Open-source Bitdefender alternatives

Wazuh is a free and open-source platform for threat prevention, detection and response. It protects workloads across on-premises, virtualized, containerized and cloud environments and combines XDR and SIEM functions in one product. The code is written mainly in C++.

The solution consists of an endpoint security agent installed on monitored systems and a management server that collects and analyzes the agents' data. It is integrated with the Wazuh Indexer, which offers a search engine and visualization for navigating security alerts. Agents scan for malware, rootkits and suspicious anomalies, read system and application logs, and monitor files for changes to content, permissions, ownership and attributes.

Rule-based analysis of collected logs, including data received from network devices through syslog, helps surface misconfigurations, policy violations and attempted or successful attacks. Repository topics also cover vulnerability detection, configuration assessment, incident response and compliance such as PCI DSS. The repository lists its license as 'Other', so review the license files for the exact terms.

ClamAV is an open-source antivirus engine that detects trojans, viruses, malware and other malicious threats. It is written in C, released under GPL-2.0 and developed by Cisco Talos. It is used as an engine that other tools and servers can build on, for example scanning files or mail attachments, rather than as a polished desktop product.

Documentation and an FAQ are hosted at docs.clamav.net, and each release archive includes an offline copy. The project explains how to read and write ClamAV signatures through a signature writing manual, so anyone can create detection rules. News, release notes and a blog track new features, and documentation contributions go through a separate repository.

Installation options include official Docker images, distribution package managers, and downloadable installers: Debian and RPM packages for Linux, a universal PKG for macOS and MSI or portable ZIP packages for Windows. It can also be built from source for Unix, Linux, Mac and Windows. Upgrade notes describe moving from earlier versions.