Open Source Alternatives
  • Alternatives
  • Categories
    Categories by size882 projects
    • Developer Tools461
    • AI & Machine Learning404
    • Web Development196
    • Business & Productivity191
    • Communication & Collaboration126
    • Security & Monitoring126
    • IT Management123
    • Product & Project Management106
    • Cloud & Hosting105
    • Data & Analytics104
    Browse all 21 categoriesLLMOps & AI Tooling, Design & Creative and 9 more
  • Blog
  • Advertise
SearchNotion, Slack, password manager.../
Submit
Open Source Alternatives
  • Alternatives
    • Developer Tools461
    • AI & Machine Learning404
    • Web Development196
    • Business & Productivity191
    • Communication & Collaboration126
    • Security & Monitoring126
    • Browse all 21 categories
  • Blog
  • Advertise
Submit your project

New open source projects by email

The projects we add and every new guide. Free, unsubscribe any time.

Open Source Alternatives LogoOpen Source Alternatives

Handpicked Open Source Alternatives to Paid Softwares

Product

  • Categories
  • Tag
  • Advertise

Resources

  • Blog
  • Collection
  • Submit

Company

  • Privacy Policy
  • Terms of Service
  • Refund Policy
  • Sitemap

Alternatives

  • Claude Code
  • Jira
  • Notion
  • Slack
  • Linear
  • Wispr Flow
  • All alternatives
© 2026 Open Source Alternatives. All rights reserved.
Open SourceAlternatives
Home/Categories/Security & Monitoring/Matano
icon of Matano

Matano

Open source alternative to Splunk, Microsoft Sentinel and Google Chronicle Security Operations

  • 1.7K stars
  • Apache-2.0
  • Last commit 652 days ago

Last verified Oct 6, 2026

Secure cloud-scale security telemetry with an open source data lake and serverless SIEM for AWS.

Visit websiteGitHub1.7K stars
image of Matano
TL;DR

Matano is a cloud-native security data lake for AWS that normalizes logs, supports detection engineering, and stores security data for analytics at large scale. It replaces closed SIEM storage and log analytics stacks for security teams that want data lake ownership. Apache-2.0 licensed repository.

Read the full breakdownHide the full breakdownWho it is for, how it works, trade-offs and the FAQ
who it's for

Who Matano is for#

Security teams building a data lake

Use Matano when long-retention security logs, detection engineering, and AWS-owned storage matter more than buying a closed SIEM bundle.

Skip if:

Your team needs a fully managed SOC platform with bundled analysts and support.

Detection engineers analyzing cloud logs

Use Matano to normalize cloud security events and build detection workflows against a data lake.

Skip if:

Your security workload is small enough for basic cloud logging and alert rules.

the problem

The problem it solves#

Security teams collect more logs than traditional SIEM pricing and storage models can comfortably handle. Cloud, identity, endpoint, and application events all need to be retained, searched, normalized, and used for detection without making every query a budget decision.

The harder problem is ownership of security data. If logs live only in a managed SIEM, teams may struggle with long retention, custom analytics, and direct access to raw historical data.

how Matano solves it

How it solves it#

AWS security data lake

Builds a security data lake in an AWS account, giving teams a place to store and analyze large volumes of security logs.

Detection and response workflows

Targets threat hunting, detection engineering, response, and cybersecurity analytics rather than generic business intelligence.

Structured log normalization

Normalizes unstructured security logs into structured data so detections and analytics can operate across sources.

strengths · trade-offs

Strengths and trade-offs#

Strengths

  • Security data stays in your cloud accountMatano's open source data lake model fits teams that want security data under their AWS control instead of only inside a vendor SIEM.
  • Built for high-volume analyticsThe project positions itself for petabyte-scale security analytics, which matters for teams priced out of retaining everything in traditional SIEM storage.

Trade-offs

  • -AWS-centered architectureMatano is built for AWS security data lake deployments. Teams standardized on another cloud or looking for a simple hosted SIEM should validate fit carefully.
tech stack · detected from GitHub

What it's built on#

Languages
JavaJavaScriptKotlinPythonRustTypeScript
Infrastructure
AWS
frequently asked

FAQ#

What is Matano used for?

Matano is used to build an AWS-based security data lake for threat hunting, detection, response, and security analytics.

Is Matano a SIEM?

Matano overlaps with SIEM use cases, but it is framed around a security data lake and detection workflows rather than a closed managed SIEM product.

Who should use Matano?

Matano fits security teams that want to own high-volume security data in AWS and build custom detection analytics.

also worth a look

Similar open-source tools#

Unkey

Alternative toKong Konnect

Unified API keys, gateways, and observability for developers.

  • 5,471 GitHub stars
  • FSL-1.1-ALv2Licence FSL-1.1-ALv2

Shadowbroker

InSecurity & Monitoring

Real-time OSINT map: aircraft, ships, CCTV, satellites, self-hosted.

  • 11,344 GitHub stars
  • AGPL-3.0Licence AGPL-3.0

Worldmonitor

Alternative toSeerist

Self-hosted geopolitical risk map: 58 layer types, 469 OSINT feeds.

  • 88,941 GitHub stars
  • AGPL-3.0Licence AGPL-3.0

Radar

Alternative toLens

Open-source Kubernetes UI with topology, GitOps, and AI agent MCP.

  • 3,866 GitHub stars
  • Apache-2.0Licence Apache-2.0

Homeio

Alternative toUnraid

Browser desktop for your self-hosted home server

  • 90 GitHub stars
  • AGPL-3.0Licence AGPL-3.0

Gitdrive

Alternative toiCloud Drive

Your GitHub repos as a native drive in macOS Finder

  • 130 GitHub stars
  • MITLicence MIT
by category

Open source tools in these categories#

126

Security & Monitoring

REA (Reverse Engineer Anything), RustDesk, Uptime Kuma
104

Data & Analytics

Firecrawl, ragflow, Worldmonitor
106

Cloud & Hosting

dify, RuView, rtk

Featured

Inbox Zero

Alternative toSuperhuman

AI email assistant that drafts replies and clears your inbox

  • 12,712 GitHub stars
  • AGPL-3.0Licence AGPL-3.0
  • #Email

Omnara

Alternative toCClaude Managed Agents

Open-source agent deployment API. Self-host or use Omnara Cloud.

  • 2,957 GitHub stars
  • Apache-2.0Licence Apache-2.0
  • #AI Agents

rakazo

Alternative toGrok Bot

AI teammates you own: your keys, your model, your machine.

  • 4,904 GitHub stars
  • Apache-2.0Licence Apache-2.0
  • #AI Agents
Feature your project

New open source projects by email

The projects we add and every new guide. Free, unsubscribe any time.

Find open source alternatives to paid software

/
  • Claude Code to OpenCode
  • Jira to Windshift
  • Notion to AppFlowy
  • Slack to Mattermost
  • Linear to GitLab
  • Wispr Flow to Handy
  • CapCut to Concat
  • Grok Bot to rakazo
  • Superhuman to Inbox Zero
  • Airtable to AITable
  • Muse to OpenClaw
  • GitHub Copilot to Cline
  • Datadog to Netdata
  • Microsoft Teams to Rocket.Chat
  • Pinecone to Qdrant
  • Zapier to n8n
  • Devin AI to OpenHands
  • Firebase to Supabase
  • 1Password to KeePassXC
  • Confluence to Docmost
  • Contentful to Strapi
  • Adobe Premiere Pro to Shotcut
  • ChatGPT to AnythingLLM
  • LangSmith to Langfuse
  • Claude Code to OpenCode
  • Jira to Windshift
  • Notion to AppFlowy
  • Slack to Mattermost
  • Linear to GitLab
  • Wispr Flow to Handy
  • CapCut to Concat
  • Grok Bot to rakazo
  • Superhuman to Inbox Zero
  • Airtable to AITable
  • Muse to OpenClaw
  • GitHub Copilot to Cline
  • Datadog to Netdata
  • Microsoft Teams to Rocket.Chat
  • Pinecone to Qdrant
  • Zapier to n8n
  • Devin AI to OpenHands
  • Firebase to Supabase
  • 1Password to KeePassXC
  • Confluence to Docmost
  • Contentful to Strapi
  • Adobe Premiere Pro to Shotcut
  • ChatGPT to AnythingLLM
  • LangSmith to Langfuse