DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
Alternatives To Mozdef
Project NameStarsDownloadsRepos Using ThisPackages Using ThisMost Recent CommitTotal ReleasesLatest ReleaseOpen IssuesLicenseLanguage
Sigma7,065328 hours ago35January 13, 201916otherPython
Main Sigma Rule Repository
8 hours ago105apache-2.0JavaScript
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
11 days ago30bsd-3-clausePython
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
22 years ago22August 03, 2020mpl-2.0Python
DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
Spring Boot Leaning2,068
a year ago1Java
Spring Boot 2.X 最全课程代码
Dork Admin1,395
2 years agomit
Elasticsearch Readonlyrest Plugin951
9 days ago47October 10, 20237gpl-3.0Scala
Free Elasticsearch security plugin and Kibana security plugin: super-easy Kibana multi-tenancy, Encryption, Authentication, Authorization, Auditing
a year ago120apache-2.0Python
Scaling Network Scanning. Changes prior to 1.0 may cause difficult to avoid backwards incompatibilities. You've been warned.
Awesome Cloud Security527
a month ago
A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
8 hours ago27otherShell
Logging Made Easy (LME) is a free and open logging and protective monitoring solution serving all organizations.
Alternatives To Mozdef
Select To Compare

Alternative Project Comparisons

Tests Documentation Status

MozDef: LOGO

Deprecation Notice

Mozilla is no longer maintaining the Mozilla Enterprise Defense Platform (MozDef) project.

Please fork it to continue development.


Give MozDef a Try in AWS:

The following button will launch the Mozilla Enterprise Defense Platform in your AWS account.

Warning: Pressing the "Launch Stack" button and following through with the deployment will incur charges to your AWS account.

Launch MozDef


The inspiration for MozDef comes from the large arsenal of tools available to attackers. Suites like metasploit, armitage, lair, dradis and others are readily available to help attackers coordinate, share intelligence and finely tune their attacks in real time. Defenders are usually limited to wikis, ticketing systems and manual tracking databases attached to the end of a Security Information Event Management (SIEM) system.

The Mozilla Enterprise Defense Platform (MozDef) seeks to automate the security incident handling process and facilitate the real-time activities of incident handlers.


  • Provide a platform for use by defenders to rapidly discover and respond to security incidents
  • Automate interfaces to other systems like bunker, cymon, mig
  • Provide metrics for security events and incidents
  • Facilitate real-time collaboration amongst incident handlers
  • Facilitate repeatable, predictable processes for incident handling
  • Go beyond traditional SIEM systems in automating incident handling, information sharing, workflow, metrics and response automation


MozDef is in production at Mozilla where we are using it to process over 300 million events per day.

Popular Security Projects
Popular Elasticsearch Projects
Popular Security Categories
Related Searches

Get A Weekly Email With Trending Projects For These Categories
No Spam. Unsubscribe easily at any time.
Elk Stack