Amazon GuardDuty logo

The self-hosted Amazon GuardDuty alternative

Managed AWS threat-detection service that continuously analyzes CloudTrail, VPC Flow Logs, DNS logs and other telemetry to identify malicious activity, anomalous behavior, and unauthorized access using threat intelligence and machine learning; generates findings for investigation and alerting.

Alternatives to Amazon GuardDuty

CrowdSec is an open-source security engine that detects attacks from logs and blocks malicious IPs using bouncers and community-curated threat intelligence.

CrowdSec screenshot

14.7k stars710 forksMITlast commit Actively maintained

What replacing Amazon GuardDuty actually involves

Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 1 of 1 shipped a commit in the last six months. Licences in this list: MIT. In exchange you take on hosting, backups and updates yourself.

Browse everything in Network Security (VPN, Firewall, WAF).

Other tools people replace alongside Amazon GuardDuty