Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Repository Index
47,133 repositories indexed
1–15 of 15 · Most stars
Main Sigma Rule Repository
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
A collective list of public APIs for use in security. Contributions welcome
Tenzir is the data pipeline engine for security teams.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
Built-in Panther detection rules and policies
Splunk code (SPL) for serious threat hunters and detection engineers.
Open Source SIEM (Security Information and Event Management system).
Realistic synthetic events for testing, demos, and pipelines — streamed live or generated in bulk
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
Advanced Phishing Protection: Suricata rulesets open and free
Local-LLM alert triage for self-hosted SOCs.