Calls: Send in your ideas. Deadline February 1st, 2024.

Current projects

On this page you find an overview of recent projects which have either been recently completed or are — at this moment — working with NLnet funding. For a complete overview please check the overview of all projects, or use the thematic index to look up projects based on thematic funds and specific themes. Click on the name of the project to find out more about it.

project description
0KNOW Group Theoretic Zero-knowledge Proofs (0KNOW)
LibreCellular Open hardware 4G Mobile Network
AALT (Accelerated Analog Layout Tool) More efficient analog layout generation for chips)
AI Horde Collaborative infrastructure for running generative AI models
AI-VPN Local machine-based learned analysis of VPN trafffic
Analog/Mixed-Signal Library OSHW component library for ASIC design
AVantGaRDe Reliable Foundations of Local-first Graph Databases
Accessible security Integration effort of independent security efforts like Qubes, Heads, coreboot, etc
ActivityPods Framework for fully-decentralized social apps, combining ActivityPub and Solid Pods
Aerogramme Standards-compliant open-source IMAP server with server-side encryption
Alder Lake Desktop Open firmware for widely used Desktop/Workstation motherboard
AlekSIS All-libre extensible kit for school information systems
OCCRP Aleph disambiguation OCCRP Aleph: disambiguating different people and companies
Alive2 Translation validation for LLVM
Apicula Open source tools for working with Gowin FPGAs
Automating mobile app interception with Frida Mobile app network introspection for security research
Perspectives: Making Models Generate software from open models for human interaction patterns
Arcan-A12 Explorative p2p protocol for fast and secure remote desktops
AREXERA Crawler C++ based web crawler
Ari Purely functional programming language designed to "type" binary files
Armbian Versatile OS for ARM-based single board computers
Atomic Data Typesafe handling of LinkedData
Atomic Tables Self-hostable tabular structured data solution
Authenticated DNSSEC bootstrapping Secure in-band announcements of DNSSEC parameters
Heads-OpenPGP OpenPGP Authenticated Heads and long-time awaited security improvements
Autocrypt for Thunderbird Make email encryption extremely simple
Automated clearing of source code files More efficient retrieval of security and license compliance contextual information
Automerge Add Merkle Search Tree support to Automerge
binary-analysis-ng improvements Integrate Kaitai in binary-analysis-ng
BB3-CM4 CM4 compatible MCU board
BBBsecureChat Add E2EE instant messaging to Big Blue Button meetings
Babelia Search engine and crawler in Scheme
Back to source: trust but verify all the packages Analysis pipeline for mapping and cross-referencing binaries with source code
Balthazar One laptop for the new internet age.
Balthazar Casing Open hardware laptop
Balthazar - One laptop for the new internet age. A secure fully open hardware laptop
Bana Personal network oriented ActivityPub powered social networking
Bertie Formally verified TLS 1.3 implementation
Betrusted OS An embedded OS for cryptographic devices
Betrusted software A minimalist and secure OS for embedded communication devices
Betrusted Storage Plausably deniable encrypted storage
Blink Qt Messaging Add modern encryption to SIP softphone
Blink RELOAD Secure P2P real-time communications with RELOAD
BlockNote An modern, open source Block-based editor
Bonfire Search & Discovery Improving search and discoverability in the Fediverse
Bonfire federated groups Create, join and manage federated groups across instances
Bonfire Framework Elixir-based ActivityPub implementation and library with groups and RBAC
Briar A secure messaging app with offline capabilities
Briar Desktop E2EE online and offline messaging and discussion
CNSPRCY E2EE connections between trusted devices
Converged Security Suite Improvements Open source tooling for BIOS configuration
Cable A new wire protocol for cabal (and beyond)
Canaille Zero-knowledge opinionated OpenID Connect (OIDC) server.
Canarytail Warrant canary standardization and automation
Castopod Podcasting in the fediverse
Castopod Mobile Userfriendly mobile podcasting application
Castopod Plugins Add plugins to the Castopod podcast server
Libre-SOC Cavatools: Power ISA Simulator Power ISA Simulator
CeroWRT II Make Wi-Fi routers faster and more reliable
Certbot ECDSA support
Charon Privacy-enabling account management and SSO solution
LibrEDA An integrated development environment for chip design
Zerocat Chipflasher Flashrom Interface Hardware to flash alternative/libre firmware to BIOS chips
Chips4Makers ASICs
Choreographic Programming: From Theory To Practice Generating a standard library of core distributed algorithms with formal proofs
Anchorboot Pre-built UEFI replacement firmware for ARM-based ChromeOS devices using coreboot/U-Boot
Cloud hosting service portability Service portability for cloud hosting platforms
Discover and move your coins by yourself A safe way to explore and work with cryptocurrency forks
Coko Docs A modern, open source replacement for Google Docs and Drive
CokoDocs Add ODF, legacy office and PDF capabilities to CokoDocs
Coloquinte High performance placement of cells inside digital electronic circuitry
Commune User-friendly persistent chat/voice rooms
Connect by Name Library for easy connection setup
Conversations A secure mobile messaging client
Conversations 3.0 Secure and standards-compliant XMPP client for Android
Conzept encyclopedia An alternative encyclopedia
Libre-SOC, Coriolis2 ASIC Layout Collaboration Open tooling for ASIC Layout
Record Federation for Corteza Clouds Data federation over ActivityPub
Corteza Discovery (Geo)search and discovery within federated services
Privacy Infrastructure for Corteza Federations Allow users to locate and browse their private data wherever
ArtistHub Allow creative artists to gain visibility and build reputation on the web
CryptPad Auth Implement external identity mechanisms to E2EE collaborative editor
CryptPad Blueprints Server-side encrypted collaborative editor
CryptPad: Project Dialogue Secure surveys and polls for Cryptpad
CryptoLyzer Cryptographic settings analyzer library
CryptPad Real-time collaboration with client-side encryption
CryptPad for communities Collaborative web editor with client-side encryption
GNU Guix - Cuirass Continuous integration system for GNU Guix/Linux + Hurd
DANCE4All Implement DANCE specification in GnuTLS and MbedTLS
DAVx⁵ Share Contacts, Calendars, Tasks, Notes & Journals
DCnets Implementation of Dining Cryptographers Network
Securing Internet protocols with DIDs Bridge Decentralized Identifiers with standardised authorisation mechanisms
DMT Implementation of MOSFET Parameter Extraction Flow for Sky130 into DMT
DNSvizor Privacy-enhanced DNS resolver and DHCP server
Dat Private Network Private storage in DAT
DATALISP Universal data interchange format using canonical S-expressions
Structuring the System Layer with Dataspaces Implementing a secure and scalable system layer on mobile
DeltaBot Social discovery over mail-based chat
Delta Tauri DeltaChat implemented in Tauri
Dino User-friendly and secure instant messaging
Distributed Private Trust Decentralised trust and reputation system
Dolphin authorisation Avoid privilege escalation in the Dolphin file manager
dream2nix Automate reproducible packaging for various language ecosystems
Python supply-chain with dream2nix  Towards a secure, extensible & reproducible Python supply-chain with dream2nix
How AdTech works Improving public awareness of AdTech and privacy
EDeA Repeatable, automated measurement data capture
EEZ DIB EEZ DIY Instrument Bus
EEZ Studio Open source tooling for measurement and test equipment
EEZ flow for EEZ Studio IV Open Hardware Test & Measurement equipment
Extend EFI support in BSDs Bring automated firmware update to BSDs
EGIL SCIM client System for Cross-domain Identity Management
ELF Linking Analytic tools for UNIX' Executable and Linkable Format
Encoding for Robust Immutable Storage (ERIS) Encrypted and content-addressable data blocks
Open source ESP32 802.11 MAC Open source wifi drivers for ESP32
Earthstar P2P protocol and APIs for collaborative and social applications
Earthstar (Encryption, Safety, and Local Sync) Improve security, encryption and sync capabilities in Earthstar CRDT
Edalize ASIC backend Create open hardware silicon with a fully free software toolchain
EDeA A forge suitable for open hardware development
Elm Matrix SDK Better moderation for Matrix rooms and servers
AEAP Automated e-mail address porting to a new provider
Email <=> XMPP gateway Bridge instant messaging with email
Email for expert news Keep up to date with a flow of publication
Etebase - protocol and encryption enhancements Redesign EteSync protocol and encryption scheme
EteSync - iOS application Encrypted synchronisation for calendars, addressbook, etc
Ethersync Real-time co-editing of local text files
The search for ethical Apps Create custom, self-hostable app stores for Android(-like) OS-es
EventFahrplan Conference schedule app with strong offline capabilities
Exter Proxy-based external browser extensions
Tracking the Trackers Automated scanning for spyware in mobile applications
Friendly Forge Format (F3) Proposed Standard for secure communication between software forges
FABulous Demo SoC SoC with open source FPGA based on FABulous
FOSS Code Supply Chain Assurance Mitigate attacks through software dependencies
FOSS Code Supply Chain Assurance II Add approximate matching capabilities to software vulnerability discovery
FairSync Simplify aggregation and discovery of places and events
Feather UI Declarative cross-platform UI toolkit
searx Federating self-hosted search hubs
Federated software forges with Forgejo Add ActivityPub based federation to Forgejo
Software metadata Decentralized, federated metadata about software applications
Federated Task-Tracking with Live Data Track tasks and issues in a federated way
Federated Timesheets Interoperable machine-readable time tracking
Fediverse Test Framework Test bench for ActivityPub implementations
Fediverse Test Suite Interoperability effort for W3C ActivityPub
First Classify Documents Categorise different types of official documents
Flarum Add federation and much more to the extensible forum software Flarum.
Fleetbase on Solid: A production-ready supply chain solution Federated open source supply chain solution using Solid
Fobnail Remote attestation delivered locally
Folksonomy engine for the food ecosystem Data modelling by the community
ForgeFed Federation for software collaboration tools
ForgeFed Federating software forges with ActivityPub
ForgeFlux Software Forge independent federation with ActivityPub and F3
Forgejo An open source software forge with a focus on federation
Fractal Native client for the Matrix protocol
Fix the Pitch Black Attack in Freenet routing A decentralized distributed platform for private communication
Frictionless Standards (v2) New version of the Frictionless Standards specification + improved tooling
Funkwhale ActivityPub-driven audio streaming and sharing
Funkwhale ActivityPub-driven audio streaming and sharing
GNU Name System Authenticated naming system for the internet from GNU project
GNS Migration and Zone Management Registrar tools for adoption of GNU Name System
GNU Mes Help create an operating system we can trust
Full-source GNU Mes on ARM and RISC-V Expand full-source bootstrap to other CPU platforms
GNU Mes RISC-V Bringing the trustworthy bootstrap to RISC-V
RISC-V bootstrapping effort via GNU Mes Allow bootstrapping Guix on RISC-V via GNU Mes
GNU Mes on ARM Trustworthy bootstrap for operating systems on ARM ISA
GNU Mes: Full Source bootstrap
GNU Mes Tower GNU Mes with alternative scheme implementations and WASM
GNU social Modernizing the original FOSS Social Network
GNU Taler Advanced electronic payment system for privacy-preserving payments
GNU Taler KYC Know-Your-Customer support for GNU Taler
Taler for local currencies. Free software banking backend for local currencies
GNUnet CONG Modernise the network stack of GNUnet
Layer-2-Overlay Generalising the GNUnet Layer-2 Overlay for broader usage
GNUnet Messenger API API for decentralized instant messaging using CADET
GPG Lacre project Best effort encryption of mail flows with OpenPGP
Tooling to improve security and trust in GNU Guix Contextual software vulnerability discovery
Garage Lightweight geo-distributed data store compatible with Amazon S3
Gash Port Gash to GNU Mes for auditable bootstrap
Genealogos Nix to SBOM generator targeting the CycloneDX format
Geolexica reverse Reverse Semantic Search and Ontology Discovery via Machine Learning
Federated software forges with Gitea Use W3C ActivityPub to federate amond software forges
Verilog-AMS in Gnucap (cont'd) Analog/Mixed modelling and simulation in Gnucap
Verilog-AMS in Gnucap Mixed-signal modelling and simulation with Verilog-AMS
GoToSocial Lightweight ActivityPub social network server
GoToSocial Improvements to ActivityPub server written in Go
GoatCounter Privacy-friendly web analytics for small websites
Gorgon CI Continuous integration testing for PRs against software dependencies
Gosling Generic Onions Services Library Project
Real time graph database search engine Live filtering on graph database streams
The Open Green Web Ethical meta-search filter on green hosted websites
Guix Peer-to-Peer substitutes
Porting Guix to Riscv64 Port Guix software collection to Riscv64 architecture
Guix-Daemon Transition to a Guile implementation of the guix-daemon
TPM 2.0 for HEADS TPM 2.0 support for open source BIOS replacement firmware
Haketilo/Hydrilla Browser extension for site customisatoin
Great scanning and OCR for mobile devices
Haphaestus Lightweight JavaScript-free browser engine written in Haskell
Hardware accelerated 2D graphics Design hardware accelerated 2D graphics using C to Verilog
Open Hardware Manuals Automatically generate user-friendly documentation for open hardware elements
OCap layer for Haskell actor library Implement OCapN and Syndicate in Haskell's troupe
SCE, DelTiC and Antler High-Fidelity Congestion Control
Himalaya End-to-end encryption capable scriptable email
Hubzilla Federated social networking environment
Implement sound support in the Hurd Add audio capabilities to the multiserver microkernel from GNU
Hyper Hyper Space Cryptographically secure append-only distributed data layer
A proof of concept of identity-based encryption Make encryption simpler
IC workspace Open Source IC Design Management Tool
IMSI Pseudonymization Better privacy protection for 2G-5G
IPDL Equational Proofs for Distributed Cryptographic Protocols
IPDL II A new process logic aimed at formal proofs for cryptographic algorithm Search engine for the Interplanetary File System
Telecommunication in HF using the Internet Protocol (IPoHF) High-throughput software-defined wireless telecommunications
IRMA made easy Usability research into attribute based authentication
Icebreaker Gemini centric viewpoint of coding issues and bug tracking
Icestudio Visual developer tool for development of FPGAs
Icosa Gallery Open, decentralised platform for 3D assets
IN COMMON Public platform to map and act together for the Commons
In-document search Interoperable Rich Text Changes for Search
Practical Tools to Build the Context Web Declarative setup of P2P collaboration
Indigenous Indieweb mobile clients
Inko Programming language with deterministic automatic memory management
YunoHost and the Internet Cube Solutions for DIY-ISP's and self-hosters
Interpeer Collaboration infrastructure with near real-time p2p data synchronization
Interpeer SDKs Secure and efficient peer-to-peer networking stack
Inventaire Wikidata-based social sharing of reading experiences
Inventaire Social reading with cross-instance book exchanges using ActivityPub
Inventaire recommender Book recommendations in Inventaire
IotECC Lightweight Elliptic Curve Cryptography for small chips
Irdest Local P2P mesh discovery of devices and users
Irdest - OpenWRT Image and Bluetooth LE Add Bluetooth LE connections to Irdest
Irdest spec, db, route scoring Route scoring and other routing improvements for Irdest meshnets
Threat intelligence sharing Privacy-Preserving Sharing of Threat Intelligence in Trusted Adversarial Environments
json-joy JSON data structure as a CRDT
JavaScript Restrictor Increasing Security and Privacy of JavaScript APIs
JShelter Cross-browser extension to make javascript less exploitable
JShelter Manifest V3 Make JShelter compatible with Manifest V3
JellyfishOPP Open Hardware device for power profiling
End-To-End Encryption for Jitsi Meet Proven strong encryption for open source video conferencing
Verified Differential Privacy for Julia Proving sound privacy guarantees through a type system
K-Gen From datasets in DCAT catalogs to knowledge graphs
KDE Connect KDE Connect discovery and transport protocol improvements
Standardizing KEMTLS Post-quantum TLS without handshake signatures
Kaidan Adding encryption to userfriendly cross-platform XMPP client
Kaidan A/V Secure audio and video calls for Kaidan and QXmpp
Kaidan Auth + portability Account portability and Client/Server Authentication for the Kaidan XMPP client
Kaidan Encrypted A/V calls, group chat messaging
Improving and extending Kaitai Struct Rust parsing for binary analysis tool Kaitai Struct
Serialization in Kaitai Struct for Java and Python Declaratively modify and create complex binary file formats
Kami Choreography programming language integrated with the Rust ecosystem
Karrot Save and share food waste
Karrot Location-aware community self-organisation
Katzen Meta-data resistant instant messaging over the Katzenpost mixnet
Katzen Metadata Minimizing Messsenger Privacy preserving instant messaging using a modern mixnet
Kazarma Bridge ActivityPub and Matrix realms
Kazarma Release Bridge between ActivityPub and Matrix protocol
Kbin ActivityPub based link sharing and microblogging
Keyoxide Self-hostable identity proofs with bidirectional linking verification
Keyoxide Mobile Mobile client for identity magement tool Keyoxide
Private Key Operations for Keyoxide Implement Private Key Store design in Keyoxide
Keyoxide v2 Add cryptographic signature based to Keyoxide
KiCad Professional open source electronics design application
KiKit Tooling for automation of production of PCB designed in KiCAD
Kintex-nextpnr Open toolchain for high performance FPGAs
Improve Email Encryption in KMail Adopt improvements in Email Encryption in KMail
Improve Krill (RPKI) BGP integration Real-time routing for Krill RPKI daemon
ARPA2 LDAP Middleware Privacy enhancing middleware
Collabora Online/LibreOffice Accessibility Private and accessible collaborative editing with Collabora Online/LibreOffice
Collabora Online and LibreOffice Improved visual document search for cloud service
LibreOffice/Collabora Online typography Add interoperability and state-of-the-art web typography to LibreOffice/Collabora Online line break
lemmur A Lemmy mobile client
Lemmy ActivityPub for link aggregation
Lemmy private communities Add private communities to Lemmy federated link aggregator
Lemmy Federation Lemmy Federation and ActivityPub compliance
Let's Connect! Client-Server to P2P Add P2P features to Let's Connect!
Letswifi/Geteduroam Make federated wifi access provisioning safer and more convenient
LiberaForms End tot End Encrypted Forms
Liberaforms Open source form server
XMPP-ActivityPub gateway XMPP, ActivityPub and E2EE Pubsub
Audio/Video Calls in Libervia Encrypted Audio/Video Calls in multi-frontend XMPP client
Libre-SOC A fully open hardware System-on-a-Chip
Libre-SOC HPC Work on High Performance Compute capabilities for Libre-SOC
Libre-SOC OpenPOWER ISA WG Steward ISA extension proposals through OpenPOWER External RFC Process
IndieHosters System for Cross-domain Identity Management (SCIM)
Libre Car Control Automotive development platform, protocol analyzer and hacking multi-tool
Librecast E2E encrypted multicast
LibreCellular FOSS technology stack for 4G networks
LibreOffice CRDT Real-time collaboration between several, distributed LibreOffice instances
LibreOffice P2P Encrypted collaborative editing in the browser
LibrePCB EDA software suite to develop printed circuit boards
LibreQoS Improve congestion control for wifi networks
The Libre-SOC Gigabit Router Native Open Hardware chip implementation of crypto primitives
LibreSilicon Free/open source semiconductor manufacturing process
Libre Silicon compiler Synthesize, place and route hardware description to silicon
Standard Cell Library Open Standard Cell Library with automated dimensioning of transistors
Port of AMDVLK/RADV 3D Driver to the Libre-SOC Adapt Vulkan Drivers to the Libre-SoC
Libre-SOC Formal Correctness Proofs Mathematical unit tests for open hardware System-on-Chip
Libre-SOC Formal Standards Development Formal Standards for OpenPower extensions from Libre-SoC
Libre-SOC Video Acceleration Optimised video acceleration instructions for Libre RISC-V SoC
Librecast Live Live streaming with multicast
Lightmeter Email server configuration lifecycle management
Liminix Nix-based OS for domestic WiFi routers, access points etc
LinkedDataHub Framework to handle Linked Data at scale
Usability of Linux firewall userspace tools Userspace tooling for Linux kernel Netfilter
LiteX Developer framework for FPGA and ASIC designs
Local Production of Antennas for LibreRouter (LoPaLiR) Reliable open hardware Antennas for LibreRouter
LumoSQL Create more reliable, distributed embedded databases
LumoSQL at-rest data security Modern embedded database with encryption and signed data
Luna PnR A versatile and fast new open-source place and route tool
LunaPnR Phase 2 A versatile and fast new open-source place and route tool
Mainstreaming Anonymity for Developers (MAD) Add Onion Services to interactive internet applications
MNT Reform A trustworthy open hardware laptop
MNT Reform Next New iteration of the MNT open hardware laptop
Improving the deployability of Multipath TCP Improve MPTCP support in the Linux kernel
MaDada Using LinkedData to improve FOI processes
Machdyne Modular open compute hardware
Maemo Leste An independent mobile operating system focused on trustworthiness
Maemo Leste Telepathy Modernise open source real-time communications stack
Mailpile Search Integration Personal email search engine
Mailpile 2 (moggie) Building a secure, modern e-mail client for self-hosting
Makatea An x86, 64-bit Virtual Machine Monitor for the seL4, verified microkernel
Mangaki Advanced group recommendations
Manyverse An off-line capable privacy-centric social messaging app
Manyverse Private Groups Implement SSB Private Groups in Manyverse
MapComplete Thematics OpenStreetMap-viewer and editor.
Marginalia Search A fresh take on search
Mastodon - groups, filtering, moderation Group support with ActivityPub
Improving Matrix E2E encryption UX Better usability of E2E encryption
MEGA65 Phone A phone simple enough to understand in full
Mellium Add OMEMO support to XMPP library
Mepo Lightweight mobile map search
Practical Decentralised Search and Discovery Search and discovery inside mesh/adhoc networks
Modular Reusable decentralised meta-search engine A press search engine in your browser Retrieve news feeds and search locally
MirageVPN Robust OpenVPN client and server, and QubesOS client
Misskey Misskey federation and ActivityPub compliance
MobileAtlas A distributed open hardware test infrastructure to analyse mobile networks
MobileAtlas Taking roaming measurements to the next levelMobileAtlas
postmarketOS/phosh-mobile-settings integration Consolidate functionality of FOSS mobile settings applications
Mobile Test Farm Test farm setup for aftermarket mobile operating systems
Mobilizon Find, create and organize events
Mobilizon UX Share events on the fediverse
MoboSearch Providing an alternative view on the Android App ecosystem
Mobroute A minimalist FOSS public-transportation router/tool suite
Caster Open-hardware high-refresh-rate electrophoretic display controller
Monal IM Free Jabber/XMPP client for iOS and macOS
Mosaic Trustworthy open hardware design tool for electrical engineers
Movim Add OMEMO encryption to Movim XMPP client
Mox Modern full-featured open source secure mail server
Mynij Portable indexing and search engine for mobile
NEFUSI NEFUSI: A novel NEuroFUzzy approach for semantic SImilarity assessment
SecSync Efficiently combine end-to-end encryption with CRDTs
Naja EDA tool focused on post logic synthesis
Naja Add Dissolved and Batch Netlists to Naja EDA
Namecoin: Electrum-NMC Security hardening and futureproofing Namecoin and Electrum-NMC
Namecoin: TLS Various TLS integrations for Namecoin
Namecoin: ZeroNet and Packaging Make ZeroNet work with Namecoin
Namecoin: Core Infrastructure Alternative domain name system
NaxRiscv core improvements Open hardware out-order Risc-V CPU
NeoChat Native Matrix encrypted instant messaging client
Packet classification extensions for Netfilter High throughput packet classification of tunneled traffic
neuropil Privacy by design P2P search including IoT
neuropil DHT based overlay network
Nextcloud Unified and intelligent search within private cloud data
NextGraph Interlinked data graphs, with privacy, security, data locality, and interoperability in mind
Nitrokey Open hardware for encryption and authentication
Nitrokey 3 PIV/FIPS 201-3 and extended hardware support for Trussed/Nitrokey
Nitter Alternative privacy-preserving FOSS UI for Twitter
Type Inference for Nix Adding static typing and type inference to Nix
Debug Adapter with Nix Implement the Debug Adaptor Protocol for Nix
NixOS/Clevis Unattented disk decryption with Clevis on NixOS
Securing NixOS services with systemd
UEFI Secure Boot support for NixOS Add a self-sovereign root of trust as part of supply chain security
NoScript Contextual Policies & LAN protection Application Boundaries Enforcer (ABE) for new generation of browsers
NodeBB ActivityPub support and accessibility improvements for forum software
Adopting the Noise Key Exchange in Tox Improved security of Tox instant messaging with NoiseIK
Nominatim Multi-lingual support in address search
Nominatim as a library Self-hostable address/location retrieval for OpenStreetMap
Nym Credentials A decentralised solution for authentication
Nyxt Webextensions Independent implementation of WebExtensions
Nyxt A programmable browser with advanced search integration
Nyxt Browser integration of federated, distributed platforms
Open Know-How Search Search Open Hardware Projects
OSF Crawler Cooperation Support Infrastructure for Open Search initiatives
OpenStreetMap Speed Limits Infer default speed limits for better quality OpenStreetMap-based routing
Off-the-Record messaging version 4 Advanced protocol for secure messaging
OVT 13 Open Hardware laptop
owi Symbolic evaluator and fuzzing of WASM software
Offen Privacy-respecting site analytics
Oil Shell A new dialect of shell that is less error-prone
Oil Shell Modern shell language and runtime
Oils for Unix Bringing shell environments into the 21st century
Oku A browser and encrypted data vault based on IPFS
Improve Okular digital signature support Improve open source tooling for digital signatures
Omnom Self-hosted bookmarking and snapshotting with search
OnBaSca Tor Bandwidth Scanner
Opaque Sphinx Secure password-based authentication with Opaque/Sphinx
Opaque Sphinx Server and Clients Server and tools for modern authentication
Open Cloud Mesh Improved specs and test suite for Open Cloud Mesh protocol
OpenCryptoHW CGRA- based reconfigurable open-source cryptographic IP cores
OpenCryptoLinux Make Linux run on OpenCryptoHW
OpenCryptoTester System-on-Chip for hardware/software testing
DRTM implementation for AMD processors Unified framework for dynamic RTM
Open Energy Profiler Toolset Modular open hardware Energy Profiling
Personal Food Facts Privacy protecting personalized information about food
Open Hospitality Network Federated hospitality with ActivityPub Make local events and meetups discoverable
Open MLS Infrastructure End-to-end encrypted group messaging
OpenPGP Certificate Authority Managing OpenPGP keys for communities and organisation
Improving OpenSSH's Authentication and PKI Improving SSH Authentication with OpenPGP transitive trust
Interoperable Certificate Store for OpenPGP Standardisation effort for shared OpenPGP certificate storage
Hardening OpenPGP CA deployments HSM support for OpenPGP key infrastructure
OpenQRNG Open source, certified Quantum Random Number Generator
802.11n feature of openwifi Open Hardware implementation of wifi
Ordie Designing a SoC for Betrusted
Organic Maps Privacy-focused Android & iOS offline maps application
LTE support in OsmoCBC (Cell Broadcast Centre) Open source Cell Broadcast Centre for mobile networks
GPRS/EGPRS support in Osmocom CNI for Ericsson RBS
Open source ePDG for VoWiFi Enhanced Packet Data Gateway for mobile infrastructure
Overte Virtual reality based social platform
Owncast ActivityPub powered Livecasting
p2panda p2p protocol and event-driven data store
p2panda: group encryption and capabilities Add group encryption and capabilities to peer-to-peer SDK
P2Pcollab Decentralised social search and discovery
PGP4civiCRM Add email encryption to CRM
Adding Web-of-Trust Support to PGPainless Web-of-Trust specification support for Java
Securing PLCs via embedded protocol adapters Open hardware protocol adapters for industrial automation
Post-Quantum Crypto in DNSSEC Experimental platform for DNSSEC with post-quantum cryptography
PRESC Classifier Copies Package Implementing Machine Learning Copies as a Means for Black Box Model Evaluation and Remediation
Statime Memory-safe high-precision clock synchronization
Passthrough Authentication Authentication proxy using Kerberos and SPNEGO
The PeARS app Building low-resource Web search applications from cognitive models
PeerDB Search Search for semantic and full-text data
PeerTube A decentralised streaming video platform
Popularizing PeerTube Decentralised video platform powered by ActivityPub
Extending PeerTube Adding advanced search capabailities to PeerTube
peermaps Peer to peer cartography
Peertube plugin livechat Integrated chat for Peertube live streams
PeerTube - Remote Transcoding Remote Transcoding for distributed video sharing network
Peppol for the masses Hybrid self-hosted e-invoicing with decentralized identities
Personal 3D model archive Manage private collections of 3D models
A Distributed Software Stack For Co-operation Facilitating easy ad hoc cooperation
Pimalaya Open source personal information management
Pion Network congestion measurement for adaptive real-time applications
PixelDroid Share and browse photos in the fediverse with a mobile app
PixelDroid/Media editor Native PixelFed/ActivityPub image sharing app
Pixelfed Live Live streaming and other Pixelfed enhancements
Pixelfed ActivityPub driven decentralised photo sharing platform
Pixelfed Open source, federated photo sharing platform using ActivityPub
Plaudit Make good science discoverable through endorsements
Pleroma Scalable ActivityPub server written in Elixir
Poliscoops Make political news and online debate accessible
Privacy Enhancements for PowerDNS and DNSdist Make it easier to deploy private DoT/DoH resolvers
pretalx Open source tooling for events and conferences
PrivateRecSys Privacy-Friendly Recommendation System
Private Searx Add private resources to the open source Searx metasearch engine
Probabilistic NAT Traversal Last resort ad hoc connections for GNUnet
Prosody IM Implement SASL authentication mechanism for XMPP
Protomaps Self-hostable maps based on OpenStreetMap data
ProveThis Prove statements about authenticated API resources
PyCM Evaluate the performance of ML algorithms
Pythonic Slint Add a full-blown Python API to Slint
Qubes OS Bring the security of Qubes OS to people with disabilities
R5N-DHT Formalisation within IETF of R5N Distributed Hash Table design
RA-Sentinel FPGA-based Radio Receiver for securing Wifi against hacking attacks
RAIJIN Open Hardware brain meeasurements with near-infrared spectroscopy
rasn Safe ASN.1 codec framework for Rust
RISC-V Phone Open hardware RISC-V Phone
RNP Confium Distributed trust store enabling threshold encryption
Fast RSA + PQ Blind Signatures Fast multiprecision integers for blind RSA and Post-Quantum signatures
RADIUSdesk Open wifi mesh deployment application
Raptor Lake Desktop Implement open-source firmware for modern mainboards and chipsets
Python bindings to the rattler library
Re-isearch Vectorise text with a flexible unit of retrieval
Redwax Standardisation of client side PKI interfaces
Reowolf Rip and replace for BSD socket insecurity
Replicant on Pinephone 1.2 Add basic support for the Pinephone 1.2 to Replicant
Graphics acceleration on Replicant Free software graphics drivers for mobile phones
Finish porting Replicant to newer Android version Alternative, free software version of Android
Reproducible F-Droid Building a trusted app ecosystem with F-Droid
Ricochet Refresh Anonymous, meta-data free secure messaging
pcb-rnd, sch-rnd Open source EDA suite
Ripple Safer and faster incremental software builds
Robotnix Reproducible Builds of Android with NIX
Rosenpass Post Quantum Security Add-On for WireGuard
Rotonda Secure Extensions Implement BGPSec in Rust and integrate into Rotonda
Rust Threadpool Improve privacy of Rust threading library
Great OCR for SANE Integrate OCR capabilities into open source scanning tools
SASL XMSS Make SASL work with XMSS protocol
SASL Works for the InternetWide Architecture Integrate new authentication mechanisms into SASL
SCION-enabled IPFS and libp2p Enhancing IPFS Performance and Resilience through SCION's Path-Aware Networking
SCION-RAINS RAINS, Another Internet Naming Service (or, a DNS alternative)
SCION-Pathdiscovery Secure and reliable decentralized storage platform
Geographic tagging of Routing and Forwarding Geographic tagging and discovery of Internet Routing and Forwarding
SDCC Small Device C Compiler compiler for 8-bit microcontrollers
SES - SimplyEdit Spaces SimplyEdit Spaces - collaborative presentations
SIP RELOAD REsource LOcation And Discovery, a peer-to-peer (P2P) signaling protocol
Software Heritage listers + tooling Performance improvements and new listers/tooling for Software Heritage
SWH package manager Data Ingestion Add Package managers to Software Heritage
Storing Efficiently Our Software Heritage Faster retrieval within Software Heritage
SpinalHDL, VexRiscv, SaxonSoc Open Hardware System-on-Chip design framework based on SpinalHDL
Adera Relevant scientific research results
SEARXR Virtual reality for web search
searx A privacy-respecting, hackable metasearch engine
Subliminal Messaging Embedded secure channels within traditional and internet telephony
SeedVault Integrity Add integrity checking and WebDAV support to SeedVault Android backups
SeedVault Private backups of mobile applications
SelfPrivacy Reproducible self-hosting stack based on NixOS
Dynamic indexing for real time graph database Provide faster query results through algorithmic preprocessing
SensifAI AI driven image tagging
#Seppo! Portable ActivityPub implementation
A Secret Key Store for Sequoia PGP Standards-compliant private key store for OpenPGP
Adding TPM Support to Sequoia PGP Implement use of TPM 2.0 crypto hardware for OpenPGP
Sequoia PGP Improve interface of Sequoia PGP commandline
Sequoia GPG Chameleon Implement well-known API's for using OpenPGP
Servo Independent Rust-based browser engine
SiCl4 Tool for interactive reverse engineering of digital logic.
Signature PDF Self-hosted tool to add signature to PDFs
SignRoom Zenroom based signature and credential platform
Silicon verification Non-destructive, in-situ inspection of physical chips
Simmel A wearable contact tracing beacon/scanner
Slint port for Android Port the Rust-based Slint UI toolkit to Android
smoltcp RPL Implement Routing Protocol for Low-Power and Lossy networks
Software Heritage Collect, preserve and share the source code of all software ever written
Peer-to-Peer Access to Our Software Heritage Access Software Heritage data via IPFS DHT
Solid Application Interoperability
Solid-NextCloud app Bridge Nextcloud to Solid
Solid-Search Queries in a pod
Solid Compound A software library/framework to simplify designing for W3C Solid
Solid Control Access Control mechanism for data and services within Solid
Solid Data Modules Improve data accessibility and prevent data corruption in Solid Pods
Solid Application Interoperability
Solid Application Interoperability Interoperable Data sharing flows and discovery for Solid
Solid Usable App Tools Project Improve developer experience for W3C Solid
Solid Wallet Authorization reasoning, rule-based controls and fluid integration for Solid
Sonar: a modular peer-to-peer search engine Modular peer-to-peer search engine
sourcehut Graph query support for software development platform
Space Tube Group-to-group instant messaging
Dual-level Specification Inference Make formal verification more practical with dual-level Specification Inference
Spectrum A security through compartmentalization based operating system
Spectrum Applications Add running graphical applications to the compartmentalized desktop OS Spectrum
Secure User Interfaces (Spritely) Usability of decentralised social media
Spritely Capability based petname system
Spritely (and OCapN) Enable secure P2P applications with Object Capabilities
Stalwart Mail Server Robust full featured mail infrastructure in Rust
Standards Grammar Catalog/Toolchain Open Standards Grammar Catalog/Toolchain
Statime PTP Master Statime - Zero-allocation cross-platform Precision Time Protocol
ARPA2 Steamworks ARPA2 Steamworks
Stencila v2 for ERA and EPP Add editable, runnable code to scientific publications
StreetComplete Fix open geodata with OpenStreetMap
StreetComplete Collaborative editing in OpenStreetMap
StreetComplete UX Improve usability of StreetComplete
Structured Email for Roundcube Add metadata awareness to open source email
Suhosin-NG Harden PHP 7 and PHP 8 applications
Sustainable web apps with m-ld Empower users and developers with distributed interlinked data using local-first principles
Sylk chat Add instant messaging features to Sylk
Sylk Client Secure multiparty videoconferencing application
Sylk Mobile Secure real-time mobile communications
RETETRA Security Analysis of Proprietary Cryptography in Terrestrial Trunked Radio
TISG trustable image sensor gateware FPGA based camera providing encrypted video streams
TLS-KDH mbed Implement TLS-KDH into mbed
TOS;DR OTA backend Integrate Terms of Service;Didn't Read with Open Terms Archive
Great Black Swamp Decentralized cloud storage with provider-independent security
GNU Taler wallet app for iOS Mobile GNU Taler payments for portable Apple devices
Tantum Search Context-enhanced search driven by
Tasteweb Develop new web of trust mechanisms
Tauri Apps A safer run-time for web technology based apps
Servo Webview for Tauri Integrated portable webview based on Servo engine into Tauri
TerosHDL Assisting hardware developers to deliver safer designs
TerosHDL: OSS, GHDL, NVC IDE with support for Open SYthesis Suite and GHDL/NVC simulators
Threshold OPRFs Bringing the power of Threshold OPRFs to the people
Topola Topological (rubberband) router for printed circuit boards
Padding Machines for Tor Protect metadata in the Tor onion routing network
Tracking weasel Detect privacy violations in mobile apps
TrenchBoot for AMD platform in Linux kernel Upstream TrenchBoot AMD support to the Linux kernel
Trenchboot as Anti Evil Maid Integrate Trenchboot into Qubes OS as defense mechanism against physical compromise
FIDO 2.2 Open hardware implementation of FIDO CTAP 2.2
TrustING Ultrafast AS-level Public-Key Infrastructure
Trust semantic learning and monitoring Measure on-going trust between interacting agents
Build Transparency (Trustix) Towards a decentralized supply chain for software
Trustix Make build logs available as publicly verifiable, tamper-proof Merkle trees
Tvix Alternative Rust-based software build transparency
Tvix-{Store/Build} Improve store and builder component of Tvix
TwPM Open hardware implementation of Trusted Platform Module
TypeCell CRDT-based collaborative block-based editor
UEFI isolation in VM from non UEFI firmware Safer booting into UEFI-compliant operating system
UEFI Capsule Update for coreboot with EDK II Implement more robust firmware updates in coreboot
ULX3M A modular open hardware FPGA platform
URL Frontier 2.0 Enterprise features for URLFrontier
URL Frontier Develop a API between web crawler and frontier
Reverse Engineering Toolkit Reducing e-waste through Reverse Engineering
Universal DID Resolver and Registrar Tooling for decentralized identifiers
LIP6 VLSI Tools Logical validation of ASIC layouts
ValOS Cryptographic Content Security project Cryptographic Content Security for ValOS
variation graph (vgteam) Privacy enhanced search within e.g. genome data sets
Noise Explorer-VerifPal Automated proofs and code generation for secure protocols
Verifpal Prove soundness of verification in Verifpal
Verified Reowolf Formal protocol verification with Reowolf
VFRAME: Visual Defense Tools Use computer-vision to shield privacy in video
video box Affordable open hardware video-to-network
Video chat privacy Add privacy features to video chats
Vula Encrypted ad hoc local-area networking
Free Software Vulnerability Database A resource to aggregate software updates
WPE Android Embedded-friendly Webview based on WebKit
Waasabi Framework P2P Live Streaming for events
Web Annotation Building blocks for interoperable annotation systems
DeltaChat/WebXDC Portable private apps that can be shared in e.g. chat
webxdc PUSH Towards an usable, interoperable and trustworthy web app ecosystem
WebXray Discovery Expose tracking mechanism in search hubs
Web Shell Desktop and security environment for web apps
Whisperfish Cross-platform mobile client for Signal and derivatives
XWiki Bring wiki capabilities into the Fediverse
WikiRate: More Sites, More Cites Persistent citation for Dekko-based open source data collections
WikiRate Insights Transforming WikiRate ESG Platform User Experience to Maximise Reliable Data Insights
WikiRate Insights 2 Dedicated text search architecture for environmental, social and corporate governance platform
Willow Sync General Sync Protocol for Willow written in Rust
Winden/Magic Wormhole dilation Improving Magic-Wormhole by implementing dilation and multiple file support for the web
WireGuard Scale up WireGuard
Wireguard Windows client Native Wireguard protocol client for Windows
Wireguard Rust Implementation Implementation of WireGuard in a type safe language
Wishbone Streaming Add Streaming capabilities to Wishbone
Wispwot Implement generalized scalable protection against disruptive behavior in content discovery
Wolvic Web browser designed for use in XR devices
Event Federation Plugin for WordPress Add ActivityPub to events created with most common WordPress event plugins
WordPress ActivityPub Bring ActivityPub social networking to the widely used Wordpress
MLS for XMPP Add Message Layer Security to XMPP
XR Fragments Discover, reference, navigate and query 3D online content
XWiki ActivityPub First class ActivityPub support in XWiki
YaCy Grid SaaS
Yrs Collaborative editing with CRDT written in Rust
Yrs Undo Rust-based CRDT framework for real-time multi-user applications
Yrs weak links More efficient CRDT by interconnecting and synchronising data structures inside documents
ZIP file format description Documenting the ZIP file format for reverse engineers and developers
ZSipOs Open hardware for telephony encryption
Quantum-Proof Zenroom Implementation of Quantum-Proof Cryptography in Zenroom
Zero-allocation web servers in roc Web server framework with constant memory usage
Zilch Tools for efficient granular builds and introspection
ARPA2 Working towards a decentralised global internet that offers security and privacy by design.
GnuTLS Implement TLS-KDH in GnuTLS
ARPA2 resource ACL and HTTP SASL modules for NGINX Extend consistent access control to NGINX webserver
betrusted A protected hardware device for your private matters.
Bitmask User-friendly and secure VPN configuration
Reinstatement of crypto.signText() Cryptographic signatures brought back to the browser
Democratic SendComm Easy to use connected open hardware device
DIME A new encrypted, end-to-end email protocol
Distributed Mechanism Learning Privacy preserving ways of distributed data usage
Donations smaller contributions to various activities
dweb-search Index DHT based distributed webs
eduVPN app Add Wireguard protocol to federated VPN suite
eduVPN on Apple eduVPN for Apple devices
eduVPN on Apple part II Improved version of eduVPN for Apple devices
eduVPN multi-protocol Review of the eduVPN multi-protocol project.
eduVPN Making secure VPN network technology available to everyone - Resilient, distributed content sharing Resilient, human-centered, distributed content sharing and discovery.
Explain Direct Providing effective and efficient access paradigms for open educational material
Fashion Freedom Supporting research, development, and education to bring the fashion industry into the 21st century Find your way in the Fediverse
FileSender FileSender is a secure and private way to share large files with anyone.
fwupd Automatic Firmware updates for BSD operating systems
GetDNS Deliver DNSSEC as a building block in harsh environments
Global Directories Distributed contact information discovery mechanism
Pretty Easy Privacy At scale simulation over GNUnet with different realistic user behavior scenarios
GUN P2P Encryption A realtime, decentralized, offline-first, graph database engine
Hackathons contributions to various hackathons
imap-codec library Release version 1.0 of the imap-codec library
Internet of Coins Create a decentralized, self-sustaining economy by implementing inter-blockchain connectivity
Handling Data from IPv6 Scanning Scanning tools for scaling up IPv6 scans
it Radically decentralised version control with CRDTs
iuh-openbsc An open source implementation of 3G
jaq Implementation of jq in Rust with formal semantics
Katzenpost Observation resistant secure messaging layer
Key Management Key Management
DNSSEC Key Signing Suite A best practise for DNSSEC Key Signing
lib25519: Secure and efficient computation of X25519 and Ed25519
lib25519 for ARM Add 64bit ARM optimisations to lib25519
libresilient Create robust web presence with service workers and DHT
libspng A fast and safe implementation of Portable Network Graphics
libspng APNG Add Animated PNG (APNG) image read- and write support to libspng
lpnTPM TPM 2.0 compliant open hardware Trusted Platform Module
Securing Decentralised Live Information with m-ld Collaborative editing of LInked Data based on CRDT
mCaptcha Privacy-friendly Proof of Work (PoW) based CAPTCHA system
mikroPhone Open Hardware feature phone
Minedive P2P search over webRTC
mitmproxy HTTP/3 Support and OS Proxy Mode for intercepting local proxy
mobile-nixos NixOS for mobile phones and tablets
Namecoin Decentralized, censorship resist Internet infrastructure for e.g. DNS and identities
Improvements for the next generation firewalling tool in Linux Netfilter kernel improvements, user space tools and testing
Faster and configurable datapath/Linux xfrm Rewriting nftables to optimise for xfrm
Nixcloud Mail Declarative mail server based on NixOS
Nixcloud Webservices Declarative web services based on NixOS
Software vulnerability discovery Automating discovery of software update and vulnerabilities
node-Tor Implementation of Tor protocols for inside webpages
Strengthening NTP and NTS in ntpd-rs Memory-safe implementation of IETF time standards including NTPv5 and NTS
offen Ethical site analytics, controlled by the user
openEngiadina Platform for creating, publishing and using open local knowledge
openXC7 Improve hardware support for open source FPGA tooling
oqsprovider Post-quantum/quantum-safe cryptographic algorithms for OpenSSL
p3pch4t Decentralized chat platform built on i2p
p4-nix Combine Programming Protocol-independent Packet Processors language with declarative Nix packaging
pcb-rnd Modular printed circuit board editor
Pitchfork Open hardware for compartmentalizing key material and cryptographic operations
Pitchfork PKCS#11 Contribute to OASIS standardisation PKCS#11 v3
PKCS#11 v3 Contribute to standardisation of PKCS#11 for cryptographic tokens
postmarketOS: v23.12 and v24.06 Releases New versions of the mobile operating system postmarketOS
postmarketOS An independent mobile operating system
Privacy Preserving Disease Tracking Research into contact tracing privacy
purl2all Discover metadata for software packages
purl2sym FOSS code symbols indexing system
RaptorJIT RaptorJIT is a high-performance Lua virtual machine for network dataplanes.
Modular CA Modular infrastructure for building secure internet services
Remote PKCS#11 Remote usage of PKCS#11
SDR PHY Create a GSM mobile phone consisting of completely open source software and SDR radio
x86-64 VM Monitor for seL4 verified microkernel Very restricted virtualized environment for higher security
Search and Displace Find and redact privacy sensitive information
SecuShare A framework for sufficiently safe social interaction
Secushare Box Operating system extension of Secushare for hardware devices
Serval-LR SERVAL Long-range WiFi Add-on
Σ-protocols Formalise and implement zero-knowledge proof Σ-protocol
Magic Wormhole/SPAKE2 Securely send files between two computers with minimum fuss
Stubby A local DNS Privacy stub resolver using DNS-over-TLS
TLS-KDH Combined Kerberos and Diffie-Hellman as an authentication mechanism for TLS
TOS;DR A user rights initiative to rate and label website terms & privacy policies
Tracking Exposed Increase transparency behind personalization algorithms
Trusted Boot Module An open hardware trusted boot manager
uFork A memory-safe pure-actor virtual machine
uMap Collaborative custom mapping with OpenStreetMap data
vdirsyncer Synchronise calendars and contacts
Vita A fast IPSEC-based VPN gateway
Vita A high performance IPSEC implementation
Free Software Vulnerability Database A resource to aggregate software updates
Nixcloud Declarative internet services based on NixOS
WireGuard A fast and modern VPN that utilizes state-of-the-art cryptography
Wireguard Take modern network tunnels to the next level
WPIA CA Infrastructure Deployment infrastructure for certificate authorities
xrsh Interactive text/OS terminal inside WebXR

NLnet Foundation currently supports the following projects with in-kind contributions:
The Commons Conservancy Legal infrastructure for public benefit efforts
NLnet Labs Independent lab for Internet infrastructure development

Navigate projects

Job openings : NLnet is looking for a Rust developer .

Currently open for proposals:

Want to help but no money to spend? Help us by protecting open source and its users.

Help grow the future. Donate