[opensourcedex]

best-of ranking · updated nightly

Best Open Source Threat Detection & Response Tools

Ranked by GitHub stars — actual adoption, not editorial taste. All 10 are free, open source and self-hostable; license and last activity on every entry.

  1. 1
    PayloadsAllTheThings ★ 82K

    A list of useful payloads and bypass for Web Application Security and Pentest/CTF

    MIT Python pushed 2026-10-30 details →
  2. 2
    Anthropic-Cybersecurity-Skills ★ 35K

    817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud

    Apache-2.0 Python pushed 2026-08-31 details →
  3. 3
    pentagi ★ 33K

    Fully autonomous AI Agents system capable of performing complex penetration testing tasks

    MIT Go pushed 2026-10-22 details →
  4. 4
    ProjectDiscovery ★ 33K

    Advanced vulnerability detection and management platform

    MIT Go pushed 2026-11-02 details →
  5. 5
    PentestGPT ★ 16K

    Automated Penetration Testing Agentic Framework Powered by Large Language Models

    MIT Python pushed 2026-07-14 details →
  6. 6
    ecapture ★ 16K

    Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

    Apache-2.0 C pushed 2026-10-31 details →
  7. 7
    crowdsec ★ 15K

    Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

    MIT Go pushed 2026-11-02 details →
  8. 8
    Osintgram ★ 15K

    Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

    GPL-3.0 Python pushed 2026-10-30 details →
  9. 9
    thc-hydra ★ 12K

    hydra

    AGPL-3.0 C pushed 2026-10-30 details →
  10. 10
    vuls ★ 12K

    Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

    GPL-3.0 Go pushed 2026-11-01 details →
method stars desc · snapshot from github api refresh nightly related Identity & Access Management (IAM), Network Security, Data Security & Privacy, Secrets Management, Application Security, Fraud Prevention

Related best-of lists

best Identity & Access Management (IAM) →best Network Security →best Data Security & Privacy →best Secrets Management →best Application Security →best Fraud Prevention →

last updated nightly · ranking method: github stars, live-tracked

Looking for a replacement for one specific commercial product? Browse alternatives by tool →

Frequently asked questions

What is the best open source Threat Detection & Response tool in 2026?

PayloadsAllTheThings leads the ranking with 82,315 GitHub stars, ahead of Anthropic-Cybersecurity-Skills. Rankings use live GitHub star counts, refreshed nightly.

How is this list of Threat Detection & Response tools ranked?

By GitHub stars — a proxy for adoption and community size. Each entry also shows its licence, primary language and last commit date, so you can judge maintenance activity rather than trusting the ranking alone.

Are the best Threat Detection & Response tools free?

Every project on this list is open source and free to self-host. Some also offer paid managed hosting, but the software itself carries no licence fee.