Calls: Send in your ideas. Deadline December 1st, 2021.

Current projects

Listed on this page are programs and projects which are - at this moment - working with NLnet funding.

project description
LibreCellular Open hardware 4G Mobile Network
AI-VPN Local machine-based learned analysis of VPN trafffic
Analog/Mixed-Signal Library OSHW component library for ASIC design
Accessible security Integration effort of independent security efforts like Qubes, Heads, coreboot, etc
OCCRP Aleph disambiguation OCCRP Aleph: disambiguating different people and companies
AREXERA Crawler C++ based web crawler
Armbian Versatile OS for ARM-based single board computers
Atomic Data Typesafe handling of LinkedData
Autocrypt for Thunderbird Make email encryption extremely simple
BBBsecureChat Add E2EE instant messaging to Big Blue Button meetings
Babelia Search engine and crawler in Scheme
Balthazar One laptop for the new internet age.
Balthazar - One laptop for the new internet age. A secure fully open hardware laptop
Betrusted OS An embedded OS for cryptographic devices
Betrusted software A minimalist and secure OS for embedded communication devices
Betrusted Storage Plausably deniable encrypted storage
Blink Qt Messaging Add modern encryption to SIP softphone
Blink RELOAD Secure P2P real-time communications with RELOAD
Bonfire Search & Discovery Improving search and discoverability in the Fediverse
Briar A secure messaging app with offline capabilities
Castopod Podcasting in the fediverse
Castopod Mobile Userfriendly mobile podcasting application
Libre-SOC Cavatools: Power ISA Simulator Power ISA Simulator
CeroWRT II Make Wi-Fi routers faster and more reliable
Certbot ECDSA support
LibrEDA An integrated development environment for chip design
Zerocat Chipflasher Flashrom Interface Hardware to flash alternative/libre firmware to BIOS chips
Chips4Makers ASICs
Supersizing the Gun Chipwhisperer open hardware for side channel analysis
Discover and move your coins by yourself A safe way to explore and work with cryptocurrency forks
Connect by Name Library for easy connection setup
Conversations A secure mobile messaging client
Conzept encyclopedia An alternative encyclopedia
Libre-SOC, Coriolis2 ASIC Layout Collaboration Open tooling for ASIC Layout
Record Federation for Corteza Clouds Data federation over ActivityPub
Corteza Discovery (Geo)search and discovery within federated services
Privacy Infrastructure for Corteza Federations Allow users to locate and browse their private data wherever
ArtistHub Allow creative artists to gain visibility and build reputation on the web
CryptPad: Project Dialogue Secure surveys and polls for Cryptpad
CryptPad Real-time collaboration with client-side encryption
CryptPad for communities Collaborative web editor with client-side encryption
GNU Guix - Cuirass Continuous integration system for GNU Guix/Linux + Hurd
DCnets Implementation of Dining Cryptographers Network
Redash Predictive text entry without a keyboard
Dat Private Network Private storage in DAT
Structuring the System Layer with Dataspaces Implementing a secure and scalable system layer on mobile
DeltaBot Social discovery over mail-based chat
Dino User-friendly and secure instant messaging
Distributed Private Trust Decentralised trust and reputation system
How AdTech works Improving public awareness of AdTech and privacy
EEZ DIB EEZ DIY Instrument Bus
EGIL SCIM client System for Cross-domain Identity Management
ELF Linking Analytic tools for UNIX' Executable and Linkable Format
Earthstar P2P protocol and APIs for collaborative and social applications
Edalize ASIC backend Create open hardware silicon with a fully free software toolchain
EDeA A forge suitable for open hardware development
AEAP Automated e-mail address porting to a new provider
Email for expert news Keep up to date with a flow of publication
Thunderbird - native EteSync integration Add encrypted sync to Thunderbird
Etebase - protocol and encryption enhancements Redesign EteSync protocol and encryption scheme
EteSync - iOS application Encrypted synchronisation for calendars, addressbook, etc
Tracking the Trackers Automated scanning for spyware in mobile applications
FairSync Simplify aggregation and discovery of places and events
searx Federating self-hosted search hubs
FemtoStar Project Open Hardware Communications Satellite
First Classify Documents Categorise different types of official documents
Fobnail Remote attestation delivered locally
Folksonomy engine for the food ecosystem Data modelling by the community
ForgeFed Federation for software collaboration tools
Fractal Native client for the Matrix protocol
Fix the Pitch Black Attack in Freenet routing A decentralized distributed platform for private communication
Funkwhale ActivityPub-driven audio streaming and sharing
Libre/OpenCores FuseSoc backend Discovery and use of open hardware gateware through LibreCores and OpenCores
GNU Name System Authenticated naming system for the internet from GNU project
GNU Mes Help create an operating system we can trust
Full-source GNU Mes on ARM and RISC-V Expand full-source bootstrap to other CPU platforms
GNU Mes on ARM Trustworthy bootstrap for operating systems on ARM ISA
GNU Mes: Full Source bootstrap
GNU Mes Tower GNU Mes with alternative scheme implementations and WASM
GNU social Modernizing the original FOSS Social Network
GNU Taler Advanced electronic payment system for privacy-preserving payments
Layer-2-Overlay Generalising the GNUnet Layer-2 Overlay for broader usage
GNUnet Messenger API API for decentralized instant messaging using CADET
GPG Lacre project Best effort encryption of mail flows with OpenPGP
GNU Guix Discovery of service configurations in a declarative setup
Tooling to improve security and trust in GNU Guix Contextual software vulnerability discovery
Gash Port Gash to GNU Mes for auditable bootstrap
Genodepkgs When Genode and Nixpkgs meet
Geolexica reverse Reverse Semantic Search and Ontology Discovery via Machine Learning
GoatCounter Privacy-friendly web analytics for small websites
Gosling Generic Onions Services Library Project
Real time graph database search engine Live filtering on graph database streams
The Open Green Web Ethical meta-search filter on green hosted websites
Haketilo/Hydrilla Browser extension for site customisatoin
Hubzilla Federated social networking environment
Implement sound support in the Hurd Add audio capabilities to the multiserver microkernel from GNU
Hyper Hyper Space Cryptographically secure append-only distributed data layer
A proof of concept of identity-based encryption Make encryption simpler
IMSI Pseudonymization Better privacy protection for 2G-5G Search engine for the Interplanetary File System
Telecommunication in HF using the Internet Protocol (IPoHF) High-throughput software-defined wireless telecommunications
IRMA made easy Usability research into attribute based authentication
Icebreaker Gemini centric viewpoint of coding issues and bug tracking
IN COMMON Public platform to map and act together for the Commons
In-document search Interoperable Rich Text Changes for Search
Practical Tools to Build the Context Web Declarative setup of P2P collaboration
Indigenous Indieweb mobile clients
YunoHost and the Internet Cube Solutions for DIY-ISP's and self-hosters
Interpeer Collaboration infrastructure with near real-time p2p data synchronization
Inventaire Wikidata-based social sharing of reading experiences
Irdest Llocal P2P mesh discovery of devices and users
JavaScript Restrictor Increasing Security and Privacy of JavaScript APIs
JShelter Cross-browser extension to make javascript less exploitable
End-To-End Encryption for Jitsi Meet Proven strong encryption for open source video conferencing
Verified Differential Privacy for Julia Proving sound privacy guarantees through a type system
Standardizing KEMTLS Post-quantum TLS without handshake signatures
Kaidan Adding crypto to userfriendly Cross-platform XMPP client
Karrot Save and share food waste
Katzen Meta-data resistant instant messaging over the Katzenpost mixnet
Kazarma Bridge ActivityPub and Matrix realms
Keyoxide Self-hostable identity proofs with bidirectional linking verification
Adopt improvements in Email Encryption in KMail
ARPA2 LDAP Middleware Privacy enhancing middleware
Collabora Online and LibreOffice Improved visual document search for cloud service
Langsec in Pectore A secure pacemaker created from formal grammars
lemmur A Lemmy mobile client
Lemmy ActivityPub for link aggregation
Lemmy Lemmy Federation and ActivityPub compliance
Liberaforms Open source form server
XMPP-ActivityPub gateway XMPP, ActivityPub and E2EE Pubsub
Libre-SOC A fully open hardware System-on-a-Chip
LibreOffice P2P Encrypted collaborative editing in the browser
The Libre-SOC Gigabit Router Native Open Hardware chip implementation of crypto primitives
LibreSilicon Free/open source semiconductor manufacturing process
Libre Silicon compiler Synthesize, place and route hardware description to silicon
Standard Cell Library Open Standard Cell Library with automated dimensioning of transistors
Port of AMDVLK/RADV 3D Driver to the Libre-SOC Adapt Vulkan Drivers to the Libre-SoC
Libre-SOC Formal Correctness Proofs Mathematical unit tests for open hardware System-on-Chip
Libre-SOC Formal Standards Development Formal Standards for OpenPower extensions from Libre-SoC
Libre-SOC Video Acceleration Optimised video acceleration instructions for Libre RISC-V SoC
Librecast Live Live streaming with multicast
Lightmeter Email server configuration lifecycle management
LinkedDataHub Framework to handle Linked Data at scale
Usability of Linux firewall userspace tools Userspace tooling for Linux kernel Netfilter
LumoSQL Create more reliable, distributed embedded databases
LumoSQL at-rest data security Modern embedded database with encryption and signed data
Luna A versatile and fast new open-source place and route tool
Distributed Trust for Web Servers Establishing a Distributed Trust Authority
MNT Reform A trustworthy open hardware laptop
MaDada Using LinkedData to improve FOI processes
Maemo Leste An independent mobile operating system focused on trustworthiness
Mailpile Search Integration Personal email search engine
Mangaki Advanced group recommendations
Manyverse An off-line capable privacy-centric social messaging app
Improving Matrix E2E encryption UX Better usability of E2E encryption
MEGA65 Phone A phone simple enough to understand in full
MeiliSearch Modern and responsive search
Mepo Lightweight mobile map search
Practical Decentralised Search and Discovery Search and discovery inside mesh/adhoc networks A press search engine in your browser Retrieve news feeds and search locally
Misskey Misskey federation and ActivityPub compliance
MobileAtlas A distributed open hardware test infrastructure to analyse mobile networks
MoboSearch Providing an alternative view on the Android App ecosystem
Mosaic Trustworthy open hardware design tool for electrical engineers
Movim Add OMEMO encryption to Movim XMPP client
Mynij Portable indexing and search engine for mobile
NEFUSI NEFUSI: A novel NEuroFUzzy approach for semantic SImilarity assessment
Naisho Efficiently combine end-to-end encryption with CRDTs
Namecoin: TLS Various TLS integrations for Namecoin
Namecoin: ZeroNet and Packaging Make ZeroNet work with Namecoin
Namecoin: Core Infrastructure Alternative domain name system
NeoChat Native Matrix encrypted instant messaging client
Packet classification extensions for Netfilter High throughput packet classification of tunneled traffic
neuropil Privacy by design P2P search including IoT
neuropil DHT based overlay network
Nextcloud Unified and intelligent search within private cloud data
Nitrokey Open hardware for encryption and authentication
Securing NixOS services with systemd
NoScript Contextual Policies & LAN protection Application Boundaries Enforcer (ABE) for new generation of browsers
Adopting the Noise Key Exchange in Tox Improved security of Tox instant messaging with NoiseIK
Nominatim Multi-lingual support in address search
Nym Credentials A decentralised solution for authentication
Nyxt A programmable browser with advanced search integration
Nyxt Browser integration of federated, distributed platforms
Open Know-How Search Search Open Hardware Projects
OSF Crawler Cooperation Support Infrastructure for Open Search initiatives
Off-the-Record messaging version 4 Advanced protocol for secure messaging
Offen Privacy-respecting site analytics
Improve Okular digital signature support Improve open source tooling for digital signatures
Omnom Self-hosted bookmarking and snapshotting with search
OnBaSca Tor Bandwidth Scanner
Opaque Sphinx Secure password-based authentication with Opaque/Sphinx
Opaque Sphinx Server and Clients Server and tools for modern authentication
OpenCryptoHW CGRA- based reconfigurable open-source cryptographic IP cores
DRTM implementation for AMD processors Unified framework for dynamic RTM
Personal Food Facts Privacy protecting personalized information about food
Open Hospitality Network Federated hospitality with ActivityPub Make local events and meetups discoverable
Open MLS Infrastructure End-to-end encrypted group messaging
OpenPGP Certificate Authority Managing OpenPGP keys for communities and organisation
Improving OpenSSH's Authentication and PKI Improving SSH Authentication with OpenPGP transitive trust
Hardening OpenPGP CA deployments HSM support for OpenPGP key infrastructure
802.11n feature of openwifi Open Hardware implementation of wifi
Open source ePDG for VoWiFi Enhanced Packet Data Gateway for mobile infrastructure
Owncast ActivityPub powered Livecasting
P2Pcollab Decentralised social search and discovery
PGP4civiCRM Add email encryption to CRM
Securing PLCs via embedded protocol adapters Open hardware protocol adapters for industrial automation
PRESC Classifier Copies Package Implementing Machine Learning Copies as a Means for Black Box Model Evaluation and Remediation
The PeARS app Building low-resource Web search applications from cognitive models
PeerDB Search for semantic and full-text data
PeerTube A decentralised streaming video platform
Peertube-Desktop Enjoy and share federated videos
Extending PeerTube Adding advanced search capabailities to PeerTube
Peppol for the masses Hybrid self-hosted e-invoicing with decentralized identities
A Distributed Software Stack For Co-operation Facilitating easy ad hoc cooperation
Pion Network congestion measurement for adaptive real-time applications
PixelDroid Share and browse photos in the fediverse with a mobile app
Pixelfed Live Live streaming and other Pixelfed enhancements
Pixelfed ActivityPub driven decentralised photo sharing platform
Plaudit Make good science discoverable through endorsements
Poliscoops Make political news and online debate accessible
Privacy Enhancements for PowerDNS and DNSdist Make it easier to deploy private DoT/DoH resolvers
PrivateRecSys Privacy-Friendly Recommendation System
Private Searx Add private resources to the open source Searx metasearch engine
Qubes OS Bring the security of Qubes OS to people with disabilities
GNUnet Formalisation within IETF of R5N Distributed Hash Table design
rasn Safe ASN.1 codec framework for Rust
RISC-V Phone Open hardware RISC-V Phone
RNP Confium Distributed trust store enabling threshold encryption
Re-isearch Vectorise text with a flexible unit of retrieval
Redwax Standardisation of client side PKI interfaces
Reowolf Rip and replace for BSD socket insecurity
Graphics acceleration on Replicant Free software graphics drivers for mobile phones
Finish porting Replicant to newer Android version Alternative, free software version of Android
Ricochet Refresh Anonymous, meta-data free secure messaging
Ripple Safer and faster incremental software builds
Robotnix Reproducible Builds of Android with NIX
Robur private DNS resolver and DHCP server Secure network configuration and DNS resolution
Rust Threadpool Improve privacy of Rust threading library
Great OCR for SANE Integrate OCR capabilities into open source scanning tools
SASL XMSS Make SASL work with XMSS protocol
SASL Works for the InternetWide Architecture Integrate new authentication mechanisms into SASL
SCION-RAINS RAINS, Another Internet Naming Service (or, a DNS alternative)
SCION-Pathdiscovery Secure and reliable decentralized storage platform
Geographic tagging of Routing and Forwarding Geographic tagging and discovery of Internet Routing and Forwarding
SOLID Data Workers Toolkit to ingest data into SOLID
SWH package manager Data Ingestion Add Package managers to Software Heritage
Storing Efficiently Our Software Heritage Faster retrieval within Software Heritage
SpinalHDL, VexRiscv, SaxonSoc Open Hardware System-on-Chip design framework based on SpinalHDL
SEARXR Virtual reality for web search
searx A privacy-respecting, hackable metasearch engine
SeedVault Private backups of mobile applications
Adding TPM Support to Sequoia PGP Implement use of TPM 2.0 crypto hardware for OpenPGP
Sequoia PGP Improve interface of Sequoia PGP commandline
Sequoia GPG Chameleon Implement well-known API's for using OpenPGP
Simmel A wearable contact tracing beacon/scanner
Software Heritage Collect, preserve and share the source code of all software ever written
Peer-to-Peer Access to Our Software Heritage Access Software Heritage data via IPFS DHT
Solid Application Interoperability
Solid-NextCloud app Bridge Nextcloud to Solid
Solid-Search Queries in a pod
Solid Control Access Control mechanism for data and services within Solid
Sonar: a modular peer-to-peer search engine Modular peer-to-peer search engine
Spectrum A security through compartmentalization based operating system
Secure User Interfaces (Spritely) Usability of decentralised social media
Spritely Capability based petname system
ARPA2 Steamworks ARPA2 Steamworks
StreetComplete Fix open geodata with OpenStreetMap
StreetComplete Collaborative editing in OpenStreetMap
StreetComplete UX Improve usability of StreetComplete
Suhosin-NG Harness PHP 7 applications
Sylk chat Add instant messaging features to Sylk
Sylk Client Secure multiparty videoconferencing application
Sylk Mobile Secure real-time mobile communications
Timing-Driven Place-and-Route (TDPR)  Open hardware tool to synthesize digital silicon circuits
RETETRA Security Analysis of Proprietary Cryptography in Terrestrial Trunked Radio
TLS-KDH mbed Implement TLS-KDH into mbed
Tantum Search Context-enhanced search driven by
Padding Machines for Tor Protect metadata in the Tor onion routing network
TrustING Ultrafast AS-level Public-Key Infrastructure
Build Transparency (Trustix) Towards a decentralized supply chain for software
Trustix Make build logs available as publicly verifiable, tamper-proof Merkle trees
Tvix Alternative Rust-based software build transparency
TypeCell CRDT-based collaborative block-based editor
ULX3M A modular open hardware FPGA platform
URL Frontier Develop a API between web crawler and frontier
Universal DID Resolver and Registrar Tooling for decentralized identifiers
LIP6 VLSI Tools Logical validation of ASIC layouts
ValOS Cryptographic Content Security project Cryptographic Content Security for ValOS
variation graph (vgteam) Privacy enhanced search within e.g. genome data sets
Noise Explorer-VerifPal Automated proofs and code generation for secure protocols
Verifpal Prove soundness of verification in Verifpal
Verified Reowolf Formal protocol verification with Reowolf
VFRAME: Visual Defense Tools Use computer-vision to shield privacy in video
video box Affordable open hardware video-to-network
Video chat privacy Add privacy features to video chats
Waasabi Framework P2P Live Streaming for events
Independent captions and transcript augmentation Speech-to-text integration for Waasabi
Web Annotation Building blocks for interoperable annotation systems
WebXray Discovery Expose tracking mechanism in search hubs
Web Shell Desktop and security environment for web apps
XWiki Bring wiki capabilities into the Fediverse
WikiRate Insights Transforming WikiRate ESG Platform User Experience to Maximise Reliable Data Insights
Wireguard Windows client Native Wireguard protocol client for Windows
Wireguard Rust Implementation Implementation of WireGuard in a type safe language
Wishbone Streaming Add Streaming capabilities to Wishbone
WordPress ActivityPub Bring ActivityPub social networking to the widely used Wordpress
XWiki ActivityPub First class ActivityPub support in XWiki
YaCy Grid SaaS
Yrs Collaborative editing with CRDT written in Rust
ZSipOs Open hardware for telephony encryption
ARPA2 Working towards a decentralised global internet that offers security and privacy by design.
GnuTLS Implement TLS-KDH in GnuTLS
ARPA2 resource ACL and HTTP SASL modules for NGINX Extend consistent access control to NGINX webserver
betrusted A protected hardware device for your private matters.
Bitmask User-friendly and secure VPN configuration
Conferences sponsoring of various conferences
Reinstatement of crypto.signText() Cryptographic signatures brought back to the browser
Democratic Sendcomm An easy to use connected open hardware device with a flat learning curve
dhcpcanon Network configuration with better privacy
DIME A new encrypted, end-to-end email protocol
Distributed Mechanism Learning Privacy preserving ways of distributed data usage
Donations smaller contributions to various activities Index DHT based distributed webs
eduVPN app Add Wireguard protocol to federated VPN suite
eduVPN on Apple eduVPN for Apple devices
eduVPN on Apple part II Improved version of eduVPN for Apple devices
eduVPN multi-protocol Review of the eduVPN multi-protocol project.
eduVPN Making secure VPN network technology available to everyone - Resilient, distributed content sharing Resilient, human-centered, distributed content sharing and discovery.
Explain Direct Providing effective and efficient access paradigms for open educational material
Fashion Freedom Supporting research, development, and education to bring the fashion industry into the 21st century Find your way in the Fediverse
FileSender FileSender is a secure and private way to share large files with anyone.
fwupd Automatic Firmware updates for BSD operating systems
GetDNS Deliver DNSSEC as a building block in harsh environments
Global Directories Distributed contact information discovery mechanism
Pretty Easy Privacy At scale simulation over GNUnet with different realistic user behavior scenarios
GUN P2P Encryption A realtime, decentralized, offline-first, graph database engine
Hackathons contributions to various hackathons
Internet of Coins Create a decentralized, self-sustaining economy by implementing inter-blockchain connectivity
Handling Data from IPv6 Scanning Scanning tools for scaling up IPv6 scans
iuh-openbsc An open source implementation of 3G
Katzenpost Observation resistant secure messaging layer
Key Management Key Management
DNSSEC Key Signing Suite A best practise for DNSSEC Key Signing
libresilient Create robust web presence with service workers and DHT
libspng A fast and safe implementation of Portable Network Graphics
lpnTPM TPM 2.0 compliant open hardware Trusted Platform Module
Securing Decentralised Live Information with m-ld Collaborative editing of LInked Data based on CRDT
Minedive P2P search over webRTC
mobile-nixos NixOS for mobile phones and tablets
Namecoin Decentralized, censorship resist Internet infrastructure for e.g. DNS and identities
Faster and configurable datapath/Linux xfrm Rewriting nftables to optimise for xfrm
Nixcloud Mail Declarative mail server based on NixOS
Nixcloud Webservices Declarative web services based on NixOS
Software vulnerability discovery Automating discovery of software update and vulnerabilities
node-Tor Implementation of Tor protocols for inside webpages
offen Ethical site analytics, controlled by the user
openEngiadina Platform for creating, publishing and using open local knowledge
oqsprovider Post-quantum/quantum-safe cryptographic algorithms for OpenSSL
pcb-rnd Modular printed circuit board editor
Pitchfork Open hardware for compartmentalizing key material and cryptographic operations
Pitchfork PKCS#11 Contribute to OASIS standardisation PKCS#11 v3
PKCS#11 v3 Contribute to standardisation of PKCS#11 for cryptographic tokens
postmarketOS An independent mobile operating system
Privacy Preserving Disease Tracking Research into contact tracing privacy
RaptorJIT RaptorJIT is a high-performance Lua virtual machine for network dataplanes.
Modular CA Modular infrastructure for building secure internet services
Remote PKCS#11 Remote usage of PKCS#11
SDR PHY Create a GSM mobile phone consisting of completely open source software and SDR radio
x86-64 VM Monitor for seL4 verified microkernel Very restricted virtualized environment for higher security
Search and Displace Find and redact privacy sensitive information
SecuShare A framework for sufficiently safe social interaction
Secushare Box Operating system extension of Secushare for hardware devices
Serval-LR SERVAL Long-range WiFi Add-on
Magic Wormhole/SPAKE2 Securely send files between two computers with minimum fuss
Stubby A local DNS Privacy stub resolver using DNS-over-TLS
TLS-KDH Combined Kerberos and Diffie-Hellman as an authentication mechanism for TLS
TOS;DR A user rights initiative to rate and label website terms & privacy policies
Tracking Exposed Increase transparency behind personalization algorithms
Trusted Boot Module An open hardware trusted boot manager
Vita A fast IPSEC-based VPN gateway
Vita A high performance IPSEC implementation
Free Software Vulnerability Database A resource to aggregate software updates
Nixcloud Declarative internet services based on NixOS
WireGuard A fast and modern VPN that utilizes state-of-the-art cryptography
Wireguard Take modern network tunnels to the next level
WPIA CA Infrastructure Deployment infrastructure for certificate authorities
xqerl Performant (Erlang) implementation of W3C XQuery and XML database

NLnet Foundation currently supports the following projects with in-kind contributions:
The Commons Conservancy Legal infrastructure for public benefit efforts
NLnet Labs Independent lab for Internet infrastructure development

Navigate projects

Please check out NLnet's theme funds, such as NGI Assure and the User Operated Internet Fund.

Want to help but no money to spend? Help us by protecting open source and its users.


Help grow the future. Donate