Elastic Security brings SIEM and endpoint signals onto the Elasticsearch platform.
Open-source security tools for technical teams
Start with the security control and threat model. Identity, secrets, network access, SIEM and endpoint protection address different risks; combining them in one list does not make them interchangeable.
For security engineers, platform teams, developers and sysadmins building layered controls with inspectable or self-hostable software.
The decision to make
Map every candidate to a defined control, owner and evidence source. Test detection or enforcement with a realistic scenario and document how updates, keys, logs and recovery are managed.
10 matching tools
| Tool | Deployment | Source | API | Pricing model |
|---|---|---|---|---|
| Elastic | Self-hosted | Open source | Available | freemium |
| Nebula | Self-hosted | Open source | Not specified | open source |
| Netmaker | Self-hosted | Open source | Available | open source |
| OpenBao | Self-hosted | Open source | Available | open source |
| OpenZiti | Self-hosted | Open source | Available | open source |
| Ory | Self-hosted | Open source | Available | open source |
| SuperTokens | Self-hosted | Open source | Available | open source |
| Teleport | Self-hosted | Open source | Available | open source |
| ZeroTier | Self-hosted | Open source | Available | freemium |
| Zitadel | Self-hosted | Open source | Available | open source |
Nebula is an open-source overlay networking tool that builds encrypted, peer-to-peer mesh networks without opening inbound firewall ports; it was built at Slack and is now maintained by Defined Networking.
Netmaker, from Gravitl, is an open-source platform for building WireGuard-based virtual networks, mesh VPNs, and site-to-site connectivity, with a free self-hosted community edition (Apache 2.0) and paid Team/Business/Enterprise cloud tiers.
Linux Foundation fork of Vault's last MPL-licensed release. Manages secrets, certificates, and encryption keys with dynamic credential generation and fine-grained access policies.
OpenZiti is an open-source overlay networking framework for zero-trust connectivity, letting developers embed secure, outbound-only network access directly into applications via SDKs. NetFoundry sponsors the project.
Ory builds open-source identity infrastructure — Kratos (identity/auth), Hydra (OAuth2/OIDC), Keto (permissions), and Oathkeeper (API gateway) — plus Ory Network, a managed cloud service with a free developer tier and paid production plans from $770/year.
SuperTokens provides open-source, self-hostable authentication — email/password, social login, passwordless, MFA, session management, and RBAC — plus a managed cloud service that's free up to 5,000 monthly active users and usage-priced beyond that.
Teleport provides identity-based, zero-trust access to servers, Kubernetes clusters, databases, and web apps, replacing VPNs and static credentials with short-lived, certificate-based access. A free open-source Community Edition and paid Enterprise/cloud plans are available.
ZeroTier creates encrypted, software-defined virtual networks that let devices in different locations join the same virtual LAN, with a free tier for small networks and paid plans for larger ones.
Zitadel is an open-source identity and access management platform with passwordless auth, multi-tenancy, and custom workflows. It's free up to 100 daily active users, with cloud Pro plans from $100/month and a self-hosted deployment option.