Hermes Secure Email Gateway is a secure email gateway and mail server that protects email against spam, viruses, and malware.
Read more
Category: Security
mcpsnoop – transparent proxy and terminal interface
mcpsnoop is a transparent proxy and terminal interface to inspect the real Model Context Protocol traffic between AI clients and MCP servers.
Read more
12 Best Free and Open Source Host-Based Intrusion Detection Systems
An intrusion detection system is a device or software application that monitors a network or systems for malicious activity or policy violations.
Read more
Tracee – runtime security and observability tool
Tracee is a runtime security and observability tool that uses eBPF to monitor system and application behaviour.
Read more
Hades – host-based intrusion detection system
Hades is a host-based intrusion detection system (HIDS) that uses eBPF and the netlink process connector to monitor activity on Linux systems.
Read more
8 Best Free and Open Source Web Application Firewalls
A web application firewall (WAF) is a type of application firewall that lets you see and analyze HTTP traffic to and from a web application. We recommend our favourite WAFs.
Read more
UUSEC WAF – high-performance web application firewall
UUSEC WAF is a high-performance web application firewall and API security gateway. It uses machine learning and semantic analysis.
Read more
SafeLine – self-hosted web application firewall
SafeLine is a self-hosted web application firewall (WAF) and reverse proxy designed to protect web applications from attacks and exploits.
Read more
7 Best Free and Open Source Passive OS Fingerprinting Tools
Passive OS Fingerprinting Tools rely on sniffing techniques to analyze the information sent in normal network traffic.
Read more
privacyIDEA – open source MFA platform
privacyIDEA is an MFA platform that helps secure applications and infrastructure with additional authentication factors.
Read more
knock-rs – port-knocking implementation
knock-rs is a port-knocking implementation written in Rust that detects SYN packets rather than listening on the protected ports.
Read more
Brute Force Detection (BFD) – log-based security tool
BFD is a log-based security tool that detects authentication failures and automatically bans hostile IP addresses on Linux servers.
Read more
endlessh-go – SSH tarpit
endlessh-go is an SSH tarpit that slowly sends an endless SSH banner to clients, tying up bots and brute-force attackers.
Read more
MuonFP – enterprise-ready passive TCP fingerprinter
MuonFP identifies and classifies network traffic from TCP packet characteristics.
Read more
Leetha – passive network fingerprinting and analysis engine
Leetha is a passive network fingerprinting and analysis engine.
Read more
IPBan – detects repeated failed logins
IPBan is security software that detects repeated failed logins and automatically blocks offending IP addresses.
Read more
13 Useful Free and Open Source Linux Forensics Memory Tools
This roundup focuses on memory tools that help with forensics. Only free and open source software is eligible for inclusion here.
Read more
PCILeech – security research and memory acquisition tool
PCILeech is a security research and memory acquisition tool that uses Direct Memory Access over PCIe to read and write target system memory.
Read more
LeechCore – physical memory acquisition library
LeechCore is a physical memory acquisition library aimed at digital forensics, incident response, and low-level security research.
Read more
emd – command line memory acquisition tool for Linux systems
emd is a tool designed to dump physical memory using an eBPF filter, providing a way to capture system memory.
Read more