1.falcosecurity / falco
Cloud Native Runtime Security
- cncf
- containers
- security
- falco
- ebpf
- kubernetes
- +4 more
+104 stars
from 9,447 · score 4.65
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
15 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
2.cilium / tetragon
eBPF-based Security Observability and Runtime Enforcement
+99 stars
from 5,055 · score 4.61
3.aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
+33 stars
from 4,630 · score 3.53
4.Karib0u / rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
- etw
- incident-response
- +14 more
+28 stars
from 499 · score 3.37
5.splunk / security_content
Splunk Security Content
- splunk
- detection
- engineering
- responses
- cicd
- cybersecurity
- +1 more
+23 stars
from 1,704 · score 3.18
6.step-security / harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
- github-actions
- actions
- supply-chain-security
- hardening
- security-hardening
- runners
- +3 more
+18 stars
from 1,277 · score 2.94
7.matanolabs / matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
- aws
- cloud
- security
- big-data
- serverless
- apache-iceberg
- +14 more
+10 stars
from 1,698 · score 2.40
8.baidu / openrasp
🔥Open source RASP solution
+4 stars
from 2,987 · score 1.61
9.cossacklabs / acra
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
- security
- intrusion-detection
- +7 more
+4 stars
from 1,491 · score 1.61
10.chronicle / detection-rules
Collection of example YARA-L rules for use within Google Security Operations
+4 stars
from 519 · score 1.61
11.panther-labs / panther-analysis
Built-in Panther detection rules and policies
- security
- python
- cybersecurity
- siem
+4 stars
from 468 · score 1.61
+1 stars
from 584 · score 0.69
+1 stars
from 550 · score 0.69
14.teler-sh / teler-waf
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
- teler-waf
- go
- +8 more
+1 stars
from 406 · score 0.69
+1 stars
from 352 · score 0.69