Technical shortlist

Open-source security tools for technical teams

Start with the security control and threat model. Identity, secrets, network access, SIEM and endpoint protection address different risks; combining them in one list does not make them interchangeable.

For security engineers, platform teams, developers and sysadmins building layered controls with inspectable or self-hostable software.

Lead with the workload

The decision to make

Map every candidate to a defined control, owner and evidence source. Test detection or enforcement with a realistic scenario and document how updates, keys, logs and recovery are managed.

Available profiles

10 matching tools

All tools →
ToolDeploymentSourceAPIPricing model
ElasticSelf-hostedOpen sourceAvailablefreemium
NebulaSelf-hostedOpen sourceNot specifiedopen source
NetmakerSelf-hostedOpen sourceAvailableopen source
OpenBaoSelf-hostedOpen sourceAvailableopen source
OpenZitiSelf-hostedOpen sourceAvailableopen source
OrySelf-hostedOpen sourceAvailableopen source
SuperTokensSelf-hostedOpen sourceAvailableopen source
TeleportSelf-hostedOpen sourceAvailableopen source
ZeroTierSelf-hostedOpen sourceAvailablefreemium
ZitadelSelf-hostedOpen sourceAvailableopen source
NetmakerNetwork Security

Netmaker, from Gravitl, is an open-source platform for building WireGuard-based virtual networks, mesh VPNs, and site-to-site connectivity, with a free self-hosted community edition (Apache 2.0) and paid Team/Business/Enterprise cloud tiers.

Open sourceSelf-hostedAPIopen source
OpenZitiCybersecurity

OpenZiti is an open-source overlay networking framework for zero-trust connectivity, letting developers embed secure, outbound-only network access directly into applications via SDKs. NetFoundry sponsors the project.

Open sourceSelf-hostedAPIopen source
OryIdentity & Access Management

Ory builds open-source identity infrastructure — Kratos (identity/auth), Hydra (OAuth2/OIDC), Keto (permissions), and Oathkeeper (API gateway) — plus Ory Network, a managed cloud service with a free developer tier and paid production plans from $770/year.

Open sourceSelf-hostedAPIopen source
TeleportIdentity & Access Management

Teleport provides identity-based, zero-trust access to servers, Kubernetes clusters, databases, and web apps, replacing VPNs and static credentials with short-lived, certificate-based access. A free open-source Community Edition and paid Enterprise/cloud plans are available.

Open sourceSelf-hostedAPIopen source