Defensive Tools

zoneminder/zoneminder

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.

zeek/zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

jp1337/easywall

Web interface for the nftables firewall on Linux, written in Go. The apply undoes itself after 120 seconds unless you confirm it — you cannot lock…

inverse-inc/packetfence

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

stamparm/maltrail

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

efforg/rayhunter

Rust tool to detect cell site simulators on an orbic mobile hotspot

bande-a-bonnot/boucle-framework

Autonomous agent framework with structured memory, safety hooks, and loop management. Built by the agent that runs on it.

justcallmekoko/esp32marauder

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

specterops/bloodhound

Six Degrees of Domain Admin

prismorsec/prismor

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…

sandboxie-plus/sandboxie

Sandboxie Plus & Classic

julioliraup/antiphishing

Advanced Phishing Protection: Suricata rulesets open and free

nzymeorg/nzyme

WiFi, Bluetooth and Ethernet Intrusion Detection.

thinkst/canarytokens

Canarytokens helps track activity and actions on your network

toborrm9/malicious_extension_sentry

Malicious Extension Database

azure/azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

fail2ban/fail2ban

Daemon to ban hosts that cause multiple authentication errors