ElasticSIEM & Threat IntelligenceElastic Security brings SIEM and endpoint signals onto the Elasticsearch platform.
Open sourceSelf-hostedAPIfreemium
Technical shortlist
Open-source security tools for technical teams
Start with the security control and threat model. Identity, secrets, network access, SIEM and endpoint protection address different risks; combining them in one list does not make them interchangeable.
For security engineers, platform teams, developers and sysadmins building layered controls with inspectable or self-hostable software.
Lead with the workload
The decision to make
Map every candidate to a defined control, owner and evidence source. Test detection or enforcement with a realistic scenario and document how updates, keys, logs and recovery are managed.
Directory fields in this matrix were refreshed through October 3, 2026. Follow each source link for current vendor information.
Available profiles
All tools →10 matching tools
| Tool | Deployment | Source model | API | Pricing model | Primary source |
|---|---|---|---|---|---|
| Elastic | Self-hosted | Open source | Available | freemium | Official source ↗ |
| Nebula | Self-hosted | Open source | Not specified | open source | Official source ↗ |
| Netmaker | Self-hosted | Open source | Available | open source | Official source ↗ |
| OpenBao | Self-hosted | Open source | Available | open source | Official source ↗ |
| OpenZiti | Self-hosted | Open source | Available | open source | Official source ↗ |
| Ory | Self-hosted | Open source | Available | open source | Official source ↗ |
| SuperTokens | Self-hosted | Open source | Available | open source | Official source ↗ |
| Teleport | Self-hosted | Open source | Available | open source | Official source ↗ |
| ZeroTier | Self-hosted | Open source | Available | freemium | Official source ↗ |
| Zitadel | Self-hosted | Open source | Available | open source | Official source ↗ |
ElasticSIEM & Threat Intelligence
NebulaNetwork SecurityNebula is an open-source overlay networking tool that builds encrypted, peer-to-peer mesh networks without opening inbound firewall ports; it was built at Slack and is now maintained by Defined Networking.
Open sourceSelf-hostedopen source
NetmakerNetwork SecurityNetmaker, from Gravitl, is an open-source platform for building WireGuard-based virtual networks, mesh VPNs, and site-to-site connectivity, with a free self-hosted community edition (Apache 2.0) and paid Team/Business/Enterprise cloud tiers.
Open sourceSelf-hostedAPIopen source
Linux Foundation fork of Vault's last MPL-licensed release. Manages secrets, certificates, and encryption keys with dynamic credential generation and fine-grained access policies.
Open sourceSelf-hostedAPIopen source
OpenZitiCybersecurityOpenZiti is an open-source overlay networking framework for zero-trust connectivity, letting developers embed secure, outbound-only network access directly into applications via SDKs. NetFoundry sponsors the project.
Open sourceSelf-hostedAPIopen source
OryIdentity & Access ManagementOry builds open-source identity infrastructure — Kratos (identity/auth), Hydra (OAuth2/OIDC), Keto (permissions), and Oathkeeper (API gateway) — plus Ory Network, a managed cloud service with a free developer tier and paid production plans from $770/year.
Open sourceSelf-hostedAPIopen source
SuperTokensIdentity & Access ManagementSuperTokens provides open-source, self-hostable authentication — email/password, social login, passwordless, MFA, session management, and RBAC — plus a managed cloud service that's free up to 5,000 monthly active users and usage-priced beyond that.
Open sourceSelf-hostedAPIopen source
TeleportIdentity & Access ManagementTeleport provides identity-based, zero-trust access to servers, Kubernetes clusters, databases, and web apps, replacing VPNs and static credentials with short-lived, certificate-based access. A free open-source Community Edition and paid Enterprise/cloud plans are available.
Open sourceSelf-hostedAPIopen source
ZeroTier creates encrypted, software-defined virtual networks that let devices in different locations join the same virtual LAN, with a free tier for small networks and paid plans for larger ones.
Open sourceSelf-hostedAPIfreemium
ZitadelIdentity & Access ManagementZitadel is an open-source identity and access management platform with passwordless auth, multi-tenancy, and custom workflows. It's free up to 100 daily active users, with cloud Pro plans from $100/month and a self-hosted deployment option.
Open sourceSelf-hostedAPIopen source