Thematic index

Stichting NLnet is a recognised public benefit organisation that works towards an open and inclusive information society. NLnet recognises that the most effective way to achieve this, is through providing microgrants to talented individuals and to organisations that are aligned with its mission. An important focus of NLnet lies with research and development in the domain of network technology and the internet, in particular those that serve the end user and the long-term interests of end users.

NLnet has funded many projects throughout the years, in many different areas. In an attempt to provide a rough grouping of these projects, the following classes were defined:

• Application protocols

  Network application protocols
  0cpm — SIPproxy64/6bed4 — PSYC2 — Ambulant — Decibel — Internet of Coins — Jingle Nodes — Jitsi — Jitsi-DNSSEC — LEAP/Torbirdy — MU-Jingle — OCS-Asterisk — openMSRP — openMSRP(2) — openMSRP(3) — Parselov — PKCS#11 v3 — realXtend — SecuShare — Secushare Box — Jitsi (SIP Comm Phone) — Jitsi (SIP-Communicator) Desktop — SIP-GUI — SPEAR — Swirl — SylkRTC — Wormhole — Jabber/XMMP

• Binary Analysis Fund

  Derive knowledge from binary blobs such as firmwares
  Automated clearing of source code files — binary-analysis-ng improvements — Serialization in Kaitai Struct for Java and Python — ZIP file format description

• Community Programs

  Support for advancing research and development internet communities
  GDPR Compliance — Bits of Freedom — CAcert — CAIEC — The Commons Conservancy — Donations — FFII — FLOSS — FSF — FSF Europe — GPLv3 — HWIOS — MAPS — OpenDoc-Soc — ReX — TOS;DR

• Conferences

  Sponsored conferences and other events aiming at dissemination of internet knowledge and technology.
  Conferences — Hackathons — SANE

• Data and AI

  Data and AI
  AI-VPN — OCCRP Aleph disambiguation — Atomic Data — Conzept encyclopedia — Dat Private Network — DATALISP — Encoding for Robust Immutable Storage (ERIS) — Etebase - protocol and encryption enhancements — EteSync - iOS application — Explain — First Classify Documents — Geolexica reverse — In-document search — Practical Tools to Build the Context Web — LiberaForms — LinkedDataHub — LumoSQL — MaDada — NEFUSI — Nextcloud — OpenStreetMap Speed Limits — Personal Food Facts — PRESC Classifier Copies Package — PeerDB Search — Poliscoops — Private Searx — PyCM — SCION-Pathdiscovery — Geographic tagging of Routing and Forwarding — SES - SimplyEdit Spaces — SOLID Data Workers — SWH package manager Data Ingestion — Storing Efficiently Our Software Heritage — SensifAI — Software Heritage — Peer-to-Peer Access to Our Software Heritage — Solid Application Interoperability — Secure User Interfaces (Spritely) — StreetComplete — StreetComplete — StreetComplete UX — TypeCell — URL Frontier — variation graph (vgteam) — Independent captions and transcript augmentation — WebXray Discovery — WikiRate Insights — WikiRate Insights 2 — openEngiadina — Privacy Preserving Disease Tracking

• Decentralised solutions

  Decentralised solutions, including blockchain/distributed ledger
  Blink RELOAD — Briar — Briar Desktop — Discover and move your coins by yourself — Privacy Infrastructure for Corteza Federations — CryptPad Auth — CryptPad for communities — DeltaBot — Encoding for Robust Immutable Storage (ERIS) — Earthstar — Federated Timesheets — Fix the Pitch Black Attack in Freenet routing — GNU Taler — Layer-2-Overlay — GNUnet Messenger API — Federated software forges with Gitea — Gosling — Hyper Hyper Space — Icebreaker — Interpeer — Katzen — Private Key Operations for Keyoxide — Keyoxide v2 — LiberaForms — XMPP-ActivityPub gateway — Librecast — Librecast Live — LumoSQL at-rest data security — Distributed Trust for Web Servers — Manyverse — Manyverse Private Groups — Practical Decentralised Search and Discovery — SecSync — Namecoin: ZeroNet and Packaging — Namecoin: Core Infrastructure — NeoChat — neuropil — neuropil — Adopting the Noise Key Exchange in Tox — Nym Credentials — Off-the-Record messaging version 4 — Open MLS Infrastructure — Interoperable Certificate Store for OpenPGP — Hardening OpenPGP CA deployments — P2Pcollab — Adding Web-of-Trust Support to PGPainless — Statime — PeerDB Search — Peertube-Desktop — Extending PeerTube — peermaps — ProveThis — R5N-DHT — Ricochet Refresh — SCION-Pathdiscovery — Geographic tagging of Routing and Forwarding — SES - SimplyEdit Spaces — A Secret Key Store for Sequoia PGP — Sequoia PGP — Sequoia GPG Chameleon — Peer-to-Peer Access to Our Software Heritage — Solid-NextCloud app — Solid Control — Sonar: a modular peer-to-peer search engine — Secure User Interfaces (Spritely) — Spritely — Great Black Swamp — Trustix — TypeCell — ValOS Cryptographic Content Security project — Yrs — Yrs Undo — Quantum-Proof Zenroom — Distributed Mechanism Learning — dweb-search — elRepo.io - Resilient, distributed content sharing — libresilient — Securing Decentralised Live Information with m-ld — Minedive — node-Tor

• Deployability

  Making sure applications can be put to use in a sane, convenient way
  Nixcloud Mail — Nixcloud Webservices — Nixcloud

• Educational Programs

  Projects aiming at using Internet technology within the educational sector.
  How AdTech works — CodeYard — Democratic SendComm — Explain Direct — GO-FOSS — SchoolLan — ThinkQuest — TOS;DR — TwinSite-2000

• FileSender

  Server application to send files of arbitrary size
  FileSender UX/UI

• GetEduroam

  A modern way to manage and deploy federated wifi roaming
  Letswifi/Geteduroam

• Hardware

  Trustworthy hardware and manufacturing
  Analog/Mixed-Signal Library — Balthazar — Balthazar - One laptop for the new internet age. — Betrusted OS — Betrusted Storage — Libre-SOC Cavatools: Power ISA Simulator — LibrEDA — Zerocat Chipflasher Flashrom Interface — Chips4Makers ASICs — Supersizing the Gun — Libre-SOC, Coriolis2 ASIC Layout Collaboration — EEZ DIB — Edalize ASIC backend — EDeA — FemtoStar Project — Fobnail — Libre/OpenCores FuseSoc backend — Porting Guix to Riscv64 — YunoHost and the Internet Cube — KiKit — Kintex-nextpnr — Langsec in Pectore — Libre-SOC — The Libre-SOC Gigabit Router — LibreSilicon — Libre Silicon compiler — Port of AMDVLK/RADV 3D Driver to the Libre-SOC — Libre-SOC Formal Correctness Proofs — Libre-SOC Formal Standards Development — Libre-SOC Video Acceleration — MNT Reform — MEGA65 Phone — Mosaic — Nitrokey — Trussed — Open Know-How Search — OpenCryptoHW — OpenCryptoLinux — DRTM implementation for AMD processors — OpenQRNG — Securing PLCs via embedded protocol adapters — RISC-V Phone — SpinalHDL, VexRiscv, SaxonSoc — Simmel — Timing-Driven Place-and-Route (TDPR)  — TerosHDL — ULX4M — LIP6 VLSI Tools — video box — Wishbone Streaming — ZSipOs — betrusted — lpnTPM — pcb-rnd

• Information Retrieval

  Projects primarily related to internet information retrieval technologies.
  AGFL — AHA! — ALIAS — CPAN6 — Global Directories — Globule — LCC — Parselov — Searsia — Sesame — SIRS — ARPA2 Steamworks

• Internet Hardening Fund

  Projects funded from the Internet Hardening Fund
  Certbot ECDSA support — Improving Matrix E2E encryption UX — Namecoin: TLS — ARPA2 Steamworks — GnuTLS — DIME — GetDNS — Pretty Easy Privacy — GUN P2P Encryption — Key Management — lib25519: Secure and efficient computation of X25519 and Ed25519 — Namecoin — Faster and configurable datapath/Linux xfrm — Pitchfork — Pitchfork PKCS#11 — Modular CA — Remote PKCS#11 — SecuShare — Secushare Box — Magic Wormhole/SPAKE2 — Stubby — TLS-KDH — Vita — Nixcloud — WireGuard — WPIA CA Infrastructure

• Internet Infrastructure

  Protocols and software for managing and advancing low-level internet infrastructure
  ARPA2 — Atom-Based Routing — BIND DLZ — Bricophone — CeroWRT — CuteHIP — DNSCCM — Dowse — eduVPN app — eduVPN on Apple — eduVPN on Apple part II — eduVPN multi-protocol — eduVPN — Fairwaves — FTEproxy — GetDNS — GISS — IIDS — ISC BIND 9 — iuh-openbsc — Koruza — LOAP — Meshtool — Namecoin — nat64 — NetEventKit — nftables — Faster and configurable datapath/Linux xfrm — NLnet Labs — Nodewatcher — OpenBTS-HW — Cryptech.is — OSLD — Palea — RaptorJIT — RPKI-RTRlib — SCTP-Linux — SDR PHY — Serval — Serval-LR — SnabbWall — SocketHUB — Magic Wormhole/SPAKE2 — Stratosphere IPS — Stubby — TCP-multipath — Timesheets — TLS-KDH — Uberflow — UmTRX — WireGuard — Wisper

• Measurement

  Measurement, monitoring, analysis and abuse handling
  Supersizing the Gun — Tracking the Trackers — GoatCounter — Lightmeter — MPTCP — MobileAtlas — NoScript Contextual Policies & LAN protection — OnBaSca — Statime PTP Master — Timing-Driven Place-and-Route (TDPR)  — Trustix — WebXray Discovery — XWiki — Handling Data from IPv6 Scanning — Software vulnerability discovery — offen

• Middleware and identity

  Middleware + identity, including DNS, authorisation, authentication, distribution/deployment, operations, reputation systems
  0KNOW — Autocrypt for Thunderbird — Coko Docs — Connect by Name — Record Federation for Corteza Clouds — CryptPad Auth — CryptoLyzer — CryptPad — GNU Guix - Cuirass — Securing Internet protocols with DIDs — Distributed Private Trust — dream2nix — EGIL SCIM client — The search for ethical Apps — FOSS Code Supply Chain Assurance — GNU Name System — A proof of concept of identity-based encryption — IRMA made easy — Icebreaker — YunoHost and the Internet Cube — Keyoxide — Private Key Operations for Keyoxide — Keyoxide v2 — Improve Email Encryption in KMail — ARPA2 LDAP Middleware — Distributed Trust for Web Servers — MoboSearch — Namecoin: ZeroNet and Packaging — Namecoin: Core Infrastructure — Securing NixOS services with systemd — Nym Credentials — Opaque Sphinx — Opaque Sphinx Server and Clients — OpenPGP Certificate Authority — Improving OpenSSH's Authentication and PKI — Interoperable Certificate Store for OpenPGP — Hardening OpenPGP CA deployments — Owncast — Adding Web-of-Trust Support to PGPainless — Peppol for the masses — Privacy Enhancements for PowerDNS and DNSdist — Prosody IM — Redwax — Robur private DNS resolver and DHCP server — Rocket CWMP — SASL Works for the InternetWide Architecture — SCION-RAINS — Geographic tagging of Routing and Forwarding — A Secret Key Store for Sequoia PGP — Adding TPM Support to Sequoia PGP — Solid Application Interoperability — Solid Wallet — Dual-level Specification Inference — Statime PTP Master — TrustING — Tvix — Universal DID Resolver and Registrar — XWiki — ARPA2 resource ACL and HTTP SASL modules for NGINX — Bitmask — Distributed Mechanism Learning — imap-codec library — DNSSEC Key Signing Suite

• NGI Assure

  Projects that make security and trustworthiness easier
  0KNOW — Aerogramme — Ari — Atomic Data — Authenticated DNSSEC bootstrapping — Heads-OpenPGP — Bertie — Blink Qt Messaging — Briar Desktop — CNSPRCY — Converged Security Suite Improvements — Cable — Libre-SOC Cavatools: Power ISA Simulator — Choreographic Programming: From Theory To Practice — Coko Docs — Conversations 3.0 — CryptPad Auth — CryptPad Quality Test Suite — CryptPad WCAG — CryptoLyzer — CryptPad Auth Improvements — Securing Internet protocols with DIDs — DATALISP — dream2nix — Python supply-chain with dream2nix — Encoding for Robust Immutable Storage (ERIS) — Earthstar — Earthstar (Encryption, Safety, and Local Sync) — Friendly Forge Format (F3) — FOSS Code Supply Chain Assurance — Federated Task-Tracking with Live Data — Federated Timesheets — Fobnail — Full-source GNU Mes on ARM and RISC-V — GNU Mes RISC-V — RISC-V bootstrapping effort via GNU Mes — GNU Mes Tower — GNU Taler KYC — Layer-2-Overlay — GNUnet Messenger API — Gash — Gosling — Porting Guix to Riscv64 — TPM 2.0 for HEADS — Himalaya — Hyper Hyper Space — IPDL — Interpeer SDKs — json-joy — KDE Connect — Standardizing KEMTLS — Kaidan — Kaidan Mediasharing — Katzen — Keyoxide Mobile — Private Key Operations for Keyoxide — Keyoxide v2 — Kintex-nextpnr — Let's Connect! Client-Server to P2P — LiberaForms — Audio/Video Calls in Libervia — Librecast — The Libre-SOC Gigabit Router — LumoSQL at-rest data security — Maemo Leste Telepathy — Manyverse Private Groups — Mellium — MirageVPN — Monal IM — SecSync — Namecoin: Electrum-NMC — NeoChat — Packet classification extensions for Netfilter — neuropil — NextGraph — Type Inference for Nix — NixOS/Clevis — Securing NixOS services with systemd — UEFI Secure Boot support for NixOS — Adopting the Noise Key Exchange in Tox — Oil Shell — Oil Shell — Improve Okular digital signature support — Ontogen — OpenCryptoHW — OpenCryptoLinux — OpenCryptoTester — Open MLS Infrastructure — Improving OpenSSH's Authentication and PKI — Hardening OpenPGP CA deployments — OpenQRNG — p2panda — Adding Web-of-Trust Support to PGPainless — Post-Quantum Crypto in DNSSEC — Statime — Peppol for the masses — Probabilistic NAT Traversal — Prosody IM — ProveThis — PyCM — R5N-DHT — rasn — Rosenpass — Rosenpass API — SES - SimplyEdit Spaces — Subliminal Messaging — A Secret Key Store for Sequoia PGP — Adding TPM Support to Sequoia PGP — Sequoia PGP — Sequoia GPG Chameleon — Servo Developer Experience Improvements — Multi browsing context support in Servo — Signature PDF — SignRoom — smoltcp RPL — Peer-to-Peer Access to Our Software Heritage — Solid Wallet — Dual-level Specification Inference — Spritely (and OCapN) — Statime PTP Master — Sustainable web apps with m-ld — Great Black Swamp — Tauri Apps — Servo Webview for Tauri — TerosHDL — FIDO 2.2 — TrustING — Trust semantic learning and monitoring — Trustix — Tvix — TwPM — TypeCell — UEFI isolation in VM from non UEFI firmware — LIP6 VLSI Tools — Servo improvements for Tauri — Next Generation Browser Profile Workflow — Vula — WikiRate: More Sites, More Cites — Winden/Magic Wormhole dilation — Wispwot — Yrs — Yrs Undo — Quantum-Proof Zenroom — Reinstatement of crypto.signText() — Distributed Mechanism Learning — imap-codec library — libresilient — lpnTPM — Securing Decentralised Live Information with m-ld — oqsprovider — p4-nix

• NGI Mobifree Fund

  More ethical and human mobile software
  Android translation layer (ATL) — LambdaNative F-Droid integration — OpenAGPS — Termux

• NGI TALER Fund

  Privacy-preserving digital payments
  MTE - the MirageOS Taler Exchange — TALER Bullion — Interledger interoperability inquiry — GNU Taler Wallet ID Lookup Service — Road Signs for Digital Payments — Taler-Odoo Payment System (TOPS) — GNU Taler Tryton/GNUHealth integration

• NGI Zero Core

  Moving the internet forward
  0WM — Firmwire full-system 5G baseband emulation — AI Horde — Alive2 — Arcan-A12 Directory — Arcan-A12 Tools — Automerge — Interpretation feature for Big Blue Button — Detecting Forged-Origin BGP hijacks — BIDS: Binary Identification of Dependencies with Search — Back2Source next — BrowserAudit — Tracing and rebuilding packages — CAKE-MAINT — COCOLIGHT — Cross-root ARIA — Diesel — Draupnir — Open source ESP32 802.11 MAC — Email <=> XMPP gateway — Ethersync — Exter — FOSS Warn — FPGA-ISP-UVC-USB2 — FastScan — Feather UI — Fediverse Test Framework — Fediverse Test Suite — Enhancing Firefox for Linux on Mobile — Flashkeeper — ForgeFed Frontend — GPGPU Playground — Galene — Gancio — Collection of Verified multi-platform Gatewares — Goupile — Guix-Daemon — Open Hardware Manuals — SCE, DelTiC and Antler — Holo Routing — IPDL II — IPv6-monostack - upstream Linux SIIT/NAT64 — ISCC-CORE typescript implementation library — IotECC — Irdest IP Traffic Proxy — IronCalc — Ironclad — JSON-Joy Peritext — KDE Plasma Wayland — Knowledge Graph Portal Generator — Kami — KiCad-IPC — LDAP Synchronization Connector — LO/CODE Book project — LabPlot — Lemmy Scale — LibreQoS 2.1 — Librecast Overlay Multicast — LANShield — Loops — MEGA65 Phone Modular MVP — Improving the deployability of Multipath TCP — Improving the deployability of Multipath TCP, part 2 — MailBox renewal — Miru — postmarketOS/phosh-mobile-settings integration — Mobilizon UX — Movedata — Movim — NixBox — NodeBB — O-ESD: Open-hardware for ElectroStatic Discharge testing — OCaml-QUIC — OWASP dep-scan — owi — Omnom — OpenCarLink — Open Cloud Mesh — OpenEMSH — OpenHarbors — Open Web Calendar Stack — openwifi: 802.11a/g/n maturity — Openfire IPv6 support — PTT — Patchouli — Pijul ecosystem — Pijul Hybrid — Pimalaya PIM — Pleroma — Pre-Scheme — Protomaps — Py2HWSW — Proper Webcam support in Qemu — Redox OS Unix-style Signals — Renderling — Free and open source NPU Drivers — Rosenpass Broker — SCION Open Source Implementation — SCION-enabled IPFS and libp2p — Toward a Fully-Verified SCION Router II — Secure Web Tokens for Linux — Servo: Benchmarking and Statistics — Multiprocess Mode in Servo — Servo Script Improvement — Slint port for Android — SocksTrace — Solid NC 2024 — Spade — Transitioning SMM Ownership to Linuxboot — Standards Grammar Catalog/Toolchain — Stencila v2 for ERA and EPP — Structured Email for Roundcube — Surfer Waveform Viewer — Client Proof-of-Work in TLS — TSCH-rs — Tau — TrenchBoot as Anti Evil Maid - UEFI boot mode support — Tvix-{Store/Build} — HTML export for Typst — UnifiedPush — Toward a Fully-Verified SCION Router — Verso Views — Webview library with Verso for Tauri — VexiiRiscv — OpenIMSd — Vouivre — Enhance the vulnerability database — WPE Android — Wax — Integration of Waydroid on mobile GNU/Linux — Wayland input method support — Webxdc evolve — Whippet — Willow Sync — Wobble Web — MLS for XMPP — XMPP Interoperability and Protocol Standard Conformance Testing — Zero-allocation web servers in roc — ZeroPhone Next — Zilch — Zip linting and bzip2 in Rust — badkeys — bluetuith — f8 — foaHandler — lib1305 — libnix — libvips — Verifying and documenting live-bootstrap — Multisoni — nextpnr for GW-5 — openPCIe2 Root Complex — p3pch4t — postmarketOS: v23.12 and v24.06 Releases — postmarketOS daemons — Support for OpenPGP v6 in rPGP — reqwest — rrdnsd — Maintenance and portability of sudo-rs — tslib — uFork/FPGA — uberClock — vm-builder

• NGI Zero Discovery

  Projects enabling search and discovery
  OCCRP Aleph disambiguation — AREXERA Crawler — Babelia — Blink RELOAD — Bonfire Search & Discovery — Castopod — Castopod Mobile — Discover and move your coins by yourself — Connect by Name — Conzept encyclopedia — Record Federation for Corteza Clouds — Corteza Discovery — Privacy Infrastructure for Corteza Federations — ArtistHub — DeltaBot — Extend EFI support in BSDs — EDeA — AEAP — Email for expert news — The search for ethical Apps — FairSync — searx — First Classify Documents — Folksonomy engine for the food ecosystem — ForgeFed — Funkwhale — GNU Name System — GNU social — Tooling to improve security and trust in GNU Guix — Geolexica reverse — Federated software forges with Gitea — Real time graph database search engine — The Open Green Web — Haketilo/Hydrilla — Great scanning and OCR for mobile devices — Hubzilla — ipfs-search.com — Icebreaker — IN COMMON — In-document search — Practical Tools to Build the Context Web — Indigenous — Interpeer — Inventaire — Inventaire recommender — Irdest — Karrot — Kazarma — Keyoxide — Collabora Online and LibreOffice — lemmur — Lemmy — Lemmy Federation — XMPP-ActivityPub gateway — LibreOffice P2P — Librecast Live — LinkedDataHub — MaDada — Mailpile Search Integration — Mangaki — Mastodon - groups, filtering, moderation — Mepo — Practical Decentralised Search and Discovery — Meta-Press.es — Meta-Press.es — Mobilizon — MoboSearch — Mynij — NEFUSI — Namecoin: ZeroNet and Packaging — Namecoin: Core Infrastructure — neuropil — Nextcloud — Nominatim — Nyxt — Nyxt — Open Know-How Search — OSF Crawler Cooperation — OpenStreetMap Speed Limits — Offen — Omnom — Personal Food Facts — Open Hospitality Network — Openki.net — Owncast — P2Pcollab — PRESC Classifier Copies Package — The PeARS app — PeerDB Search — PeerTube — Extending PeerTube — peermaps — A Distributed Software Stack For Co-operation — PixelDroid — Pixelfed Live — Pixelfed — Plaudit — Poliscoops — PrivateRecSys — Private Searx — Re-isearch — Great OCR for SANE — SCION-RAINS — SCION-Pathdiscovery — Geographic tagging of Routing and Forwarding — SWH package manager Data Ingestion — Storing Efficiently Our Software Heritage — Adera — SEARXR — searx — Dynamic indexing for real time graph database — SensifAI — Simmel — Software Heritage — Solid Application Interoperability — Solid-NextCloud app — Solid-Search — Solid Application Interoperability — Sonar: a modular peer-to-peer search engine — sourcehut — Spritely — StreetComplete — StreetComplete — StreetComplete UX — URL Frontier 2.0 — URL Frontier — variation graph (vgteam) — Web Annotation — WebXray Discovery — XWiki — WikiRate Insights — WikiRate Insights 2 — WordPress ActivityPub — XWiki ActivityPub — YaCy Grid SaaS — dweb-search — elRepo.io - Resilient, distributed content sharing — fediverse.space — fwupd — Handling Data from IPv6 Scanning — Minedive — Software vulnerability discovery — openEngiadina — Privacy Preserving Disease Tracking — Search and Displace — Free Software Vulnerability Database

• NGI Zero PET

  Projects enhancing privacy and trust of internet and related technologies
  LibreCellular — AI-VPN — Analog/Mixed-Signal Library — Accessible security — Alder Lake Desktop — Autocrypt for Thunderbird — BBBsecureChat — Balthazar — Balthazar - One laptop for the new internet age. — Betrusted OS — Betrusted software — Betrusted Storage — Briar — LibrEDA — Zerocat Chipflasher Flashrom Interface — Chips4Makers ASICs — Conversations — Libre-SOC, Coriolis2 ASIC Layout Collaboration — CryptPad: Project Dialogue — CryptPad — CryptPad for communities — GNU Guix - Cuirass — DCnets — Dat Private Network — Structuring the System Layer with Dataspaces — Dino — Distributed Private Trust — EEZ DIB — EGIL SCIM client — Edalize ASIC backend — Etebase - protocol and encryption enhancements — EteSync - iOS application — Tracking the Trackers — Fractal — Fix the Pitch Black Attack in Freenet routing — GNU Mes — GNU Mes on ARM — GNU Mes: Full Source bootstrap — GNU Taler — GPG Lacre project — GoatCounter — Implement sound support in the Hurd — A proof of concept of identity-based encryption — IMSI Pseudonymization — IRMA made easy — YunoHost and the Internet Cube — JavaScript Restrictor — JShelter — End-To-End Encryption for Jitsi Meet — Verified Differential Privacy for Julia — Kaidan — Kaidan A/V — Improve Email Encryption in KMail — ARPA2 LDAP Middleware — Liberaforms — Libre-SOC — LibreSilicon — Libre Silicon compiler — Standard Cell Library — Port of AMDVLK/RADV 3D Driver to the Libre-SOC — Libre-SOC Formal Correctness Proofs — Libre-SOC Formal Standards Development — Libre-SOC Video Acceleration — Lightmeter — Usability of Linux firewall userspace tools — LumoSQL — Luna PnR — MNT Reform — Maemo Leste — Manyverse — MEGA65 Phone — MobileAtlas — Mobile Test Farm — Mosaic — Movim — Nitrokey — NoScript Contextual Policies & LAN protection — Nym Credentials — Off-the-Record messaging version 4 — OnBaSca — Opaque Sphinx — Opaque Sphinx Server and Clients — DRTM implementation for AMD processors — OpenPGP Certificate Authority — 802.11n feature of openwifi — PGP4civiCRM — Securing PLCs via embedded protocol adapters — Privacy Enhancements for PowerDNS and DNSdist — Qubes OS — RISC-V Phone — RNP Confium — Redwax — Reowolf — Graphics acceleration on Replicant — Finish porting Replicant to newer Android version — Ricochet Refresh — Ripple — Robotnix — Rust Threadpool — SASL XMSS — SASL Works for the InternetWide Architecture — SpinalHDL, VexRiscv, SaxonSoc — SeedVault — Solid Control — Spectrum — Secure User Interfaces (Spritely) — Suhosin-NG — Sylk chat — Sylk Client — Sylk Mobile — RETETRA — TLS-KDH mbed — Padding Machines for Tor — Build Transparency (Trustix) — ULX4M — Universal DID Resolver and Registrar — ValOS Cryptographic Content Security project — Noise Explorer-VerifPal — Verifpal — VFRAME: Visual Defense Tools — video box — Video chat privacy — Free Software Vulnerability Database — Waasabi Framework — Web Shell — WireGuard — Wireguard Windows client — Wireguard Rust Implementation — Wishbone Streaming — ZSipOs — ARPA2 resource ACL and HTTP SASL modules for NGINX — betrusted — Bitmask — Katzenpost — DNSSEC Key Signing Suite — libspng — mobile-nixos — node-Tor — offen — pcb-rnd — postmarketOS — x86-64 VM Monitor for seL4 verified microkernel — Vita — Wireguard

• NGI0 Commons Fund

  Reclaim the public nature of the internet
  Analytics Caddy Microservice — Bubble-up — CityBikes — DatamiPods — Decidim revamp — EPE (Ecran-Papier-Editer | Screen-Paper-Editing) — Every Door — F3D — FederatedCode Next — Follow-me slideshow for Collabora Online — Nix Integration for Hop3 — Collabora Online Multi-user Infinite Canvas — Land — LibrePCB 2.0 — Test Procedures for MOSFET Open Source SPICE Model Validation — Massive FOSS scan — Mautic Portability — Mustang - UI components — Mustang UX — Ontogen and Mud — Open Everything Facts — Openki Roles — Panoramax — Pomme d’API — Re-isearch Schmate — Slips Immune I — Smart lookup & inference for Semantic Data — Sniffnet — Verilog-A distiller — VersaTiles — iTowns — uMap Vector Tiles

• NGI0 Entrust

  Trustworthiness and data sovereignty
  ARMify — AVantGaRDe — ActivityPods — Agorakit — AlekSIS — Apicula — Apicula IO primitives — Automating mobile app interception with Frida — Perspectives: Making Models — Arcan-A12 — Atomic Tables — BB3-CM4 — Back to source: trust but verify all the packages — Balthazar Casing — Bana — Blink for Windows — BlockNote — Bonfire federated groups — Bonfire Framework — BrailleRAP — CRAVEX — Converged Security Suite +AMD — Canaille — Castopod Plugins — Charon — Anchorboot — Cloud hosting service portability — Coloquinte — Commune — CryptPad Blueprints — DANCE4All — DAVx⁵ WebDAV Push — DMT — DNSvizor — DUT Control — Delta Tauri — DeltaTouch — DeviceCode — Distributed GNU Shepherd — Dokieli — Dolphin authorisation — EDeA — EEZ Studio — EEZ flow for EEZ Studio — ELF tools in Rust — Elm Matrix SDK — EventFahrplan — FABulous Demo SoC — FOSS Code Supply Chain Assurance II — FPGA Fault Injection Testing — Faircamp 1.0 — FastWave — Federated software forges with Forgejo — Software metadata — FediMod FIRES — Fidus Writer — Flarum — Fleetbase on Solid: A production-ready supply chain solution — ForgeFed — ForgeFlux — Forgejo — Native IFC for FreeCAD — Data packages — Funkwhale — GNS Migration and Zone Management — Taler for local currencies. — GNUnet CONG — Garage — Genealogos — Verilog-AMS in Gnucap (cont'd) — Verilog-AMS in Gnucap — GoToSocial — GoToSocial — Gorgon CI — Haphaestus — Hardware accelerated 2D graphics — OCap layer for Haskell actor library — IC workspace — Icestudio — Icosa Gallery — Inko — Inochi2D — Inventaire Self-hosted — Irdest - OpenWRT Image and Bluetooth LE — Irdest spec, db, route scoring — Threat intelligence sharing — JShelter Manifest V3 — JellyfishOPP — Kaidan Auth + portability — Improving and extending Kaitai Struct — Karrot — Katzen Metadata Minimizing Messenger — Kazarma Release — Kbin — /kbin — KiKit — Wireguard-1GE FPGA — Krill High Availability — Collabora Online/LibreOffice Accessibility — LibreOffice/Collabora Online typography — Lemmy private communities — Libre-SOC HPC — Libre-SOC OpenPOWER ISA WG — IndieHosters — Libre Car Control — LibreCellular — LibreOffice CRDT — LibrePCB — LibreQoS — Liminix — LiteX — LunaPnR Phase 2 — Mainstreaming Anonymity for Developers (MAD) — MNT Reform Next — The MacBook Liberation Project — Machdyne — Mailpile 2 (moggie) — Makatea — Manas — MapComplete — Marginalia Search — Catalogs in MariaDB — ActivityPub Quote Posts — Modular Meta-Press.es — MinetestEdu — MobileAtlas — Mobroute — Caster — Monal IM UI — Mox — Naja — Naja DNL — NaxRiscv core improvements — Nitrokey 3 — Nitter — Debug Adapter with Nix — Nominatim as a library — Nyxt Webextensions — OVT 13 — Oils for Unix — Oku — Open Energy Profiler Toolset — Ordie — Organic Maps — Overte — p2panda: group encryption and capabilities — PTP gateware with openXC7 — Passthrough Authentication — Popularizing PeerTube — Peertube plugin livechat — PeerTube - Remote Transcoding — Manyfold — Pimalaya: email — PixelDroid/Media editor — Pixelfed — pretalx — Pythonic Slint — RA-Sentinel — RADIUSdesk Multi WAN — RAIJIN — RETETRA3 — Fast RSA + PQ Blind Signatures — Raptor Lake Desktop — Python bindings to the rattler library — ReOxide — Redox Flow Battery — Replicant on Pinephone 1.2 — Reproducible F-Droid — Reproducible-openSUSE — pcb-rnd, sch-rnd — Rotonda Secure Extensions — WWW SCION — SDCC — SIP RELOAD — Cell broadcast support for the Linux Mobile Stack — Software Heritage listers + tooling — SeedVault Integrity — SelfPrivacy — #Seppo! — Servo — Servo CSS — SiCl4 — Silicon verification — Solid Compound — Solid Data Modules — Solid Application Interoperability — Solid Usable App Tools Project — Space Tube — Spectrum Applications — Squishy — Stalwart Mail Server — Stract — StreetComplete/AllThePlaces — TISG trustable image sensor gateware — TOS;DR OTA backend — GNU Taler wallet app for iOS — Tasteweb — TerosHDL: OSS, GHDL, NVC — Threshold OPRFs — Topola — Tracking weasel — TrenchBoot for AMD platform in Linux kernel — Trenchboot as Anti Evil Maid — UEFI Capsule Update for coreboot with EDK II — UberDDR3 — Reverse Engineering Toolkit — Enhancing vula with IPv6 and REUNION rendezvous — DeltaChat/WebXDC — webxdc PUSH — WebXDC XMPP — Whisperfish — WireGuard on FPGA — Wolvic — Wolvic User Interface — Event Federation Plugin for WordPress — XR Fragments — Yrs weak links — bcachefs — Cpdf Accessibility — cables.gl — Elliptic curve encryption speed-up using SIMD — django-allauth — it — jaq — lib25519 for ARM — libspng APNG — mCaptcha — mikroPhone — mitmproxy — Improvements for the next generation firewalling tool in Linux — Strengthening NTP and NTS in ntpd-rs — openCologne — openXC7 — S-SATA for openXC7 — purl2all — purl2sym — scalePNR — Σ-protocols — uFork — uMap — vdirsyncer — xrsh

• NREN

  Projects relevant to the research and higher education community
  How AdTech works — Democratic SendComm

• Network Applications

  Software application development projects based upon Internet technology.
  A-A-P — BlenderWeb — CP2PC — CUGAR — Dowse — FileSender — FreeBSD-3G — FSF Priority — JigLibJS — LogReport — Mail::Box — Meemoo — Morphle — NILO — Parrot — Proxy App — PulseAudio — Sabayon — TimeWalker — VDD — VirtNet

• Network infrastructure

  Network infrastructure incl. routing, P2P and VPN
  AI-VPN — Accessible security — CryptPad: Project Dialogue — Fix the Pitch Black Attack in Freenet routing — Layer-2-Overlay — GNUnet Messenger API — Gosling — Hypermachines: Realtime and Collaborative P2P Search — Interpeer — Verified Differential Privacy for Julia — Standardizing KEMTLS — Katzen — Librecast — LibreOffice P2P — The Libre-SOC Gigabit Router — MPTCP — Practical Decentralised Search and Discovery — Packet classification extensions for Netfilter — neuropil — Adopting the Noise Key Exchange in Tox — Nyxt — Securing PLCs via embedded protocol adapters — Statime — PeerTube — Peertube-Desktop — Privacy Enhancements for PowerDNS and DNSdist — Probabilistic NAT Traversal — R5N-DHT — Robur private DNS resolver and DHCP server — SES - SimplyEdit Spaces — smoltcp RPL — Peer-to-Peer Access to Our Software Heritage — Spritely (and OCapN) — Statime PTP Master — RETETRA — TrustING — Build Transparency (Trustix) — Waasabi Framework — WireGuard — Wireguard Windows client — Wireguard Rust Implementation — Yrs — Yrs Undo — Bitmask — dhcpcanon — Katzenpost — libresilient — Securing Decentralised Live Information with m-ld — Minedive — node-Tor — Vita — Wireguard

• Open Social Fund

  Promoting W3C ActivityPub and beyond
  Integrating Fediverse into Public Administration, EU Voice-Video case study — Trust and Safety providers for the Fediverse — Fediverser

• OpenData

  Projects to facilitate the creation, collection and curation of free information.
  Record Federation for Corteza Clouds — Folksonomy engine for the food ecosystem — The Open Green Web — Nominatim — Personal Food Facts — Plaudit — Software Heritage — Solid-Search — StreetComplete — WebXray Discovery — Fashion Freedom — LTSP Deskop — OpenStreetMapNL — Searsia — TOS;DR — Free Software Vulnerability Database

• OpenDocument Format

  Enable future proof office documents.
  AbiCollab — AbiMacOS — AbiRDF — AbiRDF2 — Calligra-SVG — Calligra-Windows — FLOSS-manuals — Kolab-Sync — LibreDocs — Lokalize — ODF-AbiChanges — ODF-AbiChanges2 — ODF-AbiWord — ODF-changes — ODF-changes2 — ODF-compare — ODF-DocMod — ODF-KOffice — ODF-KOffice2 — ODF-KOffice3 — ODF-KOffice4 — ODF-Numbertext — ODF-Recipes — ODF-Symbian — ODF-Valid — ODF-XLIFF — ODF Autotests — OdfKit — odfsvn — OfficeShots — SIPcollab — ViewerJS — WebODF — WebODF-Dissem

• Operating Systems

  Operating Systems, firmware and virtualisation
  Accessible security — Heads-OpenPGP — Betrusted OS — Betrusted software — GNU Guix - Cuirass — Structuring the System Layer with Dataspaces — Fobnail — GNU Mes — Full-source GNU Mes on ARM and RISC-V — GNU Mes RISC-V — GNU Mes on ARM — GNU Mes: Full Source bootstrap — GNU Mes Tower — GNU Guix — Tooling to improve security and trust in GNU Guix — Gash — Genodepkgs — Porting Guix to Riscv64 — Implement sound support in the Hurd — KWin and Wayland input — Usability of Linux firewall userspace tools — Maemo Leste — Securing NixOS services with systemd — UEFI Secure Boot support for NixOS — Nominatim — Oil Shell — OpenCryptoLinux — Qubes OS — Replicant on Guix — Graphics acceleration on Replicant — Finish porting Replicant to newer Android version — Robotnix — Rocket CWMP — Storing Efficiently Our Software Heritage — SpinalHDL, VexRiscv, SaxonSoc — Adding TPM Support to Sequoia PGP — Spectrum — Trustix — Tvix — video box — Free Software Vulnerability Database — Web Shell — XWiki — ZSipOs — fwupd — mobile-nixos — Software vulnerability discovery — postmarketOS — Reproducible Builds — x86-64 VM Monitor for seL4 verified microkernel — Free Software Vulnerability Database

• Privacy and security

  Projects to understand, safeguard and/or improve privacy and security in communication.
  ELF Linking — PSYC2 — Anomos — Deep Firmware — DIFR-TSPM — DNSSEC-mail — e-Passports — FileSender — FTEproxy — Global Directories — GNUnet — GoogleSharing — GSM-Sec — HTTPS-Obs — Jitsi-FMJ — Ksplice — Ksplice2 — Lantern — LEAP/Torbirdy — Mailman-SSLS — NetAidKit — Faster and configurable datapath/Linux xfrm — NoScriptABE — NoScript-Andr — NoScript-Mob — NoScript-Mob2 — Cryptech.is — OSN-PPCP — OV-Chipkaart — Pitchfork — Qubes — RFID Guardian — RFID Guardian(2) — Samizdat — Seahorse SmartCard — Searsia — Searx — SecuShare — Online Self-defence in Ten Minutes — Shadow Internet — Magic Wormhole/SPAKE2 — Stratosphere IPS — Stubby — Tor hidden services — Tor low-bandwidth — Tracking Exposed — Trusted Boot Module — Turtle — Unhosted — Unhosted — XSSer

• Reports and studies

  Research to advance the knowledge on themes relevant to NLnet
  Assessing Cyber Security — The third mainport — NOMA

• Services + Applications

  Services + Applications (e.g. email, instant messaging, video chat, collaboration)
  AREXERA Crawler — Autocrypt for Thunderbird — BBBsecureChat — Betrusted software — Blink Qt Messaging — Blink RELOAD — Bonfire Search & Discovery — Briar — Briar Desktop — Castopod — Castopod Mobile — Discover and move your coins by yourself — Conversations — Privacy Infrastructure for Corteza Federations — ArtistHub — CryptPad Auth — CryptPad — CryptPad for communities — Redash — DeltaBot — Dino — Encoding for Robust Immutable Storage (ERIS) — AEAP — Thunderbird - native EteSync integration — FairSync — Federated Timesheets — ForgeFed — Fractal — Funkwhale — GNU social — GNU Taler — GNUnet Messenger API — GPG Lacre project — Gosling — Haketilo/Hydrilla — Hubzilla — Indigenous — Inventaire — End-To-End Encryption for Jitsi Meet — Kaidan — Katzen — Kiwi IRC — Improve Email Encryption in KMail — Collabora Online and LibreOffice — lemmur — Lemmy — Lemmy Federation — LiberaForms — Liberaforms — XMPP-ActivityPub gateway — Librecast — LibreOffice P2P — Lightmeter — Lizard — Mailpile Search Integration — Manyverse — Manyverse Private Groups — Mastodon - groups, filtering, moderation — MeiliSearch — Misskey — Mobilizon — MoboSearch — Monal IM — Movim — Mynij — NeoChat — Nextcloud — Adopting the Noise Key Exchange in Tox — Nyxt — Nyxt — Open Know-How Search — Off-the-Record messaging version 4 — Improve Okular digital signature support — Omnom — Opaque Sphinx — Owncast — P2Pcollab — PGP4civiCRM — Peertube-Desktop — Extending PeerTube — Peppol for the masses — A Distributed Software Stack For Co-operation — PixelDroid — Pixelfed Live — Pixelfed — Prosody IM — Ricochet Refresh — SES - SimplyEdit Spaces — SensifAI — Solid-NextCloud app — Solid-Search — Solid Control — Secure User Interfaces (Spritely) — Spritely — StreetComplete UX — Sylk chat — Sylk Client — Sylk Mobile — Tantum Search — Tauri Apps — TypeCell — ValOS Cryptographic Content Security project — VFRAME: Visual Defense Tools — Video chat privacy — Waasabi Framework — Independent captions and transcript augmentation — XWiki — WordPress ActivityPub — XWiki ActivityPub — Yrs — Yrs Undo — Reinstatement of crypto.signText() — fediverse.space — Securing Decentralised Live Information with m-ld — Minedive — Search and Displace

• Software engineering

  Software engineering, protocols, interoperability, cryptography, algorithms, proofs
  0KNOW — Accessible security — Authenticated DNSSEC bootstrapping — Autocrypt for Thunderbird — Bertie — Betrusted Storage — Blink Qt Messaging — Coko Docs — CryptoLyzer — GNU Guix - Cuirass — DCnets — Securing Internet protocols with DIDs — Dat Private Network — DATALISP — Structuring the System Layer with Dataspaces — dream2nix — Encoding for Robust Immutable Storage (ERIS) — Edalize ASIC backend — FOSS Code Supply Chain Assurance — FemtoStar Project — GNU Mes — Full-source GNU Mes on ARM and RISC-V — GNU Mes RISC-V — GNU Mes: Full Source bootstrap — GNU Mes Tower — GPG Lacre project — Gash — Real time graph database search engine — Himalaya — A proof of concept of identity-based encryption — IPDL — Standardizing KEMTLS — Kazarma — Private Key Operations for Keyoxide — Keyoxide v2 — Kiwi IRC — Improve Email Encryption in KMail — ARPA2 LDAP Middleware — XMPP-ActivityPub gateway — The Libre-SOC Gigabit Router — Libre-SOC Formal Correctness Proofs — Librecast Live — Lizard — LumoSQL — LumoSQL at-rest data security — Distributed Trust for Web Servers — Monal IM — Movim — SecSync — NeoChat — neuropil — Nitrokey — Trussed — UEFI Secure Boot support for NixOS — Nyxt — Off-the-Record messaging version 4 — Improve Okular digital signature support — Opaque Sphinx Server and Clients — OpenCryptoHW — OpenCryptoLinux — DRTM implementation for AMD processors — Open MLS Infrastructure — Improving OpenSSH's Authentication and PKI — Interoperable Certificate Store for OpenPGP — Hardening OpenPGP CA deployments — Adding Web-of-Trust Support to PGPainless — Post-Quantum Crypto in DNSSEC — Statime — Prosody IM — ProveThis — rasn — RNP Confium — Reowolf — Replicant on Guix — Ripple — Robotnix — Rust Threadpool — SASL XMSS — SpinalHDL, VexRiscv, SaxonSoc — A Secret Key Store for Sequoia PGP — Adding TPM Support to Sequoia PGP — Sequoia PGP — Sequoia GPG Chameleon — Solid Wallet — Dual-level Specification Inference — Secure User Interfaces (Spritely) — Suhosin-NG — Timing-Driven Place-and-Route (TDPR)  — RETETRA — TLS-KDH mbed — Great Black Swamp — Tauri Apps — TrustING — Trustix — Noise Explorer-VerifPal — Verifpal — Verified Reowolf — XWiki — Reinstatement of crypto.signText() — imap-codec library — Katzenpost — libspng — lpnTPM — oqsprovider — Reproducible Builds — x86-64 VM Monitor for seL4 verified microkernel — Virtualizing device firmware — xqerl

• User-operated Internet Fund

  Allow users to collectively own, operate and rewrite every aspect of the technology and network infrastructure they depend on.
  Armbian — Canarytail — CeroWRT II — Telecommunication in HF using the Internet Protocol (IPoHF) — KiCad — Local Production of Antennas for LibreRouter (LoPaLiR) — LTE support in OsmoCBC (Cell Broadcast Centre) — GPRS/EGPRS support in Osmocom CNI for Ericsson RBS — Open source ePDG for VoWiFi — Pion — RADIUSdesk

• Verticals + Search

  Vertical use cases, Search, Community
  Extending PeerTube — Search and Displace