Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
GitHub projects from awesome lists
Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.
Open highlighted repo slot
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
Complete open-source monitoring and observability platform.
IntelOwl: manage your Threat Intelligence at scale
TheHive is a Collaborative Case Management Platform, now distributed as a commercial version
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
SRE Agent - CNCF Sandbox Project
Cortex: a Powerful Observable Analysis and Active Response Engine
A collection of postmortem templates
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
Tenzir is the data pipeline engine for security teams.
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
Open-source AI copilot that lets you chat with your observability data and code 🧙♂️
Incident Response - Fast suspicious file finder
Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.
eBPF agent and MCP server for GPU causal observability