Updates, thinking, and the occasional war story from building Weavestream in the open.
Weavestream ships an installable PWA at /m with full password reveal, asset capture, cross-org search, and AI article edits — a self-hosted mobile app for MSP field technicians with no separate deployment and no data stored on the device.
Weavestream supports zero-downtime rotation for both JWT signing keys and password encryption keys, with envelope encryption and a bulk re-encrypt CLI — key hygiene for a self-hosted MSP credential vault without a maintenance window.
Weavestream's Breeze integration reconstructs durable, non-secret facts from your PSA into native asset, IPAM, and article records — using least-privilege read scopes, SSRF-hardened requests, and a dossier that stays usable even when Breeze is offline.
Weavestream lets you link passwords directly to the assets and articles they belong to — bidirectionally, with file attachments included — so a credential is never just a name and a secret sitting in isolation.
Weavestream's built-in alert system emails your team when certificates expire, sites go down, passwords need rotating, or records change — no separate monitoring tool, no per-seat notification fees.
Strong passwords and forced MFA protect accounts — IP access rules protect the front door itself. How Weavestream's built-in IP allowlist and denylist keep your self-hosted IT documentation platform reachable only from networks you trust.
Weavestream generates credentials locally with no network calls, pairs them with a real-time zxcvbn strength meter, and lets admins set workspace-wide defaults — a self-hosted password generator built for MSPs, not browser extensions.
Weavestream ships in-app scheduled PostgreSQL backups, checksummed manifests, and a tested restore path for self-hosted MSP disaster recovery — no third-party vendor holding your only copy.
Weavestream's Security Center gives MSPs a real-time view of login activity, active sessions, account lockouts, and blocked outbound requests — a self-hosted security dashboard for the platform holding your client credentials.
Weavestream keeps an immutable, unwipeable record of every change made to every credential — previous values, actor, and timestamp — giving MSPs the rotation evidence auditors and insurers actually ask for.
Weavestream's Action1 integration pulls Windows endpoint data — hostname, OS build, agent status, hardware — straight into client asset records, so your self-hosted IT documentation never falls behind your RMM.
Weavestream's NinjaOne integration pulls agent devices, network gear, and VMs from your RMM directly into client asset records — so your IT documentation reflects reality instead of whatever was typed in six months ago.
Many client portals hide sensitive data in the UI while still sending it to the browser. Weavestream strips non-visible fields on the server — so what a client can't see, their browser never receives.
Weavestream's built-in breach detection flags compromised credentials the moment they're saved — using a k-anonymity lookup that never sends the actual password to any external service.
Duplicate IPs cause some of the hardest network problems to diagnose. Weavestream's IPAM auto-discovers occupied addresses from your asset records, flags conflicts automatically, and shows you exactly which addresses are free — no spreadsheet required.
Most MSP documentation has accurate servers and stale network gear. Weavestream's UniFi integration syncs switches, gateways, and access points from your controller straight into client asset records — no manual entry.
Enterprise PAM tools cost a fortune. Weavestream's per-password access controls — reason-to-view prompts, user whitelists, and a tamper-resistant reveal audit trail — give MSPs the oversight they actually need without the price tag.
Weavestream's custom asset layouts let MSPs define exactly what fields matter for each type of infrastructure — servers, switches, licenses, or anything else — and reuse those schemas across every client.
MSPs running Cloudflare Zero Trust across multiple clients need a reliable source of truth for Gateway IP lists. Weavestream's Cloudflare integration keeps those lists in sync — and automatically corrects any out-of-band edits.
Client offboarding is one of the messiest moments in MSP operations. Weavestream's password vault PDF export generates a complete, server-side credential document in seconds — useful for handovers, audits, and offline archival.
Weavestream's expiration dashboard surfaces warranty deadlines, software license renewals, and password expirations across all your clients in one colour-coded view — without spreadsheets.
Most MSPs have no good answer for where to store TOTP secrets for client accounts. Weavestream encrypts them alongside the password, generates live OTP codes in-app, and tracks every access.
Weavestream's starred items feature lets each MSP technician bookmark the companies, assets, passwords, and articles they access most — with instant access from the sidebar and dashboard.
Weavestream's documentation system gives each client a searchable knowledge base with nested folders, a per-article choice between a rich-text editor and raw Markdown, client portal visibility controls, and AI-assisted editing.
Weavestream's Company module is the top-level container for all client data — assets, passwords, articles, files, and more — with hierarchy support, sticky alerts, and terminology you can rename to match how your team already talks.
Weavestream stores network diagrams, rack photos, scripts, and any other client file directly on your own infrastructure — never in a third-party cloud.
Weavestream's PostgreSQL-backed full-text search and command palette let MSPs find any asset, article, or file instantly — without leaving the keyboard.
Weavestream enforces TOTP MFA for every account with no bypass, pairs it with a three-axis RBAC model, and adds contractor expiry for third-party access — all without a separate identity provider.
Weavestream keeps an append-only, tamper-resistant audit log of every change in your IT documentation platform — so you always know who did what, when, and from where.
Every MSP knows the pain of stale asset records. Weavestream's built-in integrations sync your RMM and network tools directly into your documentation — automatically.
Weavestream has a built-in AI chat panel that works with any OpenAI-compatible model — including self-hosted ones. Here's how it turns your IT documentation into a conversation.
Most MSP client portals are SaaS add-ons with per-seat fees. Here's how to run a self-hosted client portal inside your IT documentation platform — for free.
MSP documentation vendor lock-in costs real money. Here's why self-hosted, open-source IT documentation is the only reliable exit — and what to look for.
Small IT teams don't need enterprise bloat or per-seat fees. Here's how open source self-hosted IT documentation software actually works for 1–5 person IT departments.
Looking for a self-hosted Passportal alternative? Here's why MSPs replace N-able Passportal with an integrated, open-source documentation and credential vault platform.
Most MSPs run Snipe-IT alongside their documentation platform and credential vault. Here's why siloed asset management creates drift — and what an integrated approach looks like.
Most MSPs run a separate tool just to track SSL certificates and domain expiry. Here's why that monitoring belongs inside your self-hosted IT documentation platform.
Most MSPs pay for IT documentation and a separate password manager. Here's why your client credential vault should live inside your documentation platform — and how to do it for free.
Most MSPs run phpIPAM or NetBox separately from everything else. Here's why IP address management belongs inside your IT documentation platform — free and self-hosted.
Most homelabs run five separate apps for documentation, IPAM, passwords, assets, and SSL monitoring. Here's why one self-hosted tool covers all of it — for free.
An honest comparison of IT Glue and Weavestream — the open-source, self-hosted IT documentation platform — for MSPs, small teams, and homelabs.
An honest comparison of Hudu and Weavestream — the open-source, self-hosted IT documentation platform — for MSPs, small teams, and homelabs.
After years of paying for IT Glue and watching the bill climb every renewal, I decided to build something I actually owned.
