Schools & universities on a Mac
Student information systems, LMS, digital library and campus operations — self-hosted or connected.
The School & University preset reveals the education categories — Student Information Systems (PowerSchool, openSIS, RosarioSIS), Learning Management (Canvas, Moodle, Open edX, ILIAS), Digital Library (Koha, DSpace) and Campus & School Ops (admissions, timetabling, tuition, housing) — alongside identity (Keycloak / FreeIPA / ClassLink), communication and accounting. Self-host what you can, connect the cloud services you can’t, and keep it all secured, monitored and backed up.
Services we install or monitor for this
317 services across 20 categories that FrontierStack can install, connect and monitor for this use-case — revealed together when you pick this preset in the app.
Security Tools73
- AbuseIPDB — Crowd-sourced IP reputation / blocklist (cloud API)
- AdGuard — Ad/tracker blocker app + AdGuard DNS & VPN (commercial)
- Admin By Request — Endpoint privilege management / just-in-time admin (agent + API)
- Airlock Digital — Application allowlisting & execution control (agent + API)
- AlienVault OTX — Open Threat Exchange IOC feed (cloud)
- AutoElevate (CyberFOX) — MSP privilege elevation & local-admin control (agent + API)
- BeyondTrust EPM — Endpoint Privilege Management for Mac (agent + API)
- binwalk — Firmware / embedded-file carving & analysis (self-hosted)
- Bitdefender GravityZone — Endpoint protection / EDR (macOS agent + API)
- BlockBlock — Monitor & block persistence in real time (self-hosted)
- Burp Suite — Web app security testing — intercepting proxy & scanner (macOS app)
- capa — Detect capabilities in executables (self-hosted)
- CAPE Sandbox — Malware sandbox w/ config extraction (self-hosted)
- ClamAV — Open-source antivirus engine (self-hosted)
- Cloudmersive — Virus-scan & content-protection API (cloud / self-host)
- Cortex — Observable analysers & responders engine (self-hosted)
- CrowdSec — Behavioural detection + IP blocking (crowd-sourced)
- CrowdStrike Falcon — Cloud-native EDR/XDR (macOS sensor + API)
- Cuckoo Sandbox — Automated malware-analysis sandbox (self-hosted)
- CyberArk EPM — Endpoint Privilege Manager (agent + API)
- CyberChef — The cyber-Swiss-army-knife for data
- Fail2ban — Bans IPs after suspicious activity (intrusion prevention)
- Fleet — Self-hosted osquery fleet manager (web UI + API)
- Fuzzilli — Coverage-guided JavaScript engine fuzzer (reviewed local binaries)
- GRR Rapid Response — Remote live-forensics / IR framework (self-hosted)
- Hands Off! — Per-app network + disk access control (app)
- Huntress — Managed EDR/MDR for SMB & MSPs (agent + API)
- Hybrid Analysis — Malware sandbox (Falcon Sandbox) — API
- IntelOwl — OSINT / threat-intel analysis platform (self-hosted)
- Jamf Protect — Mac-native endpoint security (agent + API)
- KnockKnock — Reveal persistently installed Mac software (self-hosted)
- Kolide — Device trust & posture (osquery-based agent + API)
- LimaCharlie — API-first SecOps cloud / EDR (agent + API)
- Little Snitch — Commercial network monitor & firewall (macOS app)
- LuLu — Free open-source outbound firewall (macOS app)
- Malwarebytes — Anti-malware (macOS app; business via Nebula API)
- Microsoft Defender for Endpoint — Microsoft EDR for macOS (agent + Graph API)
- MISP — Threat-intelligence sharing platform (self-hosted)
- Murus — GUI front-end for the macOS pf firewall (app)
- NetBarrier — Two-way macOS firewall (Intego, app)
- Nuclei — Template-based vulnerability scanner (self-hosted CLI)
- oletools — Analyse malicious Office docs / OLE (self-hosted)
- OpenCTI — Cyber threat-intelligence platform (self-hosted)
- OpenEDR — Open-source endpoint detection & response (self-hosted)
- OpenPhish — Live phishing-URL feed (cloud)
- OpenVAS / Greenbone — Vulnerability scanning (self-hosted)
- OPSWAT MetaDefender — Multi-engine malware scanning & file CDR (self-hosted / API)
- osquery — Query your endpoint like a database (agent)
- OSSEC — Host-based IDS: log, file-integrity & rootkit monitoring
- OWASP ZAP — Open-source web-app security scanner (DAST) — spider, active scan, proxy
- Phishing Catcher — Catch phishing domains from CT logs (self-hosted)
- radare2 — Reverse-engineering framework / disassembler (self-hosted)
- Radio Silence — Lightweight macOS outbound firewall (app)
- Santa — macOS binary allowlisting / blocklisting (self-hosted)
- Security Onion — NSM + SIEM + IDS Linux distro (self-hosted)
- SentinelOne — Autonomous EDR/XDR (macOS agent + API)
- Snort — The classic network IDS (self-hosted)
- Sophos Central — Endpoint protection / MDR (macOS agent + API)
- Strix — AI-assisted penetration testing from the local CLI
- Suricata — High-performance IDS/IPS engine (self-hosted)
- TheHive — Security incident-response platform (self-hosted)
- ThreatLocker — Zero Trust app allowlisting & endpoint control (agent + cloud portal)
- URLhaus — Malware-URL feed & lookup API (cloud · abuse.ch)
- Vallum — Per-app outbound firewall & throttle (app)
- Velociraptor — Endpoint visibility & DFIR hunting (self-hosted)
- Vibe Proxy — AI-assisted web security testing & intercepting proxy
- VirusTotal — Multi-engine file/URL reputation (API)
- Volatility 3 — Memory-forensics framework (self-hosted)
- Wazuh — Open-source SIEM & XDR (self-hosted)
- Yakit — Open-source web security testing platform & MITM (macOS app)
- YARA — Pattern-matching engine for malware (self-hosted)
- YARA-X — YARA rewritten in Rust — faster CLI scanner (self-hosted)
- Zeek — Network security monitor / traffic analysis (self-hosted)
Monitoring28
- Alertmanager — Route and deduplicate Prometheus alerts (self-hosted)
- Beszel — Lightweight server monitoring hub + agents
- Checkmk — Auto-discovering IT monitoring (self-hosted)
- Datadog — Hosted metrics, logs, traces and synthetics (SaaS)
- Dynatrace — Enterprise observability and AIOps platform
- Glances — Cross-platform system monitor (web/API)
- GoAccess — Real-time access-log analyser (CLI/HTML)
- Grafana — Dashboards for any data source (self-hosted)
- Healthchecks.io — Cron & heartbeat monitoring (cloud or self-hosted)
- Homepage — Self-hosted services dashboard (gethomepage.dev)
- Honeycomb — Observability for high-cardinality events and traces
- Matomo — Full-featured self-hosted web analytics
- Nagios Core — The classic check-based monitor (self-hosted)
- Netdata — Real-time system metrics dashboard
- New Relic — Hosted APM, infrastructure and logs (SaaS)
- Node Exporter — Unix host metrics for Prometheus (self-hosted)
- NUT (Network UPS Tools) — UPS monitoring server (upsd) for many devices
- PeaNUT — Modern web dashboard for NUT UPS servers
- Plausible — Lightweight, privacy-first analytics
- Prometheus — Time-series metrics & alerting (self-hosted)
- Scrutiny — S.M.A.R.T. drive health dashboard
- Sentry — Error tracking and performance monitoring
- Speedtest Tracker — Scheduled internet speed tests + history
- Umami — Simple, privacy-focused analytics (Node)
- Uptime Kuma — Self-hosted uptime monitor
- UptimeRobot — Cloud uptime/SSL monitoring with status pages
- Windows Exporter — Windows host metrics for Prometheus (remote)
- Zabbix — Enterprise monitoring — agents, SNMP, triggers (self-hosted)
Chat & Collaboration26
- AIM OSCAR Server — Alternative OSCAR server — make your own AIM chat network
- Anope (IRC services) — IRC services (NickServ/ChanServ) for many IRCds
- Atheme (IRC services) — NickServ/ChanServ services for TS6 IRCds
- Buzz — Group chat for humans + AI agents (Block; cloud or self-hosted)
- Discord — Community chat & voice (cloud)
- Ergo (IRCd) — Modern single-binary IRC server (IRCv3, built-in services)
- InspIRCd — Modular C++ IRC server (self-hosted)
- Jitsi Meet — Open-source video conferencing (self-hosted)
- KiwiIRC — Web IRC client + gateway (self-hosted)
- Libera.Chat — Public IRC network (FOSS communities) — connect, not self-host
- Matrix (Synapse + Element) — Open, federated chat — self-hosted (Docker)
- Mattermost — Open-source Slack alternative (self-hosted)
- Mumble — Open-source low-latency voice (self-hosted)
- Open OSCAR Server — Self-hostable AIM/ICQ (OSCAR) server — run your own AIM
- Prosody — Lightweight XMPP (Messages) server
- Rocket.Chat — Open-source team chat platform (self-hosted)
- Session — Onion-routed private messenger (no phone number)
- SimpleX Chat — Private messenger with no user IDs (self-hostable relays)
- Slack — Team chat & workflows (cloud)
- Solanum (IRCd) — The IRCd that runs Libera.Chat (charybdis fork)
- TeamSpeak — Low-latency voice server (self-hosted)
- Telegram — Cloud messaging with a powerful Bot API (cloud)
- The Lounge — Self-hosted web IRC client (always-on)
- UnrealIRCd — Popular full-featured IRC server (self-hosted)
- ZNC (IRC bouncer) — IRC bouncer — stay connected, replay history
- Zulip — Threaded team chat (self-hosted or cloud)
Business Messaging23
- Apple Messages for Business — Store↔customer chat inside iMessage
- Attentive — SMS & email marketing for retail/DTC
- Charles — Conversational commerce on WhatsApp
- Facebook Messenger — Messenger business messaging (Meta)
- Gorgias — E-commerce helpdesk with chat & proactive messages
- Gupshup — Conversational messaging API (WhatsApp & more)
- Instagram Messaging — Instagram DM API for business (Meta)
- Intercom — Customer messaging & proactive marketing (live)
- KakaoTalk AlimTalk — Kakao business notification templates — Korea (cloud)
- KakaoTalk Channel — Kakao business channel — Korea (friend broadcasts & chat)
- LINE Official Account — Customer messaging & loyalty on LINE
- ManyChat — Chat marketing bots — Instagram/Messenger/WhatsApp (live)
- Omnisend — Email & SMS marketing automation (e-commerce)
- Postscript — SMS marketing for Shopify stores
- RCS Business Messaging — Branded rich business messaging (SMS successor)
- Respond.io — Omnichannel customer-conversation inbox
- SimpleTexting — Business SMS/MMS marketing & two-way texting
- Trengo — Multichannel team inbox for customer chat
- Viber Business Messages — Branded business messages on Viber
- WATI — WhatsApp Business team inbox & broadcasts
- WeChat Official Account — WeChat business account — China (broadcasts, menus, mini-programs)
- WhatsApp Business Platform — WhatsApp business messaging — templates, catalogues (live)
- Zalo Official Account — Zalo business account — Vietnam (broadcasts & chat)
Campus & School Ops17
- aSc Timetables — School timetable generator (desktop)
- Asset Panda — Asset & device tracking (cloud)
- ClassLink — Education SSO & rostering (cloud)
- Ellucian Banner — Higher-ed ERP / student system (cloud or self-hosted)
- eRezLife — Residence life & housing management (cloud)
- FACTS Tuition Management — Tuition billing & payment plans (cloud)
- FET Timetabling — Open-source automatic timetabling (self-hosted/desktop)
- Finalsite Enrolment — School websites & enrolment (cloud)
- Flywire Education Payments — Cross-border tuition payments (cloud)
- Incident IQ — K-12 IT helpdesk & asset management (cloud)
- Mimosa Scheduling — Timetabling / scheduling software (desktop)
- OpenApply — Admissions & enrolment for K-12 (cloud)
- ParentSquare — School-home communication (cloud)
- Remind — Teacher-family messaging (cloud)
- Slate Admissions — Admissions & enrolment CRM (cloud)
- StarRez — Student housing & residential life (cloud)
- Workday Student — Cloud ERP for higher education (cloud)
Databases16
- Apache Cassandra — Distributed wide-column database
- Apache CouchDB — Document database with HTTP API and sync
- CockroachDB — Distributed SQL database
- Couchbase Server — Distributed document, key-value and search database
- Firebase — Google's backend-as-a-service — Firestore, Auth, Storage, Functions (cloud)
- Microsoft SQL Server — Microsoft relational database for Windows and Linux
- MongoDB — Document (NoSQL) database
- Neo4j — Graph database with Cypher query language
- Neon — Serverless Postgres — autoscaling & branching (cloud API)
- Oracle Database — Enterprise relational database
- Patroni — HA PostgreSQL — automatic failover
- PlanetScale — Hosted MySQL with database branching (cloud API)
- PocketBase — Open-source backend in one file (SQLite + auth + realtime)
- PostgREST — Instant REST API over a PostgreSQL database
- ScyllaDB — High-performance Cassandra-compatible database
- Turso — Distributed SQLite (libSQL) at the edge (cloud API)
Mail15
- Apache SpamAssassin — Rule-based spam classifier (self-hosted)
- Dovecot — IMAP/POP3 mail delivery server
- HEY — 37signals hosted email & calendar (Imbox, Screener, Paper Trail)
- Inbox Zero — Open-source AI email assistant (self-hosted)
- Maddy Mail Server — Composable single-binary mail server (SMTP/IMAP)
- mailcow — Dockerized full mail-server suite (self-hosted)
- MailScanner — Email security framework / gateway (self-hosted)
- Modoboa — Mail hosting & management platform (self-hosted)
- OpenDKIM — DKIM signing & verification milter (self-hosted)
- OpenDMARC — DMARC policy filter & reporting (self-hosted)
- Postfix — SMTP mail transfer agent
- Proton — Encrypted mail, VPN, drive & passwords (cloud)
- Proxmox Mail Gateway — Anti-spam/AV email gateway appliance (self-hosted)
- Rspamd — Fast spam-filtering system (self-hosted)
- Stalwart Mail Server — All-in-one secure mail server (SMTP/IMAP/JMAP)
Learning Management13
- BigBlueButton — Open-source virtual classroom (self-hosted)
- Blackboard Learn — Higher-ed LMS (cloud)
- Canvas LMS — Instructure Canvas — courses, assignments, grading
- ExamSoft — Secure exam delivery & analytics (cloud)
- Google Classroom — Google's classroom & assignment tool (cloud)
- Google Meet — Google's video meetings (cloud)
- ILIAS — Open-source LMS (self-hosted, PHP)
- Moodle — Open-source LMS (self-hosted, PHP)
- Open edX — MOOC-scale open LMS (self-hosted)
- ProctorU — Online exam proctoring (cloud)
- Schoology — K-12 LMS by PowerSchool (cloud)
- TAO Testing — Open-source assessment platform (self-hosted)
- Zoom — Video meetings & online classes (app)
Accounting & ERP13
- Actual Budget — Fast local-first envelope budgeting
- ERPNext — Open-source ERP — accounting, inventory, HR (self-hosted)
- Expensify — Expense & receipt management (cloud API)
- Firefly III — Self-hosted personal finance manager
- freee — Japanese cloud accounting & HR (cloud)
- Ghostfolio — Open-source wealth/investment tracker
- Invoice Ninja — Self-hosted invoicing & payments
- Maybe — Open-source personal finance / net worth
- Money Forward Cloud — Japanese cloud accounting & back office (cloud)
- Odoo — Open-source ERP suite — self-hosted (Python + PostgreSQL)
- Plaid — Bank account linking & financial data (cloud API)
- QuickBooks — Intuit cloud accounting (cloud)
- Xero — Cloud accounting for small business (cloud)
Runtimes13
- .NET (ASP.NET Core) — Run ASP.NET Core & Blazor apps (Kestrel)
- Astro — Content-first framework — zero JS by default; popular headless-WordPress front end
- code-server — VS Code in the browser (self-hosted)
- Fermyon Spin — Serverless WebAssembly apps & HTTP microservices
- Next.js — React framework served by a Node process (SSR/SSG)
- Nuxt (Vue) — Vue framework served by a Node process (SSR/SSG)
- Supabase Edge Functions — Deno serverless functions on the edge
- SvelteKit (Svelte) — Svelte app framework served by a Node process (SSR/SSG)
- Tailwind CSS — Utility-first CSS — standalone build CLI (no Node)
- wasmCloud — Distributed WebAssembly platform (CNCF)
- WasmEdge — Lightweight WASM runtime for cloud/edge & AI (CNCF)
- Wasmer — WebAssembly runtime with a package registry
- Wasmtime — Bytecode Alliance WebAssembly runtime (WASI)
CRM & Loyalty12
- EspoCRM — Lightweight self-hosted CRM (PHP)
- HubSpot — CRM + marketing/sales hubs (cloud)
- Loyalzoo — Digital loyalty for independents (cloud)
- Odoo CRM — CRM inside the open-source ERP (Python)
- Pipedrive — Sales-pipeline-first CRM (cloud)
- Punchh — Enterprise restaurant loyalty (PAR, cloud)
- Salesforce — The enterprise CRM (cloud)
- Square Loyalty — Points & rewards on Square (cloud)
- SuiteCRM — Self-hosted open-source CRM (PHP)
- Thanx — Guest engagement & loyalty for restaurants
- VoucherVault — Self-hosted vouchers, gift cards & loyalty
- Zoho CRM — Affordable full-suite CRM (cloud)
Student Information Systems10
- Blackbaud SIS — Independent/private-school SIS (cloud)
- FACTS SIS — Private/faith-based school SIS (cloud)
- Infinite Campus — K-12 SIS & state reporting (cloud)
- openSIS — Open-source student information system (self-hosted)
- PowerSchool Attendance — Attendance tracking within PowerSchool (cloud)
- PowerSchool SIS — K-12 student information system (cloud)
- RFID/NFC Attendance — Tap-card attendance with RFID/NFC readers (self-hosted)
- RosarioSIS — Open-source SIS (PHP/PostgreSQL, self-hosted)
- SchoolPass — Attendance, dismissal & safety (cloud)
- Veracross — All-in-one independent-school platform (cloud)
Identity & Accounts10
- AD FS — Active Directory Federation Services (on-prem SSO)
- Authenticate.com — Identity verification & KYC API (cloud)
- Authentik — Self-hosted identity provider (Docker)
- Dropbox Business — Team management & audit-log APIs for Dropbox Business (cloud)
- FreeIPA — Open-source identity management (LDAP/Kerberos, self-hosted)
- Google Workspace — Google's identity & productivity suite (Admin SDK)
- Keycloak — Open-source identity & access management (SSO)
- Microsoft Entra ID — Azure AD — cloud identity & SSO (Graph health)
- Okta — Workforce identity & SSO — live API health
- Open Directory — Apple's built-in LDAP / Kerberos directory
Calendars10
- Apple Calendar Server — Migrate the old macOS Server CalDAV
- Baïkal — PHP CalDAV/CardDAV server (SabreDAV)
- Cal.com — Open-source scheduling (self-hostable)
- Calendly — Hosted scheduling / booking links
- DAViCal — PHP/PostgreSQL CalDAV server
- Google Calendar — Hosted calendar (CalDAV / API)
- Nextcloud Calendar — Calendar app on a Nextcloud server
- Outlook Calendar — Microsoft 365 calendar (Graph API)
- Radicale — Lightweight CalDAV/CardDAV server
- SOGo — Groupware (CalDAV/CardDAV/ActiveSync)
SMS & iMessage Gateways9
- AirMessage — Self-hosted iMessage bridge — server on this Mac
- Android + Tasker — DIY SMS gateway via Tasker automation (self-hosted)
- BlueBubbles — Self-hosted iMessage bridge — server on this Mac
- Gammu (gammu-smsd) — Send/receive SMS via a GSM modem (self-hosted)
- Home Assistant SMS — SMS notify/receive in Home Assistant (Gammu)
- Kannel — Open-source SMS/WAP gateway (self-hosted)
- ModemManager — Linux modem daemon — SMS via mmcli (self-hosted)
- SMS Gateway for Android — Turn an Android phone into an SMS HTTP API (self-hosted)
- SMSSync — Android SMS↔webhook relay (self-hosted)
Backup9
- BorgBackup — Deduplicating encrypted backups over SSH
- Databasus — Self-hosted database backup & point-in-time recovery
- Dropbox (Backup Target) — Use Dropbox as an encrypted off-site backup destination (restic / rclone)
- Duplicati — Web UI backups to cloud storage
- Kopia — Encrypted snapshots to cloud or local storage
- rclone — Sync & mount 70+ cloud storages
- Restic — Fast, encrypted, deduplicated backups
- Synology Active Backup for Business — Centralized backup for PCs, servers, VMs & SaaS (Synology)
- Veeam Backup & Replication — Enterprise VM, server and cloud backup
Digital Library6
- DSpace — Open-source institutional repository (self-hosted)
- EBSCOhost — Research databases & e-journals (cloud)
- Greenstone — Open-source digital-library builder (self-hosted)
- JSTOR — Academic journals & books archive (cloud)
- Koha — Open-source integrated library system (self-hosted)
- ProQuest — Dissertations, e-journals & databases (cloud)
Web Servers6
- Angular CLI — Scaffold, serve & build Angular apps
- Apache Tomcat — Java servlet/JSP application server
- Caddy — Automatic-HTTPS web server / reverse proxy
- Laravel Herd — One-click PHP dev environment (Mac app)
- Microsoft IIS — Windows web server and application platform
- OpenLiteSpeed — High-performance web server with web admin UI
IT Assets5
- AssetTiger — Cloud asset tracking with barcodes (API)
- GLPI — Asset inventory & ITSM with CMDB (PHP/MySQL)
- Lansweeper — IT asset discovery & inventory (cloud/on-prem API)
- Snipe-IT — Open-source IT asset management (PHP/MySQL)
- Workwize — Global IT equipment lifecycle & logistics (cloud API)
Helpdesk & Ticketing3
Run it all from one Mac app.
FrontierStack installs, monitors and secures the whole stack — locally and across your fleet — from a single native macOS app.
Download FrontierStack