All projects

12 repositories · updated 2026-11-07

Loading…
1wazuh / wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.C++License not declaredInsufficient rank history17,602
2SigmaHQ / sigmaMain Sigma Rule RepositoryPythonLicense not declaredInsufficient rank history11,424
3Graylog2 / graylog2-serverFree and open log managementJavaLicense not declaredInsufficient rank history8,174
4beenuar / AiSOCOpen-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.PythonMIT · PermissiveInsufficient rank history6,673
5mikeroyal / Digital-Forensics-GuideDigital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.PythonLicense not declaredInsufficient rank history3,220
6matanolabs / matanoOpen source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWSRustApache-2.0 · PermissiveInsufficient rank history1,708
7aixisstudio / SnitchAuthor description: Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.PythonAGPL-3.0 · Share derivative sourceInsufficient rank history814
8tenzir / tenzirTenzir is the data pipeline engine for security teams.C++BSD-3-Clause · PermissiveInsufficient rank history770
9TonyPhipps / MeerkatA collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.PowerShellGPL-3.0 · Share derivative sourceInsufficient rank history483
10Vigil-SOC / vigilVigil SOC: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.PythonApache-2.0 · PermissiveInsufficient rank history423
11dogoncouch / LogESPOpen Source SIEM (Security Information and Event Management system).PythonMIT · PermissiveInsufficient rank history227
12timescale / rsigmaA complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:RustMIT · PermissiveInsufficient rank history184
Ranked by repository stars, one position per repository. Stars and forks are not user counts.