Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
| Date | Stars |
|---|---|
| 2026-07-24 | 1687 |
| 2026-07-25 | 1687 |
| 2026-07-28 | 1687 |
| 2026-07-30 | 1687 |
| 2026-08-06 | 1687 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
0.0
growth rate 0.00%/day
<p align="center">
<a href="https://www.matano.dev"><img src="assets/cover_wide.png" width=600></a>
</p>
<p align="center">
<!-- <a href="#"><img src="https://img.shields.io/badge/Deploys%20to-AWS-%23FF9900.svg?style=for-the-badge&logo=amazon-aws&logoColor=white&labelColor=232F3E"/></a>
<a href="#"><img src="https://img.shields.io/badge/rust-%233A3B3C.svg?style=for-the-badge&logo=rust&labelColor=B1513E&logoColor=white"/></a>
<br/> -->
<a href="https://discord.gg/YSYfHMbfZQ" target="_blank"><img src="https://img.shields.io/badge/rust-%233A3B3C.svg?label=built with&logo=rust&logoColor=ffffff&color=B1513E&labelColor=0d1117"/></a>
<a href="#"><img src="https://img.shields.io/badge/deploys%20to-aws-%23FF9900.svg?logo=amazon-aws&logoColor=white&labelColor=232F3E"/></a>
<a href="https://discord.gg/YSYfHMbfZQ" target="_blank"><img src="https://img.shields.io/discord/996484553290022973.svg?label=join us&logo=discord&logoColor=ffffff&color=7389D8&labelColor=6A7EC2"/></a>
<a href="https://twitter.com/intent/follow?screen_name=matanolabs" target="_blank"><img src="https://img.shields.io/twitter/follow/matanolabs?style=social" alt="Twitter Follow"/></a>
<a href="/LICENSE" target="_blank"><img src="https://img.shields.io/github/license/matanolabs/matano?style=flat"/></a>
<a href="https://bestpractices.coreinfrastructure.org/projects/6478"><img src="https://bestpractices.coreinfrastructure.org/projects/6478/badge"></a>
</p>
## Open source security data lake for AWS
Matano Open Source Security data lake is an open source **cloud-native security data lake**, built for security teams on AWS.
> [!NOTE]
> Matano offers a commercial managed Cloud SIEM for a complete enterprise Security Operations platform. [Learn more](https://matanosecurity.com).
<div>
<h3 align="center">
<a href="https://www.matano.dev/docs">Docs</a>
<span> | </span>
<a href="https://www.matano.dev">Website</a>
<span> | </span>
<a href="https://discord.gg/YSYfHMbfZQ">Community</a>
</h3>
</div>
## Features
<div align="center">
<br>
<img src="assets/matano_athena.png" width="650">
</div>
<br>
- **Security Data Lake:** Normalize unstructured security logs into a structured realtime data lake in your AWS account.
- **Collect All Your Logs:** Integrates out of the box with [50+ sources](https://www.matano.dev/docs/log-sources/managed-log-sources) for security logs and can easily be extended with custom sources.
- **Detection-as-Code:** Use Python to build realtime detections as code. Support for automatic import of [Sigma](https://www.matano.dev/docs/detections/importing-from-sigma-rules) detections to Matano.
- **Log Transformation Pipeline:** Supports custom VRL ([Vector Remap Language](https://vector.dev/docs/reference/vrl/)) scripting to parse, enrich, normalize and transform your logs as they are ingested without managing any servers.
- **No Vendor Lock-In:** Uses an open table format ([Apache Iceberg](https://iceberg.apache.org/)) and open schema standards ([ECS](https://github.com/elastic/ecs)), to give you full ownership of your security data in a vendor-neutral format.
- **Bring Your Own Analytics:** Query your security lake directly from any Iceberg-compatible engine (AWS Athena, Snowflake, Spark, Trino etc.) without having to copy data around.
- **Serverless:** Fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops.
## Architecture
<div align="center">
<br>
<img src="assets/diagram.png" width="600">
</div>
## 👀 Use cases
- Reduce SIEM costs.
- Augment your SIEM with a security data lake for additional context during investigations.
- Write detections-as-code using Python to detect suspicious behavior & create contextualized alerts.
- ECS-compatible serverless alternative to ELK / Elastic Security stack.
## ✨ Integrations
#### Managed log sources
- [**AWS CloudTrail**](https://wExcerpt of 21,683 characters
Read on GitHub
433
120
7
4
2
1
1
1
1
1
1
1
1
Would you bet a product on this? Bounded 0–100 and slow moving.
matched fp:517f5b42076e6b7d, topic:serverless