Discover the best Siem open source repositories on GitHub. Explore trending tools, live star counts, source code, and developer projects updated daily.
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
Vigil SOC: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
A complete Sigma detection engineering toolkit: parser, linter, formatter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:
Fast and easy to use database for logs, which can efficiently handle terabytes of logs
Tenzir is the data pipeline engine for security teams.
Awesome Security lists for SOC/CERT/CTI
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit log.
Entity graph platform for air-gapped defense and critical infrastructure. Kafka-native OSINT, OT fusion, and immutable provenance on every edge.
An open-source security platform for the community. Unified SIEM, SOAR, WAF, and more in a single, self-hosted solution.