281 tools · 79 open-source · 202 SaaS
The best security tools. Ranked by real activity.
The top-ranked open-source security tool on Enlisted is uBlock Origin (68k GitHub stars), followed by acme.sh and Trivy. Among SaaS products, other tools on Enlisted are most often compared with Keeper, CrowdStrike and Splunk.
Enlisted lists 281 security tools: 79 open source and 202 SaaS. 57 of the open-source ones can be self-hosted on your own server or computer. The most common open-source licences here are Apache-2.0 (24 tools), MIT (15) and AGPL-3.0 (8). The open-source ones are most often listed as alternatives to Aikido Security, Cloudflare and Checkmarx.
Last updated October 3, 2026 · ranked by GitHub stars, growth and recent commits
The top 48 of 281 security tools
uBlock Origin
Security
uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.
GPL-3.0★ 68k
acme.sh
Security
A pure Unix shell script ACME client for SSL / TLS certificate automation
GPL-3.0vs DigiCert★ 48k
Trivy
Security
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code rep
Apache-2.0vs Snyk★ 38k
Certbot
Security
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTP
OSSvs DigiCert★ 33k
Gitleaks
Security
Find secrets with Gitleaks 🔑
MITvs GitGuardian★ 30k
Infisical
Security
Infisical is the open-source platform for secrets, certificates, and privileged access man
OSSvs Doppler★ 30k
TruffleHog
Security
Find, verify, and analyze leaked credentials
AGPL-3.0vs GitGuardian★ 28k
Cilium
Networking & VPN
eBPF-based Networking, Security, and Observability
Apache-2.0vs Illumio★ 26k
osquery
Security
SQL powered operating system instrumentation, monitoring, and analytics.
OSSvs Tanium★ 24k
SafeLine
Security
CyberServal open-source WAF is a self-hosted WAF with 20.9K GitHub stars. Block SQL inject
GPL-3.0vs Cloudflare★ 23k
fail2ban
Security
Daemon to ban hosts that cause multiple authentication errors
OSS★ 19k
Semgrep
Security
Lightweight static analysis for many languages. Find bug variants with patterns that look
LGPL-2.1vs Snyk★ 17k
Wazuh
Security
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints a
OSSvs Splunk★ 17k
Cryptomator
Security
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud st
GPL-3.0vs Tresorit★ 16k
CrowdSec
Security
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with
MITvs Cloudflare★ 15k
cert-manager
Infrastructure & Containers
Automatically provision and manage TLS certificates in Kubernetes
Apache-2.0vs Keyfactor★ 14k
Grype
Security
A vulnerability scanner for container images and filesystems
Apache-2.0vs Snyk★ 13k
Kubescape
Security
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, an
Apache-2.0vs Wiz★ 12k
VeraCrypt
Security
Disk encryption with strong security based on TrueCrypt
OSS★ 12k
BunkerWeb
Security
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
AGPL-3.0vs Cloudflare★ 11k
SonarQube
Developer Tools
Continuous Inspection
LGPL-3.0vs Codacy★ 11k
Lego
Security
Let's Encrypt/ACME client and library written in Go
MITvs DigiCert★ 9.9k
ModSecurity
Security
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Ap
Apache-2.0vs Cloudflare★ 9.8k
Syft
Security
CLI tool and library for generating a Software Bill of Materials from container images and
Apache-2.0★ 9.6k
Certimate
Security
ssl tls https ssl-certificate ssl-certificates ssl-cert https-certificate https-certificat
MITvs Sectigo★ 9.3k
Falco
Security
Cloud Native Runtime Security
Apache-2.0vs Wiz★ 9.4k
Firezone
Networking & VPN
Blazing-fast remote access
Apache-2.0vs Tailscale★ 9.1k
step-ca
Security
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certi
Apache-2.0vs Entrust★ 8.9k
PrivateBin
Productivity
General information on the PrivateBin project.
OSS★ 8.6k
Microsandbox
AI Infrastructure
Easy, fast microVMs for untrusted workloads
Apache-2.0★ 8.5k
OpenBao
Security
OpenBao is a software solution to manage, store, and distribute sensitive data including s
MPL-2.0vs AWS Secrets Manager★ 8.3k
Graylog
Monitoring & Observability
Free and open log management
OSSvs Splunk★ 8.2k
NetAlertX
Networking & VPN
NetAlertX: Visualize Your Networks, Get Real-Time Alerts, and Seamlessly Integrate with Yo
GPL-3.0vs Auvik★ 7.2k
OnionShare
File Storage & Sharing
Securely and anonymously share files, host websites, and chat with friends using the Tor n
OSSvs WeTransfer★ 7.1kBlocky
Networking & VPN
Fast and lightweight DNS proxy as ad-blocker for local network with many features
Apache-2.0vs Cisco Umbrella★ 7k
Fleet
Security
Open device management
OSSvs Jamf★ 6.9k
Suricata
Security
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network
GPL-2.0vs Palo Alto Networks★ 6.7k
MISP
Security
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
AGPL-3.0vs Recorded Future★ 6.6k
Certd
Security
开源SSL证书管理工具；全自动证书申请、更新、续期；通配符证书，泛域名证书申请；证书自动化部署到阿里云、腾讯云、主机、群晖、宝塔；https证书，pfx证书，der证书，TLS证书
AGPL-3.0vs Sectigo★ 5k
DefectDojo
Security
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
BSD-3-Clausevs Tenable★ 5k
OSSEC
Security
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis,
GPL-2.0vs CrowdStrike★ 5.1k
Pomerium
Security
Pomerium is an identity and context-aware access proxy.
Apache-2.0vs Cloudflare Zero Trust★ 5k
OpenVAS
Security
This repository contains the scanner component for Greenbone Community Edition.
GPL-2.0vs Tenable★ 4.8k
Security Onion
Security
Security Onion is a free and open platform for threat hunting, enterprise security monitor
OSSvs Splunk★ 4.9k
Zrok
Networking & VPN
Secure internet sharing made simple.
Apache-2.0vs ngrok★ 4.7k
OPNsense
Security
OPNsense GUI, API and systems backend
BSD-2-Clausevs Fortinet★ 4.7k
CISO Assistant
Security
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & A
OSSvs Vanta★ 4.5k
OpenZiti
Networking & VPN
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust
Apache-2.0vs Twingate★ 4.4k
Security tools: questions
- What is the best open-source security tool?
- uBlock Origin is the top-ranked open-source security tool on Enlisted, with 68k GitHub stars. It is followed by acme.sh, Trivy and Certbot.
- What are the best free security tools?
- The top-ranked open-source security tools with a standard licence are uBlock Origin (GPL-3.0), acme.sh (GPL-3.0) and Trivy (Apache-2.0), so their code is free to use. 51 of the 202 SaaS products here have a free plan, including Cloudflare, Snyk and Aikido Security.
- Which security tools can be self-hosted?
- 57 of the 79 open-source security tools on Enlisted can be self-hosted on your own server or computer; the top-ranked are uBlock Origin, Infisical and Cilium.
- How are these security tools ranked?
- Open-source tools are ordered by a score built from GitHub stars, star growth over the last 30 days and how recently the code changed; 63 of the 79 had new commits or a release in the last 30 days. SaaS products have no public repository, so they get a fixed baseline score. GitHub data is refreshed daily, and nobody can pay to move up.