Catalog
Explore and compare curated open-source alternatives. Filter by platform, licensing, or deployment mode to find your perfect fit.
5 tools found
Osquery
Osquery replaces proprietary EDR telemetry with SQL-driven endpoint monitoring, letting teams query Linux, macOS, and Windows host state in real time.
23.7kLinuxmacOSWindows4d ago
Apache-2.0Endpoint Security & EDR
Wazuh
Wazuh is an open-source EDR and SIEM alternative to CrowdStrike Falcon that keeps host telemetry and compliance auditing on private infrastructure.
17.5kLinuxDockertoday
GPL-2.0Endpoint Security & EDR
Fleetdm
Fleetdm is an open-source endpoint management platform that unifies device telemetry and MDM across macOS, Windows, and Linux via osquery and GitOps.
7.1kLinuxDocker1d ago
Apache-2.0Endpoint Security & EDR
Velociraptor
Velociraptor is an open-source endpoint visibility and incident response platform that uses VQL queries to hunt threats and collect forensic artifacts.
4.4kLinuxmacOSWindowstoday
AGPL-3.0Endpoint Security & EDR
OpenEDR
OpenEDR is an open-source alternative to CrowdStrike Falcon that streams kernel-level Windows endpoint telemetry directly into self-hosted Elasticsearch.
2.7kWindowsLinux5mo ago
Apache-2.0Endpoint Security & EDR