1.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+1,061 stars
from 14,399 · score 6.97
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
6 repositories by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
+99 stars
from 4,564 · score 4.61
3.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+59 stars
from 2,507 · score 4.09
4.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
- cyber-security
- network-traffic-analysis
- +10 more
+54 stars
from 613 · score 4.01
5.cossacklabs / acra
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
- security
- intrusion-detection
- +7 more
+13 stars
from 1,482 · score 2.64
6.teler-sh / teler-waf
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
- teler-waf
- go
- +8 more
+4 stars
from 403 · score 1.61