OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
  • C 87%
  • Shell 7.3%
  • Perl 2.7%
  • Makefile 1.9%
  • NSIS 0.6%
  • Other 0.4%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
2026-08-25 10:33:44 -04:00
.github/workflows Add CodeQL workflow 2022-12-02 11:33:54 +01:00
active-response active response script for nftables 2021-12-26 17:02:50 +01:00
contrib Closes issue #1970 2021-06-01 12:26:08 -04:00
debian_files/3.6.0/ossec-hids-agent/debian Move to 3.6.0 2020-06-20 13:38:31 +09:00
doc Fixing trailing newlines 2021-05-21 16:19:08 -07:00
etc * dovecot decoder fix 2023-11-24 12:37:21 +10:00
src Merge pull request #2139 from Tylerlhess/master 2026-03-14 15:55:57 -04:00
.gitignore Added feature pcre2 2019-01-22 09:51:12 +01:00
.travis.yml Merge pull request #1941 from ddpbsd/valgrind 2021-01-06 13:53:59 -05:00
BUGS Updating versions 2024-05-10 18:32:03 -04:00
build.sh Add build script for arm64 2020-03-02 15:36:54 +09:00
CHANGELOG.md Update for 3.8.0 2025-01-05 16:20:20 -05:00
CONFIG Updating versions 2024-05-10 18:32:03 -04:00
CONTRIBUTORS More version updates 2019-01-30 08:30:39 -05:00
Dockerfile Use bionic 2020-06-20 14:03:13 +09:00
INSTALL Updating versions 2024-05-10 18:32:03 -04:00
install.sh Merge branch 'master' into aix7 2023-08-08 12:31:05 -04:00
LICENSE spelling: routines 2017-08-29 02:59:24 -04:00
README.md Updating versions 2024-05-10 18:32:03 -04:00
SECURITY.md Update SECURITY.md 2024-03-04 15:11:01 -05:00
SUPPORT.md Create SUPPORT.md 2017-08-02 16:32:16 -04:00

OSSEC v3.8.0 Copyright (C) 2019 Trend Micro Inc.

Information about OSSEC

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS (host-based intrusion detection), log monitoring and SIM/SIEM together in a simple, powerful and open source solution.

Visit our website for the latest information. www.ossec.net

Current Releases

The current stable releases are available on the ossec website.

  • Releases can be downloaded from: Downloads
  • Release documentation is available at: docs

Development

The development version is hosted on GitHub and just a simple git clone away.

Build Status Coverity Scan Build Status

Screenshots

File Integrity Monitoring

FIM

Attack Detection

SSH Brute Force

Help / Support

Join us on slack, ossec.slack.com: Invites to slack@ossec.net

Join us on Discord: https://discord.gg/BXzM75Xzq7

Credits and Thanks

  • OSSEC comes with a modified version of zlib and a small part of openssl (sha1 and blowfish libraries)
  • This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)
  • This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)
  • This product include software developed by the zlib project (Jean-loup Gailly and Mark Adler)
  • This product include software developed by the cJSON project (Dave Gamble)
  • Atomicorp hosting the annual OSSEC conference. Presentations for the 2019 conference can be found at https://www.atomicorp.com/ossec-con2019/