Helm

Hyperswitchjuspay/hyperswitch

An open-source payments switch written in Rust that provides modular, composable infrastructure for fast, reliable, and affordable payment processing.

Harborgoharbor/harbor

An open source trusted cloud native registry that stores, signs, and scans container images and Helm charts.

Autheliaauthelia/authelia

An open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for web applications.

SigNozSigNoz/signoz

An open-source observability platform native to OpenTelemetry that unifies logs, traces, and metrics in a single application.

RustFSrustfs/rustfs

A high-performance, S3-compatible distributed object storage system built in Rust, optimized for data lakes and AI workloads.

Stack Editbenweet/stackedit

A full-featured, open-source in-browser Markdown editor based on Stack Overflow's PageDown library.

Authentikgoauthentik/authentik

An open-source Identity Provider (IdP) for modern SSO, supporting SAML, OAuth2/OIDC, LDAP, RADIUS, and more.

Opikcomet-ml/opik

An open-source platform for debugging, evaluating, and monitoring LLM applications, RAG systems, and agentic workflows with tracing and automated evaluations.

CometLLMcomet-ml/comet-llm

An open-source platform for debugging, evaluating, and monitoring LLM applications, RAG systems, and agentic workflows.

verdaccioverdaccio/verdaccio

A lightweight, zero-config private npm proxy registry built with Node.js for caching and hosting packages.

Argo Workflows (k)argoproj/argo-workflows

An open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.

Druidapache/incubator-druid

A high-performance real-time analytics database designed for fast queries and ingest to reduce time to insight.

Bytebasebytebase/bytebase

An open-source database DevOps tool providing CI/CD, SQL review, and security features for managing database schema changes.

Casdoorcasbin/casdoor

An open-source AI-first Identity and Access Management (IAM) platform with web UI, supporting OAuth, OIDC, SAML, LDAP, MFA, and AI agent integration.

kubesharkkubeshark/kubeshark

eBPF-powered network observability for Kubernetes, indexing L4/L7 traffic with full context and TLS decryption.

BunkerWebbunkerity/bunkerweb

An open-source, next-generation Web Application Firewall (WAF) that integrates as a reverse proxy to make web services secure by default.

Mesherylayer5io/meshery

An open-source, cloud native manager for designing and managing Kubernetes-based infrastructure and applications across multiple clouds.

openebsopenebs/openebs

An open-source container native storage platform providing persistent storage for stateful applications on Kubernetes.

Cadence (.2k)uber/cadence

A distributed, scalable, and highly available orchestration engine for executing asynchronous long-running business logic.

Sealed Secretsbitnami-labs/sealed-secrets

A Kubernetes controller and tool for encrypting Secrets into SealedSecrets that can be safely stored in Git.

immudbcodenotary/immudb

An immutable database with built-in cryptographic proof and verification, supporting SQL, Key-Value, and Document models.

RisingWaveLabs/RisingWaveRisingWaveLabs/risingwave

Enterprise-grade event streaming platform that continuously ingests, processes, and serves real-time data with Apache Iceberg™ integration.

Sysdig Falcofalcosecurity/falco

A cloud native runtime security tool for Linux that detects abnormal behavior and security threats in real-time.

docker-seleniumSeleniumHQ/docker-selenium

Docker images for running Selenium Grid with Chrome, Firefox, and Edge, enabling scalable browser automation.

HertzBeatdromara/hertzbeat

An AI-powered open-source observability platform unifying metrics, logs, and alerting with agentless collection and custom monitoring.

Krakenuber/kraken

A highly scalable and available P2P Docker registry designed for fast distribution of large images in hybrid cloud environments.

podinfostefanprodan/podinfo

A Go microservice template for Kubernetes that demonstrates best practices for building and deploying cloud-native applications.

Kubernetes Goatmadhuakula/kubernetes-goat

An intentionally vulnerable Kubernetes cluster environment for hands-on security training and practice.

Open Policy Administration Layerpermitio/opal

A real-time administration layer for policy engines like OPA and AWS Cedar, keeping authorization data and policies in sync across microservices.

ThreatMapperdeepfence/ThreatMapper

Open source CNAPP that hunts for threats in cloud native platforms, ranks them by risk, and visualizes attack paths.

MockServer (.8k)mock-server/mockserver

MockServer is an HTTP(S) mock server and proxy for mocking, recording, and debugging integrations with external systems.

werfwerf/werf

A CLI tool for implementing full-cycle CI/CD to Kubernetes using Git, Dockerfile, and Helm.

polyaxonpolyaxon/polyaxon

An open-source platform for building, training, and monitoring large-scale deep learning applications with full lifecycle MLOps.

engineQovery/engine

An open-source abstraction layer library that simplifies application deployment on AWS, GCP, Azure, and other cloud providers.

MarquezMarquezProject/marquez

An open-source metadata service for collecting, aggregating, and visualizing data lineage and ecosystem metadata.

Trickstertricksterproxy/trickster

An HTTP reverse proxy cache for web applications and a query accelerator for time series databases like Prometheus and InfluxDB.