ClientSt0r reduces MSP operational fragmentation by combining documentation, workflow management, vault access, reporting, procurement, ticket operations, and infrastructure visibility into a unified self-hosted open-source platform.
Built for MSPs that want ownership, flexibility, and lower tool sprawl — without giving up core operational workflows. Self-hosted on your own infrastructure. No per-tech fees. MIT licensed.
ClientSt0r combines documentation, PSA, password vaulting, asset tracking, procurement, workflow automation, reporting, and client management into a unified self-hosted MSP platform.
It is designed for MSPs that want:
It is not trying to be a polished SaaS clone of ConnectWise or HaloPSA. It is trying to give MSPs who are comfortable running infrastructure a credible operational alternative to multi-vendor tool sprawl.
Version-controlled knowledge base, network diagrams, floor plans, asset-linked documentation
Tickets, SLA management, dispatch, workflows, time tracking, contracts, customer portal
AES-256-GCM encrypted vault with RBAC, breach detection, and client-segmented access
Leads, opportunities, pipeline kanban, lead scoring, commission tracking, quote conversion
Purchase orders, vendor management, distributor integrations, receiving, serial capture
Profitability by tech, contract, and project. Revenue tracking, custom dashboards, accounting integrations
Full asset inventory, IPAM, rack visualisation, QR tracking, uptime monitoring, SSL expiry
RBAC, 2FA, audit logging, GeoIP controls, Fail2ban, vulnerability scanning, breach detection
Compared against common MSP platforms based on public documentation as of May 2026. Maturity labels reflect the current state of each ClientSt0r feature — not aspirational claims.
| ClientSt0r | HaloPSA | ConnectWise | Autotask | Hudu | IT Glue | |
|---|---|---|---|---|---|---|
| Fundamentals | ||||||
| Open Source (MIT Licensed) | YES Native | NO | NO | NO | NO | NO |
| Self-Hosted Deployment | YES Native | On-Prem Avail. | On-Prem Avail. | NO | YES | NO |
| Full Data Ownership | YES Native | On-Prem Only | On-Prem Only | NO | YES | NO |
| True Isolation (dedicated infrastructure) | YES Native | On-Prem Only | On-Prem Only | NO | YES | NO |
| Per-Tech Licensing Fees | NONE | YES | YES | YES | YES | YES |
| PSA & Service Desk | ||||||
| Lightweight PSA / Service Desk | YES Native | YES | YES | YES | NO | NO |
| Ticketing & SLA Management | YES Advanced | YES | YES | YES | NO | NO |
| Workflow Automation (Rule Builder) | YES Advanced | YES | YES | YES | Limited | Limited |
| Customer Portal | YES Advanced | YES | YES | YES | Limited | Limited |
| Email-to-Ticket (IMAP) | YES Native | YES | YES | YES | NO | NO |
| Advanced Email Engine (threading, routing rules, body cleanup, anti-spam, outbound) | YES Advanced | Partial | Partial | Partial | NO | NO |
| Quotes & Customer E-Signature | YES Advanced | YES | YES | YES | NO | NO |
| Invoices & PDF Generation | YES Advanced | YES | YES | YES | NO | NO |
| Contract Management | YES Advanced | YES | YES | YES | NO | NO |
| Contract Auto-Renewal & Bundled Services | YES Basic | Partial | YES | Partial | NO | NO |
| Workflows Embedded in Tickets | YES Native | Partial | Partial | Partial | NO | NO |
| Dispatch Board | YES Advanced | YES | YES | YES | NO | NO |
| SLA-Aware Dispatch Prioritization & Burn Panel | YES Native | Partial | Partial | Partial | NO | NO |
| Recurring Tickets & Scheduled Tasks | YES Native | YES | YES | YES | NO | NO |
| CRM & Sales | ||||||
| CRM — Leads & Opportunities | YES Advanced | Partial | YES | YES | NO | NO |
| Sales Pipeline Kanban | YES Native | Partial | YES | YES | NO | NO |
| Lead Scoring & Commission Engine | YES Advanced | NO | Partial | Partial | NO | NO |
| Opportunity to Quote Conversion | YES Native | Partial | YES | YES | NO | NO |
| Procurement | ||||||
| Purchase Requisitions & Purchase Orders | YES Advanced | Partial | YES | Partial | NO | NO |
| Distributor Integrations (Ingram, Pax8, Synnex) | YES Basic | Partial | Partial | Partial | NO | NO |
| Quote to PO One-Click Conversion | YES Native | NO | Partial | NO | NO | NO |
| PO Receiving, Back-Orders & Serial Capture | YES Native | NO | Partial | NO | NO | NO |
| Vendor Management & Auto-Replenish | YES Basic | NO | Partial | Partial | NO | NO |
| Financial Reporting & BI | ||||||
| Profitability by Tech / Contract / Project | YES Advanced | Partial | Partial | Partial | NO | NO |
| Client Health Score (composite 0–100) | YES Native | NO | NO | NO | NO | NO |
| Custom Dashboards | YES Advanced | YES | YES | YES | Partial | Partial |
| Accounting Integration (QuickBooks / Xero) | YES Basic | YES | YES | YES | NO | NO |
| Revenue Leakage Detection | YES Native | NO | NO | NO | NO | NO |
| Effective Hourly Rate & Realization % | YES Native | Partial | Partial | Partial | NO | NO |
| Wallboard / TV-Mode Display | YES Advanced | Partial | Partial | Partial | NO | NO |
| Resource Management | ||||||
| Staff Skills & Certifications | YES Basic | Partial | YES | YES | NO | NO |
| Leave Requests & PTO | YES Basic | Partial | Partial | Partial | NO | NO |
| Billable Targets & Capacity Planning | YES Advanced | Partial | YES | YES | NO | NO |
| Documentation | ||||||
| Native Documentation & Knowledge Base | YES Advanced | Partial | NO | NO | YES | YES |
| Network Diagrams (Draw.io native) | YES Native | NO | NO | NO | Partial | Partial |
| Version-Controlled Knowledge Base | YES Advanced | Partial | NO | NO | YES | YES |
| Floor Plan Import (MagicPlan) | YES Advanced | NO | NO | NO | NO | NO |
| Security & Vault | ||||||
| Native Password Vault | YES Advanced | Limited | Limited | Limited | YES | YES |
| AES-256-GCM Encryption at Rest | YES Native | NO | NO | NO | Partial | Partial |
| GeoIP Blocking & Fail2ban Integration | YES Native | NO | NO | NO | NO | NO |
| HaveIBeenPwned Breach Detection | YES Native | NO | NO | NO | Partial | NO |
| Security Alert Ingestion (EDR / AV / Firewall dashboard) | YES Native | NO | NO | NO | NO | NO |
| Vault Access Rules (GeoIP / IP / CIDR / Time-of-Day) | YES Native | NO | NO | NO | NO | NO |
| Vulnerability Scanning (Snyk) | YES Advanced | External | External | External | NO | NO |
| SSL & Domain Expiry Tracking | YES Native | NO | NO | NO | YES | YES |
| Uptime Monitoring | YES Advanced | External | External | External | YES | NO |
| Assets & Infrastructure | ||||||
| Asset & Inventory Management | YES Advanced | Limited | Limited | Limited | Partial | Partial |
| IPAM / Subnet Management | YES Advanced | NO | NO | NO | YES | YES |
| Interactive Rack Visualisation | YES Advanced | NO | NO | NO | YES | YES |
| QR Asset Tracking | YES Advanced | Rare | Rare | Rare | NO | NO |
| AI & Automation | ||||||
| AI features are integrated into the platform. They are optional — not required for core operation — but are not a separate module or add-on. | ||||||
| AI — Ticket Triage & Reply Suggestions | YES Optional | Partial | Partial | Partial | Partial | Partial |
| AI — Guardrails (rate limits, vault excluded, tenant isolation) | YES Optional | NO | NO | NO | NO | NO |
| Fleet & Vehicle Management | YES Advanced | NO | NO | NO | NO | NO |
| AI — Receipt Scanning (Vision OCR) | YES Optional | NO | NO | NO | NO | NO |
| PWA / Mobile Install | YES Basic | Limited | Limited | Limited | Limited | Limited |
| Where Competitors Lead | ||||||
| Native iOS & Android App | NO Planned | YES | YES | YES | NO | NO |
| Calendar Sync (Google / Microsoft 365) | NO Planned | YES | YES | YES | NO | NO |
| Built-in RMM Agent & Endpoint Telemetry | NO Planned | NO | YES | Partial | NO | NO |
| Endpoint Remote Access | Via RMM | NO | YES | Partial | NO | NO |
| Custom Report Writer (Drag & Drop) | Partial Roadmap | YES | YES | YES | NO | NO |
| Timesheet Approval Workflows | Partial Roadmap | YES | YES | YES | NO | NO |
| Advanced Project Management (Gantt / Milestones) | Partial Roadmap | YES | YES | YES | NO | NO |
| Vendor Support Team & Response SLAs | NO | YES | YES | YES | YES | YES |
| Third-Party Marketplace / Integration Ecosystem | NO | YES | YES | YES | Limited | Limited |
| Multi-Currency Billing | NO | YES | YES | YES | NO | NO |
| SOC 2 / ISO 27001 Vendor Certification | NO | YES | YES | YES | YES | YES |
HaloPSA, ConnectWise, Autotask, Hudu, and IT Glue have maturity, support teams, ecosystems, and polish that come from years of commercial development. That is a real advantage and should not be understated.
ClientSt0r offers a different operational approach:
If your only goal is documentation and password management, Hudu or IT Glue may still be simpler operational choices for some MSPs. They are mature, focused products with strong community adoption. ClientSt0r takes a broader approach — combining documentation, PSA workflows, contracts, procurement, reporting, security tooling, and client operations inside a single open-source platform. Whether that broader scope is an advantage or added complexity depends on your team.
Mature commercial platforms have years of development behind them. ClientSt0r doesn't try to hide the gaps — this is an honest accounting of where the platform is behind, and whether it's coming.
Many MSPs operate with fragmented systems: documentation in one platform, ticketing in another, passwords somewhere else, procurement in another portal, reporting in spreadsheets, and workflow automation through third-party tools.
ClientSt0r was built to reduce operational fragmentation by combining common MSP workflows into a single open-source platform.
The goal is not to replace every enterprise platform overnight. The goal is to provide MSPs with ownership, flexibility, extensibility, and operational consolidation.
Created by a former MSP owner/operator with hands-on experience managing:
ClientSt0r is a strong choice for some MSPs and a poor choice for others. Here is an honest breakdown.
ClientSt0r emphasises practical security controls expected by infrastructure-focused MSPs. Security is treated as an operational requirement, not a marketing checkbox.
Granular role-based access control across all modules. Least-privilege by default.
Two-factor authentication enforced at login. Admin-configurable per user or globally.
Password vault encrypted at rest. Encryption keys stay on your server, not a vendor's cloud.
Login rate limiting, lockout controls, and failed-attempt tracking built in.
GeoIP-based allowlisting and blocking to reduce exposure of admin interfaces.
Timestamped audit log for all sensitive actions — user attribution, CSV export, chart views.
Breach detection against known credential exposure databases.
Dependency and CVE scanning integrated into the development and deployment pipeline.
JWT auth with per-key scope controls. API activity logged in the audit trail.
Beyond feature lists, experienced MSP owners ask different questions. Here is what ClientSt0r can honestly say.
Operational maturity matters more than marketing claims. ClientSt0r focuses on practical deployment, infrastructure visibility, security controls, operational ownership, extensibility, and transparent development.
MIT licensed. Full source code on GitHub. No obfuscated dependencies. Audit every line before deploying it in your environment.
Self-hosted means no phone-home, no usage tracking sent to a vendor, and no data leaving your infrastructure without your knowledge.
MariaDB on your server. Your backup schedule, your retention policy, your recovery plan. No vendor holds your client data.
RBAC, enforced TOTP 2FA, AES-256-GCM encryption, Fail2ban, GeoIP blocking, and full audit logging — built into the core product.
One deployment, all modules, all technicians. Costs scale with your infrastructure, not your headcount or the features you enable.
Not a generic SaaS team building to a market spec. Built by someone who ran MSP infrastructure and felt the pain of per-tech licensing firsthand.
Development happens in public. Issues, releases, and commit history are visible. No black-box update process.
REST API across all major functions. Scriptable, automatable, and integrable with existing tooling and RMM platforms.
Deploys on standard Linux infrastructure. No proprietary appliances, no Windows-only dependencies, no cloud-only requirements.
Replacing operational software is not just about features. Switching platforms is a real project — data needs to move, workflows need to transfer, and staff need to be trained. Feature parity on paper does not make migration easy.
ClientSt0r treats migration tooling as a core adoption requirement. MSPs need:
CSV import with field mapping and REST API access support scripted migrations from existing platforms. API-first design means migration tooling can be built against documented endpoints.
ClientSt0r is actively developed in public through GitHub. Like many fast-moving open-source platforms, some features are still evolving. The platform prioritises practical MSP workflows over polished marketing demos.
Bug reports, feature requests, and discussion tracked openly on GitHub Issues
Every release tagged on GitHub with changelogs. No black-box update process
Feature direction informed by community input from operators running real MSP workflows
MIT license means you can fork, modify, and contribute back — or just run your own version
ClientSt0r is a unified, self-hosted MSP operations platform that combines documentation, PSA, CRM, vault, procurement, financial reporting, security tooling, and client management into a single open-source system — designed for MSPs that want meaningful ownership and control over their tools, data, and costs, and are prepared to take on the infrastructure responsibility that comes with it.
Dedicated pages covering security, architecture, migration, deployment, and API reference.
Security architecture & controls
Live /architecture.htmlSystem architecture & components
Live /migration.htmlMigration guides & import tooling
Live /roadmap.htmlFeature roadmap & priorities
Live /deployment.htmlDeployment & configuration guide
Live /api.htmlREST API reference & examples
LiveDeploy on your own infrastructure with a straightforward Linux-based install. Web-based updates. No subscription, no telemetry, no per-tech fees.
ClientSt0r is an independent open-source project and is not affiliated with HaloPSA, ConnectWise, Kaseya, IT Glue, Hudu, Pax8, Ingram Micro, Autotask, Syncro, SuperOps, QuickBooks, Xero, or other referenced vendors. Product names are used strictly for comparison and interoperability discussion. Maturity labels reflect the author's assessment of current feature state and are subject to change as development continues.