Tools
wazuh
wazuh/wazuh
Wazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
Topics
Related projects
Malcolm2.6kAn easily deployable network traffic analysis suite that ingests PCAP files, Zeek logs and Suricata alerts, normalizes and correlates them, and provides visual analysis interfaces.
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
nuclei32.9kA fast, template-driven vulnerability scanner that uses a simple YAML DSL to detect CVEs, misconfigurations, and other security issues across web apps, networks, and cloud environments.
crowdsec15.6kCrowdSec is an open-source IDS/IPS, WAF and bot-detection engine. It analyzes logs and HTTP requests, triggers remediation through firewall and proxy components, and shares a crowdsourced blocklist of malicious IPs so one attack protects the whole community.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
DVWA14kDamn Vulnerable Web Application (DVWA) is a deliberately vulnerable PHP and MariaDB web app for practicing common web vulnerabilities at several difficulty levels. It is widely used by security professionals, students and teachers for legal, hands-on security training.