1.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+2,275 stars
from 13,185 · score 7.73
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
7 repositories by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
2.aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
+202 stars
from 4,461 · score 5.31
3.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
- cyber-security
- network-traffic-analysis
- +10 more
+119 stars
from 548 · score 4.79
4.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+115 stars
from 2,451 · score 4.75
5.cossacklabs / acra
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
- security
- intrusion-detection
- +7 more
+26 stars
from 1,469 · score 3.30
6.teler-sh / teler-waf
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
- teler-waf
- go
- +8 more
+9 stars
from 398 · score 2.30
7.codeexpress / respounder
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
- hackers
- llmnr
- +4 more
+2 stars
from 321 · score 1.10