Topic
Software that organisations deploy and run on their own infrastructure rather than as a vendor-managed service, leaving patching to the operator.
Atlassian disclosed CVE-2026-21589, a 9.3-rated unauthenticated file-read flaw affecting all eight of its self-hosted Data Center products. A public proof of concept drew exploitation attempts within two hours of landing on 7 October.
Reality
Keyorix SL released an open-source secrets manager that runs as one binary on a company's own servers with no internet connection. Air-gapped and NIS2- or DORA-bound teams get a self-hosted option, described so far mainly by its maker.
Reality
Stave flagged 47 security findings in the documented AWS defaults of Mastodon, Discourse and Chatwoot, according to a dev.to post. None of the three configures bucket encryption, access logging or Public Access Block, so whoever creates the bucket has to add them.
Reality
TimeTracker, a self-hosted invoicing app, meets Belgium's 2026 Peppol mandate by POSTing UBL invoices to a bridge that forwards them to certified Access Points. The self-hosted app handles a small HTTP contract and a provider account, and the certified provider handles signatures and receipts.
Reality
Large-scale DDoS attacks took the Swiss encrypted messenger offline on Tuesday evening and again Wednesday morning. Customers on Threema On-Prem, running their own infrastructure, saw nothing.
Perspective Coverage
3 publishersReality
In this self-hosted pipeline, secret scans and a three-day minimum age on new npm packages run with no model call, and a branch reaches GitHub only after a human clicks approve in the dashboard. The author calls it a developer preview.
Reality
The OpenAI bill it displaced was about EUR 10 a month. Paying that back takes a second set of calibration values, and the only comparison actually benchmarked in the writeup is embeddings.
Reality