Schools & universities on a Mac
Student information systems, LMS, digital library and campus operations; self-hosted or connected.
The School & University preset reveals the education categories; Student Information Systems (PowerSchool, openSIS, RosarioSIS), Learning Management (Canvas, Moodle, Open edX, ILIAS), Digital Library (Koha, DSpace) and Campus & School Ops (admissions, timetabling, tuition, housing); alongside identity (Keycloak / FreeIPA / ClassLink), communication and accounting. Self-host what you can, connect the cloud services you can't, and keep it all secured, monitored and backed up.
Services we install or monitor for this
This preset shows 349 services in 20 categories. FrontierStack can install, connect or monitor them for this job.
Security Tools81
- AbuseIPDB; Crowd-sourced IP reputation / blocklist (cloud API)
- AdGuard; Ad/tracker blocker app + AdGuard DNS & VPN (commercial)
- Admin By Request; Endpoint privilege management / just-in-time admin (agent + API)
- Airlock Digital; Application allowlisting & execution control (agent + API)
- AlienVault OTX; Open Threat Exchange IOC feed (cloud)
- AutoElevate (CyberFOX); MSP privilege elevation & local-admin control (agent + API)
- BeyondTrust EPM; Endpoint Privilege Management for Mac (agent + API)
- binwalk; Firmware / embedded-file carving & analysis (self-hosted)
- Bitdefender GravityZone; Endpoint protection / EDR (macOS agent + API)
- BlockBlock; Monitor & block persistence in real time (self-hosted)
- Burp Suite; Web app security testing; intercepting proxy & scanner (macOS app)
- capa; Detect capabilities in executables (self-hosted)
- CAPE Sandbox; Malware sandbox w/ config extraction (self-hosted)
- Censys; Internet-wide host & certificate search (cloud API)
- ClamAV; Open-source antivirus engine (self-hosted)
- Cloudmersive; Virus-scan & content-protection API (cloud / self-host)
- Cortex; Observable analysers & responders engine (self-hosted)
- CrowdSec; Behavioural detection + IP blocking (crowd-sourced)
- CrowdStrike Falcon; Cloud-native EDR/XDR (macOS sensor + API)
- Cuckoo Sandbox; Automated malware-analysis sandbox (self-hosted)
- CyberArk EPM; Endpoint Privilege Manager (agent + API)
- CyberChef; The cyber-Swiss-army-knife for data
- Fail2ban; Bans IPs after suspicious activity (intrusion prevention)
- Fleet; Self-hosted osquery fleet manager (web UI + API)
- Fuzzilli; Coverage-guided JavaScript engine fuzzer (reviewed local binaries)
- Google Safe Browsing; Is your site flagged as malicious by Chrome? (cloud API)
- GreyNoise; Is this IP scanning everyone, or targeting you? (cloud API)
- GRR Rapid Response; Remote live-forensics / IR framework (self-hosted)
- Hands Off!; Per-app network + disk access control (app)
- Huntress; Managed EDR/MDR for SMB & MSPs (agent + API)
- Hybrid Analysis; Malware sandbox (Falcon Sandbox); API
- Intego NetBarrier; Intego's two-way Mac firewall (NetBarrier X9 / Intego ONE)
- IntelOwl; OSINT / threat-intel analysis platform (self-hosted)
- Jamf Protect; Mac-native endpoint security (agent + API)
- KnockKnock; Reveal persistently installed Mac software (self-hosted)
- Kolide; Device trust & posture (osquery-based agent + API)
- LimaCharlie; API-first SecOps cloud / EDR (agent + API)
- Little Snitch; Commercial network monitor & firewall (macOS app)
- LuLu; Free open-source outbound firewall (macOS app)
- Malwarebytes; Anti-malware (macOS app; business via Nebula API)
- Microsoft Defender for Endpoint; Microsoft EDR for macOS (agent + Graph API)
- MISP; Threat-intelligence sharing platform (self-hosted)
- Mozilla Observatory; Graded HTTP header & TLS scan for your own sites (free API)
- Murus; GUI front-end for the macOS pf firewall (app)
- NetBarrier; Two-way macOS firewall (Intego, app)
- Nuclei; Template-based vulnerability scanner (self-hosted CLI)
- oletools; Analyse malicious Office docs / OLE (self-hosted)
- OpenCTI; Cyber threat-intelligence platform (self-hosted)
- OpenEDR; Open-source endpoint detection & response (self-hosted)
- OpenPhish; Live phishing-URL feed (cloud)
- OpenVAS / Greenbone; Vulnerability scanning (self-hosted)
- OPSWAT MetaDefender; Multi-engine malware scanning & file CDR (self-hosted / API)
- osquery; Query your endpoint like a database (agent)
- OSSEC; Host-based IDS: log, file-integrity & rootkit monitoring
- OWASP ZAP; Open-source web-app security scanner (DAST); spider, active scan, proxy
- pfBlockerNG; IP & DNS blocklists for pfSense (DNSBL ad/malware blocking)
- Phishing Catcher; Catch phishing domains from CT logs (self-hosted)
- radare2; Reverse-engineering framework / disassembler (self-hosted)
- Radio Silence; Lightweight macOS outbound firewall (app)
- Santa; macOS binary allowlisting / blocklisting (self-hosted)
- SentinelOne; Autonomous EDR/XDR (macOS agent + API)
- Shodan; Search engine for internet-exposed hosts and services (cloud API)
- Snort; The classic network IDS (self-hosted)
- Sophos Central; Endpoint protection / MDR (macOS agent + API)
- Strix; AI-assisted penetration testing from the local CLI
- Suricata; High-performance IDS/IPS engine (self-hosted)
- TheHive; Security incident-response platform (self-hosted)
- ThreatLocker; Zero Trust app allowlisting & endpoint control (agent + cloud portal)
- URLhaus; Malware-URL feed & lookup API (cloud · abuse.ch)
- urlscan.io; Sandboxed URL scanning; see what a link really does (cloud API)
- Vallum; Per-app outbound firewall & throttle (app)
- Velociraptor; Endpoint visibility & DFIR hunting (self-hosted)
- Vibe Proxy; AI-assisted web security testing & intercepting proxy
- VirusTotal; Multi-engine file/URL reputation (API)
- Volatility 3; Memory-forensics framework (self-hosted)
- Wireshark; Packet capture and protocol analysis for network diagnosis
- Yakit; Open-source web security testing platform & MITM (macOS app)
- YARA; Pattern-matching engine for malware (self-hosted)
- YARA-X; YARA rewritten in Rust; faster CLI scanner (self-hosted)
- Zeek; Network security monitor / traffic analysis (self-hosted)
- Zenarmor; Next-gen firewall / DPI layer for OPNsense & pfSense (formerly Sensei)
Monitoring46
- Alertmanager; Route and deduplicate Prometheus alerts (self-hosted)
- AppSignal; Application errors, performance, uptime and deploys (SaaS)
- Atatus; APM, logs, infrastructure and real-user monitoring (SaaS)
- Atera; RMM, patching, ticketing and automation (SaaS)
- Beszel; Lightweight server monitoring hub + agents
- Checkmk; Auto-discovering IT monitoring (self-hosted)
- Datadog; Hosted metrics, logs, traces and synthetics (SaaS)
- Dynatrace; Enterprise observability and AIOps platform
- FirstWave NMIS; Open network fault, performance and configuration monitoring
- Glances; Cross-platform system monitor (web/API)
- GoAccess; Real-time access-log analyser (CLI/HTML)
- Grafana; Dashboards for any data source (self-hosted)
- Healthchecks.io; Cron & heartbeat monitoring (cloud or self-hosted)
- Homepage; Self-hosted services dashboard (gethomepage.dev)
- Honeycomb; Observability for high-cardinality events and traces
- Infraon IMS; Unified infrastructure, network and configuration monitoring
- LibreNMS; Auto-discovering SNMP network monitoring (switches, routers, servers)
- ManageEngine Applications Manager; Application, server, VM and capacity monitoring
- ManageEngine OpManager Nexus; Unified network, server and IT operations management
- Matomo; Full-featured self-hosted web analytics
- N-able N-central; Unified endpoint management, RMM and patching
- Nagios Core; The classic check-based monitor (self-hosted)
- Netdata; Real-time system metrics dashboard
- Netreo; Full-stack infrastructure and business-service observability
- New Relic; Hosted APM, infrastructure and logs (SaaS)
- NinjaOne; Endpoint monitoring, patching and automation (SaaS RMM)
- Node Exporter; Unix host metrics for Prometheus (self-hosted)
- ntopng; Live traffic analysis; who is talking to whom, and how much
- NUT (Network UPS Tools); Free, open-source UPS monitoring server (upsd)
- Paessler PRTG; Network, server and infrastructure monitoring (Windows or hosted)
- Pandora FMS; Infrastructure, application, log and synthetic monitoring
- PeaNUT; Modern web dashboard for NUT UPS servers
- Plausible; Lightweight, privacy-first analytics
- Prometheus; Time-series metrics & alerting (self-hosted)
- Pulseway; Mobile-first RMM, patching and endpoint automation
- Scrutiny; S.M.A.R.T. drive health dashboard
- Sentry; Error tracking and performance monitoring
- Server Density; Hosted server, service and container monitoring
- Site24x7; Infrastructure, application, network and experience monitoring (SaaS)
- Speedtest Tracker; Scheduled internet speed tests + history
- Umami; Simple, privacy-focused analytics (Node)
- Uptime Kuma; Self-hosted uptime monitor
- UptimeRobot; Cloud uptime/SSL monitoring with status pages
- Windows Exporter; Windows host metrics for Prometheus (remote)
- Zabbix; Enterprise monitoring; agents, SNMP, triggers (self-hosted)
Chat & Collaboration26
- AIM OSCAR Server; Alternative OSCAR server; make your own AIM chat network
- Anope (IRC services); IRC services (NickServ/ChanServ) for many IRCds
- Atheme (IRC services); NickServ/ChanServ services for TS6 IRCds
- Buzz; Group chat for humans + AI agents (Block; cloud or self-hosted)
- Discord; Community chat & voice (cloud)
- Ergo (IRCd); Modern single-binary IRC server (IRCv3, built-in services)
- InspIRCd; Modular C++ IRC server (self-hosted)
- Jitsi Meet; Open-source video conferencing (self-hosted)
- KiwiIRC; Web IRC client + gateway (self-hosted)
- Libera.Chat; Public IRC network (FOSS communities); connect, not self-host
- Matrix (Synapse + Element); Open, federated chat; self-hosted (Docker)
- Mattermost; Open-source Slack alternative (self-hosted)
- Mumble; Open-source low-latency voice (self-hosted)
- Open OSCAR Server; Self-hostable AIM/ICQ (OSCAR) server; run your own AIM
- Prosody; Lightweight XMPP (Messages) server
- Rocket.Chat; Open-source team chat platform (self-hosted)
- Session; Onion-routed private messenger (no phone number)
- SimpleX Chat; Private messenger with no user IDs (self-hostable relays)
- Slack; Team chat & workflows (cloud)
- Solanum (IRCd); The IRCd that runs Libera.Chat (charybdis fork)
- TeamSpeak; Low-latency voice server (self-hosted)
- Telegram; Cloud messaging with a Bot API (cloud)
- The Lounge; Self-hosted web IRC client (always-on)
- UnrealIRCd; Popular full-featured IRC server (self-hosted)
- ZNC (IRC bouncer); IRC bouncer; stay connected, replay history
- Zulip; Threaded team chat (self-hosted or cloud)
Business Messaging23
- Apple Messages for Business; Store↔customer chat inside iMessage
- Attentive; SMS & email marketing for retail/DTC
- Charles; Conversational commerce on WhatsApp
- Facebook Messenger; Messenger business messaging (Meta)
- Gorgias; E-commerce helpdesk with chat & proactive messages
- Gupshup; Conversational messaging API (WhatsApp & more)
- Instagram Messaging; Instagram DM API for business (Meta)
- Intercom; Customer messaging & proactive marketing (live)
- KakaoTalk AlimTalk; Kakao business notification templates; Korea (cloud)
- KakaoTalk Channel; Kakao business channel; Korea (friend broadcasts & chat)
- LINE Official Account; Customer messaging & loyalty on LINE
- ManyChat; Chat marketing bots; Instagram/Messenger/WhatsApp (live)
- Omnisend; Email & SMS marketing automation (e-commerce)
- Postscript; SMS marketing for Shopify stores
- RCS Business Messaging; Branded rich business messaging (SMS successor)
- Respond.io; Omnichannel customer-conversation inbox
- SimpleTexting; Business SMS/MMS marketing & two-way texting
- Trengo; Multichannel team inbox for customer chat
- Viber Business Messages; Branded business messages on Viber
- WATI; WhatsApp Business team inbox & broadcasts
- WeChat Official Account; WeChat business account; China (broadcasts, menus, mini-programs)
- WhatsApp Business Platform; WhatsApp business messaging; templates, catalogues (live)
- Zalo Official Account; Zalo business account; Vietnam (broadcasts & chat)
Campus & School Ops17
- aSc Timetables; School timetable generator (desktop)
- Asset Panda; Asset & device tracking (cloud)
- ClassLink; Education SSO & rostering (cloud)
- eRezLife; Residence life & housing management (cloud)
- FACTS Tuition Management; Tuition billing & payment plans (cloud)
- FET Timetabling; Open-source automatic timetabling (self-hosted/desktop)
- Finalsite Enrolment; School websites & enrolment (cloud)
- Flywire Education Payments; Cross-border tuition payments (cloud)
- Incident IQ; K-12 IT helpdesk & asset management (cloud)
- Mimosa Scheduling; Timetabling / scheduling software (desktop)
- OpenApply; Admissions & enrolment for K-12 (cloud)
- ParentSquare; School-home communication (cloud)
- Remind; Teacher-family messaging (cloud)
- Slate Admissions; Admissions & enrolment CRM (cloud)
- StarRez; Student housing & residential life (cloud)
- Workday Student; Cloud ERP for higher education (cloud)
Databases16
- Apache Cassandra; Distributed wide-column database
- Apache CouchDB; Document database with HTTP API and sync
- CockroachDB; Distributed SQL database
- Couchbase Server; Distributed document, key-value and search database
- Firebase; Google's backend-as-a-service; Firestore, Auth, Storage, Functions (cloud)
- Microsoft SQL Server; Microsoft relational database for Windows and Linux
- MongoDB; Document (NoSQL) database
- Neo4j; Graph database with Cypher query language
- Neon; Serverless Postgres; autoscaling & branching (cloud API)
- Oracle Database; Enterprise relational database
- Patroni; HA PostgreSQL; automatic failover
- PlanetScale; Hosted MySQL with database branching (cloud API)
- PocketBase; Open-source backend in one file (SQLite + auth + realtime)
- PostgREST; Instant REST API over a PostgreSQL database
- ScyllaDB; High-performance Cassandra-compatible database
- Turso; Distributed SQLite (libSQL) at the edge (cloud API)
Mail15
- Apache SpamAssassin; Rule-based spam classifier (self-hosted)
- Dovecot; IMAP/POP3 mail delivery server
- HEY; 37signals hosted email & calendar (Imbox, Screener, Paper Trail)
- Inbox Zero; Open-source AI email assistant (self-hosted)
- Maddy Mail Server; Composable single-binary mail server (SMTP/IMAP)
- mailcow; Dockerized full mail-server suite (self-hosted)
- MailScanner; Email security framework / gateway (self-hosted)
- Modoboa; Mail hosting & management platform (self-hosted)
- OpenDKIM; DKIM signing & verification milter (self-hosted)
- OpenDMARC; DMARC policy filter & reporting (self-hosted)
- Postfix; SMTP mail transfer agent
- Proton; Encrypted mail, VPN, drive & passwords (cloud)
- Proxmox Mail Gateway; Anti-spam/AV email gateway appliance (self-hosted)
- Rspamd; Fast spam-filtering system (self-hosted)
- Stalwart Mail Server; Secure mail server (SMTP/IMAP/JMAP)
Runtimes15
- .NET (ASP.NET Core); Run ASP.NET Core & Blazor apps (Kestrel)
- Astro; Content-first framework; zero JS by default; popular headless-WordPress front end
- code-server; VS Code in the browser (self-hosted)
- Fermyon Spin; Serverless WebAssembly apps & HTTP microservices
- Mojo; Modular's AI systems language (Python-family syntax)
- Next.js; React framework served by a Node process (SSR/SSG)
- Nuxt (Vue); Vue framework served by a Node process (SSR/SSG)
- Solid (SolidJS); Fine-grained reactive UI framework; SolidStart serves it as a Node process
- Supabase Edge Functions; Deno serverless functions on the edge
- SvelteKit (Svelte); Svelte app framework served by a Node process (SSR/SSG)
- Tailwind CSS; Utility-first CSS; standalone build CLI (no Node)
- wasmCloud; Distributed WebAssembly platform (CNCF)
- WasmEdge; Lightweight WASM runtime for cloud/edge & AI (CNCF)
- Wasmer; WebAssembly runtime with a package registry
- Wasmtime; Bytecode Alliance WebAssembly runtime (WASI)
Accounting & ERP14
- Actual Budget; Fast local-first envelope budgeting
- ERPNext; Open-source ERP; accounting, inventory, HR (self-hosted)
- Expensify; Expense & receipt management (cloud API)
- Firefly III; Self-hosted personal finance manager
- freee; Japanese cloud accounting & HR (cloud)
- Ghostfolio; Open-source wealth/investment tracker
- Invoice Ninja; Self-hosted invoicing & payments
- Maybe; Open-source personal finance / net worth
- Money Forward Cloud; Japanese cloud accounting & back office (cloud)
- Odoo; Open-source ERP suite; self-hosted (Python + PostgreSQL)
- Plaid; Bank account linking & financial data (cloud API)
- QuickBooks; Intuit cloud accounting (cloud)
- Wallos; Self-hosted subscription & recurring-cost tracker
- Xero; Cloud accounting for small business (cloud)
Learning Management13
- Blackboard Learn; Higher-ed LMS (cloud)
- Canvas LMS; Instructure Canvas; courses, assignments, grading
- ExamSoft; Secure exam delivery & analytics (cloud)
- Google Classroom; Google's classroom & assignment tool (cloud)
- Google Meet; Google's video meetings (cloud)
- ILIAS; Open-source LMS (self-hosted, PHP)
- Moodle; Open-source LMS (self-hosted, PHP)
- Open edX; MOOC-scale open LMS (self-hosted)
- ProctorU; Online exam proctoring (cloud)
- Schoology; K-12 LMS by PowerSchool (cloud)
- TAO Testing; Open-source assessment platform (self-hosted)
- Zoom; Video meetings & online classes (app)
CRM & Loyalty12
- EspoCRM; Lightweight self-hosted CRM (PHP)
- HubSpot; CRM + marketing/sales hubs (cloud)
- Loyalzoo; Digital loyalty for independents (cloud)
- Odoo CRM; CRM inside the open-source ERP (Python)
- Pipedrive; Sales-pipeline-first CRM (cloud)
- Punchh; Enterprise restaurant loyalty (PAR, cloud)
- Salesforce; The enterprise CRM (cloud)
- Square Loyalty; Points & rewards on Square (cloud)
- SuiteCRM; Self-hosted open-source CRM (PHP)
- Thanx; Guest engagement & loyalty for restaurants
- VoucherVault; Self-hosted vouchers, gift cards & loyalty
- Zoho CRM; Affordable full-suite CRM (cloud)
Identity & Accounts11
- AD FS; Active Directory Federation Services (on-prem SSO)
- Authenticate.com; Identity verification & KYC API (cloud)
- Authentik; Self-hosted identity provider (Docker)
- Dropbox Business; Team management & audit-log APIs for Dropbox Business (cloud)
- FreeIPA; Open-source identity management (LDAP/Kerberos, self-hosted)
- Google Workspace; Google's identity & productivity suite (Admin SDK)
- Keycloak; Open-source identity & access management (SSO)
- Microsoft Entra ID; Azure AD; cloud identity & SSO (Graph health)
- Okta; Workforce identity & SSO; live API health
- Open Directory; Apple's built-in LDAP / Kerberos directory
- Univention Corporate Server; Open IAM, SSO, directory and application platform
Student Information Systems10
- Blackbaud SIS; Independent/private-school SIS (cloud)
- FACTS SIS; Private/faith-based school SIS (cloud)
- Infinite Campus; K-12 SIS & state reporting (cloud)
- openSIS; Open-source student information system (self-hosted)
- PowerSchool Attendance; Attendance tracking within PowerSchool (cloud)
- PowerSchool SIS; K-12 student information system (cloud)
- RFID/NFC Attendance; Tap-card attendance with RFID/NFC readers (self-hosted)
- RosarioSIS; Open-source SIS (PHP/PostgreSQL, self-hosted)
- SchoolPass; Attendance, dismissal & safety (cloud)
- Veracross; Independent-school platform (cloud)
Calendars10
- Apple Calendar Server; Migrate the old macOS Server CalDAV
- Baïkal; PHP CalDAV/CardDAV server (SabreDAV)
- Cal.com; Open-source scheduling (self-hostable)
- Calendly; Hosted scheduling / booking links
- DAViCal; PHP/PostgreSQL CalDAV server
- Google Calendar; Hosted calendar (CalDAV / API)
- Nextcloud Calendar; Calendar app on a Nextcloud server
- Outlook Calendar; Microsoft 365 calendar (Graph API)
- Radicale; Lightweight CalDAV/CardDAV server
- SOGo; Groupware (CalDAV/CardDAV/ActiveSync)
SMS & iMessage Gateways9
- AirMessage; Self-hosted iMessage bridge; server on this Mac
- Android + Tasker; DIY SMS gateway via Tasker automation (self-hosted)
- BlueBubbles; Self-hosted iMessage bridge; server on this Mac
- Gammu (gammu-smsd); Send/receive SMS via a GSM modem (self-hosted)
- Home Assistant SMS; SMS notify/receive in Home Assistant (Gammu)
- Kannel; Open-source SMS/WAP gateway (self-hosted)
- ModemManager; Linux modem daemon; SMS via mmcli (self-hosted)
- SMS Gateway for Android; Turn an Android phone into an SMS HTTP API (self-hosted)
- SMSSync; Android SMS↔webhook relay (self-hosted)
Backup9
- BorgBackup; Deduplicating encrypted backups over SSH
- Databasus; Self-hosted database backup & point-in-time recovery
- Dropbox (Backup Target); Use Dropbox as an encrypted off-site backup destination (restic / rclone)
- Duplicati; Web UI backups to cloud storage
- Kopia; Encrypted snapshots to cloud or local storage
- rclone; Sync & mount 70+ cloud storages
- Restic; Fast, encrypted, deduplicated backups
- Synology Active Backup for Business; Centralized backup for PCs, servers, VMs & SaaS (Synology)
- Veeam Backup & Replication; Enterprise VM, server and cloud backup
Web Servers7
- Angular CLI; Scaffold, serve & build Angular apps
- Apache Tomcat; Java servlet/JSP application server
- Caddy; Automatic-HTTPS web server / reverse proxy
- Laravel Herd; One-click PHP dev environment (Mac app)
- Microsoft IIS; Windows web server and application platform
- OpenLiteSpeed; High-performance web server with web admin UI
- Puma; Threaded Rack/HTTP server; the default app server for Rails
Digital Library6
- DSpace; Open-source institutional repository (self-hosted)
- EBSCOhost; Research databases & e-journals (cloud)
- Greenstone; Open-source digital-library builder (self-hosted)
- JSTOR; Academic journals & books archive (cloud)
- Koha; Open-source integrated library system (self-hosted)
- ProQuest; Dissertations, e-journals & databases (cloud)
IT Assets5
- AssetTiger; Cloud asset tracking with barcodes (API)
- GLPI; Asset inventory & ITSM with CMDB (PHP/MySQL)
- Lansweeper; IT asset discovery & inventory (cloud/on-prem API)
- Snipe-IT; Open-source IT asset management (PHP/MySQL)
- Workwize; Global IT equipment lifecycle & logistics (cloud API)
Helpdesk & Ticketing4
- Freshdesk; Cloud helpdesk / customer support (API)
- osTicket; Classic open-source support ticket system (PHP/MySQL)
- Zammad; Open-source helpdesk & ticketing (self-hosted)
- Zendesk Support; Cloud helpdesk; tickets plus live email-distribution monitoring
Run it from your Mac.
FrontierStack installs, monitors and secures services on this Mac and on linked servers.
Download FrontierStackApple notarized · Safe & secure · macOS 13 Ventura+