Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
β1,707Jan 8, 2025Updated last year
Alternatives and similar repositories for matano
Users that are interested in matano are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- APIs to run user code in any developer productβ117Mar 10, 2023Updated 3 years ago
- πΈ The Map3 Supercharge SDK connects crypto apps to Wallets, Exchanges & Bridges, enabling cross-chain deposits and increasing volumes.β98Jun 23, 2023Updated 3 years ago
- β10Dec 30, 2022Updated 3 years ago
- Granular, Actionable Adversary Emulation for the Cloudβ2,440Updated this week
- Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.β409Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer β’ AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Built-in Panther detection rules and policiesβ472Updated this week
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.β351Oct 26, 2026Updated last week
- Complete log pipeline solution in Python. Runs fast in Go.β66May 18, 2023Updated 3 years ago
- Hayabusa (ιΌ) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.β3,428Updated this week
- A lightweight logger for machine learning teams to log images and predictions in production.β154May 3, 2023Updated 3 years ago
- Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation oβ¦β1,379Oct 12, 2026Updated 3 weeks ago
- Tenzir is the data pipeline engine for security teams.β769Updated this week
- Production-ready detection & response queries for osqueryβ650Jun 26, 2026Updated 4 months ago
- Open Source Cloud Securityβ738Oct 26, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer β’ AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Open-source security automation platform for teams and AI agentsβ3,881Updated this week
- Automating situational awareness for cloud penetration tests.β2,615Updated this week
- An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and securβ¦β177Oct 4, 2026Updated 3 weeks ago
- ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring suβ¦β1,048Feb 9, 2026Updated 8 months ago
- Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackβ¦β6,838Updated this week
- RedEye is a visual analytic tool supporting Red & Blue Team operationsβ2,770Oct 20, 2023Updated 3 years ago
- Open source toolkit created to enable easy adoption of software enclavesβ165Oct 26, 2026Updated last week
- The open source customer feature framework for B2Bs. Easily control how your product behaves and looks for different customers.β48Jul 5, 2023Updated 3 years ago
- Main Sigma Rule Repositoryβ11,383Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer β’ AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This repo hosts Prowler OSS (CLI and Local Server). Prowler is the worldβs most widely used open-source cloud security platform that autoβ¦β15,150Updated this week
- Automated Attack Simulation in the Cloud, complete with detection use cases.β620Nov 28, 2024Updated last year
- Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.β2,466Updated this week
- Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.β7,992Updated this week
- Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Mβ¦β4,134Sep 22, 2026Updated last month
- A Software as a Service (SaaS) log collection framework.β187Sep 22, 2026Updated last month
- Cartography is a Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database.β4,163Updated this week
- OCSF Schemaβ910Updated this week
- IntelOwl: manage your Threat Intelligence at scaleβ4,780Updated this week
- Managed Database hosting by DigitalOcean β’ AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Multi-Cloud Security Auditing Toolβ7,869Sep 23, 2025Updated last year
- Generate datasets of cloud audit logs for common attacksβ246Oct 26, 2026Updated last week
- AWS CloudSaga - Simulate security events in AWSβ477Updated this week
- MISP (core software) - Open Source Threat Intelligence and Sharing Platformβ6,635Updated this week
- Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized repoβ¦β2,254Oct 26, 2026Updated last week
- β¨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The β¦β300Feb 5, 2024Updated 2 years ago
- The open design tools SDK. Try our new experimental wireframing tool! πβ444Aug 2, 2024Updated 2 years ago