Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Repository Index
47,133 repositories indexed
1–21 of 21 · Most stars
Cloud Native Runtime Security
Malicious traffic detection system
eBPF-based Security Observability and Runtime Enforcement
Linux Runtime Security and Forensics using eBPF
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
- github-actions
- actions
- supply-chain-security
- hardening
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
analyze a web-based network traffic 🕶 to detect central command and control servers
- squid
- network-traffic
- proxy-server
- incident-response
eBPF Security Monitoring and Sandboxing Agent Based on Aya
A tool to catch spoofed NBNS responses.
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
- ai-security
- cybersecurity
- ids
- iot-security
Advanced Phishing Protection: Suricata rulesets open and free
- anti-phishing
- antiphishing
- openphish
- phishing
Google Summer of Code 2012 project, supported by The Honeynet Project organization.
Passive Network Audit Framework
Real-time network traffic analysis in your terminal.
- cli
- ddos
- ddos-detection
- go
Deep network visibility, powered by Suricata. Artica integrates the Suricata IDS engine directly inside your server, giving you enterprise-grade intrusion detection without the complexity. Monitor every packet in real time, detect advanced threats, and visualize malicious
- appliance
- network-monitoring
- suricata