← back

category

SIEM and security monitoring

Collect security events and logs from hosts and networks, correlate them and raise alerts on threats.

Side by side

SIEM and security monitoring
ToolStarsLicenceTermsSelf-hostedLanguageLatestLast push
Wazuh17kOtherOpen sourceYesC++v4.14.82026-10-06
Security Onion4.9kOtherSource availableYesShell3.3.0-202609112026-10-06
Malcolm2.5kOtherOpen sourceYesPythonv26.09.02026-10-06

3 tools

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Language
C++
Licence
Other
Stars
17k
Latest
v4.14.8
Last push
2026-10-06
Security Onion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

Language
Shell
Licence
Other
Stars
4.9k
Latest
3.3.0-20260911
Last push
2026-10-06
Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Language
Python
Licence
Other
Stars
2.5k
Latest
v26.09.0
Last push
2026-10-06

What these tools replace