Sandstorm is a self-hostable web productivity suite implemented as a security-hardened web app package manager.
Sandstorm addresses the friction of self-hosting by packaging web applications with built-in security isolation, allowing users to install productivity tools—documents, spreadsheets, blogs, git repositories, task lists, and others—as simply as installing apps on a phone. The platform runs on x86-64 Linux systems and uses security hardening techniques including seccomp to isolate apps from one another and the host system, reducing the attack surface of running untrusted or third-party code on a personal server.
Sandstorm suits individuals and small organizations wanting to self-host productivity applications without managing complex server infrastructure or worrying extensively about security isolation between apps. It works best for users comfortable with Linux system administration who want the convenience of a curated app ecosystem without relying on cloud providers. The project is open source and includes documentation for both end users and developers packaging applications for the platform.
The project maintains active engagement with its community through a discussion group and contribution guidelines. Development is actively sponsored, indicating ongoing resource commitment to the platform's maintenance and evolution.
