Open-Source Endpoint Security Tools logopeterindia.net
Knowledge Hub

Open-Source Endpoint Security Tools

Free and open-source tools for protecting and investigating endpoints — host detection and EDR, hunting and forensics, malware scanning and integrity monitoring, automated blocking, detection content and macOS control.

42 topics•8 categories•Updated October 2026

Choosing Open-Source Endpoint Security Tools

7 entries

Open-source endpoint security tools cover the host-level work that commercial endpoint protection, EDR and XDR products also do: detecting malware and suspicious behaviour, monitoring file integrity and system activity, querying endpoint state, collecting forensic data, blocking abusive hosts and checking configuration against a baseline. They are usually combined, because no single open-source project replaces a full EDR. A common stack pairs an agent-based platform such as Wazuh with osquery or Velociraptor for visibility and hunting, ClamAV and YARA for malware scanning, Falco or Tetragon for runtime detection on Linux and containers, and Sigma rules for detection content. Open source gives transparency and flexibility but also means you run, tune and patch it yourself, and several projects differ in maintenance activity. The first group below follows a LinkedIn post by Marcel Velica that lists 11 tools: AIDE, Auditd, ClamAV, CrowdSec, Fail2ban, Falco, GRR Rapid Response, OpenEDR, osquery, Velociraptor and Wazuh. Descriptions and release dates come from each project's own site and repository, and further tools are added for context.

Host Detection, Monitoring & EDR

6 entries

Agent-based platforms that detect threats and monitor endpoints.

Visibility, Hunting & Remote Forensics

4 entries

Query endpoint state and collect evidence at scale.

Malware Scanning, Integrity & Hardening

8 entries

Signature scanning, file integrity, audit logging and configuration checks.

Blocking & Automated Response

2 entries

Tools that act on abusive behaviour.

Detection Content & Threat Intelligence

5 entries

Rules, indicators and sharing platforms that feed endpoint tools.

macOS Endpoint Control

1 entries

Open-source tooling for Apple endpoints.

Related Pages

9 entries

Neighbouring pages on this site.

Frequently Asked Questions

Why does deep learning need statistics?

Training objectives such as cross-entropy and squared error are maximum likelihood estimates under assumed noise models, and questions about overfitting, evaluation, uncertainty and data shift are statistical questions. Without them it is hard to tell a real improvement from noise.

What statistics topics should I learn first for deep learning?

Start with random variables and distributions, expectation and variance, maximum likelihood and Bayes' theorem, then the bias-variance tradeoff, cross-validation and the bootstrap. After that, calibration, hypothesis testing for model comparison and distribution shift matter most in practice.

How do I know whether one model is really better than another?

Evaluate on held-out data, report uncertainty (for example confidence intervals from the bootstrap or variation across random seeds), and use an appropriate test when comparing models. The evaluation section lists papers on comparing classifiers and on error bars for language-model evaluations.

What is calibration and why does it matter?

A model is calibrated when its stated probabilities match observed frequencies. Guo et al. found that modern neural networks are often overconfident, and the uncertainty section lists methods such as temperature scaling, deep ensembles and conformal prediction.

Does the bias-variance tradeoff still apply to large neural networks?

The classical U-shaped curve describes many models, but work on double descent shows that test error can fall again as models grow past the point of fitting the training data. The generalisation section lists the main papers.

How is this page different from Probability Theory for AI?

That page covers probability, Bayesian inference and generative models. This page focuses on statistical practice for deep learning: estimation and regularisation, generalisation, evaluation and significance, uncertainty, distribution shift and experiment design.