Open-source privacy software
526 open-source libraries, tools and applications tagged privacy, ranked by how closely privacy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
526 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| FossifyOrg/Gallery Fossify Gallery is an open-source, ad-free Android app for browsing, organizing, and editing photos and videos locally. It includes a basic… | 100 | 3810 | stable |
| mollyim/mollyim-android Molly is a hardened, security-focused fork of the Signal messaging app for Android, adding features like passphrase-encrypted databases at … | 94 | 3717 | active |
| Orion Store Orion Store is a privacy-focused Android app store client that distributes modded apps (like YouTube Morphe) and open-source tools using Gi… | 85 | 3706 | active |
| Brave Browser Brave is a free, open-source web browser focused on privacy, security, and performance. It blocks ads and trackers by default and includes … | 77 | 3697 | active |
| 9seconds/mtg mtg is a highly opinionated MTPROTO proxy server for Telegram written in Go, designed to let users access Telegram from censored or restric… | 89 | 3680 | active |
| sw33tLie/macshot Macshot is a free, open-source, native macOS screenshot and screen recording tool built with Swift and AppKit. It offers region/window capt… | 76 | 3669 | active |
| Openwrt-Passwall/openwrt-passwall2 PassWall2 is a LuCI web interface application for OpenWrt routers that provides advanced proxy functionality and network traffic management… | 96 | 3625 | active |
| guardianproject/orbot-android Orbot is a free Android app that routes device internet traffic through the Tor network, acting as a VPN and proxy to encrypt and anonymize… | 100 | 3623 | active |
| therealaleph/MasterHttpRelayVPN-RUST A Rust port of MasterHttpRelayVPN that bypasses censorship and DPI/SNI blocking by tunneling traffic through a free Google Apps Script rela… | 72 | 3592 | active |
| hicccc77/WeFlow WeFlow is a fully local desktop application for viewing, analyzing, and exporting WeChat chat history, including yearly data reports and vi… | 61 | 15157 | maintenance |
| sdv-dev/SDV SDV (Synthetic Data Vault) is a Python library for generating synthetic tabular data using machine learning models ranging from GaussianCop… | 98 | 3572 | stable |
| jarun/ddgr ddgr is a Python command-line utility for searching DuckDuckGo from the terminal, with configurable results per page, instant answers, Duck… | 63 | 3567 | active |
| peasoft/NoMoreWalls A Python project that automatically fetches and merges publicly available proxy nodes from the internet and republishes them as Base64 and … | 77 | 3555 | active |
| TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 81 | 3489 | active |
| Legcord/Legcord Legcord is a free, open-source custom Discord client that wraps the official Discord web app in an optimized Electron shell with built-in c… | 100 | 3482 | active |
| tamnd/kage kage is a Go CLI tool that clones websites into browsable offline folders by rendering each page in headless Chrome, snapshotting the final… | 73 | 3453 | active |
| hufrea/byedpi ByeDPI (ciadpi) is a C program implementing various DPI (Deep Packet Inspection) bypass methods, running as a local SOCKS proxy server. It … | 62 | 3427 | active |
| NextAlone/Nagram Nagram is a third-party Telegram client for Android, forked from NekoX, adding extra messaging features and customization options. It inclu… | 97 | 3369 | active |
| WG Tunnel WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 95 | 3227 | active |
| CatchTheTornado/text-extract-api A self-hosted FastAPI-based API that converts PDFs, Office documents, and images into Markdown or structured JSON using OCR engines (EasyOC… | 42 | 3183 | active |
| netptop/siteproxy SiteProxy is a self-hosted online reverse proxy built on Hono that lets users browse blocked sites like YouTube, Twitter, and Google throug… | 90 | 3163 | active |
| nesaorg/nesa Nesa is a privacy-preserving AI inference platform that runs models like Llama, Mistral, and Stable Diffusion with end-to-end encryption us… | 22 | 3163 | active |
| whyorean/AuroraStore Aurora Store is a free and open-source Android app store client that lets users search, browse, and download apps directly from the officia… | 76 | 3053 | active |
| Geph Geph (迷霧通) is a modular Internet censorship circumvention system designed to defeat national-level filtering such as China's Great Firewall… | 32 | 3044 | active |
| Shadowsocks A SIP003 plugin for Shadowsocks built on v2ray, tunneling traffic over WebSocket (HTTP/HTTPS) or QUIC to obfuscate proxy traffic. Written i… | 60 | 2847 | active |
| eooce/python-ws A lightweight Python implementation of VLESS, Trojan, and Shadowsocks proxy protocols designed to run on serverless/PaaS platforms without … | 53 | 2844 | active |
| eycorsican/leaf Leaf is a versatile and efficient proxy framework written in Rust, supporting multiple proxy protocols such as Shadowsocks, Trojan, VMess, … | 86 | 2833 | active |
| glados-network/GLaDOS GLaDOS is a commercial networking/VPN service (Generic Local and Destination Operating System) that helps users manage and secure their net… | 56 | 2758 | active |
| I2P I2P (Invisible Internet Project) is the reference Java implementation of a decentralized, anonymizing peer-to-peer overlay network that rou… | 91 | 2730 | stable |
| patterniha/SNI-Spoofing A Python CLI tool that bypasses Deep Packet Inspection (DPI) by manipulating IP and TCP headers, such as spoofing SNI fields. It is used to… | 48 | 2719 | active |
| secretflow/secretflow SecretFlow is a unified Python framework for privacy-preserving data analysis and machine learning. It layers cryptographic devices (MPC, H… | 62 | 2713 | active |
| openai/privacy-filter OpenAI Privacy Filter is a small bidirectional token-classification model (1.5B total, 50M active parameters) for detecting and masking per… | 46 | 2711 | active |
| enfein/mieru Mieru is a censorship-resistant socks5/HTTP/HTTPS proxy written in Go, consisting of a client (mieru) and server (mita). It uses XChaCha20-… | 99 | 2587 | active |
| builtbybel/CrapFixer CrapFixer is a lightweight Windows utility that cleans up junk, removes ads and preinstalled bloatware, and tweaks privacy settings on Wind… | 84 | 2500 | active |
| leilei926524-tech/anti-distill A tool that sanitizes AI Skill files employees are asked to write, producing a professional-looking but hollowed-out version for submission… | 52 | 2455 | active |
| vpnhood/VpnHood VpnHood is an open-source, cross-platform VPN client and server built entirely from scratch in C#/.NET, designed to be undetectable by deep… | 96 | 2448 | active |
| hitsz-ids/synthetic-data-generator SDG (Synthetic Data Generator) is a Python framework for generating high-quality synthetic structured tabular data using deep learning, GAN… | 75 | 2440 | active |
| learnhouse/learnhouse LearnHouse is a next-generation open-source learning management system (LMS) for creating, sharing, and selling educational content. It com… | 100 | 2404 | active |
| an-anime-team/an-anime-game-launcher A graphical game launcher for Linux that manages and runs an anime game (Genshin Impact) via Wine, with built-in telemetry disabling. It of… | 96 | 2272 | active |
| berthubert/googerteller A C++ command-line tool that plays audible beeps whenever your computer sends packets to Google services or known trackers, using tcpdump o… | 32 | 2225 | active |
| p4gefau1t/trojan-go Trojan-Go is a full-featured Trojan proxy written in Go that disguises proxy traffic as normal TLS traffic to bypass censorship systems lik… | 23 | 8387 | maintenance |
| pablouser1/ProxiTok ProxiTok is an open-source alternative frontend for TikTok, inspired by Nitter, written in PHP. It proxies all requests to TikTok server-si… | 30 | 2142 | active |
| peteromallet/dataclaw DataClaw is a CLI tool and macOS menu-bar app that parses coding-agent conversation history (Claude Code, Codex, Gemini CLI, etc.), redacts… | 76 | 2114 | active |
| sleep3r/mtproto.zig A tiny, dependency-free MTProto proxy written in Zig that disguises Telegram traffic as standard TLS 1.3 HTTPS traffic. It is designed for … | 75 | 2103 | active |
| oxen-io/lokinet Lokinet is the reference implementation of LLARP, a low-latency layer 3 onion routing protocol that forms a decentralized, IP-based overlay… | 63 | 2092 | active |
| alganzory/HaramBlur HaramBlur is a browser extension that automatically detects and blurs inappropriate images and videos on web pages using on-device machine … | 19 | 2083 | active |
| haad/proxychains ProxyChains is a UNIX command-line tool that forces TCP connections and DNS lookups of any dynamically linked program through SOCKS4/5 or H… | 32 | 7964 | maintenance |
| openlibrecommunity/olcrtc olcRTC is an encrypted TCP-over-WebRTC tunnel written in Go that disguises traffic as ordinary video calls on whitelisted meeting services … | 10 | 2030 | active |
| Cenmrev/V2RayX V2RayX is a macOS GUI application that wraps v2ray-core, generating its config file and managing the core process via launchd. It lets user… | 10 | 7618 | maintenance |
| GtxFury/FlyClash-Android FlyClash Android is an Android client for the Clash proxy ecosystem, providing VPN-style network proxying on mobile devices. It lets users … | 87 | 1970 | active |
| black-ant/Ant-Browser Ant Browser is a desktop anti-detect (fingerprint) browser for managing multiple isolated browser profiles, each with its own proxy binding… | 75 | 1955 | active |
| box4magisk A Magisk/KernelSU/APatch module that deploys proxy cores such as sing-box, clash/mihomo, v2ray, xray, and hysteria on rooted Android device… | 72 | 1914 | active |
| byJoey/ech-wk A cross-platform proxy client that uses TLS 1.3 Encrypted Client Hello (ECH) to encrypt SNI information, exposing both a SOCKS5 and HTTP CO… | 45 | 1905 | active |
| razvandimescu/numa Numa is a portable DNS resolver in a single Rust binary that provides ad blocking, local .numa service domains, hostname overrides, and pri… | 99 | 1890 | active |
| tanrax/maza-ad-blocking Maza is a local ad blocker written as a single Bash script that blocks ads at the DNS level by editing the operating system's hosts file, w… | 72 | 1872 | active |
| crossxx-labs/free-proxy A repository that publishes free Clash subscription links for SSR, VMess, VLESS, Trojan, and Hysteria2 proxy servers, refreshed every few h… | 73 | 1831 | active |
| x011/smtp-tunnel-proxy A Python-based covert tunneling tool that disguises TCP traffic as SMTP email sessions to evade Deep Packet Inspection firewalls. It expose… | 37 | 1795 | active |
| adsbypasser/adsbypasser AdsBypasser is a lightweight userscript that automatically skips countdown ads, continue/redirect pages, and prevents ad pop-up windows acr… | 99 | 1775 | active |
| NoDPI NoDPI is a Python utility that bypasses Deep Packet Inspection (DPI) censorship by running a local proxy server that fragments TLS ClientHe… | 78 | 1679 | active |
| capitalone/DataProfiler DataProfiler is a Python library that loads CSV, AVRO, Parquet, JSON, text, or URL data into a pandas-compatible DataFrame and profiles it … | 91 | 1591 | active |
| zama-ai/concrete Concrete is an open-source fully homomorphic encryption (FHE) compiler built on TFHE and LLVM that converts Python programs into their FHE … | 52 | 1580 | active |
| anytls/anytls-go anytls-go is the Go reference implementation of the AnyTLS protocol, a proxy protocol designed to mitigate TLS-in-TLS nested handshake fing… | 73 | 1521 | active |
| traceless/alist-encrypt A Node.js proxy service for Alist that adds transparent WebDAV encryption and decryption of files. It supports streaming encrypted video pl… | 71 | 1503 | active |
| potatameister/PaperKnife PaperKnife is a privacy-first PDF utility that merges, splits, compresses, encrypts, signs, and sanitizes PDFs entirely on-device with no s… | 69 | 1465 | active |
| LorenEteval/Furious Furious is a cross-platform GUI proxy client built with PySide6 that wraps Xray-core and Hysteria as Python bindings. It supports protocols… | 95 | 1457 | active |
| SlipNet SlipNet is an open-source anti-censorship VPN client for Android (Kotlin/Jetpack Compose) with a cross-platform Go CLI companion, supportin… | 71 | 1443 | active |
| PrimiHub PrimiHub is an open-source privacy-preserving computing platform built by a team of cryptography experts, supporting secure multi-party com… | 41 | 1409 | active |
| jamesmcm/vopono Vopono is a Rust CLI tool that runs individual applications through VPN tunnels using temporary network namespaces on Linux. It supports mu… | 97 | 1388 | active |
| DrJonaC/Pensieve Pensieve is a local-first dashboard for visualizing, interpreting, and governing the structured memory that LLMs keep about users. It expos… | 58 | 1386 | active |
| simeononsecurity/Windows-Optimize-Harden-Debloat A PowerShell script that automates optimization, hardening, and debloating of Windows 10 and Windows 11 systems. It applies security and pr… | 27 | 1385 | active |
| Psiphon Psiphon is a relay-based Internet censorship circumvention system consisting of client apps for Windows, Android, and iOS plus a server net… | 32 | 1382 | active |
| Passepartout Passepartout is an OpenVPN and WireGuard VPN client app for iPhone, iPad, Mac, and Apple TV, built on the Partout tunnel framework. It offe… | 93 | 1368 | active |
| WhiteDNS WhiteDNS is a source-available Android application that runs a local DNS tunneling client with both proxy (SOCKS5/HTTP) and VPN (VpnService… | 80 | 1337 | active |
| Intuition-Lab/personal-model Personal Model (Persome) is a local-first macOS runtime that captures focused cross-app activity and builds an evidence-linked personal mem… | 76 | 1337 | active |
| DNSveil DNSveil is a Windows-only secure DNS client supporting DNSCrypt, Anonymized DNSCrypt, DoH, DoT, and plain DNS over UDP/TCP, with built-in D… | 54 | 1328 | active |
| DNSCrypt/encrypted-dns-server A high-performance Rust proxy that lets anyone run their own encrypted DNS server supporting DNSCrypt v2 (including post-quantum), Anonymiz… | 93 | 1325 | active |
| ihor-sokoliuk/mcp-searxng An MCP server that exposes a SearXNG metasearch instance to AI assistants like Claude Desktop, Claude Code, Cursor, and other MCP clients. … | 89 | 1312 | active |
| verida/verida-js The official TypeScript SDK monorepo for the Verida Network, a decentralized network for self-sovereign identity and encrypted personal dat… | 36 | 1279 | active |
| lamarios/clipious Clipious is an Android client for Invidious, the privacy-focused YouTube front end. It supports subscriptions, playlists, background and au… | 10 | 1259 | active |
| tzmax/V2RayXS V2RayXS is a native macOS GUI client for Xray-core, a maintained fork of the archived V2RayX project. It supports VLESS and XTLS protocols,… | 82 | 1258 | active |
| lattegou/airtiz AirTiz is a lightweight, native macOS VPN/proxy client built in Swift on top of the open-source mihomo (Clash Meta) kernel. It offers tray-… | 61 | 1201 | active |
| snakem982/Pandora-Box Pandora-Box is a lightweight, cross-platform desktop GUI client for the Mihomo (Clash Meta) proxy core. It supports multiple proxy protocol… | 91 | 1199 | active |
| neon-mmd/websurfx Websurfx is an open-source meta search engine written in Rust that aggregates results from multiple search engines while respecting user pr… | 82 | 1199 | active |
| data61/MP-SPDZ MP-SPDZ is a versatile C++ framework for secure multi-party computation (MPC) supporting many protocols across various security models, inc… | 82 | 1191 | active |
| URenko/Accesser Accesser is a Python-based local HTTP proxy tool that circumvents SNI-based connection resets (SNI RST) used by the Great Firewall, restori… | 56 | 1158 | active |
| WeBankBlockchain/WeIdentity WeIdentity is a blockchain-based distributed identity solution implementing W3C DID and Verifiable Credential specifications, developed by … | 27 | 1150 | active |
| Kindness-Kismet/stelliberty Stelliberty is a cross-platform desktop proxy client for Windows, Linux, and macOS built with C#/.NET and Avalonia UI with a Rust core. It … | 80 | 1149 | active |
| tholian-network/stealth Stealth is a secure, privacy-focused web browser, scraper, and proxy built in JavaScript that emphasizes automation, bandwidth efficiency, … | 32 | 1149 | active |
| ttttccxxui/DataInfra-RedactionEverything A local-first redaction workbench that detects and anonymizes sensitive information in documents, scanned PDFs, images, Word files, and pla… | 57 | 1143 | active |
| Deep-ai-inc/ch.at A lightweight LLM chat service in Go, deployable as a single static binary, accessible via web, curl, SSH, DNS TXT queries, and an OpenAI-c… | 62 | 1121 | active |
| HEIR Google's repository of demos for fully homomorphic encryption (FHE), originally a C++ transpiler and now showcasing the HEIR MLIR-based FHE… | 84 | 3784 | maintenance |
| Tobi823/ffupdater FFUpdater is an open-source Android app that installs and keeps privacy-friendly browsers (Firefox variants, Brave, Cromite, Tor Browser, a… | 62 | 1096 | active |
| immortalwrt/homeproxy HomeProxy is the modern proxy platform for ImmortalWrt (an OpenWrt fork), built on top of sing-box. It provides a LuCI web interface for ma… | 77 | 1088 | active |
| thehackingsage/hackdroid HackDroid is a curated collection of 364+ pentesting and security-related Android apps organized into categories like MITM, forensics, snif… | 32 | 1078 | active |
| DNSCrypt/doh-server A fast, secure DNS-over-HTTPS (DoH) and Oblivious DoH (ODoH) server proxy written in Rust, formerly known as doh-proxy. It does not resolve… | 90 | 1073 | stable |
| darkk/redsocks redsocks is a transparent TCP-to-proxy redirector written in C that uses firewall rules (iptables, pf, ipfw) to redirect any TCP connection… | 32 | 3622 | maintenance |
| AmauriC/tarteaucitron.js tarteaucitron.js is an open-source, accessible GDPR consent management platform (CMP) that displays a cookie banner and per-service consent… | 97 | 1058 | stable |
| hardcore-sushi/DroidFS DroidFS is an Android application for accessing encrypted virtual filesystems based on gocryptfs and CryFS, using its own internal file exp… | 98 | 1057 | active |
| trojan-gfw/igniter Igniter is an Android client for the Trojan proxy protocol, built in Java with components from clash and go-tun2socks. It lets Android user… | 23 | 3280 | maintenance |
| dedsec1121fk/DedSec DedSec Project is an educational cybersecurity and Termux toolkit for Android that bundles scripts, utilities, local web interfaces, and pr… | 90 | 913 | active |