{"adoption": {"forks": 477, "observed_at": "2026-08-28T04:07:09.559294+00:00", "stars": 2672}, "canonical_url": "https://ross.abutalabs.com/products/elkeid", "card": {"archived": false, "artifact_type": "application", "description": "Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.", "domain": ["security", "cloud-computing"], "enriched": true, "function": ["security", "monitoring", "alerting", "logging"], "health_score": 79, "homepage": "https://elkeid.bytedance.com", "language": "Go", "license": null, "license_family": "other", "maturity": "active", "member_repos": ["bytedance/Elkeid"], "name": "bytedance/Elkeid", "platform": ["self-hosted", "go"], "pushed_at": "2026-05-11T03:51:11+00:00", "repo": "bytedance/Elkeid", "stars": 2672, "tags": ["hids", "edr", "rasp", "cwpp", "intrusion-detection", "kernel-driver", "k8s-audit", "rule-engine", "host-security", "container-security", "containers", "devops", "linux", "docker", "kubernetes"], "topics": ["hids", "security", "rasp", "edr", "cwpp", "linux-security"], "urls": [], "use_cases": ["detect intrusions on linux hosts and containers", "monitor kubernetes audit logs for attacks", "protect running applications with RASP without restarting them", "inventory host and container assets", "detect vulnerabilities and weak security baselines on servers", "detect rootkits and kernel-level backdoors", "build custom detection rules with a rule engine"], "what_it_is": "Elkeid is an open-source cloud workload protection platform from ByteDance that provides host intrusion detection (HIDS), runtime application self-protection (RASP), container/K8s security monitoring, and vulnerability/baseline scanning. It combines a kernel-level data collection driver, on-host agents and plugins, a backend agent center, and the Elkeid HUB rule engine into a unified self-hosted security platform.", "when_to_avoid": ["you need a fully turnkey managed product with complete out-of-the-box detection policies", "your fleet is primarily Windows or macOS since Elkeid targets Linux", "you cannot operate a multi-component self-hosted backend (Kafka, Redis, MongoDB, etc.)"], "when_to_choose": ["you need a self-hosted HIDS/EDR covering hosts, containers, and K8s in one platform", "you want kernel-level telemetry and RASP probes derived from large-scale production use", "you need asset inventory, vulnerability, and baseline checks alongside intrusion detection"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/elkeid", "repo": "bytedance/Elkeid", "role": "main", "score": 70}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:07:09.559294+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:18:06.403172+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "36ba2fc6a0cf767b1420e7a239077510e6db2a666266118691a21e82cd390a83", "fetched_at": "2026-08-28T04:07:09.559294+00:00", "kind": "readme", "missing": false, "url": "https://github.com/bytedance/Elkeid"}, {"content_hash": "79fc79947b5f56d1a3688c7b43b380fadae83f0134f3bc483eea13714284ba4e", "fetched_at": "2026-08-29T10:00:41.462599+00:00", "kind": "homepage", "missing": false, "url": "https://elkeid.bytedance.com"}, {"content_hash": "ec6cbcdb700b3a42ea00fb6049ca10e628880320a74e04a98681079ca1642f9e", "fetched_at": "2026-08-29T10:00:41.464978+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/elkeidup/README-zh_CN.html"}, {"content_hash": "07540b4ed40767c667e967643f5b8f55d437dd61170f57981c2ad3f03da03f3f", "fetched_at": "2026-08-29T10:00:41.466831+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/docs/index.html"}, {"content_hash": "4f6379191e9e4820482c3d71afc10632a111de552a92e22dfd1a721fb27704f2", "fetched_at": "2026-08-29T10:00:41.468653+00:00", "kind": "site_page", "missing": false, "url": "https://elkeid.bytedance.com/blogs/come_see_elkeid_at_black_hat/come_see_elkeid_at_black_hat.html"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 81, "longevity": 100, "rhythm": 40}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2084, "days_push": 114, "days_rel": 615, "gap_med": 10.0, "n_releases_24m": 9}, "score": 70, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}