tirreno is an open-source framework for in-house security. Event tracking, risk scoring and threat detection for your system.

intelligence log-analysis php-scripts banking audit-logs user-monitoring antispam cyber-security bot-detection application-monitoring fraud-detection php-project security-framework fraud bot-management runtime-security security-analytics audit-trails cybersecurity-projects

• Updated Oct 24, 2026
• PHP

Cloud Security Operations Orchestrator

cloud security-automation cloud-security security-analytics python-automation security-analyst terraform-security response-orchestration

• Updated Apr 17, 2024
• Python

vPrioritizer enables us to understand the contextualized risk (vPRisk) on asset-vulnerability relationship level across the organization, for teams to make more informed decision about what (vulnerability/ties) they should remediate (or can afford not to) and on which (asset/s)

python risk django-application information-security vulnerability-management risk-management prioritization security-analytics community-analytics prioritization-algorithm

• Updated Jul 9, 2025
• CSS

Security Analytics Engine - Anomaly Detection in Web Traffic

machine-learning big-data spark apache-spark grafana prometheus python3 apache-kafka isolation-forest security-analytics

• Updated Nov 10, 2026
• Python

Detection of network traffic anomalies using unsupervised machine learning

machine-learning deep-learning clustering network-analysis unsupervised-learning anomalydetection clustering-algorithm anomaly-detection adversarial-learning unsupervised-machine-learning adversarial-machine-learning adversarial-samples fgsm adversarial-attacks iforest ocsvm fast-gradient-sign oneclasssvm security-analytics fast-gradient-sign-attack

• Updated Jan 26, 2022
• Jupyter Notebook

Real-time log ingestion and anomaly detection pipeline using AWS Kinesis, OpenSearch, and Python for mock EC2 log generation and alerting.

python aws lambda real-time monitoring aws-lambda s3 cloudwatch kinesis stream-processing data-pipeline opensearch log-monitoring anomaly-detection security-analytics

• Updated Aug 7, 2026
• Python

AI-powered cybersecurity monitoring platform that detects suspicious digital attacks, analyzes threat patterns, visualizes intrusion risks, and assists in proactive cyber defense management.

python flask cybersecurity final-year-project network-security threat-intelligence anomaly-detection security-dashboard malware-detection security-project real-time-monitoring security-analytics cyber-defense threat-monitoring cyber-attack-detection

• Updated Aug 18, 2026
• Python

AI-powered intrusion detection and incident analysis system that combines machine learning, explainable AI (SHAP), and retrieval-augmented generation (RAG) to detect network attacks and generate security incident reports.

python ai incident-response cybersecurity threat-intelligence explainable-ai threat-detection security-analytics fastapi-sqlalchemy security-operations-center langchain-python retrieval-augmented-generation agentic-ai

• Updated Jul 1, 2026

Power Query collection for SentinelOne - KQL queries, data transformations, and analysis templates for security operations and threat hunting

security queries incident-response threat-hunting siem soc edr threat-detection security-analytics kusto security-operations kql sentinelone deep-visibility

• Updated Feb 17, 2026

Digital Twin Driven Security Analytics for the Industrial Internet of Things.

internet-of-things siem wazuh digital-twin security-analytics

• Updated Mar 3, 2023
• HTML

Plug into extended SecOps: Bring Google Cloud's analytics to your local network. tshark captures on-prem, GCP transforms to UDM. Scalable, event-driven, via Terraform.

docker pcap serverless terraform gcp pubsub secops gcs iac cybersecurity network-monitoring wireshark data-pipeline security-analytics cloud-run network-traffic-analysis unified-data-model

• Updated Apr 25, 2026
• HCL

This repository contains an end-to-end walkthrough to leverage Google Cloud services to demonstrate Solution Accelerators for few business domains

bigquery dataflow googlecloudplatform security-analytics mlops vertex-ai solution-accelerators aimlops

• Updated Feb 21, 2026
• Python

An end-to-end AI system for detecting insider threats using a hybrid machine learning approach (Isolation Forest + XGBoost). Features a high-performance ETL pipeline using DuckDB, real-time inference via FastAPI, and integrated Explainable AI (SHAP) for transparent risk assessment on the CERT R4.2 dataset.

python machine-learning cybersecurity xgboost hybrid-model threat-intelligence anomaly-detection isolation-forest explainable-ai ueba security-analytics shap fastapi duckdb insider-threat-detection

• Updated Dec 7, 2025
• Jupyter Notebook

Production-ready authentication framework that saves you weeks of development. Features enterprise-grade security: 2FA/TOTP, LDAP integration, intelligent rate limiting, session fingerprinting, brute-force protection, security analytics dashboard, comprehensive audit logging, and granular role-based access control.

javascript css csp rate-limiting totp content-security-policy ldap-authentication enterprise-ready boilerplate-application analytics-dashboard latte-template-engine php8 security-analytics 2fa-security logging-and-metrics audit-logging rbac-roles session-fingerprinting brute-force-protection

• Updated Oct 27, 2025
• CSS

SENTINEL SOC is a professional-grade Security Operations Center (SOC) dashboard that simulates real-world threat detection, investigation, and response workflows. Built with React and Recharts, it features live alert monitoring, interactive investigation playbooks with terminal-style execution, global attack maps, real-time CVE intelligence🔒.

react dashboard leaflet incident-response cybersecurity ctf recharts threat-hunting siem cve soc playbooks vulnerability-management security-training threat-intelligence edr security-analytics cyber-defense security-operations-center security-simulator

• Updated Mar 9, 2026
• JavaScript

Standalone edge protection sensor and fleet management platform

incident-response cybersecurity threat-hunting collective-intelligence fleet-management web-application-firewall botnet-detection anomaly-detection edge-computing blue-team api-security defensive-security security-analytics session-tracking signal-intelligence sensitive-data-detection sub-millisecond

• Updated Jun 30, 2026
• TypeScript

AI-powered dashboard for global cyber threats, trends, and defense.

machine-learning dashboard chatbot data-visualization artificial-intelligence knowledge-graph cybersecurity threat-intelligence real-time-monitoring security-analytics

• Updated Aug 10, 2025
• Python

Open-source, self-hosted GRC evidence platform: collect read-only evidence, evaluate controls, and export reviewable audit workpapers.

aws azure clickhouse mcp gcp snowflake audit compliance grc databricks governance iso27001 evidence security-engineering soc2 ocsf security-analytics oscal compliance-automation ai-governance

• Updated Nov 9, 2026
• Python

Mini SIEM built with Python & Flask for log monitoring and brute-force detection.

python flask cybersecurity siem soc log-monitoring blue-team security-analytics

• Updated Mar 4, 2026
• Python

python nlp data-science machine-learning cybersecurity xgboost cve feature-engineering nvd vulnerability-management cvss threat-intelligence interpretability anomaly-detection security-analytics risk-scoring epss exploit-prediction cisa-kev vulnerability-prioritization

• Updated Apr 13, 2026
• Python