Free Endpoint Security Tools
Protect endpoints, detect threats, and respond to incidents with free and open source security tools. Browse EDR, antivirus, file integrity monitoring, and endpoint detection tools.
Showing 24 of 413 tools
rustdesk
rustdesk/rustdesk
An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
osquery
osquery/osquery
SQL powered operating system instrumentation, monitoring, and analytics.
macOS-Security-and-Privacy-Guide
drduh/macOS-Security-and-Privacy-Guide
Community guide to securing and improving privacy on macOS.
How-To-Secure-A-Linux-Server
imthenachoman/How-To-Secure-A-Linux-Server
An evolving how-to guide for securing a Linux server.
Atlas
Atlas-OS/Atlas
🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.
fail2ban
fail2ban/fail2ban
Daemon to ban hosts that cause multiple authentication errors
HackBrowserData
moonD4rk/HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
systeminformer
winsiderss/systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com
opensnitch
evilsocket/opensnitch
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
LibreHardwareMonitor
LibreHardwareMonitor/LibreHardwareMonitor
Libre Hardware Monitor is free software that can monitor the temperature sensors, fan speeds, voltages, load and clock speeds of your computer.
cowrie
cowrie/cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
windows-defender-remover
ionuttbara/windows-defender-remover
A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.
traccar
traccar/traccar
Traccar GPS Tracking System
operating-system
home-assistant/operating-system
:beginner: Home Assistant Operating System
pspy
DominicBreuker/pspy
Monitor linux processes without root permissions
EdXposed
ElderDrivers/EdXposed
Elder driver Xposed Framework.
fleet
fleetdm/fleet
Open device management
escrcpy
viarotel-org/escrcpy
📱 Display and control your Android device graphically with scrcpy.
oshi
oshi/oshi
Native Operating System and Hardware Information
ossec-hids
ossec/ossec-hids
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
Aliucord
Aliucord/Aliucord
A modification for the Discord Android App
awesome-vehicle-security
jaredthecoder/awesome-vehicle-security
🚗 A curated list of resources for learning about vehicle security and car hacking.
tracee
aquasecurity/tracee
Linux Runtime Security and Forensics using eBPF
velociraptor
Velocidex/velociraptor
Digging Deeper....
Related Security Domains
Frequently Asked Questions
What is the best free EDR tool?
Wazuh is the most widely deployed free and open source EDR/SIEM platform, offering agent-based monitoring, file integrity monitoring, and threat detection. Velociraptor is excellent for endpoint forensics and threat hunting. OpenEDR provides behavioral detection capabilities without licensing costs.
Is ClamAV a good free antivirus?
ClamAV is a reliable open source antivirus engine widely used in email gateways and server environments. It's not ideal as a standalone desktop antivirus due to limited real-time protection, but it excels in automated scanning pipelines and is the standard for open source malware detection.
What is EDR vs AV vs XDR?
AV (Antivirus) uses signatures to block known malware. EDR (Endpoint Detection and Response) uses behavioral analysis to detect unknown threats and enables investigation and response. XDR (Extended Detection and Response) extends EDR across network, cloud, and email — providing unified visibility across the entire attack surface.
How do I monitor file integrity on Linux?
AIDE (Advanced Intrusion Detection Environment) and Tripwire are the standard open source file integrity monitoring tools for Linux. Wazuh includes built-in FIM that alerts on unauthorized file changes. OSSEC also provides FIM as part of its host-based IDS capabilities.