Open Source Security & Monitoring Tools – Page 2

tailcat

Replaces Tailscale

Connect machines across networks with end-to-end WireGuard encryption, no accounts or IP addresses required.

★ 8,400 BSD-3-Clause

Coroot

Replaces Datadog

Monitor Kubernetes and microservices with self-hosted eBPF observability, service maps, SLOs, logs, traces, and root-cause hints.

★ 8,000 Apache-2.0

Claude-Red

Replaces NodeZero by Horizon3.ai

Build a specialized offensive-security operator inside Claude with 78 structured SKILL.md files spanning web, AD, wireless, and exploit development.

★ 7,600 MIT

Unkey

Replaces AWS API Gateway

Manage API keys, deploy APIs, and control gateway traffic from one platform covering auth, rate limits, and real-time observability.

★ 5,500 FSL-1.1-ALv2

Esp32 C3 Adblock

Replaces AdGuard DNS

Run a Pi-hole-style DNS ad-blocker on a $2 ESP32-C3 board, with a web dashboard and over-the-air blocklist and firmware updates.

★ 3,300 MIT

ASC

Replaces JEB Decompiler

Analyze Android APKs and find code references in milliseconds. A stateless decompiler front-end that treats APKs as databases, avoiding heavy preprocessing.

★ 2,500 Apache-2.0

Sentry

Replaces Datadog

Sentry is an essential developer tool for real-time error tracking and performance monitoring, helping teams fix bugs faster and optimize their code.

★ 2,200 MIT

OpenFlux

Replaces Astrill VPN

Run TCP tunnels through Yandex Docs or MAX WebRTC transports, surfacing a SOCKS5 proxy on localhost. GPL-3.0 Go tool with Android and iOS clients.

★ 2,200 GPL-3.0

Stakpak

Replaces Datadog

Automate app management and monitoring with an open source DevOps agent that runs on your infrastructure.

★ 1,800 Apache-2.0

ship-safe

Replaces GitHub Advanced Security

Secure AI-native codebases with 29 parallel security agents that detect LLM vulnerabilities, MCP misconfigs, hardcoded secrets, and supply chain risks.

★ 861 MIT

Pulse

Monitor Windows system events in plain language with a local AI assistant. MIT-licensed, read-only, no telemetry, and no cloud required.

★ 368 MIT

WebCheck-OSINT

Replaces Censys

Analyze any website with 44 automated OSINT checks covering DNS, SSL, ports, TLS, CVEs, tech stack, and HTTP headers. MIT licensed, self-hostable.

★ 343 MIT

Doberman-Core

Replaces AuthZed

Secure AI coding agents at runtime with adaptive authorization, blocking dangerous tool calls before they execute. Apache 2.0, pip-installable, local-first.

★ 282 Apache-2.0

jentic-one

Replaces Aembit

Secure API access for AI agents via a self-hosted broker that injects credentials at request time and enforces per-agent permission scopes. Apache-2.0.

★ 186 Apache-2.0