Sandstorm is an open source platform for personal servers.

Try the demo »
Pre-order hosting »
or
Self-host on Linux »

Join our mailing list for updates

Install server apps like EtherCalc, GitLab, Etherpad, LibreBoard, and more as easily as you'd install apps on your phone.

Principles

Usability

Sandstorm is the easiest way there has ever been to run a server. Install apps as easily as on your phone.

Sandstorm is designed from the ground up to be radically easier to use than any other server platform.

Easy to get apps: Installing an app on your server is like installing an app on your phone. Just choose the app you want from the app market and click "install". You never have to use command shells nor edit config files. You don't have to know about databases nor reverse proxies. Everything is done through your web browser, or handled automatically.

Easy to collaborate: Sharing is built into Sandstorm. You can share any app or document with anyone, whether or not they have an account. Sandstorm supports real-time collaboration apps, including document and spreadsheet editors that allow your collaborators to see what you are typing in real time.

Easy to set up: Installing Sandstorm on your own Linux machine today is as easy as running one script, and it automatically keeps itself up to date. We are working on ways to make it even easier, such as building a Sandstorm distro that can be installed on any machine or VM. We also plan to launch a hosting service where we will manage your server for you, for those who would rather have their apps "in the cloud".

Security

Sandstorm protects you from evil (or buggy) apps while making sure security never gets in the way.

Sandstorm is designed by security wonks. Where most developers don't want to think about security, we care deeply about it, and have designed the whole system to protect you.

Protection from malware: On a traditional server, installing an evil app could mean you lose everything. Under Sandstorm, each app runs in its own secure "sandbox" which starts out isolated from the world. It can't interfere with your other apps nor "phone home" to its developer until you give it permission.

Protection from bugs: Let's face it: most developers don't think enough about security, and they end up producing apps that have bugs allowing hackers to get in. Sandstorm automatically protects apps against a wide range of common vulnerabilities, and security-critical functions like login and sharing are handled by the system itself.

Protection from spying: Sandstorm apps cannot phone home, so they cannot collect data about you for advertising purposes nor perform unwanted experiments on you. Moreover, we are developing advanced per-document encryption techniques to thwart even dedicated hackers.

No protection from getting your job done: Security can often be a hassle, getting in the way of your work. Sandstorm is different. When you tell a Sandstorm app to talk to some other app, or to talk to the internet, Sandstorm sees your intent and automatically grants it access. So, you are never interrupted by a prompt asking "Do you want to allow this app to the thing you just told it to do?" And yet, the apps only get the permissions you actually wanted them to have.

Learn how Sandstorm's security works »

Freedom

Don't get locked into walled gardens. Run any app you want -- even upload your own. You call the shots.

By separating app developers from hosts, Sandstorm leaves you in control.

Freedom to Choose: Run any app you want. You are not limited to what's in the app market. Any developer can build a Sandstorm package, and you can upload any package to your server. You can even run Open Source and Indie apps from developers who don't have the funding to run their own servers.

Freedom to Customize: When you are running your own copy of an app on Sandstorm, there's nothing stopping you from customizing it to your needs, because your changes only affect you. Especially with open source apps, if you don't like the way a feature works, or wish you had a feature that's not there, you can fix it. Not a developer? Perhaps a friend can help, or at worst you can pay someone for a day of work. Compare this to big centralized web services, where you are at the mercy of the operator, who will probably ignore your requests.

Freedom to Integrate: Big centralized web providers tend to build walled gardens that lock you in. Their apps tend only to integrate with other apps from the same company. This isn't because they are evil -- usually it's because they are lazy. With Sandstorm, all your apps live under one roof and behind one login system, which makes it much easier for them to talk to each other securely. And if an app allows any other app to integrate with it, then it must allow all apps that speak the same protocol to do so, so developers can't shut each other out.

Sandstorm is for:

Individuals

Use Sandstorm to run your personal cloud. Run the apps you choose. Support open source developers. Keep all your data in one place. Avoid spying, advertising, unwanted experiments, and disappearing apps.

Why have a personal server? Lots of reasons:

  • Lots of Apps

    Use a wide variety of web apps on Sandstorm, including things that you can't find elsewhere. We have the usual e-mail, photo sharing, and collaborative document editing, but also niche apps that the big guys will never offer because they can't be monetized. Moreover, Sandstorm is the only easy way to run many great open source apps.

  • Protect your privacy

    Sandstorm apps can only talk to the outside world with your explicit permission. That means they can't secretly spy on you, develop an advertising profile from your data, or perform psych experiments on you without your consent. Plus, apps running on your server do not disappear when the developer stops supporting them.

  • Don't get locked in

    When developers run the servers, they can lock you in to their walled garden, refusing to play nice with competitors they don't like. Sandstorm puts all your apps and data under your roof, where you can mix and match apps as you please. You can even freely move between hosts and take all your apps and data with you.

Pre-order hosting » Run your own »

Developers

Building your app on Sandstorm lets you focus on your product. No need to maintain or pay for servers, carry a pager, nor even design for scalability. Just build your app and put it on the app market.

What's in it for developers? As it turns out, lots of things:

  • Focus on your Product

    Just build your app and put it in the app market. No need to maintain or pay for servers. No need to carry a pager. No need to design for scalability. Use any tech stack that runs on Linux — Node, Rails, PHP, Java, Python, whatever. It's easy to port existing code to run on Sandstorm.

  • Security is Built-in

    You don't have to implement login. You don't even have to implement sharing — Sandstorm does that for you. You can even export APIs and integrate with other apps without thinking about OAuth. Sandstorm protects you and your users from most common security problems, so you can rest easy.

  • Behind-the-firewall

    Do your corporate customers often ask to run your app on-prem, behind their firewall? Does that sound like a huge pain to support? Sandstorm makes it easy, handling packaging, deployment, and updates.

Start Hacking »

Enterprise

We are building tools that allow you to run your corporate server cluster much more easily. Treat a group of machines as a single Sandstorm instance. Reduce IT costs while vastly improving security.

Use Sandstorm to run your enterprise server cluster:

  • Easy App Deployment

    A Sandstorm app only takes a couple clicks to deploy. It's so easy and secure that non-technical employees can actually deploy the apps they need themselves, without wasting valuable IT time. Get SaaS-like ease-of-use while keeping your data on-prem and under your control.

  • Ridiculously Secure

    Sandstorm automatically compartmentalizes apps and users, preventing application bugs from leading to catastrophic security failures. Meanwhile, Sandstorm's innovative security model ensures that these protections never get in the way of people doing their jobs.

  • Cluster Management

    Sandstorm's enterprise tools will allow a cluster of machines to be treated like one big server. Just load the Sandstorm image on each machine and turn them on, and they'll self-organize. Install apps just as easily as with the personal version, as seen in our demo.

Get Early Access »

Featured in:

Team

Developers

Kenton Varda

Jade Wang

Jason Paryani

David Renshaw

Asheesh Laroia

Néna Nguyễn

Drew Fisher

Garply

  • Aspiring Parkourist
  • Chief Entropy Officer
  • Sand Cat Impersonator

Advisors

Brian Swetland

  • Android Systems Lead 2004-2012

Andrew Lutomirski

  • Linux kernel developer

Jasvir Nagra

  • Web Security Expert
  • Former Tech Lead, Caja

Mark Seaborn

Mark S. Miller

Sponsors

Corporate Sponsors

These companies contributed heavily to Sandstorm's crowdfunding campaign.

Key Individual Sponsors

These folks contributed heavily to Sandstorm's crowdfunding campaign.

Roger Wagner

Audrey Tang

  • 唐鳳

Contributors

These 675 people contributed to Sandstorm's crowdfunding campaign.