Sandstorm

Sandstorm provides a self‑hosted web platform that lets individuals and organizations run a variety of productivity applications on their own x86‑64 Linux server. It functions as a security‑hardened package manager for web apps, allowing users to install and update tools such as document editors, spreadsheets, blogs, git repositories, chat, file storage, and task managers with a few clicks, similar to installing apps on a phone. Each application runs in an isolated sandbox called a “grain,” and a unified access‑control system enforces privacy and sharing permissions by default.

The system is designed for ease of use and strong security, mitigating most common vulnerabilities through containerization and strict default privacy settings. All data and apps reside on the user’s chosen infrastructure, whether in the cloud or on‑premises, giving full control over storage location and compliance requirements. Sandstorm is open source under the Apache‑2.0 license, free to use without subscription, and maintained by a community of volunteers.