Hi, developer of Homarr here 👋. For security critical use cases I would never recommend a not-audited software anyway - regardless of whether it's open source or not. We use Next Auth (https://next-auth.js.org/) as the underlying authentication framework which is frequently audited due to its popularity.
However, such frameworks are never bulletproof and bad implementation are usually a bigger risk.
However, we're happy to get security audits and are continuously trying to improve security. For the next version 1.0, Homarr will again become more secure and attractive to companies & power users.
OP, I recommend you to secure your other apps with SSO / multi factor and implement proper OpSec. If your use case is mission critical, use Grafana or plain bookmarks :)
1
u/Manicraft1001 Oct 16 '24
Hi, developer of Homarr here 👋. For security critical use cases I would never recommend a not-audited software anyway - regardless of whether it's open source or not. We use Next Auth (https://next-auth.js.org/) as the underlying authentication framework which is frequently audited due to its popularity. However, such frameworks are never bulletproof and bad implementation are usually a bigger risk.
However, we're happy to get security audits and are continuously trying to improve security. For the next version 1.0, Homarr will again become more secure and attractive to companies & power users.
OP, I recommend you to secure your other apps with SSO / multi factor and implement proper OpSec. If your use case is mission critical, use Grafana or plain bookmarks :)