All projects
Repositories in this selection 25 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Mmukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0PythonApache-2.0 · PermissiveInsufficient rank history35,4504,318——2026-08-31
2—Ppranshuparmar / witrWhy is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.GoApache-2.0 · PermissiveInsufficient rank history22,906808——2026-10-23
3—Wwazuh / wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.C++NOASSERTION · Restricted / unknownInsufficient rank history17,5442,580——2026-11-02
4—Ddastergon / awesome-sreA curated list of Site Reliability and Production Engineering resources.UnknownCC0-1.0 · PermissiveInsufficient rank history13,7481,837——2025-08-28
5—Kkubeshark / kubesharkeBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.GoApache-2.0 · PermissiveInsufficient rank history12,126558——2026-11-01
6—Uupgundecha / howtheysreA curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)JavaScriptCC0-1.0 · PermissiveInsufficient rank history9,830900——2026-09-30
7—Ttoniblyx / my-arsenal-of-aws-security-toolsList of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.ShellApache-2.0 · PermissiveInsufficient rank history9,5281,581——2026-10-02
8—Mmeirwah / awesome-incident-responseA curated list of tools for incident responseUnknownApache-2.0 · PermissiveInsufficient rank history9,5281,765——2026-10-13
9—OOneUptime / oneuptimeComplete open-source monitoring and observability platform.TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history7,782485——2026-11-02
10—Bbeenuar / AiSOCOpen-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.PythonMIT · PermissiveInsufficient rank history6,814702——2026-11-03
11—Iintelowlproject / IntelOwlIntelOwl: manage your Threat Intelligence at scalePythonAGPL-3.0 · Share derivative sourceInsufficient rank history4,789708——2026-11-03
12—00x4D31 / awesome-threat-detection✨ A curated list of awesome threat detection and hunting resources 🕵️♂️UnknownUnknown · Restricted / unknownInsufficient rank history4,780769——2026-01-05
13—Vvolatilityfoundation / volatility3A memory-forensics framework that extracts runtime system information and digital artifacts from RAM samples.PythonNOASSERTION · Restricted / unknownInsufficient rank history4,564730——2026-10-12
14—AA-poc / BlueTeam-ToolsTools and Techniques for Blue Team / Incident ResponseUnknownUnknown · Restricted / unknownInsufficient rank history4,556699——2026-08-23
15—VVelocidex / velociraptorAn endpoint collection and forensics tool using VQL queries to gather host state, with local collection and server deployment options.GoNOASSERTION · Restricted / unknownInsufficient rank history4,409675——2026-11-02
16—TTracecatHQ / tracecatOpen-source security automation platform for teams and AI agentsPythonAGPL-3.0 · Share derivative sourceInsufficient rank history3,886439——2026-11-02
17—HHolmesGPT / holmesgptSRE Agent - CNCF Sandbox ProjectPythonApache-2.0 · PermissiveInsufficient rank history3,770566——2026-11-03
18—YYamato-Security / hayabusaHayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.RustAGPL-3.0 · Share derivative sourceInsufficient rank history3,435302——2026-11-01
19—Ccerttools / intelmqIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.PythonAGPL-3.0 · Share derivative sourceInsufficient rank history1,142318——2026-04-28
20—Ttenzir / tenzirTenzir is the data pipeline engine for security teams.C++BSD-3-Clause · PermissiveInsufficient rank history770110——2026-11-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.