1.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+99 stars
from 15,361 · score 4.61
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
5 repositories by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
2.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+6 stars
from 2,560 · score 1.95
3.aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
+5 stars
from 4,658 · score 1.79
4.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
- cyber-security
- network-traffic-analysis
- +10 more
+1 stars
from 666 · score 0.69
5.teler-sh / teler-waf
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
- teler-waf
- go
- +8 more
+1 stars
from 406 · score 0.69