Early release 0.2 · free and open source (Apache 2.0)

See what runs on your machines, and what threatens them.

A light, self-hosted security platform for homelabs and small businesses: vulnerabilities, compliance, threat alarms and an optional AI assistant that runs on your platform, in one fast console.

Try the live demo Get started Free · self-hosted · platform on Fedora 44
The OpenVIBES console's dashboard: active alarms, critical and high findings and exploited vulnerabilities with their trends, what needs attention first, and the most exposed hosts.
What it does

Four things, done properly

Know what's vulnerable

Every host reports its installed software. OpenVIBES matches it against the distributions' own security advisories and puts known-exploited vulnerabilities first.

  • Fedora, Debian, Ubuntu, Rocky Linux and AlmaLinux advisories
  • Software, open ports and services per host
The Vulnerabilities view: security advisories with their severity, CVSS and EPSS scores, known-exploited markers and the number of affected hosts.

Check your baseline

Signed compliance rules run on every host. The baseline flags services exposed to the network, such as the Docker API, Redis or a database, and risky servers like Telnet and rsh. Write your own rules and sign them on your platform.

  • Baseline rules included
  • Your own rules, your own signing key
The Compliance view: baseline findings such as an exposed Docker API, MongoDB or Redis, by severity, with how many hosts each affects and their triage.

Hear about threats in seconds

The agent watches every program start, with eBPF and kernel audit as the fallback. A web server starting a shell is in your console seconds later, with why the rule fired and the process tree.

  • Built-in rules, e.g. a web or database server starting a shell
  • Quiet by default; suppress what is normal for you
  • Triage, cases and an audit trail
An alarm, 'A web server started a shell', with the condition that matched and the values seen.

Ask in plain words

An optional assistant runs on your own platform. Ask what to fix first, which hosts are stale, or what a finding means.

  • With the bundled model, nothing leaves your network
  • Answers link to the hosts and findings they are about
The assistant beside the dashboard, answering 'Which vulnerabilities are being exploited?' with the advisories to patch first.
Why OpenVIBES

Built for people who are tired of heavy security tools

Interface first

Fast, uncluttered screens that each answer a question.

Light agent

A small Rust agent with a strict footprint budget.

Quiet by default

Alerts on what matters; everything is tunable.

Yours to shape

Your own rules, collection, noise and views.

Your data stays yours

Self-hosted. No vendor cloud, no telemetry.

No licence locks

Every feature is in the Apache-2.0-licensed project.
Where it stands

An early release, moving fast

Runs on today

  • Platform: Fedora 44 (x86_64), online or with no internet at all (offline kit), 2 GB RAM and 1 vCPU: in the lab that size served 500 simulated agents without swapping
  • Agents: Fedora 44, AlmaLinux and Rocky Linux 9+, Debian 12+, Ubuntu 22.04+ and Arch (x86_64), each from its own signed package, installed with the command the console gives you
  • Threat alarms from eBPF on Linux 5.8 and later (kernel audit as the fallback)
  • Vulnerability data for Fedora, Debian, Ubuntu, Rocky Linux and AlmaLinux hosts

Coming in 0.3

  • A rebuilt admin menu on the platform host: guided install, update with a backup first, repair, certificates and optional parts
  • Roles and permissions: your own roles, host groups and labels, and suppressions that need a second person's approval
  • Linux hardening checks (sshd, sysctls, file modes, mounts and more), switched on per host group
  • New list and detail pages with saved views, starting with Hosts and Alarms

After that

  • Alarms from your UniFi gateway's IPS/IDS, set up in the console
  • Fully offline agent install from the console
  • Platform on AlmaLinux and Rocky Linux
  • Windows agent
Get started

From nothing to your first findings

  1. Install the platform on a Fedora 44 host, as your own user: 
    sudo sh -c "$(curl -fsSL https://openvibes-project.github.io/install.sh)"
  2. Run Setup. It opens by itself: enter the host name others will use, press Start, and write down the admin password it shows once.
  3. Add hosts from the console: Enrollment → Add a host → Copy CLI install, then paste it into a root shell on each host.

Full walkthrough: the quick setup guide. Prefer to read the script first? Download install.sh, read it, then run sudo sh install.sh. No output at all means the download failed. Package repository and signing key: Packages.