
goaccess
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

Open-source EDR for AI agents. Monitor processes, files, network, and behavior of autonomous AI agents.

AI-driven endpoint governance platform that monitors software usage, applies deterministic policy-based risk classification, and generates structured…

Sigma detection rules for AI agent security monitoring

A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral…

Asymmetric defense against adversarial AI agents. VeilGate evaluates each incoming request, redirects suspected agents into a per-IP-consistent…

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

Detects phi-structured C2 beacons that evade RITA and standard regularity-based detectors

Streamlit-based insider threat detection prototype using XGBoost and Isolation Forest to analyze employee activity data, generate risk summaries, and…

Forensic intelligence platform that analyzes files, correlates threat indicators, maps behavior to MITRE ATT&CK, and generates actionable security…

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity

Monitor large transactions on Polymarket and Kalshi prediction markets with anomaly detection

Zeek package for tracking long connections to report them before they have completed.

Runtime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

Automated cloud security auditing tool that detects AK/SK credential misuse by periodically auditing cloud platform logs using anomaly detection,…

Fingerprint SSH clients and servers.