- Smarsh; Communications capture, archiving & supervision (cloud)
- Sprinto; Compliance automation for fast-moving teams (cloud)
- Steampipe; Query cloud APIs with SQL + compliance mods (CLI)
- Thoropass; Compliance + audit in one (formerly Laika, cloud)
- Transcend; Privacy & data-rights automation, incl. AI governance (cloud)
- Vanta; Automated compliance; SOC 2, ISO 27001, HIPAA, GDPR (cloud)
Containers40
- Apple Container; Apple's native `container` tool; Linux containers in per-container VMs
- Azure Local; Azure Stack HCI successor; monitored via Azure ARM, no local API
- Colima; Container runtimes on macOS via Lima (Docker/containerd/k8s)
- Dev Containers (VS Code); Reproducible dev environments in a container
- Docker Swarm; Docker-native clustering (docker swarm / stack)
- Helm; The Kubernetes package manager (charts)
- HPE Morpheus; Hybrid-cloud management & orchestration (REST API)
- Hyper-V Live Migration; Move running Hyper-V VMs between hosts with no downtime
- k0s; Zero-friction single-binary Kubernetes
- k3d; k3s in Docker; lightweight multi-node clusters
- K3s; Lightweight certified Kubernetes (self-hosted)
- kind; Kubernetes IN Docker; disposable clusters
- kubeadm; The official cluster bootstrapper (vanilla K8s)
- Kubernetes; The container orchestrator (kubectl)
- Lima; Linux virtual machines (container machines) on macOS
- MicroK8s; Canonical's low-ops Kubernetes (snap)
- Microsoft Hyper-V; Windows Server hypervisor (Type-1)
- minikube; Local single-node Kubernetes for development
- nerdctl; Docker-compatible CLI for containerd
- Nomad; HashiCorp workload orchestrator (self-hosted)
- Nutanix; HCI platform; AHV hypervisor + Prism management
- OpenShift / OKD; Red Hat's enterprise Kubernetes platform
- OpenShift Virtualization; Run VMs alongside containers on OpenShift (KubeVirt)
- OpenStack; Open-source private-cloud IaaS platform
- OrbStack; Fast Docker & Linux machines for macOS
- Platform9; Managed Kubernetes / private cloud (SaaS control plane)
- Podman; Daemonless, Docker-compatible containers
- Portainer; Web UI for Docker & Kubernetes (self-hosted)
- Proxmox VE; Open-source virtualization; KVM VMs + LXC containers
- Proxmox VE Live Migration; Live-migrate KVM VMs across Proxmox cluster nodes
- Rancher; Multi-cluster Kubernetes management (self-hosted)
- Rancher Desktop; Desktop Kubernetes + container runtime for Mac
- RKE2; Rancher's security-focused Kubernetes (Gov-grade)
- Scale Computing HyperCore; SC//HyperCore HCI appliance (HC3); REST API on :443
- Talos Linux; API-managed immutable OS made for Kubernetes
- VergeOS; Verge.io; integrated virtualization, storage and networking
- VMware vMotion; Live-migrate running VMs between ESXi hosts
- VMware vSphere; Enterprise virtualization; ESXi hypervisor + vCenter
- Watchtower; Auto-update running Docker containers
- XCP-ng; Open-source Xen hypervisor (XenServer alternative)
Fleet & Remote24
- AnyDesk; Cross-platform remote desktop
- Apache Guacamole; Clientless RDP, VNC and SSH gateway
- ATEN KVM over IP; KVM-over-IP switches & dongles (web UI)
- CloudRay; Hosted Bash automation, scheduling and fleet execution
- Cockpit; Browser console for Linux servers and Raspberry Pi
- CtrlOps; Local-first AI, SSH and Linux server management
- GL.iNet Comet (GL-RM1); Compact KVM-over-IP with a browser console
- GL.iNet Comet Pro (GL-RM10); KVM-over-IP with a built-in smart power plug
- ITmanager.net; Mobile and desktop server administration service
- JetKVM; Compact, low-cost KVM-over-IP device
- Jump Desktop; Fast, secure remote desktop (RDP/VNC/Fluid)
- Level RMM; Browser RMM with peer-to-peer remote access
- MeshCentral; Self-hosted web RMM and remote control
- NanoKVM; Sipeed open KVM-over-IP (RISC-V)
- PiKVM; Open-source KVM-over-IP (Raspberry Pi)
- Raritan Dominion KX; Enterprise KVM-over-IP switch (web UI)
- RustDesk; Open-source remote desktop with optional self-host relay
- Screens; Polished VNC client for Mac & iOS (Edovia)
- ServerBuddy; Native Mac console for Linux servers
- Tactical RMM; Open-source RMM for Windows-focused fleets
- TinyPilot; KVM-over-IP appliance (web UI)
- Windows Admin Center; Browser-based management for Windows Server fleets
- Windows Remote Desktop; RDP access to Windows machines
- WinRM / PowerShell Remoting; Remote command channel for Windows servers
Knowledge & Memory23
- AFFiNE; Docs + whiteboard + database (Notion/Miro alt.)
- AppFlowy; Open-source Notion alternative (docs/boards/DBs)
- BookStack; Self-hosted docs/wiki organised as books (PHP)
- Docmost; Open-source collaborative wiki & docs (Confluence/Notion alt.)
- DokuWiki; Flat-file PHP wiki; the closest macOS Server "Wiki" replacement
- Graphify; Turn a codebase into a queryable knowledge graph (AI coding-assistant skill)
- GraphRAG; Graph-based retrieval-augmented generation (Microsoft)
- Joplin Server; Sync server for Joplin notes (E2EE)
- Karakeep; AI bookmark/read-it-later (formerly Hoarder)
- Khoj; Self-hosted AI second brain; chat with your notes, docs and the web
- Linkding; Minimal, fast self-hosted bookmark manager
- Logseq; Local-first outliner & PKM (Markdown/Org)
- MediaWiki; The wiki engine behind Wikipedia (PHP/MySQL)
- Memos; Lightweight, privacy-first notes/memo hub
- Notion; Workspace; docs, wikis, databases (cloud)
- Outline; Self-hosted team knowledge base (real-time)
- Readwise; Highlights sync & read-later (cloud API)
- Shiori; Simple self-hosted bookmark manager (Go)
- SurfSense; Self-hosted NotebookLM/Perplexity alternative
- Trilium Notes; Hierarchical personal notes (self-hosted server + app)
- Wallabag; Self-hosted read-it-later (Pocket alternative)
- Wiki.js; Modern self-hosted wiki (Node.js)
- Zotero; Reference & research manager (app + API)
Databases16
- Apache Cassandra; Distributed wide-column database
- Apache CouchDB; Document database with HTTP API and sync
- CockroachDB; Distributed SQL database
- Couchbase Server; Distributed document, key-value and search database
- Firebase; Google's backend-as-a-service; Firestore, Auth, Storage, Functions (cloud)
- Microsoft SQL Server; Microsoft relational database for Windows and Linux
- MongoDB; Document (NoSQL) database
- Neo4j; Graph database with Cypher query language
- Neon; Serverless Postgres; autoscaling & branching (cloud API)
- Oracle Database; Enterprise relational database
- Patroni; HA PostgreSQL; automatic failover
- PlanetScale; Hosted MySQL with database branching (cloud API)
- PocketBase; Open-source backend in one file (SQLite + auth + realtime)
- PostgREST; Instant REST API over a PostgreSQL database
- ScyllaDB; High-performance Cassandra-compatible database
- Turso; Distributed SQLite (libSQL) at the edge (cloud API)
Mail15
- Apache SpamAssassin; Rule-based spam classifier (self-hosted)
- Dovecot; IMAP/POP3 mail delivery server
- HEY; 37signals hosted email & calendar (Imbox, Screener, Paper Trail)
- Inbox Zero; Open-source AI email assistant (self-hosted)
- Maddy Mail Server; Composable single-binary mail server (SMTP/IMAP)
- mailcow; Dockerized full mail-server suite (self-hosted)
- MailScanner; Email security framework / gateway (self-hosted)
- Modoboa; Mail hosting & management platform (self-hosted)
- OpenDKIM; DKIM signing & verification milter (self-hosted)
- OpenDMARC; DMARC policy filter & reporting (self-hosted)
- Postfix; SMTP mail transfer agent
- Proton; Encrypted mail, VPN, drive & passwords (cloud)
- Proxmox Mail Gateway; Anti-spam/AV email gateway appliance (self-hosted)
- Rspamd; Fast spam-filtering system (self-hosted)
- Stalwart Mail Server; Secure mail server (SMTP/IMAP/JMAP)
Accounting & ERP13
- Actual Budget; Fast local-first envelope budgeting
- ERPNext; Open-source ERP; accounting, inventory, HR (self-hosted)
- Expensify; Expense & receipt management (cloud API)
- Firefly III; Self-hosted personal finance manager
- freee; Japanese cloud accounting & HR (cloud)
- Ghostfolio; Open-source wealth/investment tracker
- Invoice Ninja; Self-hosted invoicing & payments
- Maybe; Open-source personal finance / net worth
- Money Forward Cloud; Japanese cloud accounting & back office (cloud)
- Odoo; Open-source ERP suite; self-hosted (Python + PostgreSQL)
- Plaid; Bank account linking & financial data (cloud API)
- QuickBooks; Intuit cloud accounting (cloud)
- Xero; Cloud accounting for small business (cloud)
MDM & Device Management13
- Addigy; Cloud Apple MDM for MSPs & IT teams (agent + API)
- AutoPkg; Automated macOS software packaging (CLI)
- baramundi Management Suite; Modular UEM, patching, inventory and endpoint automation
- Fleet (Apple MDM); Open-source MDM + osquery for cross-platform device ops (self-hosted)
- Jamf Pro; Apple MDM; device management & compliance (agent + API)
- JumpCloud; Cloud directory + cross-platform MDM & SSO (agent + API)
- Kandji; Apple MDM + endpoint security & compliance (agent + API)
- MicroMDM; Open-source, self-hosted Apple MDM server; the Profile Manager replacement
- Microsoft Intune; Cross-platform MDM/MAM in Microsoft 365 (cloud + Graph API)
- Mosyle; Apple MDM + endpoint security (agent + API)
- Munki; Open-source macOS software deployment (self-hosted)
- NanoMDM; Minimal, scalable open-source Apple MDM server
- SimpleMDM; Straightforward Apple MDM with a clean REST API (cloud)
Project Management12
- Basecamp; Project management & team collaboration (cloud API)
- Focalboard; Self-hosted project boards (Trello/Notion alt.)
- Jira; Issue tracking & agile project management (cloud API)
- Kimai; Self-hosted time tracking
- Leantime; Open-source PM for non-project managers (PHP/MySQL)
- Linear; Fast issue tracking for product teams (cloud, GraphQL API)
- monday.com; Work OS; boards, projects & workflows (cloud API)
- OpenProject; Open-source PM with Gantt & roadmaps (self-hosted)
- Plane; Open-source Jira alternative (self-hosted)
- Planka; Realtime kanban board (Trello alternative)
- Taiga; Open-source agile project management (self-hosted)
- Vikunja; Self-hosted to-do / task manager
Identity & Accounts11
- AD FS; Active Directory Federation Services (on-prem SSO)
- Authenticate.com; Identity verification & KYC API (cloud)
- Authentik; Self-hosted identity provider (Docker)
- Dropbox Business; Team management & audit-log APIs for Dropbox Business (cloud)
- FreeIPA; Open-source identity management (LDAP/Kerberos, self-hosted)
- Google Workspace; Google's identity & productivity suite (Admin SDK)
- Keycloak; Open-source identity & access management (SSO)
- Microsoft Entra ID; Azure AD; cloud identity & SSO (Graph health)
- Okta; Workforce identity & SSO; live API health
- Open Directory; Apple's built-in LDAP / Kerberos directory
- Univention Corporate Server; Open IAM, SSO, directory and application platform
Secrets & Vaults10
- 1Password; Password manager with developer secrets API (cloud)
- 1Password SCIM Bridge; Automated 1Password user provisioning (self-hosted bridge)
- Bitwarden; Password manager; cloud or official self-host
- Doppler; Hosted secrets & config manager (cloud)
- HashiCorp Vault; Secrets, PKI & dynamic credentials (self-hosted)
- Infisical; Open-source secrets for app configs (cloud or self-hosted)
- Keeper Security; Password manager & Secrets Manager (cloud API)
- Let's Encrypt; Free TLS certificates via ACME; health & renewal monitor
- Step CA; Your own private certificate authority (self-hosted)
- Vaultwarden; Self-hosted Bitwarden-compatible server (Docker)
DNS10
- AdGuard Home; Network-wide ad/tracker-blocking DNS (self-hosted)
- DNSimple; Managed DNS + domain registrar; live zone/record management
- Dnsmasq; Lightweight DNS forwarder + DHCP + TFTP
- Infoblox NIOS (DDI); Enterprise DNS / DHCP / IPAM appliance (DDI)
- ISC DHCP; Classic ISC dhcpd (EOL; migrate to Kea)
- Kea DHCP; ISC's modern DHCPv4/DHCPv6 server (REST + DB back-ends)
- Nebula Sync; Sync configuration across Pi-hole instances
- Pi-hole; Network-wide ad/tracker-blocking DNS sinkhole
- udhcpd (BusyBox); Tiny DHCP server (BusyBox / embedded)
- Windows Server DHCP; DHCP Server role on Windows Server
Hosting10
- Abacus SuperComputer; Always-on Ubuntu VM from Abacus.AI (2 vCPU / 8 GB, SSH + root)
- CapRover; Self-hosted PaaS on Docker Swarm
- Coolify; Self-hosted PaaS (Heroku/Netlify/Vercel alt.)
- cPanel & WHM; Commercial web-hosting server control panel
- Dokku; Minimal self-hosted PaaS (git push deploy)
- Dokploy; Open-source deployment platform (PaaS)
- Fly.io; Deploy apps as microVMs on Fly's global edge (cloud CLI)
- Kamal; Deploy containers to your own servers over SSH (37signals)
- V2 Cloud; Managed cloud desktops, servers and isolated AI workspaces
- Zenlayer; Edge cloud compute and global networking
FinOps & Cloud Cost10
- AWS Cost Explorer; Native AWS cost analysis & forecasting (API)
- Azure Cost Management; Native Azure (and AWS) cost analysis & budgets (API)
- CloudHealth; Multi-cloud cost & governance (VMware/Broadcom, cloud)
- CloudZero; Cloud cost intelligence & unit economics (cloud)
- Finout; No-agent FinOps platform with unified cost (cloud)
- GCP Cloud Billing; Google Cloud billing reports, budgets & BigQuery export (API)
- Infracost; Cost estimates for Terraform, in CI (self-hosted CLI / cloud)
- Kubecost; Kubernetes cost visibility & optimization (self-hosted / cloud)
- OpenCost; CNCF open-source Kubernetes cost monitoring (self-hosted)
- Vantage; Multi-cloud cost reporting & optimization (cloud)
Backup9
- BorgBackup; Deduplicating encrypted backups over SSH
- Databasus; Self-hosted database backup & point-in-time recovery
- Dropbox (Backup Target); Use Dropbox as an encrypted off-site backup destination (restic / rclone)
- Duplicati; Web UI backups to cloud storage
- Kopia; Encrypted snapshots to cloud or local storage
- rclone; Sync & mount 70+ cloud storages
- Restic; Fast, encrypted, deduplicated backups
- Synology Active Backup for Business; Centralized backup for PCs, servers, VMs & SaaS (Synology)
- Veeam Backup & Replication; Enterprise VM, server and cloud backup
CDN & Edge6
- Akamai; Enterprise CDN, security & edge compute (cloud)
- Amazon CloudFront; AWS CDN tied to S3/EC2 origins (cloud)
- Azure Front Door; Microsoft's global entry point: CDN + WAF + LB (cloud)
- Fastly; Real-time CDN with VCL/Compute edge (cloud)
- Google Cloud CDN; GCP CDN on global load balancing (cloud)
- Imperva; WAF-first CDN & DDoS protection (cloud)
Web Servers6
- Angular CLI; Scaffold, serve & build Angular apps
- Apache Tomcat; Java servlet/JSP application server
- Caddy; Automatic-HTTPS web server / reverse proxy
- Laravel Herd; One-click PHP dev environment (Mac app)
- Microsoft IIS; Windows web server and application platform
- OpenLiteSpeed; High-performance web server with web admin UI
Networking5
- BIND 9 (named); Authoritative/recursive DNS server
- mosh; Roaming, lag-tolerant remote shell (SSH bootstrap + UDP)
- netboot.xyz; Network-boot OS installers via PXE/iPXE
- SSH3; SSH over QUIC/HTTP3; faster handshakes, hidden behind a secret URL
- Zeroconf / Bonjour; Zero-configuration service discovery (mDNS/DNS-SD)
Logging & Observability4
- Dozzle; Live Docker container log viewer
- Elastic Cloud; Hosted Elasticsearch, Kibana and observability
- Kibana; ELK's search & dashboard UI (self-hosted)
- Loki; Grafana's log store; like Prometheus, for logs (self-hosted)
Incident Management & On-Call4
- incident.io; Slack-native incident response & on-call (cloud API)
- Opsgenie; Alerting & on-call by Atlassian (cloud API)
- PagerDuty; On-call scheduling & incident response (cloud API)
- Rootly; Slack-native incident management (cloud API)
Helpdesk & Ticketing4
- Freshdesk; Cloud helpdesk / customer support (API)
- osTicket; Classic open-source support ticket system (PHP/MySQL)
- Zammad; Open-source helpdesk & ticketing (self-hosted)
- Zendesk Support; Cloud helpdesk; tickets plus live email-distribution monitoring
Status Pages3
- Better Stack; Uptime monitoring, incidents & status pages (cloud API)
- Gatus; Automated health checks + status page
- Statuspage; Atlassian's hosted status pages (cloud API)
Run it from your Mac.
FrontierStack installs, monitors and secures services on this Mac and on linked servers.
Download FrontierStack