Mac とサーバのフリート管理
多数のマシンを 1 台の Mac から管理 — SSH 経由の監査・デプロイ・ドリフト検知。
macOS・Linux・BSD・Windows のサーバを SSH で連携し（Windows は標準の OpenSSH サーバ経由）、フリートとして運用します。全ノードに 1 つのコマンドを実行、ファイルのチェックサムを比較して設定ドリフトを検出、ログの tail、ループバック経由のサイトヘルスチェック、フリート全体の TLS 有効期限確認、rsync でのデプロイ。Windows ホストはネットワーク上で自動検出（MS-RPC／SMB のフィンガープリント、Parallels／Hyper-V／VMware の VM を含む）。特権操作は保存した sudo パスワードをヘルパー経由で利用します。
古い Mac や Raspberry Pi も
古いハードウェアを眠らせておく必要はありません。今も macOS Server が動く往年の Xserve や Mac mini を、SSH 経由でリモート管理して活かせます — サービス・サイト・証明書・セキュリティを、今お使いの Mac から。Raspberry Pi は Debian 系 Linux なので、FrontierStack は他の Linux ノードと同様に連携します。棚いっぱいの Pi（その他のシングルボードコンピュータ）のパッケージ・サービス・Docker・cron・ストレージを、ひとつのウィンドウから管理できます。
この用途で対応するサービス
この用途で FrontierStack がインストール・接続・監視できる 24 カテゴリ 386 サービス。アプリでこのプリセットを選ぶと、まとめて表示されます。
Security Tools73
- AbuseIPDB — Crowd-sourced IP reputation / blocklist (cloud API)
- AdGuard — Ad/tracker blocker app + AdGuard DNS & VPN (commercial)
- Admin By Request — Endpoint privilege management / just-in-time admin (agent + API)
- Airlock Digital — Application allowlisting & execution control (agent + API)
- AlienVault OTX — Open Threat Exchange IOC feed (cloud)
- AutoElevate (CyberFOX) — MSP privilege elevation & local-admin control (agent + API)
- BeyondTrust EPM — Endpoint Privilege Management for Mac (agent + API)
- binwalk — Firmware / embedded-file carving & analysis (self-hosted)
- Bitdefender GravityZone — Endpoint protection / EDR (macOS agent + API)
- BlockBlock — Monitor & block persistence in real time (self-hosted)
- Burp Suite — Web app security testing — intercepting proxy & scanner (macOS app)
- capa — Detect capabilities in executables (self-hosted)
- CAPE Sandbox — Malware sandbox w/ config extraction (self-hosted)
- ClamAV — Open-source antivirus engine (self-hosted)
- Cloudmersive — Virus-scan & content-protection API (cloud / self-host)
- Cortex — Observable analysers & responders engine (self-hosted)
- CrowdSec — Behavioural detection + IP blocking (crowd-sourced)
- CrowdStrike Falcon — Cloud-native EDR/XDR (macOS sensor + API)
- Cuckoo Sandbox — Automated malware-analysis sandbox (self-hosted)
- CyberArk EPM — Endpoint Privilege Manager (agent + API)
- CyberChef — The cyber-Swiss-army-knife for data
- Fail2ban — Bans IPs after suspicious activity (intrusion prevention)
- Fleet — Self-hosted osquery fleet manager (web UI + API)
- Fuzzilli — Coverage-guided JavaScript engine fuzzer (reviewed local binaries)
- GRR Rapid Response — Remote live-forensics / IR framework (self-hosted)
- Hands Off! — Per-app network + disk access control (app)
- Huntress — Managed EDR/MDR for SMB & MSPs (agent + API)
- Hybrid Analysis — Malware sandbox (Falcon Sandbox) — API
- IntelOwl — OSINT / threat-intel analysis platform (self-hosted)
- Jamf Protect — Mac-native endpoint security (agent + API)
- KnockKnock — Reveal persistently installed Mac software (self-hosted)
- Kolide — Device trust & posture (osquery-based agent + API)
- LimaCharlie — API-first SecOps cloud / EDR (agent + API)
- Little Snitch — Commercial network monitor & firewall (macOS app)
- LuLu — Free open-source outbound firewall (macOS app)
- Malwarebytes — Anti-malware (macOS app; business via Nebula API)
- Microsoft Defender for Endpoint — Microsoft EDR for macOS (agent + Graph API)
- MISP — Threat-intelligence sharing platform (self-hosted)
- Murus — GUI front-end for the macOS pf firewall (app)
- NetBarrier — Two-way macOS firewall (Intego, app)
- Nuclei — Template-based vulnerability scanner (self-hosted CLI)
- oletools — Analyse malicious Office docs / OLE (self-hosted)
- OpenCTI — Cyber threat-intelligence platform (self-hosted)
- OpenEDR — Open-source endpoint detection & response (self-hosted)
- OpenPhish — Live phishing-URL feed (cloud)
- OpenVAS / Greenbone — Vulnerability scanning (self-hosted)
- OPSWAT MetaDefender — Multi-engine malware scanning & file CDR (self-hosted / API)
- osquery — Query your endpoint like a database (agent)
- OSSEC — Host-based IDS: log, file-integrity & rootkit monitoring
- OWASP ZAP — Open-source web-app security scanner (DAST) — spider, active scan, proxy
- Phishing Catcher — Catch phishing domains from CT logs (self-hosted)
- radare2 — Reverse-engineering framework / disassembler (self-hosted)
- Radio Silence — Lightweight macOS outbound firewall (app)
- Santa — macOS binary allowlisting / blocklisting (self-hosted)
- Security Onion — NSM + SIEM + IDS Linux distro (self-hosted)
- SentinelOne — Autonomous EDR/XDR (macOS agent + API)
- Snort — The classic network IDS (self-hosted)
- Sophos Central — Endpoint protection / MDR (macOS agent + API)
- Strix — AI-assisted penetration testing from the local CLI
- Suricata — High-performance IDS/IPS engine (self-hosted)
- TheHive — Security incident-response platform (self-hosted)
- ThreatLocker — Zero Trust app allowlisting & endpoint control (agent + cloud portal)
- URLhaus — Malware-URL feed & lookup API (cloud · abuse.ch)
- Vallum — Per-app outbound firewall & throttle (app)
- Velociraptor — Endpoint visibility & DFIR hunting (self-hosted)
- Vibe Proxy — AI-assisted web security testing & intercepting proxy
- VirusTotal — Multi-engine file/URL reputation (API)
- Volatility 3 — Memory-forensics framework (self-hosted)
- Wazuh — Open-source SIEM & XDR (self-hosted)
- Yakit — Open-source web security testing platform & MITM (macOS app)
- YARA — Pattern-matching engine for malware (self-hosted)
- YARA-X — YARA rewritten in Rust — faster CLI scanner (self-hosted)
- Zeek — Network security monitor / traffic analysis (self-hosted)
Policy, Compliance & Governance46
- Amundsen — Open-source data discovery & metadata engine (self-hosted)
- Apache Atlas — Metadata & governance for the Hadoop/data ecosystem (self-hosted)
- Aserto / Topaz — Authorization built on OPA + Zanzibar (self-hosted / cloud)
- AuditBoard — Connected risk, audit & compliance platform (cloud)
- Authzed / SpiceDB — Zanzibar-style permissions database (self-hosted / cloud)
- AWS Config — Native AWS resource configuration & compliance (API)
- AWS Security Hub — Aggregated AWS security findings & standards (API)
- BigID — Data discovery, privacy & governance at scale (cloud)
- Checkov — Static policy scanning for IaC (self-hosted CLI)
- Cloud Custodian — Rules engine for cloud governance & remediation (CLI)
- CloudQuery — Cloud asset inventory as SQL (self-hosted CLI)
- Conftest — Test config files against OPA/Rego policies (CLI)
- DataGrail — Privacy platform — DSR & data mapping automation (cloud)
- DataHub — Open-source metadata platform & data catalogue (self-hosted)
- Drata — Continuous compliance automation & audit readiness (cloud)
- Eramba — Open-source GRC platform (self-hosted)
- Everlaw — Cloud litigation & eDiscovery platform (cloud)
- Google Vault — Retention, legal hold & eDiscovery for Google Workspace (cloud)
- HashiCorp Sentinel — Policy as code for the HashiCorp stack (CLI)
- Hyperproof — Compliance operations & evidence management (cloud)
- immudb — Immutable, cryptographically-verifiable database / audit log (self-hosted)
- Kyverno — Kubernetes-native policy engine, no new language (self-hosted)
- LogicGate Risk Cloud — No-code GRC & risk workflow platform (cloud)
- Logikcull — Self-service eDiscovery & legal hold (cloud, Reveal)
- Microsoft Purview — Data governance, compliance, retention & eDiscovery (cloud)
- MineOS — Data-governance & privacy operations platform (cloud)
- OneTrust — Privacy, GRC & data governance suite (cloud)
- OPA Gatekeeper — OPA policy admission controller for Kubernetes (self-hosted)
- Open Policy Agent (OPA) — General-purpose policy engine, Rego (self-hosted CLI)
- OpenControl — Compliance-as-code documentation toolkit (self-hosted CLI)
- OpenFGA — Open-source fine-grained authorization (Zanzibar-style, self-hosted)
- OpenGRC — Open-source governance, risk & compliance (self-hosted)
- OpenMetadata — Open-source metadata, catalogue & lineage platform (self-hosted)
- Osano — Consent management & privacy compliance (cloud)
- Permify — Open-source fine-grained authorization service (self-hosted)
- Prowler — Open-source multi-cloud security & compliance scanner (CLI)
- Scout Suite — Multi-cloud security-auditing tool (CLI)
- Secureframe — Compliance automation across 40+ frameworks (cloud)
- Securiti — Data privacy, security & governance platform (cloud)
- SimpleRisk — Open-source risk management (self-hosted)
- Smarsh — Communications capture, archiving & supervision (cloud)
- Sprinto — Compliance automation for fast-moving teams (cloud)
- Steampipe — Query cloud APIs with SQL + compliance mods (CLI)
- Thoropass — Compliance + audit in one (formerly Laika, cloud)
- Transcend — Privacy & data-rights automation, incl. AI governance (cloud)
- Vanta — Automated compliance — SOC 2, ISO 27001, HIPAA, GDPR (cloud)
Containers40
- Apple Container — Apple's native `container` tool — Linux containers in per-container VMs
- Azure Local — Azure Stack HCI successor — monitored via Azure ARM, no local API
- Colima — Container runtimes on macOS via Lima (Docker/containerd/k8s)
- Dev Containers (VS Code) — Reproducible dev environments in a container
- Docker Swarm — Docker-native clustering (docker swarm / stack)
- Helm — The Kubernetes package manager (charts)
- HPE Morpheus — Hybrid-cloud management & orchestration (REST API)
- Hyper-V Live Migration — Move running Hyper-V VMs between hosts with no downtime
- k0s — Zero-friction single-binary Kubernetes
- k3d — k3s in Docker — lightweight multi-node clusters
- K3s — Lightweight certified Kubernetes (self-hosted)
- kind — Kubernetes IN Docker — disposable clusters
- kubeadm — The official cluster bootstrapper (vanilla K8s)
- Kubernetes — The container orchestrator (kubectl)
- Lima — Linux virtual machines (container machines) on macOS
- MicroK8s — Canonical's low-ops Kubernetes (snap)
- Microsoft Hyper-V — Windows Server hypervisor (Type-1)
- minikube — Local single-node Kubernetes for development
- nerdctl — Docker-compatible CLI for containerd
- Nomad — HashiCorp workload orchestrator (self-hosted)
- Nutanix — HCI platform — AHV hypervisor + Prism management
- OpenShift / OKD — Red Hat's enterprise Kubernetes platform
- OpenShift Virtualization — Run VMs alongside containers on OpenShift (KubeVirt)
- OpenStack — Open-source private-cloud IaaS platform
- OrbStack — Fast Docker & Linux machines for macOS
- Platform9 — Managed Kubernetes / private cloud (SaaS control plane)
- Podman — Daemonless, Docker-compatible containers
- Portainer — Web UI for Docker & Kubernetes (self-hosted)
- Proxmox VE — Open-source virtualization — KVM VMs + LXC containers
- Proxmox VE Live Migration — Live-migrate KVM VMs across Proxmox cluster nodes
- Rancher — Multi-cluster Kubernetes management (self-hosted)
- Rancher Desktop — Desktop Kubernetes + container runtime for Mac
- RKE2 — Rancher's security-focused Kubernetes (Gov-grade)
- Scale Computing HyperCore — SC//HyperCore HCI appliance (HC3) — REST API on :443
- Talos Linux — API-managed immutable OS purpose-built for Kubernetes
- VergeOS — Verge.io — integrated virtualization, storage and networking
- VMware vMotion — Live-migrate running VMs between ESXi hosts
- VMware vSphere — Enterprise virtualization — ESXi hypervisor + vCenter
- Watchtower — Auto-update running Docker containers
- XCP-ng — Open-source Xen hypervisor (XenServer alternative)
Monitoring28
- Alertmanager — Route and deduplicate Prometheus alerts (self-hosted)
- Beszel — Lightweight server monitoring hub + agents
- Checkmk — Auto-discovering IT monitoring (self-hosted)
- Datadog — Hosted metrics, logs, traces and synthetics (SaaS)
- Dynatrace — Enterprise observability and AIOps platform
- Glances — Cross-platform system monitor (web/API)
- GoAccess — Real-time access-log analyser (CLI/HTML)
- Grafana — Dashboards for any data source (self-hosted)
- Healthchecks.io — Cron & heartbeat monitoring (cloud or self-hosted)
- Homepage — Self-hosted services dashboard (gethomepage.dev)
- Honeycomb — Observability for high-cardinality events and traces
- Matomo — Full-featured self-hosted web analytics
- Nagios Core — The classic check-based monitor (self-hosted)
- Netdata — Real-time system metrics dashboard
- New Relic — Hosted APM, infrastructure and logs (SaaS)
- Node Exporter — Unix host metrics for Prometheus (self-hosted)
- NUT (Network UPS Tools) — UPS monitoring server (upsd) for many devices
- PeaNUT — Modern web dashboard for NUT UPS servers
- Plausible — Lightweight, privacy-first analytics
- Prometheus — Time-series metrics & alerting (self-hosted)
- Scrutiny — S.M.A.R.T. drive health dashboard
- Sentry — Error tracking and performance monitoring
- Speedtest Tracker — Scheduled internet speed tests + history
- Umami — Simple, privacy-focused analytics (Node)
- Uptime Kuma — Self-hosted uptime monitor
- UptimeRobot — Cloud uptime/SSL monitoring with status pages
- Windows Exporter — Windows host metrics for Prometheus (remote)
- Zabbix — Enterprise monitoring — agents, SNMP, triggers (self-hosted)
Knowledge & Memory22
- AFFiNE — Docs + whiteboard + database (Notion/Miro alt.)
- AppFlowy — Open-source Notion alternative (docs/boards/DBs)
- BookStack — Self-hosted docs/wiki organised as books (PHP)
- Docmost — Open-source collaborative wiki & docs (Confluence/Notion alt.)
- DokuWiki — Flat-file PHP wiki — the closest macOS Server “Wiki” replacement
- Graphify — Turn a codebase into a queryable knowledge graph (AI coding-assistant skill)
- GraphRAG — Graph-based retrieval-augmented generation (Microsoft)
- Joplin Server — Sync server for Joplin notes (E2EE)
- Karakeep — AI bookmark/read-it-later (formerly Hoarder)
- Linkding — Minimal, fast self-hosted bookmark manager
- Logseq — Local-first outliner & PKM (Markdown/Org)
- MediaWiki — The wiki engine behind Wikipedia (PHP/MySQL)
- Memos — Lightweight, privacy-first notes/memo hub
- Notion — All-in-one workspace — docs, wikis, databases (cloud)
- Outline — Self-hosted team knowledge base (real-time)
- Readwise — Highlights sync & read-later (cloud API)
- Shiori — Simple self-hosted bookmark manager (Go)
- SurfSense — Self-hosted NotebookLM/Perplexity alternative
- Trilium Notes — Hierarchical personal notes (self-hosted server + app)
- Wallabag — Self-hosted read-it-later (Pocket alternative)
- Wiki.js — Modern self-hosted wiki (Node.js)
- Zotero — Reference & research manager (app + API)
Fleet & Remote19
- AnyDesk — Cross-platform remote desktop
- Apache Guacamole — Clientless RDP, VNC and SSH gateway
- ATEN KVM over IP — KVM-over-IP switches & dongles (web UI)
- Cockpit — Browser console for Linux servers and Raspberry Pi
- GL.iNet Comet (GL-RM1) — Compact KVM-over-IP with a browser console
- GL.iNet Comet Pro (GL-RM10) — KVM-over-IP with a built-in smart power plug
- JetKVM — Compact, low-cost KVM-over-IP device
- Jump Desktop — Fast, secure remote desktop (RDP/VNC/Fluid)
- MeshCentral — Self-hosted web RMM and remote control
- NanoKVM — Sipeed open KVM-over-IP (RISC-V)
- PiKVM — Open-source KVM-over-IP (Raspberry Pi)
- Raritan Dominion KX — Enterprise KVM-over-IP switch (web UI)
- RustDesk — Open-source remote desktop with optional self-host relay
- Screens — Polished VNC client for Mac & iOS (Edovia)
- Tactical RMM — Open-source RMM for Windows-focused fleets
- TinyPilot — KVM-over-IP appliance (web UI)
- Windows Admin Center — Browser-based management for Windows Server fleets
- Windows Remote Desktop — RDP access to Windows machines
- WinRM / PowerShell Remoting — Remote command channel for Windows servers
Databases16
- Apache Cassandra — Distributed wide-column database
- Apache CouchDB — Document database with HTTP API and sync
- CockroachDB — Distributed SQL database
- Couchbase Server — Distributed document, key-value and search database
- Firebase — Google's backend-as-a-service — Firestore, Auth, Storage, Functions (cloud)
- Microsoft SQL Server — Microsoft relational database for Windows and Linux
- MongoDB — Document (NoSQL) database
- Neo4j — Graph database with Cypher query language
- Neon — Serverless Postgres — autoscaling & branching (cloud API)
- Oracle Database — Enterprise relational database
- Patroni — HA PostgreSQL — automatic failover
- PlanetScale — Hosted MySQL with database branching (cloud API)
- PocketBase — Open-source backend in one file (SQLite + auth + realtime)
- PostgREST — Instant REST API over a PostgreSQL database
- ScyllaDB — High-performance Cassandra-compatible database
- Turso — Distributed SQLite (libSQL) at the edge (cloud API)
Mail15
- Apache SpamAssassin — Rule-based spam classifier (self-hosted)
- Dovecot — IMAP/POP3 mail delivery server
- HEY — 37signals hosted email & calendar (Imbox, Screener, Paper Trail)
- Inbox Zero — Open-source AI email assistant (self-hosted)
- Maddy Mail Server — Composable single-binary mail server (SMTP/IMAP)
- mailcow — Dockerized full mail-server suite (self-hosted)
- MailScanner — Email security framework / gateway (self-hosted)
- Modoboa — Mail hosting & management platform (self-hosted)
- OpenDKIM — DKIM signing & verification milter (self-hosted)
- OpenDMARC — DMARC policy filter & reporting (self-hosted)
- Postfix — SMTP mail transfer agent
- Proton — Encrypted mail, VPN, drive & passwords (cloud)
- Proxmox Mail Gateway — Anti-spam/AV email gateway appliance (self-hosted)
- Rspamd — Fast spam-filtering system (self-hosted)
- Stalwart Mail Server — All-in-one secure mail server (SMTP/IMAP/JMAP)
Accounting & ERP13
- Actual Budget — Fast local-first envelope budgeting
- ERPNext — Open-source ERP — accounting, inventory, HR (self-hosted)
- Expensify — Expense & receipt management (cloud API)
- Firefly III — Self-hosted personal finance manager
- freee — Japanese cloud accounting & HR (cloud)
- Ghostfolio — Open-source wealth/investment tracker
- Invoice Ninja — Self-hosted invoicing & payments
- Maybe — Open-source personal finance / net worth
- Money Forward Cloud — Japanese cloud accounting & back office (cloud)
- Odoo — Open-source ERP suite — self-hosted (Python + PostgreSQL)
- Plaid — Bank account linking & financial data (cloud API)
- QuickBooks — Intuit cloud accounting (cloud)
- Xero — Cloud accounting for small business (cloud)
Project Management12
- Basecamp — Project management & team collaboration (cloud API)
- Focalboard — Self-hosted project boards (Trello/Notion alt.)
- Jira — Issue tracking & agile project management (cloud API)
- Kimai — Self-hosted time tracking
- Leantime — Open-source PM for non-project managers (PHP/MySQL)
- Linear — Fast issue tracking for product teams (cloud, GraphQL API)
- monday.com — Work OS — boards, projects & workflows (cloud API)
- OpenProject — Open-source PM with Gantt & roadmaps (self-hosted)
- Plane — Open-source Jira alternative (self-hosted)
- Planka — Realtime kanban board (Trello alternative)
- Taiga — Open-source agile project management (self-hosted)
- Vikunja — Self-hosted to-do / task manager
MDM & Device Management12
- Addigy — Cloud Apple MDM for MSPs & IT teams (agent + API)
- AutoPkg — Automated macOS software packaging (CLI)
- Fleet (Apple MDM) — Open-source MDM + osquery for cross-platform device ops (self-hosted)
- Jamf Pro — Apple MDM — device management & compliance (agent + API)
- JumpCloud — Cloud directory + cross-platform MDM & SSO (agent + API)
- Kandji — Apple MDM + endpoint security & compliance (agent + API)
- MicroMDM — Open-source, self-hosted Apple MDM server — the Profile Manager replacement
- Microsoft Intune — Cross-platform MDM/MAM in Microsoft 365 (cloud + Graph API)
- Mosyle — Apple MDM + endpoint security (agent + API)
- Munki — Open-source macOS software deployment (self-hosted)
- NanoMDM — Minimal, scalable open-source Apple MDM server
- SimpleMDM — Straightforward Apple MDM with a clean REST API (cloud)
Secrets & Vaults10
- 1Password — Password manager with developer secrets API (cloud)
- 1Password SCIM Bridge — Automated 1Password user provisioning (self-hosted bridge)
- Bitwarden — Password manager — cloud or official self-host
- Doppler — Hosted secrets & config manager (cloud)
- HashiCorp Vault — Secrets, PKI & dynamic credentials (self-hosted)
- Infisical — Open-source secrets for app configs (cloud or self-hosted)
- Keeper Security — Password manager & Secrets Manager (cloud API)
- Let's Encrypt — Free TLS certificates via ACME — health & renewal monitor
- Step CA — Your own private certificate authority (self-hosted)
- Vaultwarden — Self-hosted Bitwarden-compatible server (Docker)
DNS10
- AdGuard Home — Network-wide ad/tracker-blocking DNS (self-hosted)
- DNSimple — Managed DNS + domain registrar — live zone/record management
- Dnsmasq — Lightweight DNS forwarder + DHCP + TFTP
- Infoblox NIOS (DDI) — Enterprise DNS / DHCP / IPAM appliance (DDI)
- ISC DHCP — Classic ISC dhcpd (EOL — migrate to Kea)
- Kea DHCP — ISC's modern DHCPv4/DHCPv6 server (REST + DB back-ends)
- Nebula Sync — Sync configuration across Pi-hole instances
- Pi-hole — Network-wide ad/tracker-blocking DNS sinkhole
- udhcpd (BusyBox) — Tiny DHCP server (BusyBox / embedded)
- Windows Server DHCP — DHCP Server role on Windows Server
FinOps & Cloud Cost10
- AWS Cost Explorer — Native AWS cost analysis & forecasting (API)
- Azure Cost Management — Native Azure (and AWS) cost analysis & budgets (API)
- CloudHealth — Multi-cloud cost & governance (VMware/Broadcom, cloud)
- CloudZero — Cloud cost intelligence & unit economics (cloud)
- Finout — No-agent FinOps platform with unified cost (cloud)
- GCP Cloud Billing — Google Cloud billing reports, budgets & BigQuery export (API)
- Infracost — Cost estimates for Terraform, in CI (self-hosted CLI / cloud)
- Kubecost — Kubernetes cost visibility & optimization (self-hosted / cloud)
- OpenCost — CNCF open-source Kubernetes cost monitoring (self-hosted)
- Vantage — Multi-cloud cost reporting & optimization (cloud)
Identity & Accounts10
- AD FS — Active Directory Federation Services (on-prem SSO)
- Authenticate.com — Identity verification & KYC API (cloud)
- Authentik — Self-hosted identity provider (Docker)
- Dropbox Business — Team management & audit-log APIs for Dropbox Business (cloud)
- FreeIPA — Open-source identity management (LDAP/Kerberos, self-hosted)
- Google Workspace — Google's identity & productivity suite (Admin SDK)
- Keycloak — Open-source identity & access management (SSO)
- Microsoft Entra ID — Azure AD — cloud identity & SSO (Graph health)
- Okta — Workforce identity & SSO — live API health
- Open Directory — Apple's built-in LDAP / Kerberos directory
Logging & Observability9
- Dozzle — Live Docker container log viewer
- Elastic Cloud — Hosted Elasticsearch, Kibana and observability
- Fluent Bit — Ultra-light log forwarder (self-hosted)
- Graylog — Centralized log management (self-hosted)
- Kibana — ELK's search & dashboard UI (self-hosted)
- Logstash — ELK's ingest & transform pipeline (self-hosted)
- Loki — Grafana's log store — like Prometheus, for logs (self-hosted)
- Splunk — Enterprise log search, SIEM and observability
- Vector — High-performance logs/metrics pipeline (self-hosted)
Backup9
- BorgBackup — Deduplicating encrypted backups over SSH
- Databasus — Self-hosted database backup & point-in-time recovery
- Dropbox (Backup Target) — Use Dropbox as an encrypted off-site backup destination (restic / rclone)
- Duplicati — Web UI backups to cloud storage
- Kopia — Encrypted snapshots to cloud or local storage
- rclone — Sync & mount 70+ cloud storages
- Restic — Fast, encrypted, deduplicated backups
- Synology Active Backup for Business — Centralized backup for PCs, servers, VMs & SaaS (Synology)
- Veeam Backup & Replication — Enterprise VM, server and cloud backup
Hosting7
- Abacus SuperComputer — Always-on Ubuntu VM from Abacus.AI (2 vCPU / 8 GB, SSH + root)
- CapRover — Self-hosted PaaS on Docker Swarm
- Coolify — Self-hosted PaaS (Heroku/Netlify/Vercel alt.)
- Dokku — Minimal self-hosted PaaS (git push deploy)
- Dokploy — Open-source deployment platform (PaaS)
- Fly.io — Deploy apps as microVMs on Fly's global edge (cloud CLI)
- Kamal — Deploy containers to your own servers over SSH (37signals)
CDN & Edge6
- Akamai — Enterprise CDN, security & edge compute (cloud)
- Amazon CloudFront — AWS CDN tied to S3/EC2 origins (cloud)
- Azure Front Door — Microsoft's global entry point: CDN + WAF + LB (cloud)
- Fastly — Real-time CDN with VCL/Compute edge (cloud)
- Google Cloud CDN — GCP CDN on global load balancing (cloud)
- Imperva — WAF-first CDN & DDoS protection (cloud)
Web Servers6
- Angular CLI — Scaffold, serve & build Angular apps
- Apache Tomcat — Java servlet/JSP application server
- Caddy — Automatic-HTTPS web server / reverse proxy
- Laravel Herd — One-click PHP dev environment (Mac app)
- Microsoft IIS — Windows web server and application platform
- OpenLiteSpeed — High-performance web server with web admin UI
Incident Management & On-Call4
- incident.io — Slack-native incident response & on-call (cloud API)
- Opsgenie — Alerting & on-call by Atlassian (cloud API)
- PagerDuty — On-call scheduling & incident response (cloud API)
- Rootly — Slack-native incident management (cloud API)
Status Pages3
- Better Stack — Uptime monitoring, incidents & status pages (cloud API)
- Gatus — Automated health checks + status page
- Statuspage — Atlassian's hosted status pages (cloud API)
Networking3
- BIND 9 (named) — Authoritative/recursive DNS server
- netboot.xyz — Network-boot OS installers via PXE/iPXE
- Zeroconf / Bonjour — Zero-configuration service discovery (mDNS/DNS-SD)
Helpdesk & Ticketing3
すべてをひとつの Mac アプリで。
FrontierStack は、ローカルでもフリート全体でも、スタック全体のインストール・監視・保護をひとつのネイティブ macOS アプリで行います。
FrontierStack をダウンロード