FrontierStack logoFrontierStack
Home › Solutions › Schools & universities on a Mac

Schools & universities on a Mac

Student information systems, LMS, digital library and campus operations; self-hosted or connected.

The School & University preset reveals the education categories; Student Information Systems (PowerSchool, openSIS, RosarioSIS), Learning Management (Canvas, Moodle, Open edX, ILIAS), Digital Library (Koha, DSpace) and Campus & School Ops (admissions, timetabling, tuition, housing); alongside identity (Keycloak / FreeIPA / ClassLink), communication and accounting. Self-host what you can, connect the cloud services you can't, and keep it all secured, monitored and backed up.

Services we install or monitor for this

This preset shows 386 services in 20 categories. FrontierStack can install, connect or monitor them for this job.

Browse by category (20)
Security Tools82Monitoring49Chat & Collaboration33Business Messaging27Accounting & ERP21Campus & School Ops17Mail17Runtimes17Databases17SMS & iMessage Gateways16Learning Management13Identity & Accounts12CRM & Loyalty12Student Information Systems10Calendars10Backup9Web Servers7Digital Library6Helpdesk & Ticketing6IT Assets5
Security Tools82
  • AbuseIPDB; Crowd-sourced IP reputation / blocklist (cloud API)
  • AdGuard; Ad/tracker blocker app + AdGuard DNS & VPN (commercial)
  • Admin By Request; Endpoint privilege management / just-in-time admin (agent + API)
  • Airlock Digital; Application allowlisting & execution control (agent + API)
  • AlienVault OTX; Open Threat Exchange IOC feed (cloud)
  • AutoElevate (CyberFOX); MSP privilege elevation & local-admin control (agent + API)
  • BeyondTrust EPM; Endpoint Privilege Management for Mac (agent + API)
  • binwalk; Firmware / embedded-file carving & analysis (self-hosted)
  • Bitdefender GravityZone; Endpoint protection / EDR (macOS agent + API)
  • BlockBlock; Monitor & block persistence in real time (self-hosted)
  • Burp Suite; Web app security testing; intercepting proxy & scanner (macOS app)
  • capa; Detect capabilities in executables (self-hosted)
  • CAPE Sandbox; Malware sandbox w/ config extraction (self-hosted)
  • Censys; Internet-wide host & certificate search (cloud API)
  • ClamAV; Open-source antivirus engine (self-hosted)
  • Cloudbric WAF+ (Penta Security, 펜타시큐리티); Penta Security cloud WAF, DDoS & bot protection
  • Cloudmersive; Virus-scan & content-protection API (cloud / self-host)
  • Cortex; Observable analysers & responders engine (self-hosted)
  • CrowdSec; Behavioural detection + IP blocking (crowd-sourced)
  • CrowdStrike Falcon; Cloud-native EDR/XDR (macOS sensor + API)
  • Cuckoo Sandbox; Automated malware-analysis sandbox (self-hosted)
  • CyberArk EPM; Endpoint Privilege Manager (agent + API)
  • CyberChef; The cyber-Swiss-army-knife for data
  • Fail2ban; Bans IPs after suspicious activity (intrusion prevention)
  • Fleet; Self-hosted osquery fleet manager (web UI + API)
  • Fuzzilli; Coverage-guided JavaScript engine fuzzer (reviewed local binaries)
  • Google Safe Browsing; Is your site flagged as malicious by Chrome? (cloud API)
  • GreyNoise; Is this IP scanning everyone, or targeting you? (cloud API)
  • GRR Rapid Response; Remote live-forensics / IR framework (self-hosted)
  • Hands Off!; Per-app network + disk access control (app)
  • Huntress; Managed EDR/MDR for SMB & MSPs (agent + API)
  • Hybrid Analysis; Malware sandbox (Falcon Sandbox); API
  • Intego NetBarrier; Intego's two-way Mac firewall (NetBarrier X9 / Intego ONE)
  • IntelOwl; OSINT / threat-intel analysis platform (self-hosted)
  • Jamf Protect; Mac-native endpoint security (agent + API)
  • KnockKnock; Reveal persistently installed Mac software (self-hosted)
  • Kolide; Device trust & posture (osquery-based agent + API)
  • LimaCharlie; API-first SecOps cloud / EDR (agent + API)
  • Little Snitch; Commercial network monitor & firewall (macOS app)
  • LuLu; Free open-source outbound firewall (macOS app)
  • Malwarebytes; Anti-malware (macOS app; business via Nebula API)
  • Microsoft Defender for Endpoint; Microsoft EDR for macOS (agent + Graph API)
  • MISP; Threat-intelligence sharing platform (self-hosted)
  • Mozilla Observatory; Graded HTTP header & TLS scan for your own sites (free API)
  • Murus; GUI front-end for the macOS pf firewall (app)
  • NetBarrier; Two-way macOS firewall (Intego, app)
  • Nuclei; Template-based vulnerability scanner (self-hosted CLI)
  • oletools; Analyse malicious Office docs / OLE (self-hosted)
  • OpenCTI; Cyber threat-intelligence platform (self-hosted)
  • OpenEDR; Open-source endpoint detection & response (self-hosted)
  • OpenPhish; Live phishing-URL feed (cloud)
  • OpenVAS / Greenbone; Vulnerability scanning (self-hosted)
  • OPSWAT MetaDefender; Multi-engine malware scanning & file CDR (self-hosted / API)
  • osquery; Query your endpoint like a database (agent)
  • OSSEC; Host-based IDS: log, file-integrity & rootkit monitoring
  • OWASP ZAP; Open-source web-app security scanner (DAST); spider, active scan, proxy
  • pfBlockerNG; IP & DNS blocklists for pfSense (DNSBL ad/malware blocking)
  • Phishing Catcher; Catch phishing domains from CT logs (self-hosted)
  • radare2; Reverse-engineering framework / disassembler (self-hosted)
  • Radio Silence; Lightweight macOS outbound firewall (app)
  • Santa; macOS binary allowlisting / blocklisting (self-hosted)
  • SentinelOne; Autonomous EDR/XDR (macOS agent + API)
  • Shodan; Search engine for internet-exposed hosts and services (cloud API)
  • Snort; The classic network IDS (self-hosted)
  • Sophos Central; Endpoint protection / MDR (macOS agent + API)
  • Strix; AI-assisted penetration testing from the local CLI
  • Suricata; High-performance IDS/IPS engine (self-hosted)
  • TheHive; Security incident-response platform (self-hosted)
  • ThreatLocker; Zero Trust app allowlisting & endpoint control (agent + cloud portal)
  • URLhaus; Malware-URL feed & lookup API (cloud · abuse.ch)
  • urlscan.io; Sandboxed URL scanning; see what a link really does (cloud API)
  • Vallum; Per-app outbound firewall & throttle (app)
  • Velociraptor; Endpoint visibility & DFIR hunting (self-hosted)
  • Vibe Proxy; AI-assisted web security testing & intercepting proxy
  • VirusTotal; Multi-engine file/URL reputation (API)
  • Volatility 3; Memory-forensics framework (self-hosted)
  • Wireshark; Packet capture and protocol analysis for network diagnosis
  • Yakit; Open-source web security testing platform & MITM (macOS app)
  • YARA; Pattern-matching engine for malware (self-hosted)
  • YARA-X; YARA rewritten in Rust; faster CLI scanner (self-hosted)
  • Zeek; Network security monitor / traffic analysis (self-hosted)
  • Zenarmor; Next-gen firewall / DPI layer for OPNsense & pfSense (formerly Sensei)
Monitoring49
  • Alertmanager; Route and deduplicate Prometheus alerts (self-hosted)
  • AppSignal; Application errors, performance, uptime and deploys (SaaS)
  • Atatus; APM, logs, infrastructure and real-user monitoring (SaaS)
  • Atera; RMM, patching, ticketing and automation (SaaS)
  • Beszel; Lightweight server monitoring hub + agents
  • Checkmk; Auto-discovering IT monitoring (self-hosted)
  • Datadog; Hosted metrics, logs, traces and synthetics (SaaS)
  • Dynatrace; Enterprise observability and AIOps platform
  • FirstWave NMIS; Open network fault, performance and configuration monitoring
  • Glances; Cross-platform system monitor (web/API)
  • GoAccess; Real-time access-log analyser (CLI/HTML)
  • Grafana; Dashboards for any data source (self-hosted)
  • Healthchecks.io; Cron & heartbeat monitoring (cloud or self-hosted)
  • Homepage; Self-hosted services dashboard (gethomepage.dev)
  • Honeycomb; Observability for high-cardinality events and traces
  • Infraon IMS; Unified infrastructure, network and configuration monitoring
  • JENNIFER APM (제니퍼, JenniferSoft); Self-hosted Korean APM (JenniferSoft)
  • LibreNMS; Auto-discovering SNMP network monitoring (switches, routers, servers)
  • ManageEngine Applications Manager; Application, server, VM and capacity monitoring
  • ManageEngine OpManager Nexus; Unified network, server and IT operations management
  • Matomo; Full-featured self-hosted web analytics
  • N-able N-central; Unified endpoint management, RMM and patching
  • Nagios Core; The classic check-based monitor (self-hosted)
  • Naverisk RMM & PSA; Cross-platform RMM, service desk and PSA
  • Netdata; Real-time system metrics dashboard
  • Netreo; Full-stack infrastructure and business-service observability
  • New Relic; Hosted APM, infrastructure and logs (SaaS)
  • NinjaOne; Endpoint monitoring, patching and automation (SaaS RMM)
  • Node Exporter; Unix host metrics for Prometheus (self-hosted)
  • ntopng; Live traffic analysis; who is talking to whom, and how much
  • NUT (Network UPS Tools); Free, open-source UPS monitoring server (upsd)
  • Paessler PRTG; Network, server and infrastructure monitoring (Windows or hosted)
  • Pandora FMS; Infrastructure, application, log and synthetic monitoring
  • PeaNUT; Modern web dashboard for NUT UPS servers
  • Plausible; Lightweight, privacy-first analytics
  • Prometheus; Time-series metrics & alerting (self-hosted)
  • Pulseway; Mobile-first RMM, patching and endpoint automation
  • Scouter (open-source APM); Korean-origin open-source APM
  • Scrutiny; S.M.A.R.T. drive health dashboard
  • Sentry; Error tracking and performance monitoring
  • Server Density; Hosted server, service and container monitoring
  • Site24x7; Infrastructure, application, network and experience monitoring (SaaS)
  • Speedtest Tracker; Scheduled internet speed tests + history
  • Umami; Simple, privacy-focused analytics (Node)
  • Uptime Kuma; Self-hosted uptime monitor
  • UptimeRobot; Cloud uptime/SSL monitoring with status pages
  • WhaTap (와탭); Korean SaaS APM, server, Kubernetes & DB monitoring
  • Windows Exporter; Windows host metrics for Prometheus (remote)
  • Zabbix; Enterprise monitoring; agents, SNMP, triggers (self-hosted)
Chat & Collaboration33
Business Messaging27
Accounting & ERP21
Campus & School Ops17
Mail17
Runtimes17
  • .NET (ASP.NET Core); Run ASP.NET Core & Blazor apps (Kestrel)
  • Astro; Content-first framework; zero JS by default; popular headless-WordPress front end
  • celld (Durable Objects); Self-hosted Cloudflare Workers & Durable Objects (Deno)
  • code-server; VS Code in the browser (self-hosted)
  • Deno; Secure JavaScript/TypeScript runtime with npm support
  • Fermyon Spin; Serverless WebAssembly apps & HTTP microservices
  • Mojo; Modular's AI systems language (Python-family syntax)
  • Next.js; React framework served by a Node process (SSR/SSG)
  • Nuxt (Vue); Vue framework served by a Node process (SSR/SSG)
  • Solid (SolidJS); Fine-grained reactive UI framework; SolidStart serves it as a Node process
  • Supabase Edge Functions; Deno serverless functions on the edge
  • SvelteKit (Svelte); Svelte app framework served by a Node process (SSR/SSG)
  • Tailwind CSS; Utility-first CSS; standalone build CLI (no Node)
  • wasmCloud; Distributed WebAssembly platform (CNCF)
  • WasmEdge; Lightweight WASM runtime for cloud/edge & AI (CNCF)
  • Wasmer; WebAssembly runtime with a package registry
  • Wasmtime; Bytecode Alliance WebAssembly runtime (WASI)
Databases17
  • Apache Cassandra; Distributed wide-column database
  • Apache CouchDB; Document database with HTTP API and sync
  • CockroachDB; Distributed SQL database
  • Couchbase Server; Distributed document, key-value and search database
  • Firebase; Google's backend-as-a-service; Firestore, Auth, Storage, Functions (cloud)
  • Microsoft SQL Server; Microsoft relational database for Windows and Linux
  • MongoDB; Document (NoSQL) database
  • MongoDB Atlas; MongoDB's managed cloud database (cloud API)
  • Neo4j; Graph database with Cypher query language
  • Neon; Serverless Postgres; autoscaling & branching (cloud API)
  • Oracle Database; Enterprise relational database
  • Patroni; HA PostgreSQL; automatic failover
  • PlanetScale; Hosted MySQL with database branching (cloud API)
  • PocketBase; Open-source backend in one file (SQLite + auth + realtime)
  • PostgREST; Instant REST API over a PostgreSQL database
  • ScyllaDB; High-performance Cassandra-compatible database
  • Turso; Distributed SQLite (libSQL) at the edge (cloud API)
SMS & iMessage Gateways16
Learning Management13
Identity & Accounts12
CRM & Loyalty12
  • EspoCRM; Lightweight self-hosted CRM (PHP)
  • HubSpot; CRM + marketing/sales hubs (cloud)
  • Loyalzoo; Digital loyalty for independents (cloud)
  • Odoo CRM; CRM inside the open-source ERP (Python)
  • Pipedrive; Sales-pipeline-first CRM (cloud)
  • Punchh; Enterprise restaurant loyalty (PAR, cloud)
  • Salesforce; The enterprise CRM (cloud)
  • Square Loyalty; Points & rewards on Square (cloud)
  • SuiteCRM; Self-hosted open-source CRM (PHP)
  • Thanx; Guest engagement & loyalty for restaurants
  • VoucherVault; Self-hosted vouchers, gift cards & loyalty
  • Zoho CRM; Affordable full-suite CRM (cloud)
Student Information Systems10
Calendars10
Backup9
Web Servers7
  • Angular CLI; Scaffold, serve & build Angular apps
  • Apache Tomcat; Java servlet/JSP application server
  • Caddy; Automatic-HTTPS web server / reverse proxy
  • Laravel Herd; One-click PHP dev environment (Mac app)
  • Microsoft IIS; Windows web server and application platform
  • OpenLiteSpeed; High-performance web server with web admin UI
  • Puma; Threaded Rack/HTTP server; the default app server for Rails
Digital Library6
  • DSpace; Open-source institutional repository (self-hosted)
  • EBSCOhost; Research databases & e-journals (cloud)
  • Greenstone; Open-source digital-library builder (self-hosted)
  • JSTOR; Academic journals & books archive (cloud)
  • Koha; Open-source integrated library system (self-hosted)
  • ProQuest; Dissertations, e-journals & databases (cloud)
Helpdesk & Ticketing6
IT Assets5
  • AssetTiger; Cloud asset tracking with barcodes (API)
  • GLPI; Asset inventory & ITSM with CMDB (PHP/MySQL)
  • Lansweeper; IT asset discovery & inventory (cloud/on-prem API)
  • Snipe-IT; Open-source IT asset management (PHP/MySQL)
  • Workwize; Global IT equipment lifecycle & logistics (cloud API)

Browse all services →

Run it from your Mac.

FrontierStack installs, monitors and secures services on this Mac and on linked servers; and keeps your passwords and keys out of any AI's sight.

Download FrontierStack

Apple notarized · Safe & secure · macOS 13 Ventura+