Thematic index

Stichting NLnet is a recognised public benefit organisation that works towards an open and inclusive information society. NLnet recognises that the most effective way to achieve this, is through providing microgrants to talented individuals and to organisations that are aligned with its mission. An important focus of NLnet lies with research and development in the domain of network technology and the internet, in particular those that serve the end user and the long-term interests of end users.

NLnet has funded many projects throughout the years, in many different areas. In an attempt to provide a rough grouping of these projects, the following classes were defined:

• Application protocols

  Network application protocols
  0cpm — SIPproxy64/6bed4 — PSYC2 — Ambulant — Decibel — Internet of Coins — Jingle Nodes — Jitsi — Jitsi-DNSSEC — LEAP/Torbirdy — MU-Jingle — OCS-Asterisk — openMSRP — openMSRP(2) — openMSRP(3) — Parselov — PKCS#11 v3 — realXtend — SecuShare — Secushare Box — Jitsi (SIP Comm Phone) — Jitsi (SIP-Communicator) Desktop — SIP-GUI — SPEAR — Swirl — SylkRTC — Wormhole — Jabber/XMMP

• Binary Analysis Fund

  Derive knowledge from binary blobs such as firmwares
  Automated clearing of source code files — binary-analysis-ng improvements — Serialization in Kaitai Struct for Java and Python — ZIP file format description

• Community Programs

  Support for advancing research and development internet communities
  GDPR Compliance — Bits of Freedom — CAcert — CAIEC — The Commons Conservancy — Donations — FFII — FLOSS — FSF — FSF Europe — GPLv3 — HWIOS — MAPS — OpenDoc-Soc — ReX — TOS;DR

• Conferences

  Sponsored conferences and other events aiming at dissemination of internet knowledge and technology.
  Conferences — Hackathons — SANE

• Data and AI

  Data and AI
  AI-VPN — OCCRP Aleph disambiguation — Atomic Data — Conzept encyclopedia — Dat Private Network — DATALISP — Encoding for Robust Immutable Storage (ERIS) — Etebase - protocol and encryption enhancements — EteSync - iOS application — Explain — First Classify Documents — Geolexica reverse — In-document search — Practical Tools to Build the Context Web — LiberaForms — LinkedDataHub — LumoSQL — MaDada — NEFUSI — Nextcloud — OpenStreetMap Speed Limits — Personal Food Facts — PRESC Classifier Copies Package — PeerDB Search — Poliscoops — Private Searx — PyCM — SCION-Pathdiscovery — Geographic tagging of Routing and Forwarding — SES - SimplyEdit Spaces — SOLID Data Workers — SWH package manager Data Ingestion — Storing Efficiently Our Software Heritage — SensifAI — Software Heritage — Peer-to-Peer Access to Our Software Heritage — Solid Application Interoperability — Secure User Interfaces (Spritely) — StreetComplete — StreetComplete — StreetComplete UX — TypeCell — URL Frontier — variation graph (vgteam) — Independent captions and transcript augmentation — WebXray Discovery — WikiRate Insights — WikiRate Insights 2 — openEngiadina — Privacy Preserving Disease Tracking

• Decentralised solutions

  Decentralised solutions, including blockchain/distributed ledger
  Blink RELOAD — Briar — Briar Desktop — Discover and move your coins by yourself — Privacy Infrastructure for Corteza Federations — CryptPad Auth — CryptPad for communities — DeltaBot — Encoding for Robust Immutable Storage (ERIS) — Earthstar — Federated Timesheets — Fix the Pitch Black Attack in Freenet routing — GNU Taler — Layer-2-Overlay — GNUnet Messenger API — Federated software forges with Gitea — Gosling — Hyper Hyper Space — Icebreaker — Interpeer — Katzen — Private Key Operations for Keyoxide — Keyoxide v2 — LiberaForms — XMPP-ActivityPub gateway — Librecast — Librecast Live — LumoSQL at-rest data security — Distributed Trust for Web Servers — Manyverse — Manyverse Private Groups — Practical Decentralised Search and Discovery — Naisho — Namecoin: ZeroNet and Packaging — Namecoin: Core Infrastructure — NeoChat — neuropil — neuropil — Adopting the Noise Key Exchange in Tox — Nym Credentials — Off-the-Record messaging version 4 — Open MLS Infrastructure — Interoperable Certificate Store for OpenPGP — Hardening OpenPGP CA deployments — P2Pcollab — Adding Web-of-Trust Support to PGPainless — Statime — PeerDB Search — Peertube-Desktop — Extending PeerTube — peermaps — ProveThis — R5N-DHT — Ricochet Refresh — SCION-Pathdiscovery — Geographic tagging of Routing and Forwarding — SES - SimplyEdit Spaces — A Secret Key Store for Sequoia PGP — Sequoia PGP — Sequoia GPG Chameleon — Peer-to-Peer Access to Our Software Heritage — Solid-NextCloud app — Solid Control — Sonar: a modular peer-to-peer search engine — Secure User Interfaces (Spritely) — Spritely — Great Black Swamp — Trustix — TypeCell — ValOS Cryptographic Content Security project — Web Zero, with m-ld — Yrs — Yrs Undo — Quantum-Proof Zenroom — Distributed Mechanism Learning — dweb-search — elRepo.io - Resilient, distributed content sharing — libresilient — Securing Decentralised Live Information with m-ld — Minedive — node-Tor

• Deployability

  Making sure applications can be put to use in a sane, convenient way
  Nixcloud Mail — Nixcloud Webservices — Nixcloud

• Educational Programs

  Projects aiming at using Internet technology within the educational sector.
  How AdTech works — CodeYard — Democratic SendComm — Explain Direct — GO-FOSS — SchoolLan — ThinkQuest — TOS;DR — TwinSite-2000

• GetEduroam

  A modern way to manage and deploy federated wifi roaming
  Letswifi/Geteduroam

• Hardware

  Trustworthy hardware and manufacturing
  Analog/Mixed-Signal Library — Balthazar — Balthazar - One laptop for the new internet age. — Betrusted OS — Betrusted Storage — Libre-SOC Cavatools: Power ISA Simulator — LibrEDA — Zerocat Chipflasher Flashrom Interface — Chips4Makers ASICs — Supersizing the Gun — Libre-SOC, Coriolis2 ASIC Layout Collaboration — EEZ DIB — Edalize ASIC backend — EDeA — FemtoStar Project — Fobnail — Libre/OpenCores FuseSoc backend — Porting Guix to Riscv64 — YunoHost and the Internet Cube — KiKit — Kintex-nextpnr — Langsec in Pectore — Libre-SOC — The Libre-SOC Gigabit Router — LibreSilicon — Libre Silicon compiler — Port of AMDVLK/RADV 3D Driver to the Libre-SOC — Libre-SOC Formal Correctness Proofs — Libre-SOC Formal Standards Development — Libre-SOC Video Acceleration — MNT Reform — MEGA65 Phone — Mosaic — Nitrokey — Trussed — Open Know-How Search — OpenCryptoHW — OpenCryptoLinux — DRTM implementation for AMD processors — OpenQRNG — Securing PLCs via embedded protocol adapters — RISC-V Phone — SpinalHDL, VexRiscv, SaxonSoc — Simmel — Timing-Driven Place-and-Route (TDPR)  — TerosHDL — ULX3M — LIP6 VLSI Tools — video box — Wishbone Streaming — ZSipOs — betrusted — lpnTPM — pcb-rnd

• Information Retrieval

  Projects primarily related to internet information retrieval technologies.
  AGFL — AHA! — ALIAS — CPAN6 — Global Directories — Globule — LCC — Parselov — Searsia — Sesame — SIRS — ARPA2 Steamworks

• Internet Hardening Fund

  Projects funded from the Internet Hardening Fund
  Certbot ECDSA support — Improving Matrix E2E encryption UX — Namecoin: TLS — ARPA2 Steamworks — GnuTLS — DIME — GetDNS — Pretty Easy Privacy — GUN P2P Encryption — Key Management — lib25519: Secure and efficient computation of X25519 and Ed25519 — Namecoin — Faster and configurable datapath/Linux xfrm — Pitchfork — Pitchfork PKCS#11 — Modular CA — Remote PKCS#11 — SecuShare — Secushare Box — Magic Wormhole/SPAKE2 — Stubby — TLS-KDH — Vita — Nixcloud — WireGuard — WPIA CA Infrastructure

• Internet Infrastructure

  Protocols and software for managing and advancing low-level internet infrastructure
  ARPA2 — Atom-Based Routing — BIND DLZ — Bricophone — CeroWRT — CuteHIP — DNSCCM — Dowse — eduVPN app — eduVPN on Apple — eduVPN on Apple part II — eduVPN multi-protocol — eduVPN — Fairwaves — FTEproxy — GetDNS — GISS — IIDS — ISC BIND 9 — iuh-openbsc — Koruza — LOAP — Meshtool — Namecoin — nat64 — NetEventKit — nftables — Faster and configurable datapath/Linux xfrm — NLnet Labs — Nodewatcher — OpenBTS-HW — Cryptech.is — OSLD — Palea — RaptorJIT — RPKI-RTRlib — SCTP-Linux — SDR PHY — Serval — Serval-LR — SnabbWall — SocketHUB — Magic Wormhole/SPAKE2 — Stratosphere IPS — Stubby — TCP-multipath — Timesheets — TLS-KDH — Uberflow — UmTRX — WireGuard — Wisper

• Measurement

  Measurement, monitoring, analysis and abuse handling
  Supersizing the Gun — Tracking the Trackers — GoatCounter — Lightmeter — MPTCP — MobileAtlas — NoScript Contextual Policies & LAN protection — OnBaSca — Statime PTP Master — Timing-Driven Place-and-Route (TDPR)  — Trustix — WebXray Discovery — XWiki — Handling Data from IPv6 Scanning — Software vulnerability discovery — offen

• Middleware and identity

  Middleware + identity, including DNS, authorisation, authentication, distribution/deployment, operations, reputation systems
  0KNOW — Autocrypt for Thunderbird — Coko Docs — Connect by Name — Record Federation for Corteza Clouds — CryptPad Auth — CryptoLyzer — CryptPad — GNU Guix - Cuirass — Securing Internet protocols with DIDs — Distributed Private Trust — dream2nix — EGIL SCIM client — The search for ethical Apps — FOSS Code Supply Chain Assurance — GNU Name System — A proof of concept of identity-based encryption — IRMA made easy — Icebreaker — YunoHost and the Internet Cube — Keyoxide — Private Key Operations for Keyoxide — Keyoxide v2 — Improve Email Encryption in KMail — ARPA2 LDAP Middleware — Distributed Trust for Web Servers — MoboSearch — Namecoin: ZeroNet and Packaging — Namecoin: Core Infrastructure — Securing NixOS services with systemd — Nym Credentials — Opaque Sphinx — Opaque Sphinx Server and Clients — OpenPGP Certificate Authority — Improving OpenSSH's Authentication and PKI — Interoperable Certificate Store for OpenPGP — Hardening OpenPGP CA deployments — Owncast — Adding Web-of-Trust Support to PGPainless — Peppol for the masses — Privacy Enhancements for PowerDNS and DNSdist — Prosody IM — Redwax — Robur private DNS resolver and DHCP server — Rocket CWMP — SASL Works for the InternetWide Architecture — SCION-RAINS — Geographic tagging of Routing and Forwarding — A Secret Key Store for Sequoia PGP — Adding TPM Support to Sequoia PGP — Solid Application Interoperability — Solid Wallet — Dual-level Specification Inference — Statime PTP Master — TrustING — Tvix — Universal DID Resolver and Registrar — XWiki — ARPA2 resource ACL and HTTP SASL modules for NGINX — Bitmask — Distributed Mechanism Learning — imap-codec library — DNSSEC Key Signing Suite

• NGI Assure

  Projects that make security and trustworthiness easier
  0KNOW — Aerogramme — Atomic Data — Authenticated DNSSEC bootstrapping — Heads-OpenPGP — Bertie — Blink Qt Messaging — Briar Desktop — CNSPRCY — Converged Security Suite Improvements — Cable — Libre-SOC Cavatools: Power ISA Simulator — Coko Docs — Condensation Data System — Conversations 3.0 — CryptPad Auth — CryptoLyzer — Securing Internet protocols with DIDs — Anonymisation for Data Donations — DATALISP — dream2nix — Encoding for Robust Immutable Storage (ERIS) — Earthstar — Earthstar (Encryption, Safety, and Local Sync) — FOSS Code Supply Chain Assurance — Federated Task-Tracking with Live Data — Federated Timesheets — Fobnail — Full-source GNU Mes on ARM and RISC-V — GNU Mes RISC-V — GNU Mes Tower — Layer-2-Overlay — GNUnet Messenger API — Gash — Gosling — Porting Guix to Riscv64 — TPM 2.0 for HEADS — Himalaya — Hyper Hyper Space — IPDL — Interpeer SDKs — K-Gen — KDE Connect — Standardizing KEMTLS — Kaidan — Katzen — Keyoxide Mobile — Private Key Operations for Keyoxide — Keyoxide v2 — Kintex-nextpnr — Improve Krill (RPKI) BGP integration — Let's Connect! Client-Server to P2P — LiberaForms — Audio/Video Calls in Libervia — Librecast — The Libre-SOC Gigabit Router — LumoSQL at-rest data security — Maemo Leste Telepathy — Manyverse Private Groups — Mellium — Monal IM — Naisho — NeoChat — Packet classification extensions for Netfilter — neuropil — NextGraph — Securing NixOS services with systemd — UEFI Secure Boot support for NixOS — Adopting the Noise Key Exchange in Tox — Oil Shell — Oil Shell — Improve Okular digital signature support — OpenCryptoHW — OpenCryptoLinux — OpenCryptoTester — Open MLS Infrastructure — Improving OpenSSH's Authentication and PKI — Interoperable Certificate Store for OpenPGP — Hardening OpenPGP CA deployments — OpenQRNG — p2panda — Adding Web-of-Trust Support to PGPainless — Post-Quantum Crypto in DNSSEC — Statime — Peppol for the masses — Probabilistic NAT Traversal — Prosody IM — ProveThis — PyCM — R5N-DHT — rasn — Rosenpass — SES - SimplyEdit Spaces — Subliminal Messaging — A Secret Key Store for Sequoia PGP — Adding TPM Support to Sequoia PGP — Sequoia PGP — Sequoia GPG Chameleon — Signature PDF — SignRoom — smoltcp RPL — Peer-to-Peer Access to Our Software Heritage — Solid Wallet — Dual-level Specification Inference — Spritely (and OCapN) — Statime PTP Master — Great Black Swamp — Tauri Apps — Servo Webview for Tauri — TerosHDL — TrustING — Trust semantic learning and monitoring — Trustix — Tvix — TwPM — TypeCell — UEFI isolation in VM from non UEFI firmware — LIP6 VLSI Tools — Verified Reowolf — Vula — Web Zero, with m-ld — WikiRate: More Sites, More Cites — Winden/Magic Wormhole dilation — Wispwot — Yrs — Yrs Undo — Quantum-Proof Zenroom — Reinstatement of crypto.signText() — Distributed Mechanism Learning — imap-codec library — libresilient — lpnTPM — Securing Decentralised Live Information with m-ld — oqsprovider — p4-nix

• NGI Zero Discovery

  Projects enabling search and discovery
  OCCRP Aleph disambiguation — AREXERA Crawler — Babelia — Blink RELOAD — Bonfire Search & Discovery — Castopod — Castopod Mobile — Discover and move your coins by yourself — Connect by Name — Conzept encyclopedia — Record Federation for Corteza Clouds — Corteza Discovery — Privacy Infrastructure for Corteza Federations — ArtistHub — DeltaBot — Extend EFI support in BSDs — EDeA — AEAP — Email for expert news — The search for ethical Apps — FairSync — searx — First Classify Documents — Folksonomy engine for the food ecosystem — ForgeFed — Funkwhale — GNU Name System — GNU social — Tooling to improve security and trust in GNU Guix — Geolexica reverse — Federated software forges with Gitea — Real time graph database search engine — The Open Green Web — Haketilo/Hydrilla — Great scanning and OCR for mobile devices — Hubzilla — ipfs-search.com — Icebreaker — IN COMMON — In-document search — Practical Tools to Build the Context Web — Indigenous — Interpeer — Inventaire — Inventaire recommender — Irdest — Karrot — Kazarma — Keyoxide — Collabora Online and LibreOffice — lemmur — Lemmy — Lemmy — XMPP-ActivityPub gateway — LibreOffice P2P — Librecast Live — LinkedDataHub — MaDada — Mailpile Search Integration — Mangaki — Mastodon - groups, filtering, moderation — Mepo — Practical Decentralised Search and Discovery — Meta-Press.es — Meta-Press.es — Misskey — Mobilizon — MoboSearch — Mynij — NEFUSI — Namecoin: ZeroNet and Packaging — Namecoin: Core Infrastructure — neuropil — Nextcloud — Nominatim — Nyxt — Nyxt — Open Know-How Search — OSF Crawler Cooperation — OpenStreetMap Speed Limits — Offen — Omnom — Personal Food Facts — Open Hospitality Network — Openki.net — Owncast — P2Pcollab — PRESC Classifier Copies Package — The PeARS app — PeerDB Search — PeerTube — Extending PeerTube — peermaps — A Distributed Software Stack For Co-operation — PixelDroid — Pixelfed Live — Pixelfed — Plaudit — Poliscoops — PrivateRecSys — Private Searx — Re-isearch — Great OCR for SANE — SCION-RAINS — SCION-Pathdiscovery — Geographic tagging of Routing and Forwarding — SWH package manager Data Ingestion — Storing Efficiently Our Software Heritage — Adera — SEARXR — searx — Dynamic indexing for real time graph database — SensifAI — Simmel — Software Heritage — Solid Application Interoperability — Solid-NextCloud app — Solid-Search — Solid Application Interoperability — Sonar: a modular peer-to-peer search engine — sourcehut — Spritely — StreetComplete — StreetComplete — StreetComplete UX — Tantum Search — URL Frontier 2.0 — URL Frontier — variation graph (vgteam) — Web Annotation — WebXray Discovery — XWiki — WikiRate Insights — WikiRate Insights 2 — WordPress ActivityPub — XWiki ActivityPub — YaCy Grid SaaS — dweb-search — elRepo.io - Resilient, distributed content sharing — fediverse.space — fwupd — Handling Data from IPv6 Scanning — Minedive — Software vulnerability discovery — openEngiadina — Privacy Preserving Disease Tracking — Search and Displace — Free Software Vulnerability Database

• NGI Zero PET

  Projects enhancing privacy and trust of internet and related technologies
  LibreCellular — AI-VPN — Analog/Mixed-Signal Library — Accessible security — Alder Lake Desktop — Autocrypt for Thunderbird — BBBsecureChat — Balthazar — Balthazar - One laptop for the new internet age. — Betrusted OS — Betrusted software — Betrusted Storage — Briar — LibrEDA — Zerocat Chipflasher Flashrom Interface — Chips4Makers ASICs — Conversations — Libre-SOC, Coriolis2 ASIC Layout Collaboration — CryptPad: Project Dialogue — CryptPad — CryptPad for communities — GNU Guix - Cuirass — DCnets — Dat Private Network — Structuring the System Layer with Dataspaces — Dino — Distributed Private Trust — EEZ DIB — EGIL SCIM client — Edalize ASIC backend — Etebase - protocol and encryption enhancements — EteSync - iOS application — Tracking the Trackers — Fractal — Fix the Pitch Black Attack in Freenet routing — GNU Mes — GNU Mes on ARM — GNU Mes: Full Source bootstrap — GNU Taler — GPG Lacre project — GoatCounter — Implement sound support in the Hurd — A proof of concept of identity-based encryption — IMSI Pseudonymization — IRMA made easy — YunoHost and the Internet Cube — JavaScript Restrictor — JShelter — End-To-End Encryption for Jitsi Meet — Verified Differential Privacy for Julia — Kaidan — Kaidan A/V — Improve Email Encryption in KMail — ARPA2 LDAP Middleware — Liberaforms — Libre-SOC — LibreSilicon — Libre Silicon compiler — Standard Cell Library — Port of AMDVLK/RADV 3D Driver to the Libre-SOC — Libre-SOC Formal Correctness Proofs — Libre-SOC Formal Standards Development — Libre-SOC Video Acceleration — Lightmeter — Usability of Linux firewall userspace tools — LumoSQL — Luna PnR — MNT Reform — Maemo Leste — Manyverse — MEGA65 Phone — MobileAtlas — Mobile Test Farm — Mosaic — Movim — Nitrokey — NoScript Contextual Policies & LAN protection — Nym Credentials — Off-the-Record messaging version 4 — OnBaSca — Opaque Sphinx — Opaque Sphinx Server and Clients — DRTM implementation for AMD processors — OpenPGP Certificate Authority — 802.11n feature of openwifi — PGP4civiCRM — Securing PLCs via embedded protocol adapters — Privacy Enhancements for PowerDNS and DNSdist — Qubes OS — RISC-V Phone — RNP Confium — Redwax — Reowolf — Graphics acceleration on Replicant — Finish porting Replicant to newer Android version — Ricochet Refresh — Ripple — Robotnix — Rust Threadpool — SASL XMSS — SASL Works for the InternetWide Architecture — SpinalHDL, VexRiscv, SaxonSoc — SeedVault — Solid Control — Spectrum — Secure User Interfaces (Spritely) — Suhosin-NG — Sylk chat — Sylk Client — Sylk Mobile — RETETRA — TLS-KDH mbed — Padding Machines for Tor — Build Transparency (Trustix) — ULX3M — Universal DID Resolver and Registrar — ValOS Cryptographic Content Security project — Noise Explorer-VerifPal — Verifpal — VFRAME: Visual Defense Tools — video box — Video chat privacy — Free Software Vulnerability Database — Waasabi Framework — Web Shell — WireGuard — Wireguard Windows client — Wireguard Rust Implementation — Wishbone Streaming — ZSipOs — ARPA2 resource ACL and HTTP SASL modules for NGINX — betrusted — Bitmask — Katzenpost — DNSSEC Key Signing Suite — libspng — mobile-nixos — node-Tor — offen — pcb-rnd — postmarketOS — x86-64 VM Monitor for seL4 verified microkernel — Vita — Wireguard

• NGI0 Entrust

  Trustworthiness and data sovereignty
  Apicula — Automating mobile app interception with Frida — Perspectives: Making Models — Arcan-A12 — Atomic Tables — BB3-CM4 — Balthazar Casing — Bonfire federated groups — Canaille — Charon — Coloquinte — CryptPad Blueprints — DAVx⁵ — EDeA — EEZ Studio — EventFahrplan — FABulous Demo SoC — Federated software forges with Gitea — ForgeFed — Funkwhale — GNS Migration and Zone Management — Taler for local currencies. — Verilog-AMS in Gnucap — GoToSocial — Haphaestus — IC workspace — Threat intelligence sharing — JShelter Manifest V3 — Kbin — KiKit — Lemmy — Libre-SOC HPC — Libre-SOC OpenPOWER ISA WG — IndieHosters — LibreCellular — Liminix — LunaPnR Phase 2 — Makatea — MapComplete — Marginalia Search — Modular Meta-Press.es — MobileAtlas — Caster — Naja — NaxRiscv core improvements — Nitrokey 3 — Nominatim as a library — Nyxt Webextensions — Ordie — Peertube plugin livechat — PeerTube - Remote Transcoding — Pixelfed — pretalx — RAIJIN — Radio-Meshnet — pcb-rnd, sch-rnd — Rotonda Secure Extensions — SDCC — #Seppo! — Silicon verification — Solid Application Interoperability — Solid Usable App Tools Project — Stalwart Mail Server — TOS;DR OTA backend — GNU Taler wallet app for iOS — Tracking weasel — DeltaChat/WebXDC — XR Fragments — mCaptcha — vdirsyncer

• NREN

  Projects relevant to the research and higher education community
  How AdTech works — Democratic SendComm

• Network Applications

  Software application development projects based upon Internet technology.
  A-A-P — BlenderWeb — CP2PC — CUGAR — Dowse — FileSender — FreeBSD-3G — FSF Priority — JigLibJS — LogReport — Mail::Box — Meemoo — Morphle — NILO — Parrot — Proxy App — PulseAudio — Sabayon — TimeWalker — VDD — VirtNet

• Network infrastructure

  Network infrastructure incl. routing, P2P and VPN
  AI-VPN — Accessible security — CryptPad: Project Dialogue — Fix the Pitch Black Attack in Freenet routing — Layer-2-Overlay — GNUnet Messenger API — Gosling — Hypermachines: Realtime and Collaborative P2P Search — Interpeer — Verified Differential Privacy for Julia — Standardizing KEMTLS — Katzen — Librecast — LibreOffice P2P — The Libre-SOC Gigabit Router — MPTCP — Practical Decentralised Search and Discovery — Packet classification extensions for Netfilter — neuropil — Adopting the Noise Key Exchange in Tox — Nyxt — Securing PLCs via embedded protocol adapters — Statime — PeerTube — Peertube-Desktop — Privacy Enhancements for PowerDNS and DNSdist — Probabilistic NAT Traversal — R5N-DHT — Robur private DNS resolver and DHCP server — SES - SimplyEdit Spaces — smoltcp RPL — Peer-to-Peer Access to Our Software Heritage — Spritely (and OCapN) — Statime PTP Master — RETETRA — TrustING — Build Transparency (Trustix) — Waasabi Framework — WireGuard — Wireguard Windows client — Wireguard Rust Implementation — Yrs — Yrs Undo — Bitmask — dhcpcanon — Katzenpost — libresilient — Securing Decentralised Live Information with m-ld — Minedive — node-Tor — Vita — Wireguard

• OpenData

  Projects to facilitate the creation, collection and curation of free information.
  Record Federation for Corteza Clouds — Folksonomy engine for the food ecosystem — The Open Green Web — Nominatim — Personal Food Facts — Plaudit — Software Heritage — Solid-Search — StreetComplete — WebXray Discovery — Fashion Freedom — LTSP Deskop — OpenStreetMapNL — Searsia — TOS;DR — Free Software Vulnerability Database

• OpenDocument Format

  Enable future proof office documents.
  AbiCollab — AbiMacOS — AbiRDF — AbiRDF2 — Calligra-SVG — Calligra-Windows — FLOSS-manuals — Kolab-Sync — LibreDocs — Lokalize — ODF-AbiChanges — ODF-AbiChanges2 — ODF-AbiWord — ODF-changes — ODF-changes2 — ODF-compare — ODF-DocMod — ODF-KOffice — ODF-KOffice2 — ODF-KOffice3 — ODF-KOffice4 — ODF-Numbertext — ODF-Recipes — ODF-Symbian — ODF-Valid — ODF-XLIFF — ODF Autotests — OdfKit — odfsvn — OfficeShots — SIPcollab — ViewerJS — WebODF — WebODF-Dissem

• Operating Systems

  Operating Systems, firmware and virtualisation
  Accessible security — Heads-OpenPGP — Betrusted OS — Betrusted software — GNU Guix - Cuirass — Structuring the System Layer with Dataspaces — Fobnail — GNU Mes — Full-source GNU Mes on ARM and RISC-V — GNU Mes RISC-V — GNU Mes on ARM — GNU Mes: Full Source bootstrap — GNU Mes Tower — GNU Guix — Tooling to improve security and trust in GNU Guix — Gash — Genodepkgs — Porting Guix to Riscv64 — Implement sound support in the Hurd — KWin and Wayland input — Usability of Linux firewall userspace tools — Maemo Leste — Securing NixOS services with systemd — UEFI Secure Boot support for NixOS — Nominatim — Oil Shell — OpenCryptoLinux — Qubes OS — Replicant on Guix — Graphics acceleration on Replicant — Finish porting Replicant to newer Android version — Robotnix — Rocket CWMP — Storing Efficiently Our Software Heritage — SpinalHDL, VexRiscv, SaxonSoc — Adding TPM Support to Sequoia PGP — Spectrum — Trustix — Tvix — video box — Free Software Vulnerability Database — Web Shell — XWiki — ZSipOs — fwupd — mobile-nixos — Software vulnerability discovery — postmarketOS — Reproducible Builds — x86-64 VM Monitor for seL4 verified microkernel — Free Software Vulnerability Database

• Privacy and security

  Projects to understand, safeguard and/or improve privacy and security in communication.
  ELF Linking — PSYC2 — Anomos — Deep Firmware — DIFR-TSPM — DNSSEC-mail — e-Passports — FileSender — FTEproxy — Global Directories — GNUnet — GoogleSharing — GSM-Sec — HTTPS-Obs — Jitsi-FMJ — Ksplice — Ksplice2 — Lantern — LEAP/Torbirdy — Mailman-SSLS — NetAidKit — Faster and configurable datapath/Linux xfrm — NoScriptABE — NoScript-Andr — NoScript-Mob — NoScript-Mob2 — Cryptech.is — OSN-PPCP — OV-Chipkaart — Pitchfork — Qubes — RFID Guardian — RFID Guardian(2) — Samizdat — Seahorse SmartCard — Searsia — Searx — SecuShare — Online Self-defence in Ten Minutes — Shadow Internet — Magic Wormhole/SPAKE2 — Stratosphere IPS — Stubby — Tor hidden services — Tor low-bandwidth — Tracking Exposed — Trusted Boot Module — Turtle — Unhosted — Unhosted — XSSer

• Reports and studies

  Research to advance the knowledge on themes relevant to NLnet
  Assessing Cyber Security — The third mainport — NOMA

• Services + Applications

  Services + Applications (e.g. email, instant messaging, video chat, collaboration)
  AREXERA Crawler — Autocrypt for Thunderbird — BBBsecureChat — Betrusted software — Blink Qt Messaging — Blink RELOAD — Bonfire Search & Discovery — Briar — Briar Desktop — Castopod — Castopod Mobile — Discover and move your coins by yourself — Conversations — Privacy Infrastructure for Corteza Federations — ArtistHub — CryptPad Auth — CryptPad — CryptPad for communities — Redash — DeltaBot — Dino — Encoding for Robust Immutable Storage (ERIS) — AEAP — Thunderbird - native EteSync integration — FairSync — Federated Timesheets — ForgeFed — Fractal — Funkwhale — GNU social — GNU Taler — GNUnet Messenger API — GPG Lacre project — Gosling — Haketilo/Hydrilla — Hubzilla — Indigenous — Inventaire — End-To-End Encryption for Jitsi Meet — Kaidan — Katzen — Kiwi IRC — Improve Email Encryption in KMail — Collabora Online and LibreOffice — lemmur — Lemmy — Lemmy — LiberaForms — Liberaforms — XMPP-ActivityPub gateway — Librecast — LibreOffice P2P — Lightmeter — Lizard — Mailpile Search Integration — Manyverse — Manyverse Private Groups — Mastodon - groups, filtering, moderation — MeiliSearch — Misskey — Mobilizon — MoboSearch — Monal IM — Movim — Mynij — NeoChat — Nextcloud — Adopting the Noise Key Exchange in Tox — Nyxt — Nyxt — Open Know-How Search — Off-the-Record messaging version 4 — Improve Okular digital signature support — Omnom — Opaque Sphinx — Owncast — P2Pcollab — PGP4civiCRM — Peertube-Desktop — Extending PeerTube — Peppol for the masses — A Distributed Software Stack For Co-operation — PixelDroid — Pixelfed Live — Pixelfed — Prosody IM — Ricochet Refresh — SES - SimplyEdit Spaces — SensifAI — Solid-NextCloud app — Solid-Search — Solid Control — Secure User Interfaces (Spritely) — Spritely — StreetComplete UX — Sylk chat — Sylk Client — Sylk Mobile — Tantum Search — Tauri Apps — TypeCell — ValOS Cryptographic Content Security project — VFRAME: Visual Defense Tools — Video chat privacy — Waasabi Framework — Independent captions and transcript augmentation — XWiki — WordPress ActivityPub — XWiki ActivityPub — Yrs — Yrs Undo — Reinstatement of crypto.signText() — fediverse.space — Securing Decentralised Live Information with m-ld — Minedive — Search and Displace

• Software engineering

  Software engineering, protocols, interoperability, cryptography, algorithms, proofs
  0KNOW — Accessible security — Authenticated DNSSEC bootstrapping — Autocrypt for Thunderbird — Bertie — Betrusted Storage — Blink Qt Messaging — Coko Docs — CryptoLyzer — GNU Guix - Cuirass — DCnets — Securing Internet protocols with DIDs — Dat Private Network — DATALISP — Structuring the System Layer with Dataspaces — dream2nix — Encoding for Robust Immutable Storage (ERIS) — Edalize ASIC backend — FOSS Code Supply Chain Assurance — FemtoStar Project — GNU Mes — Full-source GNU Mes on ARM and RISC-V — GNU Mes RISC-V — GNU Mes: Full Source bootstrap — GNU Mes Tower — GPG Lacre project — Gash — Real time graph database search engine — Himalaya — A proof of concept of identity-based encryption — IPDL — Standardizing KEMTLS — Kazarma — Private Key Operations for Keyoxide — Keyoxide v2 — Kiwi IRC — Improve Email Encryption in KMail — ARPA2 LDAP Middleware — XMPP-ActivityPub gateway — The Libre-SOC Gigabit Router — Libre-SOC Formal Correctness Proofs — Librecast Live — Lizard — LumoSQL — LumoSQL at-rest data security — Distributed Trust for Web Servers — Monal IM — Movim — Naisho — NeoChat — neuropil — Nitrokey — Trussed — UEFI Secure Boot support for NixOS — Nyxt — Off-the-Record messaging version 4 — Improve Okular digital signature support — Opaque Sphinx Server and Clients — OpenCryptoHW — OpenCryptoLinux — DRTM implementation for AMD processors — Open MLS Infrastructure — Improving OpenSSH's Authentication and PKI — Interoperable Certificate Store for OpenPGP — Hardening OpenPGP CA deployments — Adding Web-of-Trust Support to PGPainless — Post-Quantum Crypto in DNSSEC — Statime — Prosody IM — ProveThis — rasn — RNP Confium — Reowolf — Replicant on Guix — Ripple — Robotnix — Rust Threadpool — SASL XMSS — SpinalHDL, VexRiscv, SaxonSoc — A Secret Key Store for Sequoia PGP — Adding TPM Support to Sequoia PGP — Sequoia PGP — Sequoia GPG Chameleon — Solid Wallet — Dual-level Specification Inference — Secure User Interfaces (Spritely) — Suhosin-NG — Timing-Driven Place-and-Route (TDPR)  — RETETRA — TLS-KDH mbed — Great Black Swamp — Tauri Apps — TrustING — Trustix — Noise Explorer-VerifPal — Verifpal — Verified Reowolf — XWiki — Reinstatement of crypto.signText() — imap-codec library — Katzenpost — libspng — lpnTPM — oqsprovider — Reproducible Builds — x86-64 VM Monitor for seL4 verified microkernel — Virtualizing device firmware — xqerl

• User-operated Internet Fund

  Allow users to collectively own, operate and rewrite every aspect of the technology and network infrastructure they depend on.
  Armbian — Canarytail — CeroWRT II — Telecommunication in HF using the Internet Protocol (IPoHF) — KiCad — Local Production of Antennas for LibreRouter (LoPaLiR) — LTE support in OsmoCBC (Cell Broadcast Centre) — GPRS/EGPRS support in Osmocom CNI for Ericsson RBS — Open source ePDG for VoWiFi — Pion — RADIUSdesk

• Verticals + Search

  Vertical use cases, Search, Community
  Extending PeerTube — Search and Displace