Sovereign Web Stack

A scored directory for open-source web infrastructure: analytics, identity, CMS, forms, search, monitoring, support, and collaboration tools ranked by how much control they leave with the operator.

  • 14 projects in v1
  • 8 scoring criteria
  • 100 possible points
  • Last reviewed July 2026

Sovereign Web Stack ranked project directory

14 projects shown

1

HitKeep

Privacy-first web analytics with a self-hostable single-binary path and managed EU/US cloud option.

  • Analytics
  • Open source
  • Reviewed Jul 2026
92Strong
Best fit

Teams that want website analytics, goals, funnels, ecommerce, search visibility, AI visibility, and exports without operating a database cluster.

Watch

Cloud maturity and ecosystem integrations should be reviewed over time as the hosted offering grows.

2

Keycloak

Open-source identity and access management with standards-based SSO, OIDC, and SAML.

  • Identity
  • Apache-2.0
  • Reviewed Jul 2026
89Strong
Best fit

Organizations that need self-controlled identity infrastructure with standard federation support.

Watch

Identity is critical infrastructure; operations, upgrades, backups, and incident response must be treated seriously.

3

Matomo

Mature open-source web analytics platform with self-hosted and managed options.

  • Analytics
  • GPL-3.0-or-later
  • Reviewed Jul 2026
86Strong
Best fit

Organizations that need a long-running GA-style analytics suite with many integrations and established compliance documentation.

Watch

The broader feature surface and PHP/MySQL operations model can be heavier than smaller analytics tools.

4

Nextcloud

Self-hostable file sync, collaboration, and office ecosystem for organizations that need data control.

  • Collaboration
  • AGPL-3.0-or-later
  • Reviewed Jul 2026
86Strong
Best fit

Teams that need controlled file sharing, collaboration, and user-facing productivity services.

Watch

A broad app ecosystem can increase maintenance, update, and hardening work.

5

listmonk

Self-hosted newsletter and mailing-list manager with a compact Go application and PostgreSQL.

  • Email and newsletter
  • AGPL-3.0
  • Reviewed Jul 2026
85Strong
Best fit

Organizations that want to own subscriber lists and campaigns without outsourcing newsletter data.

Watch

Email deliverability still depends on SMTP provider, DNS reputation, and list hygiene.

6

Plausible

Lightweight privacy-focused analytics with open-source self-hosting and a commercial cloud service.

  • Analytics
  • AGPL-3.0
  • Reviewed Jul 2026
81Good
Best fit

Teams that want a simple dashboard, small tracking script, and strong privacy messaging.

Watch

Self-hosting has a multi-service footprint; some teams may prefer managed cloud for routine operations.

7

Zammad

Open-source helpdesk and support system with self-hosted and hosted options.

  • Support
  • AGPL-3.0
  • Reviewed Jul 2026
81Good
Best fit

Support teams that need ticket ownership, email workflows, and controlled customer data.

Watch

Support data is sensitive; access control, backups, and email security are critical.

8

Formbricks

Open-source survey and form platform with self-hosting and managed cloud.

  • Forms and surveys
  • AGPL-3.0
  • Reviewed Jul 2026
80Good
Best fit

Teams that need controlled surveys, feedback, and product research workflows.

Watch

Survey data can be sensitive; retention, access control, and hosting region need review.

9

Uptime Kuma

Self-hosted uptime monitoring with status pages and common notification integrations.

  • Monitoring
  • MIT
  • Reviewed Jul 2026
78Good
Best fit

Small teams and operators that need a simple owned uptime monitor.

Watch

For large estates, governance, HA, and alerting depth may require a more formal monitoring platform.

10

Umami

Open-source web analytics with a simple product surface and managed cloud option.

  • Analytics
  • MIT
  • Reviewed Jul 2026
77Good
Best fit

Small teams that want a familiar analytics dashboard and can operate a Node.js app with a supported SQL database.

Watch

The self-hosted path depends on an external database and the hosted product is separate from your infrastructure choices.

11

Meilisearch

Open-source search engine designed for fast site and app search experiences.

  • Search
  • MIT
  • Reviewed Jul 2026
76Good
Best fit

Teams that want to run their own search backend for documentation, catalogs, and product data.

Watch

Managed cloud convenience may be attractive; evaluate data residency and operational needs.

12

Directus

Data platform and headless CMS that layers APIs and admin UI over SQL databases.

  • CMS and data platform
  • BSL / source-available transition model
  • Reviewed Jul 2026
75Good
Best fit

Teams that want an admin UI and APIs on top of their own database schema.

Watch

Review licensing, hosted features, and the governance model because source availability is not the same as a permissive OSS license.

13

Strapi

Open-source headless CMS for building content APIs and editorial workflows.

  • CMS
  • MIT / enterprise add-ons
  • Reviewed Jul 2026
75Good
Best fit

Teams that want a familiar Node.js CMS with API-first content delivery.

Watch

Enterprise features and plugin choices can shape the real sovereignty posture.

14

PostHog

Broad product analytics and feature platform with open-source roots and a commercial cloud.

  • Product analytics
  • MIT / commercial terms depending on component
  • Reviewed Jul 2026
70Mixed
Best fit

Product teams that need event analytics, feature flags, experiments, replay, and broader product intelligence.

Watch

The broad platform surface creates more operational and governance complexity than focused web analytics tools.

The score favors replaceable infrastructure, not patriotic branding.

Digital sovereignty is not the same as buying from a local vendor. The index looks for control surfaces an operator can verify: source rights, self-hosting, export, telemetry control, standards support, operational maintainability, EU deployment fit, and governance clarity.

The model is intentionally public so projects can challenge evidence, improve their posture, or submit clearer documentation. Scores are a review aid, not a certification.

Read the full methodology

Policy sources informing v1

The scoring lens is informed by EU open-source, interoperability, digital rights, data portability, and cyber-resilience materials.

  1. The EU Open Source Strategy, European Commission. Frames open source as a practical lever for technology sovereignty, reuse, transparency, security, and collaboration across public services.
  2. EU Open Source Strategy fact page, European Commission. Summarizes the Commission strategy and its open-source actions, including knowledge sharing and a more open digital administration.
  3. Digital Decade policy programme 2030, European Commission. Sets Europe-level digital targets and governance context for infrastructure, skills, public services, and business digitalization.
  4. European Declaration on Digital Rights and Principles, European Commission. Establishes user control, safety, privacy, freedom of choice, and human-centric digital transformation as public commitments.
  5. Data Act, European Commission. Useful for the scoring lens on portability, switching, data access, and avoiding lock-in around connected data and cloud services.

Project data lives in MDX.

The index is designed so contributors can submit project descriptions, evidence links, logos, and score breakdowns in a separate source repository.

Open source repo