Havuz

LordOS — a free, fast and secure GNU/Linux distribution based on Debian, with its own desktop environment: display server and Wayland compos

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8

Linux kernel observability in your terminal. Built with Rust and Ratatui.

DataBuff is an AI-native APM built on Opentelemetry，with multi-agent troubleshooting out of the box.

Self-hosted AI SRE for Kubernetes — zero-instrumentation eBPF observability plus a copilot that fixes issues through guardrailed, self-verif

Lightweight network traffic monitoring and application identification for OpenWrt and home networks, powered by eBPF and DPI. https://demo.n

pktz - eBPF-powered network traffic monitor - per process, per connection, live

top, but for the HTTP endpoints on your host — a live dashboard of the most active plaintext HTTP endpoints, right in the terminal.

One binary. Lightweight, high-performance. Observe your network with eBPF. Ask AI. Extend with MCP

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbm

⚡ The Ultra-Lean AI & High-Performance Developer Linux Distribution. Sub-350MB idle RAM, dynamic zRAM (ZSTD), 45 native GTK3 zero-terminal G

Security-oriented three-axis observability for sandboxed AI agents: model intent, app context, and runtime telemetry into verifiable evidenc

Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.

eBPF tracer and analyzer for io_uring. Reconstructs per-request latency, io-wq punts, and batching from kernel tracepoints, then names the p

BPF portability analyzer for compiled eBPF object files. Reports minimum kernel version requirements, data flow patterns, and CO-RE coverage

eBPF Runtime Reporter and Profiler

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process with

Confine an AI coding agent to one directory with a BPF-LSM program, and watch every escape it tries.

Multi-client Linux telemetry engine built with C++20, epoll, immutable snapshot publication, bounded backpressure, explicit metric freshness

Live terminal Redis traffic profiler built on eBPF. Ranks key patterns, flags footguns, reads TLS.

SunnyDayBPF: eBPF-based post-syscall user-buffer telemetry deception research by Azizcan Daştan

eBPF ransomware detection & response agent for Linux — single static binary, no kernel modules, behavioural scoring, process pause/kill

K-O11y: Kubernetes Observability Platform (SigNoz + OTel + Beyla)

Home IoT Gateway Traffic Analysis System With eBPF

eBPF egress firewall for Kubernetes — see and enforce what every pod talks to (domains, HTTP paths, headers, IPs), attributed per pod, enfor

Open-source eBPF compatibility evidence and CI gate

Hound is a Kubernetes network observability agent that exposes TCP connection-level metrics (state, throughput, retransmits, RTT, SYN anomal

Device management & monitoring system. Go backend (Chi + SQLite, CGO-free) with an embedded SvelteKit 5 SPA — single-binary deploy. SNMP/ICM

Open-source enterprise SOC platform — SIEM · SOAR · EDR · DPI · MDM · NGFW in one stack. Self-host in minutes.

eBPF Prometheus exporter for AI-agent activity — per-agent tools, domains, ports, files, CPU & network — with a Grafana dashboard. A yeet se

Live audit log of every command, file, and network connection a Claude Code (or any matched) session makes, from the kernel.

Container orchestration in one binary - containerd, its own eBPF datapath, Let's Encrypt TLS, GitOps, autoscaling, and an MCP server. No Kub