// DECENTRALIZED BY DESIGN. COMPLIANT BY DEFAULT.

Own Your Infrastructure.
On Your Own Terms.

Clear, state-of-the-art blueprints to self-host your core IT services using 100% open standards. Or, let us deploy and manage the exact same stack for you. No vendor lock-in, no telemetry, no VC-backed gimmicks.

Browse the Guides (Free) Spin Up Managed Instances
The hostedoss.com Manifesto

We believe that authentication, DNS, and email should not be proprietary black boxes. Our mission is to keep the internet open by making standard-compliant, self-hosted infrastructure accessible to everyone. We are a registered non-profit. Every configuration we use is open-source, upstream-first, and publicly audited.

The Core Service Suite

Every service we support is built entirely on well-documented, universally recognized open standards. No custom APIs. No proprietary extensions.

🔐 Authentication

OpenID Connect (OIDC), SAML 2.0, WebAuthn, FIDO2, LDAP

The DIY Blueprint

Step-by-step guides for deploying Authelia or Kanidm. Secure your team's logins with hardware keys, passwordless biometrics, and clean access control policies.

Our Hosted Solution

A dedicated, single-tenant identity provider. Fully managed, backed up hourly, and ready to federate with all your internal or external web apps.

[ View Guides ] [ Deploy Hosted ]

🌐 DNS & Edge Routing

DNSSEC, DNS over TLS (DoT), DNS over HTTPS (DoH)

The DIY Blueprint

Highly optimized configurations for running NSD as an authoritative name server and Unwind or PowerDNS as secure recursive resolvers.

Our Hosted Solution

Globally distributed, high-availability anycast DNS. Low-latency query resolution managed on clean, hardened bare metal with integrated DNSSEC rotation.

[ View Guides ] [ Deploy Hosted ]

🛡️ VPN & Secure Transit

WireGuard® Protocol, Noise Protocol Framework

The DIY Blueprint

Minimum-friction peer-to-step topologies using native WireGuard. Configure kernel-space tunneling and establish secure site-to-site bridges without bloated agents.

Our Hosted Solution

Dedicated WireGuard gateway peers. Instantly generate secure configurations for your team with automated client provisioning and high-throughput transit.

[ View Guides ] [ Deploy Hosted ]

✉️ Email

SMTP, IMAP, SPF, DKIM, DMARC, ARC

The DIY Blueprint

Demystify self-hosted mail. Clean setups for mox or Postfix & Dovecot, complete with modern transport security and strict SPF/DKIM policy configurations.

Our Hosted Solution

Your own mail server on clean, warm IP addresses. Zero deliverability headaches, zero scanning of your inbox data for ads, and pure IMAP/SMTP compliance.

[ View Guides ] [ Deploy Hosted ]

💬 Real-Time Chat

Matrix Protocol, XMPP

The DIY Blueprint

Deploy decentralized, end-to-end encrypted messaging using the Matrix standard (Synapse or Dendrite). Configure secure federation to bridge with other open networks.

Our Hosted Solution

A pre-configured, private Matrix homeserver. Built-in web client interfaces, custom media storage limits, and secure end-to-end encryption by default.

[ View Guides ] [ Deploy Hosted ]

💬 Social

Mastodon

The DIY Blueprint

Deploy an instance of Mastodon, a federated social platform for communities.

Our Hosted Solution

A pre-configured, private Mastodon instance. Built-in web client interfaces, custom media storage limits, and complete administrative controls.

[ View Guides ] [ Deploy Hosted ]

Our Architectural Philosophy

We don't build walled gardens. We build doors.

The Corporate Way The HostedOSS Way
Proprietary "black box" APIs 100% standards-compliant protocols
Forced lock-in & complex data egress Plain-text configs, raw DB exports, and full ownership
Invisible background telemetry & tracking Zero analytics, zero tracking pixels, zero data mining
Venture Capital profit targets and shifting policies Non-profit, sustainable, and community-driven funding

🛠️ Upstream First

We use vanilla, unmodified open-source packages. When we fix a bug, optimize a config, or patch a security vulnerability, we submit our changes directly to the upstream projects.

📦 Total Portability

Should you decide to migrate away from our hosted solutions, we provide a Single-Click Infrastructure Export. You receive your raw database dumps, cryptographic keys, and clean configuration files.

🔒 Auditable Security

No "security through obscurity." Our infrastructure playbooks, deployment configurations, and automated setups are completely open to inspection on our public repository.

Transparent, Flat-Rate Pricing

We believe in predictable costs. No hidden API usage limits, no charges per DNS query, and no dynamic bandwidth scaling traps.

Free Forever (DIY)

Perfect for self-hosters and internal lab environments.

$0 / month
  • Access to all security-hardened templates
  • Step-by-step setup playbooks
  • Community discussion boards
  • Public Git repositories
Get Blueprints

Standard Node

Great for small teams or individuals looking for solid core IT.

$25 / month
  • Any combination of up to 3 hosted services
  • Fully managed security updates
  • Daily encrypted, off-site backups
  • Standard email support
Deploy Now

Dedicated Stack

Fully isolated hardware instances for growing organizations.

$75 / month
  • All 6 services deployed on dedicated VM
  • Optional High-Availability failover nodes
  • Priority SLA with direct developer contact
  • Custom domain mapping & dedicated IP addresses
Deploy Dedicated