Security Operations for Open Source
Security Operations tools for Open Source: the Security Operations options most relevant when Open Source is the priority, compared side by side so you can shortlist faster. Filter by pricing or specialization. Independent and vendor-neutral: our scores and rankings are earned, never bought — sponsored placement is always labeled.
We cover 93 cybersecurity tools
FEATURED
USE CASES
Email collection point designed to trap spammers and blacklist IPs.
Open-source LLM-powered deception framework for multi-protocol honeypot services.
Open-source event-driven automation platform for IT, DevOps & security ops.
Non-profit organization supporting the advancement of open source software.
Open-source IR documentation tool for tracking findings, tasks, and timelines.
Instruments programs to trace data and control flow through parsers and binary code
Autonomous SOC agent that correlates alerts, maps threats in STIX 2.1, and acts.
Open-source canary/deception platform for detecting lateral movement on Linux networks.
Deception-based breach detection tools including honeypots & canary tokens.
Open-source nonprofit org developing honeypot tools & threat research.
HexPrism is a fast, privacy-first hex editor built for CTFs and digital forensics.
SIEM optimization software for Microsoft Sentinel with ML-based tuning
SOC platform for detecting, analyzing, and responding to network anomalies
Open-source SIEM and XDR platform for threat detection and response
Open source XDR platform for threat detection and response across IT layers
Open source Suricata-based NDR system with threat detection and analysis
Fast disassembler producing reassemblable assembly code using Datalog
Cloud-native system call and audit log analysis tool based on Wireshark
Search AI platform with vector database for logs, threat hunting, and AI apps
Distributed search and analytics engine for real-time data storage and retrieval
Searchable repository of Sigma detection rules for threat hunting and SIEM
Open source SIEM and XDR platform for real-time threat detection and response
