Sandstorm is a secure open source server
you can run on-prem.

Why use Sandstorm?

Your employees deserve flexible online collaboration tools. You deserve the peace of mind that comes from owning your data. Apps installed on Sandstorm are secure by design.

• On-prem deployment

  Run Sandstorm on hardware that you control. When you put your data in an app's "cloud," you are trusting other companies with your security. Some have great security teams, but some don't, and it's hard to tell from the outside. Sandstorm lets you keep your data in-house, behind your firewall, where you are in control — but without the usual hassle of maintaining your own infrastructure. Read more about Sandstorm features.

• Fine-grained isolation

  Sandstorm isolates every document in its own secure container. That means that most security bugs in apps don't matter, because only people who already had access to a document can attack it. Serious security bugs are mitigated when an app runs on Sandstorm. To date, Sandstorm's approach wholly or partially mitigated 95% of publicly disclosed security vulnerabilities we've examined in apps that run on it — and countless bugs that haven't been discovered yet.

Learn more about Sandstorm's security model.

Keep your corporate network under control

In 2013, Target was hacked when someone exposed an internal project management app to an external contractor. It cost them a billion dollars.

If you have technical staff, then your internal network is probably full of little services that they have set up. Build bots. Code review tools. Paste bins. Monitoring. Chat rooms. Project management. Git repos. Automations. Maybe someone even set up an app to rate cafeteria food.

This is a security liability. If the only thing standing between your internal apps and the world is your corporate firewall, then one hole in that firewall is all it takes for hackers to get in and spread across the network.

Sandstorm protects you. Fine-grained isolation neutralizes security bugs in apps and prevents attacks from spreading. Plus, IT can audit everything that is running and can see which apps are talking to which others.

Sandstorm also saves time. On a typical corp network today, an engineer or sys admin may spend hours deploying each app, or weeks waiting for IT to do it for them. On Sandstorm, it takes one click, and there's no need for IT to review each deployment, because Sandstorm gives IT the tools to stay in control. Plus, developing for Sandstorm is actually less work for developers, because Sandstorm handles the boilerplate of authentication, access control, and more.

Switch to self-hosted

Running your own Sandstorm server enables you to stay productive and have the security you need by switching to locally hosted alternatives to popular business web apps.

• Chat

  Rocket.Chat is a chat alternative to Slack that runs on-prem. Host your chatrooms and communicate with colleagues, share files, preview links, and more.

  Try Rocket.Chat

• To-do boards

  Wekan is a to-do board alternative to Trello that runs on-prem. Create and maintain to-do lists, plan your projects, and collaborate with your team.

  Try Wekan

• File storage

  Davros is a file storage alternative to Dropbox that runs on-prem. Upload and store your files privately while syncing across devices.

  Try Davros

See our other great apps in our App Market.

All product names and logos are the trademarks/service marks or registered trademarks/service marks of their respective owners.