Who ranks for “open source security tools”

Open-source security tools include free, community-driven utilities across application security, cloud environments, network monitoring, and threat detection.

Application Security & Code Scanning

OWASP ZAP (Zed Attack Proxy) : A popular Dynamic Application Security Testing (DAST) tool used to find vulnerabilities in web applications during testing. OWASP Dependency-Check : An Software Composition Analysis (SCA) tool that identifies known Common Vulnerabilities and Exposures (CVEs) in project dependencies. TruffleHog : A secret scanning tool that checks repositories and codebases for accidentally exposed API keys, passwords, and credentials. Checkov : A static analysis tool used to scan Infrastructure as Code (IaC) files like Terraform, Kubernetes manifests, and CloudFormation for misconfigurations.

Cloud & Infrastructure Security

Falco : A cloud workload protection and Kubernetes runtime security tool that detects anomalous behavior and security threats in containers. Open Policy Agent (OPA) : A general-purpose policy engine used as a Cloud Security Posture Management (CSPM) tool to enforce policies across cloud stacks.

SIEM, Monitoring & Incident Response

Wazuh : An open-source Extended Detection and Response (XDR) and SIEM platform used for log management, threat detection, and endpoint monitoring. Zeek : A powerful network analysis and security monitoring framework that logs network traffic for forensic investigations. Suricata : A high-performance network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and network security monitoring engine. TheHive : An open-source security incident response platform designed to make collaborative investigations and case management easier for SOC teams.

If you want to narrow this down, tell me:What specific layer or environment are you trying to secure (e.g., cloud, application code, network traffic, or endpoint logs)? Are you looking for preventative scanning or runtime monitoring/detection ?