Hackers donate 90% of profit to charity 2019/06/13

NGI Zero awarded two EC research and innovation actions 2018/12/01

EC publishes study on Next Generation Internet 2025 2018/10/05

Bob Goudriaan successor of Marc Gauw 2017/10/12

NLnet Labs' Jaap Akkerhuis inducted in Internet Hall of Fame 2017/09/19

  Help grow the future. Donate

All Projects

Since 1997 NLnet foundation has funded many projects, on many different layers of of the internet as well as on capacity building, standards setting, software licenses and education. Projects supported by NLnet foundation:

project end    
0cpm 2013 - 0cpm, open firmware for digital telephony
A proof of concept of identity-based encryption - Make encryption simpler
A-A-P 2003 - tools for developing, distributing, and installing software
AbiCollab 2013 - AbiWord Telepathy and SIP backends
AbiMacOS 2011 - Port Abiword to MacOS
AbiRDF 2012 - Abiword RDF
AbiRDF2 2013 - Abiword RDF-2
Accessible security - Integration effort of independent security efforts like Qubes, Heads, coreboot, etc
AGFL 2002 - parser generator system for natural languages
AHA! 2003 - transparent adaptive functionality for web servers
ALIAS 2003 - analysis of legal and technical implications of the use of software agents
Ambulant 2007 - providing a reference SMIL 3.0 implementation
Anomos 2011 - a pseudonymous, encrypted multi-peer-to-peer file distribution protocol
ARPA2 2017 - Working towards a decentralised global internet that offers security and privacy by design.
ARPA2 LDAP Middleware - Privacy enhancing middleware
ARPA2 resource ACL and HTTP SASL modules for NGINX - Extend consistent access control to NGINX webserver
ARPA2 Steamworks -

Near-instantaneous controlled configuration settings over any network

Assessing Cyber Security 2015 - This report aims to assessing what we know about cyber security threats based on a review of 70 studies published by public authorities, companies, and research organizations from about 15 countries over the last few years. It answers the following questions: what do we know about the number, origin, and impact of cyber attacks? What are the current and emerging cyber security trends? And how well are we prepared to face these threats?
Atom-Based Routing 2003 - Improving global internet routing by implementing atom-based routers.
Autocrypt for Thunderbird - Make email encryption extremely simple
BIND DLZ 2005 - BIND 9 Dynamically Loadable Zones implementation
Bitmask - User-friendly and secure VPN configuration
Bits of Freedom 2006 - support for Bits of Freedom
BlenderWeb 2009 - free 3D animation and compositing suite
Blink RELOAD - Secure P2P real-time communications with RELOAD
Briar - A secure messaging app with offline capabilities
Bricophone 2009 - community-oriented mobile phone infrastructure
CAcert - support for CAcert
CAIEC 2008 - Investigate information offered by consumer organisations
Calligra-SVG 2012 - Improve fallback mechanisms in Calligra ODF loading and saving.
Calligra-Windows 2012 - Bringing Calligra Suite to Windows
CeroWRT 2018 - an experimental firmware to push forward the state of the art of edge networks and routers.
CodeYard 2008 - Open-Source software development for students in secondary education
Conferences - sponsoring of various conferences
Conversations - A secure mobile messaging client
CP2PC 2003 - common programming interface for peer-to-peer systems
CPAN6 2011 - collecting collections of digital information 2015 - An open source open hardware security module to protect communications
CryptPad - Real-time collaboration with client-side encryption
CUGAR 2011 - Implement a Wireless Access Point and a back-end
CuteHIP 2010 - lightweight implementation of Host Identity Protocol (HIP) on Java
DCnets - Implementation of Dining Cryptographers Network
Decibel 2007 - service architecture for multi-media based communication
Declarative web service security - Declarative web service security in NixOS
Deep Firmware 2017 -

Active discovery of known and unknown security vulnerabilities in firmware

DeltaBot - Social discovery over mail-based chat
Democratic Sendcomm - An easy to use connected open hardware device with a flat learning curve
dhcpcanon - Network configuration with better privacy
DIFR-TSPM 2009 - a demonstrator of a different way to inform consumers about the RFID tags
DIME - A new encrypted, end-to-end email protocol
Discourse ActivityPub - Connecting internet discussions with ActivityPub
Discover and move your coins by yourself - A safe way to explore and work with cryptocurrency forks
Distributed Private Trust - Decentralised trust and reputation system
DNSCCM 2012 - DNS NSCP implementation for BIND and NSD
DNSSEC Key Signing Suite - A best practise for DNSSEC Key Signing
DNSSEC-mail 2013 - DNSSEC for OpenDKIM and OpenDMARC
Donations - smaller contributions to various activities
Dowse 2016 - Dowse is a smart digital network appliance for home based local area networks.
e-Passports 2009 - use of (hardware) electronic passports for user authentication over internet
eduVPN -

Making secure VPN network technology available to everyone

EGIL SCIM client - System for Cross-domain Identity Management
ELF Linking -

Analytic tools for UNIX' Executable and Linkable Format - Resilient, human-centered, distributed content sharing and discovery. - Resilient, human-centered, distributed content sharing and discovery.
EteSync - iOS application - Encrypted synchronisation for calendars, addressbook, etc
Explain Direct - Providing effective and efficient access paradigms for open educational material
Fairwaves 2013 - Fairwaves
Fashion Freedom -

Supporting research, development, and education to bring the fashion industry into the 21st century - Find your way in the Fediverse
FFII 2008 - support for the Foundation for a Free Information Infrastructure
FileSender - FileSender is a secure and private way to share large files with anyone.
Finish porting Replicant to a newer Android version - Alternative, free software version of Android
FLOSS 2008 - Stimulating FLOSS dissemination in The Netherlands
FLOSS-manuals 2009 - on-demand printing of Open Source manuals
Free Software Vulnerability Database - A resource to aggregate software updates
FreeBSD-3G 2010 - network drivers for 3G cards on FreeBSD
FSF 2008 - support for the Free Software Foundation
FSF Europe 2010 - support for the Free Software Foundation Europe
FSF Priority 2010 - stimulating High Priority Projects of the Freedom Software Foundation
FTEproxy 2015 -

FTE enables developers to build systems resistant to surveillance and censorship.

GDPR Compliance 2018 - Support instruments for the country adoption of the GDPR
Geographic tagging and discovery of Internet Routing and Forwarding - Geographic tagging and discovery of Internet Routing and Forwarding
getdns 2018 -

Deliver DNSSEC as a building block in harsh environments

GISS 2009 - independent infrastructure for streaming radio and TV
Global Directories 2014 - Distributed contact information discovery mechanism
Globule 2005 - user-centric Content Delivery Network
GNU Mes - Help create an operating system we can trust
GNU Name System - Authenticated naming system for the internet from GNU project
GNUnet 2009 - implementation and evaluation of an improved routing algorithm for GNUnet
GO-FOSS 2008 - Teach employees in SMEs and NGOs the benefits of FOSS
GoogleSharing 2011 - GoogleSharing anonymizing proxy
GPLv3 2007 - GNU Public Licence v3 Development and Publicity Project
Graphics acceleration on Replicant - Free software graphics drivers for mobile phones
GSM-Sec 2011 - GSM Security Project, debugging GSM transactions
GUN 2018 - A realtime, decentralized, offline-first, graph database engine.
Hackathons - contributions to various hackathons
HTTPS-Obs 2011 - HTTPS Observatory
HWIOS 2011 - Hybrid Web In OpenSim (HWIOS)
IIDS 2013 - Interactive Intelligent Distributed Systems
IMSI Pseudonymization - Better privacy protection for 2G-5G
IN COMMON - Public platform to map and act together for the Commons
Internet of Coins -

Create a decentralized, self-sustaining economy by implementing inter-blockchain connectivity - Search engine for the Interplanetary File System
IRMA made easy - Usability research into attribute based authentication
ISC BIND 9 2001 - implementation of DNS protocols with full IPv6 and DNSsec support
iuh-openbsc 2017 - An open source implementation of 3G
Jabber/XMMP 2008 - Strengthening Trust in Jabber/XMPP Technologies
JigLibJS 2011 - JigLib to JavaScript for use with WebGL
Jingle Nodes - Jingle Relay Nodes Specifications and Prototypes
Jitsi 2011 - Better and Open Source alternative for Skype
Jitsi (SIP Comm Phone) - Internet phone and instant messenger
Jitsi (SIP-Communicator) Desktop 2011 - Desktop Streaming and Sharing with SIP Communicator
Jitsi-DNSSEC 2012 - DNSSEC for Jitsi (SIP Communicator)
Jitsi-FMJ 2012 - Replacing JMF with FMJ
Katzenpost - Observation resistant secure messaging layer
Kolab-Sync 2012 - ActiveSync your Kolab
Koruza 2015 - Koruza
Ksplice 2009 - update the Linux kernel without rebooting
Ksplice2 2011 - Ksplice for mainline Linux and Fedora
Lantern 2013 - DNSSEC in Lantern
LCC 2002 - local content caching system for new search engine architecture
LEAP/Torbirdy 2017 - LEAP integration into Torbirdy
librarian - Custom meta-search
LibreDocs 2012 - LibreDocs
Lizard - E2E Rendez-vous and discovery
LOAP 2006 - The DNS: A Life of a Protocol
LogReport 2004 - tools for computer/network log file analysis
Lokalize 2009 - cross-platform computer-aided translation system
LTSP Deskop - Remote desktop via an LTSP-Cluster
Magic Wormhole - Magic Wormhole allows you to securely send files between two computers with minimum fuss
Mail::Box 2003 - software for e-mail handling in Perl
Mailman-SSLS 2009 - openPGP and S/MIME support in mailman
Mailpile Search Integration - Personal email search engine
Manyverse - An off-line capable privacy-centric social messaging app
MAPS 1999 - defending Internet e-mail from abuse by spammers
Meemoo 2013 - Meemoo: hackable web apps
MEGA65 Phone - A phone simple enough to understand in full
Meshtool 2012 - Mesh network toolkit, database and web-based API.
mobile-nixos - NixOS for mobile phones and tablets
Morphle 2009 - free and anonymous powerful but simple to use end-user website editing
MU-Jingle 2009 - jabber-based VoIP protocol
Mynij - Portable indexing and search engine for mobile
Namecoin - Decentralized, censorship resist Internet infrastructure for e.g. DNS and identities
nat64 2010 - Implement a NAT64 gateway to run on open-source operating systems
NetAidKit 2016 -

The NetAidKit is a pocket size, USB powered router for safer mobile networking.

NetEventKit 2009 - building an open source Network Event Kit
neuropil - Privacy by design P2P search including IoT
nftables 2015 -

A modular packet filtering framework providing enhanced userspace control

nftables-xfrm -

Rewriting nftables to optimise for xfrm

NILO 2000 - reference implementation of PXE-based network boot module
Nitrokey - Open hardware for encryption and authentication
Nixcloud Mail - Declarative mail server based on NixOS
Nixcloud Webservices - Declarative web services based on NixOS
NLnet Labs - Independent lab for Internet infrastructure development
node-Tor - Implementation of Tor protocols for inside webpages
Nodewatcher 2015 - A comprehensive and scalable node management system for community wireless network.
Noise Explorer-VerifPal - Automated proofs and code generation for secure protocols
NOMA 2017 - Network Operator Measurement Activity
NoScript-Andr 2013 - Android Native NoScript
NoScript-Mob 2011 - NoScript Mobile
NoScript-Mob2 2011 - NoScript Mobile part 2
NoScriptABE 2009 - improve the ABE (Application Boundaries Enforcer) for NoScript
OCS-Asterisk 2008 - Open real-time connection between Microsoft OCS and Asterisk
ODF Autotests - a framework to help users and developers write test documents for ODF software
ODF-AbiChanges 2011 - ODF Track changes in AbiWord
ODF-AbiChanges2 2011 - ODF Track changes in AbiWord (2)
ODF-AbiWord - improving AbiWord OpenDocument
ODF-changes 2011 - Representing Changes in Open Document Format
ODF-changes2 2011 - Standardisation for Tracked Changes in ODF
ODF-compare 2011 - Creating Tracked Changes in Open Document Format by Document Comparison
ODF-DocMod 2013 - Modularise ODF 1.2 documentation
ODF-KOffice 2009 - ODF load and save in KOffice
ODF-KOffice2 2010 - ODF metadata in KOffice
ODF-KOffice3 2010 - ODF revisions in KOffice
ODF-KOffice4 2011 - ODF track changes/tables in KOffice and Calligra Suite
ODF-Numbertext 2009 - number to text conversion for the upcoming ODF OpenFormula standard
ODF-Recipes 2011 - ODF Software Recipes
ODF-Symbian 2009 - view ODF on Symbian OS and other mobile systems
ODF-Valid 2013 - ODF Online Validator to the command-line
ODF-XLIFF 2009 - convert ODF to Gettext PO and XLIFF for translation and localising
OdfKit 2011 - base library for processing ODF
odfsvn 2009 - use SVN to maintain ODF documents
OfficeShots - see how different office suites render your ODF document.
OnBaSca - Tor Bandwidth Scanner
Online Self-defence in Ten Minutes 2010 - Online Self-defense in 10 minutes
Opaque Sphinx - Secure password-based authentication with Opaque/Sphinx
Opaque Sphinx Server and Clients - Server and tools for modern authentication
OpenBTS-HW 2012 - OpenBTS hardware
OpenDoc-Soc 2011 - Dutch OpenDoc Society
openMSRP 2008 - openMSRP relay implementation
openMSRP(2) 2008 - multi-party Instant Message server based on MSRP
openMSRP(3) 2009 - GUI for the open source SIP SIMPLE client
OpenStreetMapNL 2009 - maintenance software for OpenStreetMap Nederland
OSLD 2013 - Open-Source LTE Deployment (OSLD)
OSN-PPCP 2012 - Privacy-Preserving Communication Protocol for OSNs
OV-Chipkaart 2011 - privacy friendly chip card for public transport
P2Pcollab - Decentralised social search and discovery
Padding Machines for Tor - Protect metadata in the Tor onion routing network
Palea 2011 - Finding unauthorized routes leaving your network
Parrot 2009 - virtual machine for scripting languages
Parselov 2017 - Syntactic analysis of documents and protocol messages based on formal descriptions
PGP4civiCRM - Add email encryption to CRM
Pitchfork 2018 - USB device for keys and crypto
PKCS#11 v3 2018 - Contribute to standardisation of PKCS
Plaudit - Make good science discoverable through endorsements
Practical Decentralised Search and Discovery - Search and discovery inside mesh/adhoc networks
Private Searx - Add private resources to the open source Searx metasearch engine
Proxy App 2010 - Proxy appliance to utilize unused bandwidth networks
PSYC2 2015 -

Next iteration of the Protocol for SYnchronous Conferencing

PulseAudio 2011 - PulseAudio echo cancellation
Qubes 2017 - A reasonably secure operating system
Qubes OS - Bring the security of Qubes OS to people with disabilities
RaptorJIT - RaptorJIT is a high-performance Lua virtual machine for network dataplanes.
realXtend 2010 - realXtend communications based on Telepathy
Redwax -

Modular infrastructure for building security services on the web

Reowolf - Rip and replace for BSD socket insecurity
Reproducible Builds - Make the build processes behind software distributions reproducible
ReX 2003 - international exchange of scholars for software projects
RFID Guardian 2009 - hardware prototyping of a mobile device for personal RFID security and privacy management.
RFID Guardian(2) 2010 - unified platform for RFID security and privacy administration
Ricochet Refreshed - Anonymous, meta-data free secure messaging
Robur privacy-enhanced DNS resolver and DHCP server - Secure network configuration and DNS resolution
Rocket CWMP - Remote governance and configuration for internet equipment
RPKI-RTRlib 2017 - RPKI/RTRlib
Sabayon 2009 - creating a fast binary package manager using relational databases
Samizdat 2012 - Samizdat makes public key cryptography accessible
SANE 2006 - System Administration and NEtworking conferences
SASL XMSS - Make SASL work with XMSS protocol
SchoolLan 2006 - computer networking as education support for primary schools
SCION-Swarm - Secure and reliable decentralized storage platform
SCTP-Linux 2011 - A better Linux SCTP
SDR PHY 2019 -

Create a GSM mobile phone consisting of completely open source software and SDR radio

Seahorse SmartCard 2012 - Seahorse Smart Card Support
Searsia 2017 - Searsia is a protocol and implementation for large scale federated web search.
Searx 2018 - Searx is an internet metasearch engine that can be easily self-hosted by anyone.
searx - A privacy-respecting, hackable metasearch engine
SecuShare 2015 -

A framework for sufficiently safe social interaction.

SecuShare-box -

A framework for sufficiently safe social interaction.

Serval 2011 - Mobile communication anywhere.
Serval-LR 2013 - SERVAL Long-range WiFi Add-on
Sesame 2006 - storage and querying middleware for the Semantic Web
Shadow Internet 2016 - An alternative communication infrastructure working phone to phone.
SIP-GUI 2011 - Next Phase Graphical User Interface for the SIP SIMPLE client
SIPcollab 2015 - Decentralized and secure collaborative editing on office documents
SIPproxy64/6bed4 2012 - 0cpm, SIPproxy64, 6bed4, applet, freeswitch RTT
SIRS 2002 - Scalable Internet Resource Service
SnabbWall 2017 - SnabbWall is a layer-7 network flow detector and firewall application.
SocketHUB 2014 -

A polyglot communication server for the decentralized internet

Software vulnerability discovery - Automating discovery of software update and vulnerabilities
SOLID Data Workers - Toolkit to ingest data into SOLID
Sonar: a modular peer-to-peer search engine for the next-generation web - Modular peer-to-peer search engine
SPEAR 2012 - Secure Peer-to-peer Services Overlay Architecture
Spectrum - A security through compartmentalization based operating system
Stratosphere IPS 2016 - A behavioral-based free software Intrusion Prevention System.
StreetComplete - Fix open geodata with OpenStreetMap
Stubby 2018 -

A DNS stub resolver which will provide DNS Privacy for end users

Suhosin-NG - Harness PHP 7 applications
Swirl 2014 - Implementation of PPSPP proposed standard in Erlang
Sylk Client - Secure multiparty videoconferencing application
SylkRTC 2015 - SylkRTC
TCP-multipath 2011 - Design and empirical evaluation of secure and efficient multipath communication
The Commons Conservancy - [The Commons Conservancy]
The Libre-RISCV SoC - A fully open hardware System-on-a-Chip
The Open Green Web - Ethical meta-search filter on green hosted websites
The third mainport 2014 - Digital Infrastructure in the Netherlands - The Third Mainport
ThinkQuest 2000 - educational web contests
Timesheets 2013 - Adaptive time-based application development Platform
TimeWalker 2002 - tools for visualising huge amounts of log data
TLS-KDH - Kerberos-based (mutual) authentication, bound in Elliptic-Curve Diffie-Hellman
TLS-KDH mbed - Implement TLS-KDH into mbed
Tor hidden services 2009 - Protect publisher and users of the services against identification
Tor low-bandwidth 2009 - Tor for modem and mobile users
TOS;DR - A user rights initiative to rate and label website terms & privacy policies
Tracking Exposed - Increase transparency behind personalization algorithms
Transparency Toolkit - A decentralized hosted archiving service with search
Trusted Boot Module - An open hardware trusted boot manager
Turtle 2007 - P2P infrastructure for safe sharing of sensitive data
TwinSite-2000 2000 - international web-competition for secondary schools
Uberflow 2015 - An Open-Source OpenFlow Controller Implementing the North-Bound Interface
UmTRX 2013 - UmTRX, cheaper mobile communication
Unhosted 2015 - The Unhosted project enables separation of storage and applications
Unhosted 2012 - Unhosted, separating data servers from application servers
Universal DID Resolver and Registrar - Tooling for decentralized identifiers
ValOS Cryptographic Content Security project - Cryptographic Content Security for ValOS
VDD - project virtual operating system instances on arbitrary terminals
VFRAME: Visual Defense Tools - Use computer-vision to shield privacy in video
ViewerJS 2014 - A multiformat document viewer for embedding, combining WebODF.js and PDF.js
VirtNet 2007 - network stack virtualization for FreeBSD
Virtualizing device firmware - Creating digital twins for auditing and testing appliances
Vita - A high performance IPSEC implementation
Vita 2019 - Vita is a fast VPN gateway that operates at layer-3.
Web Shell - Desktop and security environment for web apps
WebODF 2011 - ODF editor in the browser
WebODF-Dissem 2012 - WebODF Dissemination
Wireguard - A fast and modern VPN that utilizes state-of-the-art cryptography.
Wireguard - Take modern network tunnels to the next level
Wireguard Windows client - Native Wireguard protocol client for Windows
Wisper 2007 - long distance wifi internet infrastructure
Wormhole 2012 - Project Wormhole
XSSer 2011 - Cross Site Scripting testing
YunoHost and the Internet Cube - Solutions for DIY-ISP's and self-hosters
ZSipOs - Open hardware for telephony encryption


Send in your ideas.
Deadline October 1st, 2019.

Help fundraising for the open internet with 5 minutes of your time

NLnet Projects