wazuh
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
anomaly-detectionanti-botcloud-security+12
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
antropos17/aegisOS-level monitor for AI agents: observes processes, file access, and network activity on the local machine and attributes each event to an agent…
nameles-org/namelesOpen source entropy based invalid traffic detection and pre-bid filtering.
thingsboard/thingsboardOpen-source IoT Platform - Device management, data collection, processing and visualization.
online-ml/riverStreaming machine learning library for incremental learning on data streams, providing online estimators, drift and anomaly detection, pipelines,…
tracebyte8/systraceLinux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…
activecm/ritaReal Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
googlecloudplatform/professional-servicesCollection of Google Cloud solution examples and operational utilities for audit log monitoring, DLP de-identification, encryption key management,…
kreotic/sentrygridML-driven threat detection and continuous monitoring platform built for federal zero trust architectures.
unit8co/dartsA python library for user-friendly forecasting and anomaly detection on time series.
zoneminder/zoneminderZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.
roxanne_ardary/nexoraAI-driven endpoint governance platform that monitors software usage, applies deterministic policy-based risk classification, and generates structured…
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
yeasen-z/leakgaugeDetects LLM context-leakage attacks by training lightweight behavior probes on log-probabilities, with vLLM offline/server detection pipelines.
nvidia-nemo/guardrailsProgrammable guardrails for LLM chat apps: enforce input/output rails, block jailbreaks and prompt injections, detect hallucination, and mask…