Clinical lab software
your lab actually owns.
The complete software for small and mid-size diagnostic labs — from sample to audit-proof report. Its audit trail is built around ISO 15189, your patient data stays in-house — and without the six-figure license fees of the big vendors.
Not ready to talk yet? See how a project runs
Everything your lab needs day to day — in one system.
From sample intake to the released report, openSylab guides your whole lab day — securely documented and auditable at any time. Six reasons it stands apart from interchangeable software.
Every step provably logged
Every change to samples, orders and results is recorded automatically and tamper-proof. You walk into every ISO 15189 audit with complete evidence — no last-minute paperwork.
Talks to your existing systems
Results and orders flow directly between openSylab, your hospital information system and practice software — over the established HL7 and FHIR standards, with no costly middleware server.
Your data stays in-house
No US cloud, no lock-in to a single vendor. Patient data never leaves your premises — GDPR-compliant by design. And the software is yours: permanently and free of charge.
Runs on inexpensive hardware
No expensive database server, no dedicated IT team required. openSylab runs lean — even on a small machine right in the lab. A backup is simply: copy one file.
Protection for sensitive data
Modern encryption, two-factor sign-in and finely graded access rights ensure only authorised people see what they're allowed to — traceable down to the single action.
Built for everyday lab work
A clear, calm interface your team can actually work fast in — no gimmicks, just the figures and status cues that matter on the lab floor.
This is your lab day in openSylab.
Real screens from openSylab — overview, samples, orders, results with automatic flagging of abnormal values, and the complete audit log.






Security you can actually prove.
In healthcare, data protection isn't an add-on. Every safeguard is clearly named and independently verifiable — no “military-grade encryption” marketing. The technical detail below is there for your IT team and your auditors.
Passwords stored safely
Encrypted to current best practice — access stays protected even in the event of a breach. PBKDF2 · OWASP
Two-factor login
An extra code from an authenticator app — compatible with common apps like Google Authenticator.
Graded access rights
From administrator down to read-only — each person sees only what they're allowed to.
Tamper-proof log
Each entry is cryptographically chained to the previous one — any later tampering is immediately obvious.
Encrypted connection
Protection against automated attacks and end-to-end TLS encryption in operation.
$ OPENSYLAB_JWT_SECRET="$(openssl rand -hex 32)" \
OPENSYLAB_AUDIT_HMAC_KEY="$(openssl rand -hex 32)" \
./build/bin/OpenSylab --api --api-port 9443 \
--tls-cert /etc/ssl/lims.crt \
--tls-key /etc/ssl/lims.key --force-https
[info] migrations: 12 applied, checksum OK
[info] audit hash-chain: verified ✓
[info] TLS 1.3 · RBAC enforced · rate-limit on
[info] listening on :9443 · status ok · v1.0.0
$ curl -s /api/v1/health
{"status":"ok","version":"1.0.0"}▍
Clinical compliance without the enterprise invoice.
Established systems like LabWare or STARLIMS start around USD 100,000 per year. openSylab ships the compliance core that matters, open source.
What openSylab is — and what it isn't.
Trust comes from clarity, not promises. So we're upfront about what openSylab is built for — and where its limits are.
Your digital lab backbone
- Managing samples, orders, results and a complete audit trail.
- A tool that supports your ISO 15189 documentation.
- Self-hosted data infrastructure — fully under your control.
Clear limits, named openly
- Not an in-vitro diagnostic or medical device under the IVDR (EU) 2017/746.
- Not a replacement for the operator's validation and accreditation duties.
- Not designed for very high-throughput labs with many simultaneous writes.
v1.0.0 — first stable release. The core — samples, orders, results, audit trail, HL7/FHIR and access control — is production-ready, covered by 290+ automated tests (backend, frontend, end-to-end) and continuously checked in a CI pipeline. We accompany the move into production with hardening and validation — you don't go live alone. Regulatory responsibility for validation, accreditation and the diagnostic report stays with the lab operator; we support these processes but don't replace them.
Software from people who take lab IT seriously.
AurevionSec is [your name / your team] from Germany. openSylab grew from one simple conviction: a lab should own, understand and control the software it works with every day — instead of being tied to a vendor and its price list for years.
A direct line to the developer
No call centre, no ticket limbo. You talk to the person who writes the code.
Open source as a promise
No lock-in. The code is open — even without us you keep full control.
Focus over feature sprawl
We build what labs actually need — and say no to the rest.
"Your patient data belongs to you. Your software should, too."
The software is open source. We handle the rollout.
openSylab is yours — but getting a LIMS into validated, secure production is engineering work. That's exactly what we deliver: rollout, custom development and dependable support.
Rollout & deployment
From the first workshop to a production go-live in your infrastructure — cleanly installed, hardened and validated.
- Requirements workshop & architecture
- Secure installation on your premises
- Migration of your data from the old system
- Training for your team
Customizing & plugins
Your lab isn't off-the-shelf. We adapt workflows, fields and interfaces — or build plugins precisely to your needs.
- Connecting your lab instruments
- Interfaces to your HIS & practice software
- Patient reports in your own layout
- Paid premium plugins
Support & SLA contracts
A lab never stands still. We guarantee response times, security updates and a single named contact.
- Guaranteed response times
- Security & version updates
- Health monitoring & backups
- Audit support for accreditation
From the first question to live operation.
Four clear phases — no months of sales theatre. After the first call you already know where you stand.
Intro & analysis
A free first call and assessment: instruments, sample volume, interfaces, requirements. Outcome: an honest feasibility view and a concrete quote.
No obligationPilot & tailoring
Install in a test environment, customizing, connecting your instruments and systems, migrating a real data sample. You see openSylab with your own data.
2–6 weeksValidation & go-live
Hardening, validation documentation for ISO 15189, training for your team and a controlled production start — accompanied, not overnight.
GuidedOperation & evolution
An SLA with guaranteed response times, updates, monitoring, a named contact — and new features when you need them.
OngoingPremium plugins for real-world labs.
The core stays MIT-licensed and free. On top, we offer vetted paid extensions — as a license or bundled in a maintenance contract. A selection:
HL7 Connector Pro
Live, two-way link to your HIS — orders in, results out, fully automated.
Plugin · LizenzInstrument Bridge
Ready-made links for common lab instruments — readings land in the system automatically.
Plugin · LizenzReport Studio
Accreditation-ready reports with your letterhead, signature & QR verification.
Plugin · LizenzInsights & metrics
Turnaround times, utilisation and quality control at a glance.
Plugin · LizenzBackup & resilience
Automatic, encrypted backups and fast recovery in an emergency.
Plugin · SLASingle sign-on
Sign in with your existing company login (e.g. Active Directory) — central user management included.
Plugin · LizenzWhat lab managers ask first.
No answer that fits? Ask us directly — we reply honestly, not in marketing speak.
Ask a questionIs openSylab a medical device or IVD?
No. openSylab is a laboratory information and data-management system. It is not an in-vitro diagnostic or a medical device under the IVDR (EU) 2017/746. Diagnostic and regulatory responsibility stays with the lab operator — we support validation and documentation.
What if AurevionSec ceases to exist?
You lose nothing. openSylab is MIT-licensed, the full source is open on GitHub, and your data sits in an open file on your side. Any competent provider can take over operation — unlike proprietary software, there's no lock-in.
Is openSylab ready for production?
Yes. Version 1.0.0 is the first stable release — the core is production-ready and covered by 290+ automated tests (backend, frontend and end-to-end) running continuously in a CI pipeline. We accompany production use with rollout, hardening and validation. Changelog and roadmap are public on GitHub.
How does our data move from the old system?
Via CSV and HL7 import. As part of rollout we handle the migration of your master data and verify it against a real data sample before going live.
What about data protection and liability?
openSylab runs on your own infrastructure — patient data never leaves your premises, which greatly simplifies GDPR compliance. Legal responsibility for lab operation stays with you; we provide the technical basis (encryption, access control, audit trail) and support documentation.
Which labs is openSylab for?
For small and mid-size diagnostic labs — human, veterinary or environmental — that need clinical compliance but don't want six-figure enterprise licenses. Not ideal for high-throughput environments with very many simultaneous writes.
What does it all cost?
The software itself is free (MIT license). You pay for our services: rollout as a fixed-price or time-and-materials project, optional premium plugins as a license, and support/SLA on an annual contract. You get a concrete quote after the free first call.
Can we try it ourselves first?
Yes. openSylab is open on GitHub — you or your IT team can self-host and test it. If you like, we'll set up a pilot with your data.
Let's get your lab running on openSylab.
Tell us about your setup. We'll come back with an honest assessment — no sales fluff.
Reach us directly
AurevionSec — builders & operators of openSylab. Typical reply within one business day.
Placeholder contact details — replace before publishing.
