utmstack

    utmstack/UTMStack

    Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

    security
    cmmc
    compliance
    hipaa
    incident-response
    log-analysis
    TypeScript
    AGPL-3.0
    592 stars
    83 forks
    592 GitHub watchers
    Updated Oct 30, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    5 releases in the last 90 days, the latest 5 days ago, with 17 contributors on GitHub.

    Gained 54% fewer stars in the last 90 days than in the 90 days before.

    Use Cases & Benefits

    • Provides an enterprise-ready SIEM and SOAR platform integrating real-time log correlation and threat intelligence for comprehensive security management.
    • Delivers faster threat detection and response by performing correlation before data ingestion, reducing workload and improving real-time analysis accuracy.
    • Use for building a security operations center (SOC) that requires unified threat detection and automated incident response workflows.
    • Use for ensuring compliance with standards like HIPAA, CMMC, and SOC2 through integrated security auditing and log management.
    • Use for threat hunting and malware detection by leveraging AI-powered analysis and continuous threat intelligence updates across multiple data sources.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    AGPL 3.0

    Network copyleft: like the GPL, and also triggered by offering the software over a network.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    • AGPL-style copyleft also applies when the software is offered over a network.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    Enterprise-ready SIEM and XDR powered by Real-Time correlation and Threat Intelligence

    Welcome to the UTMStack open-source project! UTMStack is a unified threat management platform that merges SIEM (Security Information and Event Management) and XDR (Extended Detection and Response) technologies. Our unique approach allows real-time correlation of log data, threat intelligence, and malware activity patterns from multiple sources, enabling the identification and halting of complex threats that use stealthy techniques. Visit an online demo here.

    We have a dedicated repository for correlation rules, contributors are welcome to submit a pull request.

    Excerpt from the utmstack/UTMStack README on GitHub (AGPL-3.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    83+8

    Open issues

    201+34

    Compared with peers in Security

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    utmstack/UTMStack compared with Security repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    cloudflare/security-audit-skill61.7K+8.8K17—
    KeygraphHQ/shannon51.2K+1.1K328 days ago
    vxcontrol/pentagi33.5K+7123831 days ago
    Asymptote-Labs/agent-beacon3.3K+36040today
    caddyserver/caddy78.8K+267601 day ago
    utmstack/UTMStack592—645 days ago
    Category median51.2K+71238—

    Discover Repositories

    Search across tracked repositories by name or description