Alternatives and similar repositories for OSSIEM

Users that are interested in OSSIEM are comparing it to the libraries listed below

• socfortress / CoPilot
  SOCFortress CoPilot
  ☆417Updated this week
• socfortress / SOCFortress-Threat-Intel
  Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
  ☆31Updated last year
• gbrigandi / mcp-server-wazuh
  MCP Server for Wazuh SIEM
  ☆148Updated 5 months ago
• juaromu / wazuh-opencti
  ☆40Updated 2 years ago
• branchnetconsulting / wazuh-tools
  Useful scripts for those administering Wazuh
  ☆88Updated this week
• tguard-soc-package / nusantara
  ☆218Updated last year
• WithSecureLabs / Kanvas
  A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.
  ☆412Updated 2 months ago
• dLoProdz / OSSIEM
  Open Source SIEM Stack
  ☆29Updated last year
• MISP / misp-docker
  A production ready Dockered MISP
  ☆297Updated last week
• ls111-cybersec / thehive-cortex-misp-docker-compose-lab11update
  ☆32Updated 2 years ago
• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆141Updated 9 months ago
• crow1011 / wazuh2thehive
  Wazuh integration TheHive
  ☆40Updated 2 years ago
• socfortress / wazuh-mcp-server
  Repo to hold wazuh manager mcp server
  ☆68Updated 2 months ago
• utmstack / UTMStack
  Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
  ☆379Updated this week
• juaromu / wazuh-misp
  ☆20Updated 2 years ago
• stanfrbd / cyberbro
  A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
  ☆475Updated this week
• yevonnaelandrew / t-guard
  T-Guard Repository
  ☆17Updated last year
• socfortress / Wazuh-Rules
  Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!
  ☆1,157Updated last week
• ls111-cybersec / wazuh-thehive-integration-ep13
  ☆23Updated 2 years ago
• itiligent / Easy-OpenVAS-Installer
  2025 OpenVAS appliance install & upgrade scripts, includes https front end (self signed), authenticated SMB scanning & email reports
  ☆87Updated 2 months ago
• cyberblu3s / CyberBlue
  CyberSecurity BLUE TEAM containerized platform that brings together open-source tools for SIEM, DFIR, CTI, SOAR, and Network Analysis
  ☆391Updated last month
• 3CORESec / testmynids.org
  A website and framework for testing NIDS detection
  ☆305Updated 5 months ago
• OpenSecureCo / Wazuh
  ☆32Updated 4 years ago
• bitorscanner / Bitor
  Bitor Scanning Software
  ☆435Updated last month
• jccyberx / Cybether
  Cybether - A modern, open-source Cybersecurity Governance, Risk, and Compliance (GRC) dashboard
  ☆83Updated 2 months ago
• zdhenard42 / SOC-Multitool
  A powerful and user-friendly browser extension that streamlines investigations for security professionals.
  ☆411Updated 6 months ago
• Harden365 / Harden365
  Protect your data in minutes !
  ☆125Updated last year
• OpenSecureCo / Demos
  Repo Filled With Follow Along Guides
  ☆80Updated 3 years ago
• V1D1AN / S1EM
  This project is a SIEM with SIRP and Threat Intel, all in one.
  ☆464Updated last year
• Krook9d / TA-Purplelab-Splunk
  Splunk add-on related to the PurpleLab tool
  ☆41Updated last year