Overview OSQuery is an open-source endpoint monitoring and analysis tool that exposes operating system information as a relational database. Using SQL-like queries, you can explore system state for intrusion detection, troubleshooting, compliance auditing, and security monitoring. Developed and maintained by Facebook (now Meta), OSQuery runs on Linux, macOS, Windows, and FreeBSD, providing real-time visibility into […]

Overview Wazuh is a free and open source security platform that unifies Extended Detection and Response (XDR) and Security Information and Event Management (SIEM) protection for endpoints and cloud workloads. It provides threat prevention, detection, and response capabilities across on-premises, virtualized, containerized, and cloud-based environments. Key Features Unified XDR and SIEM: Combines endpoint detection and […]

Overview TheHive is a purpose-built security operations platform designed for SOC, CSIRT, CERT, and MSSP teams. Developed by StrangeBee, it covers the full incident lifecycle — from alert triage and case management to investigation, response, and reporting. It integrates seamlessly with Cortex for automated response actions and MISP for threat intelligence sharing. Key Features Collaborative […]

Overview MISP (Malware Information Sharing Platform & Threat Sharing) is an open source software solution for collecting, storing, distributing, and sharing cyber security indicators and threat intelligence. Designed for incident analysts, security professionals, and malware reversers, MISP supports their day-to-day operations by providing a structured platform for threat intelligence management. Key Features Threat Intelligence Sharing: […]

Overview Suricata is a high performance, open source network analysis and threat detection software developed by the Open Information Security Foundation (OISF). It functions as an Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring engine, used by most private and public organizations and embedded by major vendors to protect their assets. […]

Overview OpenVAS (Open Vulnerability Assessment Scanner) is a full-featured vulnerability scanner developed by Greenbone AG since 2006. It provides unauthenticated and authenticated testing across various high-level and low-level internet and industrial protocols, with performance tuning for large-scale scans and a powerful internal programming language to implement any type of vulnerability test. Key Features Comprehensive Vulnerability […]

IPFire is a hardened Linux-based firewall distribution designed for security, speed, and ease of use. Developed by the IPFire community since 2004, it provides a complete firewall and router solution suitable for both home users and small-to-medium businesses, with a focus on modularity and a strong security posture. IPFire uses a stateful packet inspection firewall […]

pfSense is the world’s most trusted open-source firewall and router platform, based on FreeBSD and developed by Netgate as the foundation of its security appliance and cloud offerings. It transforms any standard x86 computer into a full-featured enterprise firewall, delivering comprehensive routing, VPN, traffic shaping, and unified threat management capabilities through an easy-to-use web interface. […]

OPNsense is an open-source, FreeBSD-based firewall and routing platform developed by Deciso, designed as a comprehensive network security solution for home, small business, and enterprise environments. It combines the feature set of expensive commercial firewalls with the transparency of open-source software, offering a stateful firewall, intrusion detection and prevention, VPN connectivity, web filtering, traffic shaping, […]

Lynis is a battle-tested, open-source security auditing tool for Linux, macOS, and Unix-based systems that has been in active development since 2007. It performs comprehensive health scans to evaluate system defences, detect vulnerabilities, and provide actionable hardening guidance. Used by system administrators, IT auditors, and security professionals worldwide, Lynis runs hundreds of individual tests across […]