Open source SIEM and log management
Self-hosted log collection, correlation, alerting and retention built on Wazuh, Security Onion, Graylog Open or OpenSearch, and how requirements shift by sector and deployment constraint.
Security and identity
Security operations and identity functions implemented with open-source platforms.
Network security monitoring with open source tools
Network detection and traffic analysis with Suricata, Zeek and Security Onion, and where sensor placement, protocols and deployment limits differ by industry.
Open source threat intelligence platform
Self-hosted threat intelligence with MISP or OpenCTI, and how sharing communities, regulation and data handling differ by sector.
Open source SOAR and security automation
Automating triage, enrichment and response with Shuffle, and how reporting deadlines, systems and staffing change the playbooks by sector.
Open source SSO
Workforce single sign-on with Keycloak, authentik, ZITADEL or FreeIPA, and how authentication rules, directories and deployment limits differ by sector and scenario.
Open source identity governance and administration
Joiner, mover and leaver provisioning, access requests and certifications with midPoint, and how review cycles, source systems and regulators differ by sector.
Self-hosted secrets management
Centralizing secrets, certificates and keys with OpenBao or Infisical, and how key management rules and deployment constraints differ by sector and scenario.
Open source customer identity and access management
Customer login, registration, passkeys and B2B multi-tenancy with Keycloak, ZITADEL or Ory, and how privacy, assurance and scale needs differ by sector.
Open source privileged access management (PAM)
Controlling and recording administrator, vendor and engineer access to servers, databases and Kubernetes with Teleport, JumpServer or Apache Guacamole, and how session, approval and audit rules differ by sector and framework.
Open source multi-factor authentication (MFA)
Self-hosted MFA for VPNs, Windows and Linux logins, SSH and web apps with privacyIDEA, Keycloak, FreeIPA or ZITADEL, and how phishing resistance, token types and regulations change the design.
Self-hosted password manager for business
Team and company password management on your own servers with Vaultwarden, Passbolt or self-hosted Bitwarden, and how sharing, recovery, licensing and audit needs differ by sector and constraint.
Open source zero trust network access (ZTNA)
Replacing or shrinking the corporate VPN with identity-based access to internal apps and networks using OpenZiti, NetBird, Headscale or Pomerium, and how access patterns, regulations and deployment limits change the design.
Self-hosted PKI and certificate management
Running a private certificate authority and automating certificate issuance and renewal with step-ca, cert-manager, OpenBao PKI or FreeIPA, and how lifetimes, device identity and audit rules change the design.
Open source vulnerability management
Finding, tracking and fixing vulnerabilities across hosts, containers and software dependencies with Greenbone, Trivy, Dependency-Track and DefectDojo, and how scan cadence, remediation deadlines and evidence differ by framework and sector.
Open source EDR and endpoint monitoring
Endpoint detection, investigation and response on your own infrastructure with Wazuh, Velociraptor, osquery and Falco, and how coverage, response actions and forensic needs differ by sector and framework.
