The Single-Binary Stack: 5 Self-Hosted Tools Replacing Expensive SaaS

The short answer

The best single-binary self-hosted applications right now are PocketBase (backend-as-a-service), Vaultwarden (password management), Uptime Kuma (uptime monitoring and status pages), Miniflux (RSS/feed reading), and Umami (web analytics). Each replaces a SaaS product that bills monthly, and each runs as one compiled executable with an embedded database, so there is no cluster to manage and nothing phoning home.

This is not a nostalgia trend. It is a direct reaction to SaaS pricing that scales faster than the infrastructure it monitors, secures, or measures. A startup running 30 containers can spend $20,000 a year on monitoring alone once per-host and per-metric charges stack up.¹ The single-binary generation exists because Go's embed.FS and mature embedded databases like SQLite finally made it possible to ship a full web app, including its UI and its data layer, as one file with no dependencies.¹

Why single-binary, specifically

Three things converged to make this possible: Go's ability to bake a compiled frontend directly into the binary, SQLite's write-ahead log mode handling real workloads without a separate database server, and Docker becoming so standard that tools could assume a container runtime and skip years of "works everywhere" complexity.¹ The result is software with startup times measured in seconds and memory footprints in the tens of megabytes, not hundreds.¹

That matters for cost and for audit. A single binary is something one engineer can read, diff against a checksum, and understand end to end. A SaaS product is a black box you rent, and the invoice usually reflects someone else's infrastructure complexity, not yours.

1. PocketBase — replaces Firebase or Supabase

PocketBase packs an embedded SQLite database, realtime subscriptions, file storage, user authentication, and an admin dashboard into a single Go executable.² Download the binary, run ./pocketbase serve, and you have a backend. It is MIT-licensed and has passed 60,000 GitHub stars, with 287 releases logged as of its latest version.² Reddit's self-hosting community sums up the appeal bluntly: PocketBase wins over Firebase and Supabase mainly because it is one binary, even though Firebase offers a broader built-in feature set.³

The trade-off: it is still pre-1.0, so backward compatibility across versions is not guaranteed.² For an internal tool, admin panel, or MVP backend, that is a fair exchange for skipping a $25-plus-per-month managed backend bill entirely.

2. Vaultwarden — replaces Bitwarden Teams or 1Password Business

Vaultwarden is a Rust-based, unofficial reimplementation of the Bitwarden server that speaks the same API as every official Bitwarden client.⁴ It runs as a lightweight single container, uses a fraction of the resources of the official server, and works with all existing Bitwarden apps and browser extensions.⁴

Here is where the SaaS comparison gets concrete. Bitwarden's own Teams plan runs $4 per user per month billed annually, and Enterprise runs $6 per user per month.⁵ 1Password Business runs $8.99 per user per month, or $24.95 flat for up to 10 users on the Teams Starter Pack.⁶ Run Vaultwarden yourself on a $5 VPS and a 50-person team's password manager costs the price of hosting, not $200 to $450 a month in per-seat fees.

3. Uptime Kuma — replaces Pingdom or Atlassian Statuspage

Uptime Kuma is an MIT-licensed, self-hosted monitor with unlimited monitors and a built-in status page, run entirely from a VPS or homelab box.⁷ It is consistently named the top self-hosted pick against commercial monitors like Pingdom, whose cheapest paid plan starts around $15 a month with only a 14-day trial and no free tier since the SolarWinds acquisition.⁷ Pingdom also doesn't include a public status page at all, so teams end up paying for a second tool on top.⁷

Atlassian's Statuspage, the market leader for incident communication, charges $29 a month for a bare-bones public page and jumps to $399 a month for 25 team members and 5,000 subscribers.⁸ Uptime Kuma folds monitoring and a status page into the same single-binary deployment for the cost of a VPS, commonly cited around $1 to $20 a month depending on scale.⁹

4. Miniflux — replaces a paid RSS or content-monitoring subscription

Miniflux is a minimalist, opinionated feed reader distributed as a single compiled Go binary with a Postgres backend, supporting Atom, RSS, and JSON Feed formats.¹⁰ It's about as close to "download and run" as self-hosted software gets: one binary, no bloated dependency tree, no JavaScript framework to babysit.¹¹ The official hosted version costs $15 a year, which is itself an admission that the software's real cost is nearly zero.¹⁰ Self-hosting on a $4 to $5 VPS eliminates even that.

5. Umami — replaces Google Analytics's compliance overhead and paid analytics tools

Umami is an open-source, privacy-focused analytics platform that self-hosts as a lightweight app with an embedded tracking script under 2KB.¹² Head-to-head testing against Google Analytics 4 and Plausible found Umami reported higher-quality, more complete traffic data with none of GA4's roughly 500ms page-load penalty from its tracking script.¹² Self-hosted for 30 days on a small cloud instance, Umami cost about $4.33 in hosting; the equivalent month of Plausible's official cloud plan alone starts at $9, and Umami's own Pro cloud tier starts at $9 to $20 depending on the source.¹²¹³

Because Umami and its Postgres store live entirely on infrastructure you control, there's no third-party data processor in the compliance chain, which simplifies GDPR conversations that a Google Analytics setup complicates by default.¹²

What this actually saves you

The chart below uses the smallest published SaaS tier for each category against a typical self-hosted cost (a small VPS, shared across tools, is often enough for several of these at once).

For a 20-person team running all five categories, the SaaS-only path (Bitwarden Teams, a $15 Pingdom-tier monitor, Atlassian's $29 Statuspage Hobby plan, a $9 Plausible-tier analytics plan, and a modest backend service) adds up fast per seat and per product. The self-hosted equivalents run on infrastructure most teams already pay for.

The trade-offs, honestly

Single-binary tools are not for every workload. They typically assume one host, one dataset, and modest scale. Vaultwarden's own maintainers point out that for large organizations, the official Bitwarden self-hosted server might be the safer choice.⁴ PocketBase is not yet at version 1.0, so plan for occasional breaking changes.² And every single-binary tool you self-host still needs someone to patch the OS, watch disk space, and take backups. You're not eliminating operational work. You're trading a recurring bill for a smaller, bounded, and fully visible one.

That trade is also the whole point of platforms like Remy, which exist to make owning and running this kind of self-hosted stack less of a solo chore.

FAQ

What makes an application "single-binary"? It means the entire app, server logic, embedded database, and often the frontend UI, compiles into one executable file with no separate services to install or configure. You run one command and the app is live.

Is single-binary software less capable than full SaaS platforms? Usually yes, at the edges. These tools intentionally skip features like distributed tracing, infinite data retention, or multi-region redundancy in exchange for radical simplicity.¹ For small-to-mid-size teams, that trade is usually acceptable.

Do single-binary apps still need a server? Yes. You need somewhere to run the binary, typically a small VPS or a spare machine. The point isn't zero infrastructure, it's owning that infrastructure instead of renting a vendor's.

Are these tools secure enough for business use? Vaultwarden and PocketBase are both open source, so their code is publicly auditable, which is a security advantage SaaS vendors can't match. But you are responsible for patching and access control, which a managed SaaS vendor otherwise handles for you.

Which of these is easiest to start with? Uptime Kuma and Miniflux are the simplest first projects: both are genuinely a single download-and-run experience with minimal configuration.⁷¹⁰