
goaccess
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…

Benchmark code and interactive results for autonomous network-attack detection by tool-using LLM agents investigating raw PCAPs.

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.


Real-time system monitoring tool for detecting process activity and network exposure!

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity

NOVA - Claude Code Protection System against prompt injection attacks

Deep Learning models for network traffic classification

Production-grade tool for detecting & remediating CVE-2026-0622 (Ghost Admin privilege escalation & master key exposure in 5G core software).

Small tool to play with IOCs caused by Imageload events

Open-source blue team tool that protects Linux and Windows systems using multiple host and network defense and detection methods.

A network packet forensics tool for SSH

Basic log analysis tool to detect impossible travel via IP address geographic information

A tool for malicious behavior detection in IoT devices

Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.