Open Source SaaS Alternatives, Self-Hosted Software & COSS Benchmarks

90 projects

Security Operations & Threat DetectionCommercial competitors →Market trends →Hero & design styles →

Open-source projects · GitHub Stars
Project	Tagline	License & Stack	Stars	Visits	Commercial
Fail2Banfail2ban/fail2banFail2Ban: ban hosts that cause multiple authentication errors	Fail2Ban: ban hosts that cause multiple authentication errors	Fair-code	19K	—	—
CrowdSecCOSScrowdsecurity/crowdsecKnow the IPs attacking you before they reach your network	Know the IPs attacking you before they reach your network	MIT	15.6K	184.6K	$49/mo
GraylogMCPGraylog2/graylog2-serverSIEM and Log Management for the AI Era.	SIEM and Log Management for the AI Era.	Fair-code	8,176	—	$1,250/mo
ClamAVCisco-Talos/clamavThe latest stable release is version 1.5.4.	The latest stable release is version 1.5.4.	GPL	7,543	106.7K	—
ZoneMinderZoneMinder/zoneminderWhat people are using ZoneMinder for	What people are using ZoneMinder for	GPL	5,988	—	—
Maigret AICOSSsoxoj/maigretMaigret Space - Managed Username OSINT Workspaces Built on Maigret	Maigret Space - Managed Username OSINT Workspaces Built on Maigret	MIT	5,398	<5K	$49/mo
OPNsenseopnsense/coreOPNsense® is an open source, feature rich firewall and routing platform, offering cutting-edge network protection.	OPNsense® is an open source, feature rich firewall and routing platform, offering cutting-edge network protection.	BSD	4,799	—	—
SpiderFootsmicallef/spiderfootLooking for the best free OSINT tool? SpiderFoot has 200+ modules, works on all platforms & takes 5 minutes to install. Download free & complete setup guide inside.	Looking for the best free OSINT tool? SpiderFoot has 200+ modules, works on all platforms & takes 5 minutes to install. Download free & complete setup guide inside.	GPL	2,447	—	—
SpiderFoot.appsmicallef/spiderfootSpiderFoot OSINT. See the wider footprint.	SpiderFoot OSINT. See the wider footprint.	GPL	2,447	—	—
Veinmindalibaba/nacosA free container security SaaS platform	A free container security SaaS platform	Apache	1,809	36.9K	—
tirrenoCOSSTirrenoTechnologies/tirrenoSecurity framework	Security framework	AGPL	1,569	—	—
Osqueryosquery/osqueryPerformant endpoint visibility	Performant endpoint visibility	BSD	799	7.8K	—
SpiderFootkaifcodec/user-scanner$ ./spiderfoot --scan █	$ ./spiderfoot --scan █		571	—	—
spyboy blogspyboy-productions/r4venLearn cyber security	Learn cyber security	—	448	28.2K	—
WhatsMyNameWebBreacher/WhatsMyNameFind Username Footprints Across the Internet	Find Username Footprints Across the Internet		432	354.7K	—
DNS TwisterCOSSelceef/dnstwistbefore they start.	before they start.	non-standard	414	5.9K	$5/mo
Cloud SnitchCOSSccbrown/cloud-snitchHow well do you really know your AWS account?	How well do you really know your AWS account?	MIT	312	<5K	$10/mo
LOLDriversmagicsword-io/LOLDriversKnow the driver. Understand the risk.	Know the driver. Understand the risk.	Apache	265	37.1K	—
AiSOCMCPbeenuar/AiSOCAutonomous Security Operations Center from Cyble. AI agents detect, triage, hunt, and respond across your stack, with every action traced and human oversight built in. US-headquartered, Y Combinator W21.	Autonomous Security Operations Center from Cyble. AI agents detect, triage, hunt, and respond across your stack, with every action traced and human oversight built in. US-headquartered, Y Combinator W21.	MIT	240	—	—
Canary Tokensthinkst/canarytokensCreate a Canarytoken. Deploy it somewhere.	Create a Canarytoken. Deploy it somewhere.	GPL	162	43K	—
Fibratusrabbitstack/fibratusExpose attackbehavior in real time	Expose attackbehavior in real time	non-standard	160	<5K	—
UTMStackutmstack/UTMStackThe open source SIEM priced by device, not by data volume	The open source SIEM priced by device, not by data volume	AGPL	144	—	—
Metlometlo-labs/metloEffortless API Security	Effortless API Security	MIT	100	<5K	—
Ransomware.live 👀jmousqueton/ransomware.liveRansomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes the latest cyberattacks.	Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes the latest cyberattacks.	—	80	155.9K	—
0xBENPrismJS/prism-themesA blog about experiences in cybersecurity, information security, technology, and roasting coffee at home.	A blog about experiences in cybersecurity, information security, technology, and roasting coffee at home.	MIT	77	21K	—
OpenOSINTMCPOpenOSINT/OpenOSINTThe AI OSINT Prompt Pack and the Operator's Playbook, bundled — the full OpenOSINT investigation methodology.	The AI OSINT Prompt Pack and the Operator's Playbook, bundled — the full OpenOSINT investigation methodology.	MIT	74	21.9K	—
TrapsterCOSS0xBallpoint/trapster-communityDetect intrusions in minutes, not months.	Detect intrusions in minutes, not months.	AGPL	74	<5K	$270/mo
MailAccessCOSSKatrielMoses/MailAccessWho's behind this email?	Who's behind this email?	—	70	<5K	$5/mo
ThreatBookAgentFlocks/flocksAgentic SecOps for the Enterprise.	Agentic SecOps for the Enterprise.	Apache	66	17.2K	—
Malext Sentrytoborrm9/malicious_extension_sentryMalExt Sentry - Malicious Browser Extension Tracker	MalExt Sentry - Malicious Browser Extension Tracker	—	44	—	—

Page 1 · Showing 30 of 90 open-source projects

Open Source Products & Repositories