{"securityAudit":null,"logoUrl":"/logos/ollama.png","id":"ollama","slug":"ollama","name":"Ollama","summary":"Runs AI models privately on your own computer, so your data stays in your office.","type":"free_oss","hasFreePlan":false,"license":{"spdx":"MIT","type":"permissive","needsReview":false},"trust":{"status":"caution","reasons":["Two 2026 vulnerabilities have no vendor-confirmed fix. Keep it on localhost and never expose it to the internet."]},"pricing":{"model":"free","basePrice":0,"perSeat":null,"perLocation":null,"estHostingMonthly":0,"label":"$0"},"setupEffort":null,"setupLevel":"tech_helper","aiMaturity":"ga","worksWith":[],"problemIds":["accounting-4","health-practices-4"],"rating":null,"securityAudits":[],"url":"https://ollama.com","aiCapabilities":"Runs open models (Llama, Gemma, Qwen, DeepSeek, Mistral, etc.) fully on your own hardware. Exposes an OpenAI-compatible API, so other tools can use it instead of a paid cloud AI key.","byoAiKey":false,"priceNotes":"Free license. Hosting estimate: $0 (runs on a PC you own; a 16 GB+ RAM machine or a GPU helps)","pricingSourceUrl":null,"priceCheckedAt":"2026-11-05","complianceFlags":[],"affiliate":false,"oss":{"repoUrl":"https://github.com/ollama/ollama","licenseSpdx":"MIT","licenseType":"permissive","licenseReview":"auto","copyleftNote":null,"openCoreNote":"The runtime is MIT. Ollama also sells optional cloud model access (Pro $20/mo, Max $100/mo, Team $500/mo). That is not needed to run models locally for free.","stars":186021,"lastReleaseAt":"2026-11-03","latestReleaseTag":null,"backing":"Company-backed (Ollama Inc.). Extremely active: v0.40.14 on 2026-11-03.","hostedOptions":"Runs on your own Mac, Windows or Linux PC or office server (one-click installer). No hosting needed. Optional paid Ollama Cloud models.","securityNote":"No GitHub repo advisories, but 2026 CVEs exist. CVE-2026-7482 (critical, GGUF loader heap read) is fixed in 0.17.1. CVE-2026-5757 'Bleeding Llama' (unauthenticated heap leak via the quantization engine) and CVE-2026-42248 (Windows auto-updater skips signature checks, reported up to 0.17.5) have no vendor-confirmed fix version that we could find. Mitigation: run the latest version, keep the API on localhost (the default, port 11434), and never expose it to the internet."},"trustChecks":[{"key":"admin_verified","label":"Admin-verified listing","pass":true,"note":"Reviewed by the Catervas team: links and prices checked Nov 5, 2026","checkedAt":"2026-11-05"},{"key":"license","label":"License verified","pass":true,"note":"MIT is on the license allow-list","evidenceUrl":"https://github.com/ollama/ollama","checkedAt":"2026-11-05"},{"key":"maintenance","label":"Active maintenance","pass":true,"note":"Last release or commit 2026-11-03","evidenceUrl":"https://github.com/ollama/ollama","checkedAt":"2026-11-05"},{"key":"security","label":"No open critical security advisories","pass":false,"note":"Two 2026 vulnerabilities have no vendor-confirmed fix. Keep it on localhost and never expose it to the internet.","evidenceUrl":"https://github.com/ollama/ollama/security","checkedAt":"2026-11-05"},{"key":"privacy","label":"Privacy and data policy","pass":true,"note":"Self-hosted: your data stays on your own hosting.","checkedAt":"2026-11-05"},{"key":"backing","label":"Company or foundation backing","pass":true,"note":"Company-backed (Ollama Inc.). Extremely active: v0.40.14 on 2026-11-03.","evidenceUrl":"https://github.com/ollama/ollama","checkedAt":"2026-11-05"}],"problems":[{"id":"accounting-4","industryId":"accounting","rank":4,"title":"Data security, WISP rules and phishing risk","summary":"The IRS says tax pros must have a Written Information Security Plan, and the FTC requires multi-factor authentication. Phishing scams target tax pros every season.","theme":"data-security","strength":1,"howItHelps":"Keeps client and patient data in the office. A tech helper installs it once on an office PC and points AnythingLLM (document Q&A) or Phlox (AI scribe) at it. Nothing is sent to OpenAI or another cloud, which simplifies WISP and HIPAA data-handling questions."},{"id":"health-practices-4","industryId":"health-practices","rank":4,"title":"Charting overload and after-hours notes","summary":"Clinicians spend many hours a week on notes instead of patients, often at night. Documentation load is a major cause of burnout.","theme":"admin-paperwork","strength":1,"howItHelps":"Keeps client and patient data in the office. A tech helper installs it once on an office PC and points AnythingLLM (document Q&A) or Phlox (AI scribe) at it. Nothing is sent to OpenAI or another cloud, which simplifies WISP and HIPAA data-handling questions."}],"integrations":[],"setupGuide":null,"reviews":[]}