Open Source Threat Detection & Response Software
Threat Detection & Response software identifies security vulnerabilities and malicious activity across networks and applications. These tools monitor server logs, track software errors, and deploy decoy services to catch intruders. This type of software serves system administrators and developers who need to manage security workflows and block malicious IP addresses. Self-hosting these apps ensures that network traffic logs and threat intelligence remain on private hardware. You can customize monitoring templates and DNS sinkholes to fit the specific security requirements of a local infrastructure.
This page lists 10 open source tools in the Threat Detection & Response category. The most popular are Pi-hole, Sentry and ProjectDiscovery. Most use the AGPL-3.0 or Custom license, and 9 offer an official Docker image.
Pi-hole
A network-wide DNS sinkhole that blocks unwanted content for all devices on a local network.
Sentry
An error tracking and performance monitoring platform that helps developers detect and resolve software issues through debugging.
ProjectDiscovery
Detect infrastructure vulnerabilities in real time with customizable templates and low false‑positive rates across multiple protocols.
Highlight
Full stack monitoring platform providing session replay, error tracking, and server side logging for web applications.
Tracecat
Automate security workflows and playbooks using a low code builder with integrated AI agents and case management.
OpenCanary
A multi-protocol network honeypot designed to detect intruders after they have breached non-public networks.
IPBan
Blocks malicious IP addresses by detecting failed login attempts from event viewers and log files.
Beelzebub
A deception runtime framework that deploys adaptive LLM-powered decoy services to collect threat intelligence.
Bugsink
Self-hosted error tracking that captures application crashes and exceptions using Sentry compatible SDKs for real time monitoring.
Tirreno
A security framework for detecting threats, fraud, and abuse through event ingestion and risk scoring.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.