Fleet management for Macs & servers
Administer many machines from one Mac — audits, deploys and drift detection over SSH.
Link macOS, Linux, BSD and Windows servers over SSH (Windows via its built-in OpenSSH Server) and operate them as a fleet: run one command across every node, compare a file's checksum to find configuration drift, tail logs, health-check sites over loopback, check TLS expiry across the fleet, and deploy with rsync. Windows hosts are also auto-detected on the network (MS-RPC/SMB fingerprinting), including VMs (Parallels/Hyper-V/VMware). Privileged actions use a saved sudo password through the helper.
Old Macs and Raspberry Pis, too
Old hardware doesn't have to be orphaned. Keep that vintage Xserve or Mac mini still running macOS Server useful by managing it remotely over SSH — services, sites, certificates and security, from your current Mac. And because a Raspberry Pi runs Debian-based Linux, FrontierStack links it like any other Linux node: manage packages, services, Docker, cron and storage on a whole shelf of Pis (and other single-board computers) from one window.
Services we install or monitor for this
386 services across 24 categories that FrontierStack can install, connect and monitor for this use-case — revealed together when you pick this preset in the app.
Security Tools73
- AbuseIPDB — Crowd-sourced IP reputation / blocklist (cloud API)
- AdGuard — Ad/tracker blocker app + AdGuard DNS & VPN (commercial)
- Admin By Request — Endpoint privilege management / just-in-time admin (agent + API)
- Airlock Digital — Application allowlisting & execution control (agent + API)
- AlienVault OTX — Open Threat Exchange IOC feed (cloud)
- AutoElevate (CyberFOX) — MSP privilege elevation & local-admin control (agent + API)
- BeyondTrust EPM — Endpoint Privilege Management for Mac (agent + API)
- binwalk — Firmware / embedded-file carving & analysis (self-hosted)
- Bitdefender GravityZone — Endpoint protection / EDR (macOS agent + API)
- BlockBlock — Monitor & block persistence in real time (self-hosted)
- Burp Suite — Web app security testing — intercepting proxy & scanner (macOS app)
- capa — Detect capabilities in executables (self-hosted)
- CAPE Sandbox — Malware sandbox w/ config extraction (self-hosted)
- ClamAV — Open-source antivirus engine (self-hosted)
- Cloudmersive — Virus-scan & content-protection API (cloud / self-host)
- Cortex — Observable analysers & responders engine (self-hosted)
- CrowdSec — Behavioural detection + IP blocking (crowd-sourced)
- CrowdStrike Falcon — Cloud-native EDR/XDR (macOS sensor + API)
- Cuckoo Sandbox — Automated malware-analysis sandbox (self-hosted)
- CyberArk EPM — Endpoint Privilege Manager (agent + API)
- CyberChef — The cyber-Swiss-army-knife for data
- Fail2ban — Bans IPs after suspicious activity (intrusion prevention)
- Fleet — Self-hosted osquery fleet manager (web UI + API)
- Fuzzilli — Coverage-guided JavaScript engine fuzzer (reviewed local binaries)
- GRR Rapid Response — Remote live-forensics / IR framework (self-hosted)
- Hands Off! — Per-app network + disk access control (app)
- Huntress — Managed EDR/MDR for SMB & MSPs (agent + API)
- Hybrid Analysis — Malware sandbox (Falcon Sandbox) — API
- IntelOwl — OSINT / threat-intel analysis platform (self-hosted)
- Jamf Protect — Mac-native endpoint security (agent + API)
- KnockKnock — Reveal persistently installed Mac software (self-hosted)
- Kolide — Device trust & posture (osquery-based agent + API)
- LimaCharlie — API-first SecOps cloud / EDR (agent + API)
- Little Snitch — Commercial network monitor & firewall (macOS app)
- LuLu — Free open-source outbound firewall (macOS app)
- Malwarebytes — Anti-malware (macOS app; business via Nebula API)
- Microsoft Defender for Endpoint — Microsoft EDR for macOS (agent + Graph API)
- MISP — Threat-intelligence sharing platform (self-hosted)
- Murus — GUI front-end for the macOS pf firewall (app)
- NetBarrier — Two-way macOS firewall (Intego, app)
- Nuclei — Template-based vulnerability scanner (self-hosted CLI)
- oletools — Analyse malicious Office docs / OLE (self-hosted)
- OpenCTI — Cyber threat-intelligence platform (self-hosted)
- OpenEDR — Open-source endpoint detection & response (self-hosted)
- OpenPhish — Live phishing-URL feed (cloud)
- OpenVAS / Greenbone — Vulnerability scanning (self-hosted)
- OPSWAT MetaDefender — Multi-engine malware scanning & file CDR (self-hosted / API)
- osquery — Query your endpoint like a database (agent)
- OSSEC — Host-based IDS: log, file-integrity & rootkit monitoring
- OWASP ZAP — Open-source web-app security scanner (DAST) — spider, active scan, proxy
- Phishing Catcher — Catch phishing domains from CT logs (self-hosted)
- radare2 — Reverse-engineering framework / disassembler (self-hosted)
- Radio Silence — Lightweight macOS outbound firewall (app)
- Santa — macOS binary allowlisting / blocklisting (self-hosted)
- Security Onion — NSM + SIEM + IDS Linux distro (self-hosted)
- SentinelOne — Autonomous EDR/XDR (macOS agent + API)
- Snort — The classic network IDS (self-hosted)
- Sophos Central — Endpoint protection / MDR (macOS agent + API)
- Strix — AI-assisted penetration testing from the local CLI
- Suricata — High-performance IDS/IPS engine (self-hosted)
- TheHive — Security incident-response platform (self-hosted)
- ThreatLocker — Zero Trust app allowlisting & endpoint control (agent + cloud portal)
- URLhaus — Malware-URL feed & lookup API (cloud · abuse.ch)
- Vallum — Per-app outbound firewall & throttle (app)
- Velociraptor — Endpoint visibility & DFIR hunting (self-hosted)
- Vibe Proxy — AI-assisted web security testing & intercepting proxy
- VirusTotal — Multi-engine file/URL reputation (API)
- Volatility 3 — Memory-forensics framework (self-hosted)
- Wazuh — Open-source SIEM & XDR (self-hosted)
- Yakit — Open-source web security testing platform & MITM (macOS app)
- YARA — Pattern-matching engine for malware (self-hosted)
- YARA-X — YARA rewritten in Rust — faster CLI scanner (self-hosted)
- Zeek — Network security monitor / traffic analysis (self-hosted)
Policy, Compliance & Governance46
- Amundsen — Open-source data discovery & metadata engine (self-hosted)
- Apache Atlas — Metadata & governance for the Hadoop/data ecosystem (self-hosted)
- Aserto / Topaz — Authorization built on OPA + Zanzibar (self-hosted / cloud)
- AuditBoard — Connected risk, audit & compliance platform (cloud)
- Authzed / SpiceDB — Zanzibar-style permissions database (self-hosted / cloud)
- AWS Config — Native AWS resource configuration & compliance (API)
- AWS Security Hub — Aggregated AWS security findings & standards (API)
- BigID — Data discovery, privacy & governance at scale (cloud)
- Checkov — Static policy scanning for IaC (self-hosted CLI)
- Cloud Custodian — Rules engine for cloud governance & remediation (CLI)
- CloudQuery — Cloud asset inventory as SQL (self-hosted CLI)
- Conftest — Test config files against OPA/Rego policies (CLI)
- DataGrail — Privacy platform — DSR & data mapping automation (cloud)
- DataHub — Open-source metadata platform & data catalogue (self-hosted)
- Drata — Continuous compliance automation & audit readiness (cloud)
- Eramba — Open-source GRC platform (self-hosted)
- Everlaw — Cloud litigation & eDiscovery platform (cloud)
- Google Vault — Retention, legal hold & eDiscovery for Google Workspace (cloud)
- HashiCorp Sentinel — Policy as code for the HashiCorp stack (CLI)
- Hyperproof — Compliance operations & evidence management (cloud)
- immudb — Immutable, cryptographically-verifiable database / audit log (self-hosted)
- Kyverno — Kubernetes-native policy engine, no new language (self-hosted)
- LogicGate Risk Cloud — No-code GRC & risk workflow platform (cloud)
- Logikcull — Self-service eDiscovery & legal hold (cloud, Reveal)
- Microsoft Purview — Data governance, compliance, retention & eDiscovery (cloud)
- MineOS — Data-governance & privacy operations platform (cloud)
- OneTrust — Privacy, GRC & data governance suite (cloud)
- OPA Gatekeeper — OPA policy admission controller for Kubernetes (self-hosted)
- Open Policy Agent (OPA) — General-purpose policy engine, Rego (self-hosted CLI)
- OpenControl — Compliance-as-code documentation toolkit (self-hosted CLI)
- OpenFGA — Open-source fine-grained authorization (Zanzibar-style, self-hosted)
- OpenGRC — Open-source governance, risk & compliance (self-hosted)
- OpenMetadata — Open-source metadata, catalogue & lineage platform (self-hosted)
- Osano — Consent management & privacy compliance (cloud)
- Permify — Open-source fine-grained authorization service (self-hosted)
- Prowler — Open-source multi-cloud security & compliance scanner (CLI)
- Scout Suite — Multi-cloud security-auditing tool (CLI)
- Secureframe — Compliance automation across 40+ frameworks (cloud)
- Securiti — Data privacy, security & governance platform (cloud)
- SimpleRisk — Open-source risk management (self-hosted)
- Smarsh — Communications capture, archiving & supervision (cloud)
- Sprinto — Compliance automation for fast-moving teams (cloud)
- Steampipe — Query cloud APIs with SQL + compliance mods (CLI)
- Thoropass — Compliance + audit in one (formerly Laika, cloud)
- Transcend — Privacy & data-rights automation, incl. AI governance (cloud)
- Vanta — Automated compliance — SOC 2, ISO 27001, HIPAA, GDPR (cloud)
Containers40
- Apple Container — Apple's native `container` tool — Linux containers in per-container VMs
- Azure Local — Azure Stack HCI successor — monitored via Azure ARM, no local API
- Colima — Container runtimes on macOS via Lima (Docker/containerd/k8s)
- Dev Containers (VS Code) — Reproducible dev environments in a container
- Docker Swarm — Docker-native clustering (docker swarm / stack)
- Helm — The Kubernetes package manager (charts)
- HPE Morpheus — Hybrid-cloud management & orchestration (REST API)
- Hyper-V Live Migration — Move running Hyper-V VMs between hosts with no downtime
- k0s — Zero-friction single-binary Kubernetes
- k3d — k3s in Docker — lightweight multi-node clusters
- K3s — Lightweight certified Kubernetes (self-hosted)
- kind — Kubernetes IN Docker — disposable clusters
- kubeadm — The official cluster bootstrapper (vanilla K8s)
- Kubernetes — The container orchestrator (kubectl)
- Lima — Linux virtual machines (container machines) on macOS
- MicroK8s — Canonical's low-ops Kubernetes (snap)
- Microsoft Hyper-V — Windows Server hypervisor (Type-1)
- minikube — Local single-node Kubernetes for development
- nerdctl — Docker-compatible CLI for containerd
- Nomad — HashiCorp workload orchestrator (self-hosted)
- Nutanix — HCI platform — AHV hypervisor + Prism management
- OpenShift / OKD — Red Hat's enterprise Kubernetes platform
- OpenShift Virtualization — Run VMs alongside containers on OpenShift (KubeVirt)
- OpenStack — Open-source private-cloud IaaS platform
- OrbStack — Fast Docker & Linux machines for macOS
- Platform9 — Managed Kubernetes / private cloud (SaaS control plane)
- Podman — Daemonless, Docker-compatible containers
- Portainer — Web UI for Docker & Kubernetes (self-hosted)
- Proxmox VE — Open-source virtualization — KVM VMs + LXC containers
- Proxmox VE Live Migration — Live-migrate KVM VMs across Proxmox cluster nodes
- Rancher — Multi-cluster Kubernetes management (self-hosted)
- Rancher Desktop — Desktop Kubernetes + container runtime for Mac
- RKE2 — Rancher's security-focused Kubernetes (Gov-grade)
- Scale Computing HyperCore — SC//HyperCore HCI appliance (HC3) — REST API on :443
- Talos Linux — API-managed immutable OS purpose-built for Kubernetes
- VergeOS — Verge.io — integrated virtualization, storage and networking
- VMware vMotion — Live-migrate running VMs between ESXi hosts
- VMware vSphere — Enterprise virtualization — ESXi hypervisor + vCenter
- Watchtower — Auto-update running Docker containers
- XCP-ng — Open-source Xen hypervisor (XenServer alternative)
Monitoring28
- Alertmanager — Route and deduplicate Prometheus alerts (self-hosted)
- Beszel — Lightweight server monitoring hub + agents
- Checkmk — Auto-discovering IT monitoring (self-hosted)
- Datadog — Hosted metrics, logs, traces and synthetics (SaaS)
- Dynatrace — Enterprise observability and AIOps platform
- Glances — Cross-platform system monitor (web/API)
- GoAccess — Real-time access-log analyser (CLI/HTML)
- Grafana — Dashboards for any data source (self-hosted)
- Healthchecks.io — Cron & heartbeat monitoring (cloud or self-hosted)
- Homepage — Self-hosted services dashboard (gethomepage.dev)
- Honeycomb — Observability for high-cardinality events and traces
- Matomo — Full-featured self-hosted web analytics
- Nagios Core — The classic check-based monitor (self-hosted)
- Netdata — Real-time system metrics dashboard
- New Relic — Hosted APM, infrastructure and logs (SaaS)
- Node Exporter — Unix host metrics for Prometheus (self-hosted)
- NUT (Network UPS Tools) — UPS monitoring server (upsd) for many devices
- PeaNUT — Modern web dashboard for NUT UPS servers
- Plausible — Lightweight, privacy-first analytics
- Prometheus — Time-series metrics & alerting (self-hosted)
- Scrutiny — S.M.A.R.T. drive health dashboard
- Sentry — Error tracking and performance monitoring
- Speedtest Tracker — Scheduled internet speed tests + history
- Umami — Simple, privacy-focused analytics (Node)
- Uptime Kuma — Self-hosted uptime monitor
- UptimeRobot — Cloud uptime/SSL monitoring with status pages
- Windows Exporter — Windows host metrics for Prometheus (remote)
- Zabbix — Enterprise monitoring — agents, SNMP, triggers (self-hosted)
Knowledge & Memory22
- AFFiNE — Docs + whiteboard + database (Notion/Miro alt.)
- AppFlowy — Open-source Notion alternative (docs/boards/DBs)
- BookStack — Self-hosted docs/wiki organised as books (PHP)
- Docmost — Open-source collaborative wiki & docs (Confluence/Notion alt.)
- DokuWiki — Flat-file PHP wiki — the closest macOS Server “Wiki” replacement
- Graphify — Turn a codebase into a queryable knowledge graph (AI coding-assistant skill)
- GraphRAG — Graph-based retrieval-augmented generation (Microsoft)
- Joplin Server — Sync server for Joplin notes (E2EE)
- Karakeep — AI bookmark/read-it-later (formerly Hoarder)
- Linkding — Minimal, fast self-hosted bookmark manager
- Logseq — Local-first outliner & PKM (Markdown/Org)
- MediaWiki — The wiki engine behind Wikipedia (PHP/MySQL)
- Memos — Lightweight, privacy-first notes/memo hub
- Notion — All-in-one workspace — docs, wikis, databases (cloud)
- Outline — Self-hosted team knowledge base (real-time)
- Readwise — Highlights sync & read-later (cloud API)
- Shiori — Simple self-hosted bookmark manager (Go)
- SurfSense — Self-hosted NotebookLM/Perplexity alternative
- Trilium Notes — Hierarchical personal notes (self-hosted server + app)
- Wallabag — Self-hosted read-it-later (Pocket alternative)
- Wiki.js — Modern self-hosted wiki (Node.js)
- Zotero — Reference & research manager (app + API)
Fleet & Remote19
- AnyDesk — Cross-platform remote desktop
- Apache Guacamole — Clientless RDP, VNC and SSH gateway
- ATEN KVM over IP — KVM-over-IP switches & dongles (web UI)
- Cockpit — Browser console for Linux servers and Raspberry Pi
- GL.iNet Comet (GL-RM1) — Compact KVM-over-IP with a browser console
- GL.iNet Comet Pro (GL-RM10) — KVM-over-IP with a built-in smart power plug
- JetKVM — Compact, low-cost KVM-over-IP device
- Jump Desktop — Fast, secure remote desktop (RDP/VNC/Fluid)
- MeshCentral — Self-hosted web RMM and remote control
- NanoKVM — Sipeed open KVM-over-IP (RISC-V)
- PiKVM — Open-source KVM-over-IP (Raspberry Pi)
- Raritan Dominion KX — Enterprise KVM-over-IP switch (web UI)
- RustDesk — Open-source remote desktop with optional self-host relay
- Screens — Polished VNC client for Mac & iOS (Edovia)
- Tactical RMM — Open-source RMM for Windows-focused fleets
- TinyPilot — KVM-over-IP appliance (web UI)
- Windows Admin Center — Browser-based management for Windows Server fleets
- Windows Remote Desktop — RDP access to Windows machines
- WinRM / PowerShell Remoting — Remote command channel for Windows servers
Databases16
- Apache Cassandra — Distributed wide-column database
- Apache CouchDB — Document database with HTTP API and sync
- CockroachDB — Distributed SQL database
- Couchbase Server — Distributed document, key-value and search database
- Firebase — Google's backend-as-a-service — Firestore, Auth, Storage, Functions (cloud)
- Microsoft SQL Server — Microsoft relational database for Windows and Linux
- MongoDB — Document (NoSQL) database
- Neo4j — Graph database with Cypher query language
- Neon — Serverless Postgres — autoscaling & branching (cloud API)
- Oracle Database — Enterprise relational database
- Patroni — HA PostgreSQL — automatic failover
- PlanetScale — Hosted MySQL with database branching (cloud API)
- PocketBase — Open-source backend in one file (SQLite + auth + realtime)
- PostgREST — Instant REST API over a PostgreSQL database
- ScyllaDB — High-performance Cassandra-compatible database
- Turso — Distributed SQLite (libSQL) at the edge (cloud API)
Mail15
- Apache SpamAssassin — Rule-based spam classifier (self-hosted)
- Dovecot — IMAP/POP3 mail delivery server
- HEY — 37signals hosted email & calendar (Imbox, Screener, Paper Trail)
- Inbox Zero — Open-source AI email assistant (self-hosted)
- Maddy Mail Server — Composable single-binary mail server (SMTP/IMAP)
- mailcow — Dockerized full mail-server suite (self-hosted)
- MailScanner — Email security framework / gateway (self-hosted)
- Modoboa — Mail hosting & management platform (self-hosted)
- OpenDKIM — DKIM signing & verification milter (self-hosted)
- OpenDMARC — DMARC policy filter & reporting (self-hosted)
- Postfix — SMTP mail transfer agent
- Proton — Encrypted mail, VPN, drive & passwords (cloud)
- Proxmox Mail Gateway — Anti-spam/AV email gateway appliance (self-hosted)
- Rspamd — Fast spam-filtering system (self-hosted)
- Stalwart Mail Server — All-in-one secure mail server (SMTP/IMAP/JMAP)
Accounting & ERP13
- Actual Budget — Fast local-first envelope budgeting
- ERPNext — Open-source ERP — accounting, inventory, HR (self-hosted)
- Expensify — Expense & receipt management (cloud API)
- Firefly III — Self-hosted personal finance manager
- freee — Japanese cloud accounting & HR (cloud)
- Ghostfolio — Open-source wealth/investment tracker
- Invoice Ninja — Self-hosted invoicing & payments
- Maybe — Open-source personal finance / net worth
- Money Forward Cloud — Japanese cloud accounting & back office (cloud)
- Odoo — Open-source ERP suite — self-hosted (Python + PostgreSQL)
- Plaid — Bank account linking & financial data (cloud API)
- QuickBooks — Intuit cloud accounting (cloud)
- Xero — Cloud accounting for small business (cloud)
Project Management12
- Basecamp — Project management & team collaboration (cloud API)
- Focalboard — Self-hosted project boards (Trello/Notion alt.)
- Jira — Issue tracking & agile project management (cloud API)
- Kimai — Self-hosted time tracking
- Leantime — Open-source PM for non-project managers (PHP/MySQL)
- Linear — Fast issue tracking for product teams (cloud, GraphQL API)
- monday.com — Work OS — boards, projects & workflows (cloud API)
- OpenProject — Open-source PM with Gantt & roadmaps (self-hosted)
- Plane — Open-source Jira alternative (self-hosted)
- Planka — Realtime kanban board (Trello alternative)
- Taiga — Open-source agile project management (self-hosted)
- Vikunja — Self-hosted to-do / task manager
MDM & Device Management12
- Addigy — Cloud Apple MDM for MSPs & IT teams (agent + API)
- AutoPkg — Automated macOS software packaging (CLI)
- Fleet (Apple MDM) — Open-source MDM + osquery for cross-platform device ops (self-hosted)
- Jamf Pro — Apple MDM — device management & compliance (agent + API)
- JumpCloud — Cloud directory + cross-platform MDM & SSO (agent + API)
- Kandji — Apple MDM + endpoint security & compliance (agent + API)
- MicroMDM — Open-source, self-hosted Apple MDM server — the Profile Manager replacement
- Microsoft Intune — Cross-platform MDM/MAM in Microsoft 365 (cloud + Graph API)
- Mosyle — Apple MDM + endpoint security (agent + API)
- Munki — Open-source macOS software deployment (self-hosted)
- NanoMDM — Minimal, scalable open-source Apple MDM server
- SimpleMDM — Straightforward Apple MDM with a clean REST API (cloud)
Secrets & Vaults10
- 1Password — Password manager with developer secrets API (cloud)
- 1Password SCIM Bridge — Automated 1Password user provisioning (self-hosted bridge)
- Bitwarden — Password manager — cloud or official self-host
- Doppler — Hosted secrets & config manager (cloud)
- HashiCorp Vault — Secrets, PKI & dynamic credentials (self-hosted)
- Infisical — Open-source secrets for app configs (cloud or self-hosted)
- Keeper Security — Password manager & Secrets Manager (cloud API)
- Let's Encrypt — Free TLS certificates via ACME — health & renewal monitor
- Step CA — Your own private certificate authority (self-hosted)
- Vaultwarden — Self-hosted Bitwarden-compatible server (Docker)
DNS10
- AdGuard Home — Network-wide ad/tracker-blocking DNS (self-hosted)
- DNSimple — Managed DNS + domain registrar — live zone/record management
- Dnsmasq — Lightweight DNS forwarder + DHCP + TFTP
- Infoblox NIOS (DDI) — Enterprise DNS / DHCP / IPAM appliance (DDI)
- ISC DHCP — Classic ISC dhcpd (EOL — migrate to Kea)
- Kea DHCP — ISC's modern DHCPv4/DHCPv6 server (REST + DB back-ends)
- Nebula Sync — Sync configuration across Pi-hole instances
- Pi-hole — Network-wide ad/tracker-blocking DNS sinkhole
- udhcpd (BusyBox) — Tiny DHCP server (BusyBox / embedded)
- Windows Server DHCP — DHCP Server role on Windows Server
FinOps & Cloud Cost10
- AWS Cost Explorer — Native AWS cost analysis & forecasting (API)
- Azure Cost Management — Native Azure (and AWS) cost analysis & budgets (API)
- CloudHealth — Multi-cloud cost & governance (VMware/Broadcom, cloud)
- CloudZero — Cloud cost intelligence & unit economics (cloud)
- Finout — No-agent FinOps platform with unified cost (cloud)
- GCP Cloud Billing — Google Cloud billing reports, budgets & BigQuery export (API)
- Infracost — Cost estimates for Terraform, in CI (self-hosted CLI / cloud)
- Kubecost — Kubernetes cost visibility & optimization (self-hosted / cloud)
- OpenCost — CNCF open-source Kubernetes cost monitoring (self-hosted)
- Vantage — Multi-cloud cost reporting & optimization (cloud)
Identity & Accounts10
- AD FS — Active Directory Federation Services (on-prem SSO)
- Authenticate.com — Identity verification & KYC API (cloud)
- Authentik — Self-hosted identity provider (Docker)
- Dropbox Business — Team management & audit-log APIs for Dropbox Business (cloud)
- FreeIPA — Open-source identity management (LDAP/Kerberos, self-hosted)
- Google Workspace — Google's identity & productivity suite (Admin SDK)
- Keycloak — Open-source identity & access management (SSO)
- Microsoft Entra ID — Azure AD — cloud identity & SSO (Graph health)
- Okta — Workforce identity & SSO — live API health
- Open Directory — Apple's built-in LDAP / Kerberos directory
Logging & Observability9
- Dozzle — Live Docker container log viewer
- Elastic Cloud — Hosted Elasticsearch, Kibana and observability
- Fluent Bit — Ultra-light log forwarder (self-hosted)
- Graylog — Centralized log management (self-hosted)
- Kibana — ELK's search & dashboard UI (self-hosted)
- Logstash — ELK's ingest & transform pipeline (self-hosted)
- Loki — Grafana's log store — like Prometheus, for logs (self-hosted)
- Splunk — Enterprise log search, SIEM and observability
- Vector — High-performance logs/metrics pipeline (self-hosted)
Backup9
- BorgBackup — Deduplicating encrypted backups over SSH
- Databasus — Self-hosted database backup & point-in-time recovery
- Dropbox (Backup Target) — Use Dropbox as an encrypted off-site backup destination (restic / rclone)
- Duplicati — Web UI backups to cloud storage
- Kopia — Encrypted snapshots to cloud or local storage
- rclone — Sync & mount 70+ cloud storages
- Restic — Fast, encrypted, deduplicated backups
- Synology Active Backup for Business — Centralized backup for PCs, servers, VMs & SaaS (Synology)
- Veeam Backup & Replication — Enterprise VM, server and cloud backup
Hosting7
- Abacus SuperComputer — Always-on Ubuntu VM from Abacus.AI (2 vCPU / 8 GB, SSH + root)
- CapRover — Self-hosted PaaS on Docker Swarm
- Coolify — Self-hosted PaaS (Heroku/Netlify/Vercel alt.)
- Dokku — Minimal self-hosted PaaS (git push deploy)
- Dokploy — Open-source deployment platform (PaaS)
- Fly.io — Deploy apps as microVMs on Fly's global edge (cloud CLI)
- Kamal — Deploy containers to your own servers over SSH (37signals)
CDN & Edge6
- Akamai — Enterprise CDN, security & edge compute (cloud)
- Amazon CloudFront — AWS CDN tied to S3/EC2 origins (cloud)
- Azure Front Door — Microsoft's global entry point: CDN + WAF + LB (cloud)
- Fastly — Real-time CDN with VCL/Compute edge (cloud)
- Google Cloud CDN — GCP CDN on global load balancing (cloud)
- Imperva — WAF-first CDN & DDoS protection (cloud)
Web Servers6
- Angular CLI — Scaffold, serve & build Angular apps
- Apache Tomcat — Java servlet/JSP application server
- Caddy — Automatic-HTTPS web server / reverse proxy
- Laravel Herd — One-click PHP dev environment (Mac app)
- Microsoft IIS — Windows web server and application platform
- OpenLiteSpeed — High-performance web server with web admin UI
Incident Management & On-Call4
- incident.io — Slack-native incident response & on-call (cloud API)
- Opsgenie — Alerting & on-call by Atlassian (cloud API)
- PagerDuty — On-call scheduling & incident response (cloud API)
- Rootly — Slack-native incident management (cloud API)
Status Pages3
- Better Stack — Uptime monitoring, incidents & status pages (cloud API)
- Gatus — Automated health checks + status page
- Statuspage — Atlassian's hosted status pages (cloud API)
Networking3
- BIND 9 (named) — Authoritative/recursive DNS server
- netboot.xyz — Network-boot OS installers via PXE/iPXE
- Zeroconf / Bonjour — Zero-configuration service discovery (mDNS/DNS-SD)
Helpdesk & Ticketing3
Run it all from one Mac app.
FrontierStack installs, monitors and secures the whole stack — locally and across your fleet — from a single native macOS app.
Download FrontierStack