{"adoption": {"forks": 122, "observed_at": "2026-08-28T04:05:23.577607+00:00", "stars": 1694}, "canonical_url": "https://ross.abutalabs.com/products/matano", "card": {"archived": false, "artifact_type": "service", "description": "Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS", "domain": ["security", "big-data", "cloud-computing", "analytics"], "enriched": true, "function": ["database", "search-engine", "alerting", "etl", "streaming", "security", "monitoring"], "health_score": 20, "homepage": "https://matano.dev", "language": "Rust", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["matanolabs/matano"], "name": "matanolabs/matano", "platform": ["cloud", "serverless", "self-hosted", "rust"], "pushed_at": "2025-01-08T04:14:13+00:00", "repo": "matanolabs/matano", "stars": 1694, "tags": ["security-data-lake", "siem", "threat-hunting", "detection-as-code", "apache-iceberg", "log-management", "dfir", "secops", "cloud-native", "sigma-rules"], "topics": ["aws", "cloud", "security", "big-data", "serverless", "apache-iceberg", "log-analytics", "log-management", "threat-hunting", "rust", "alerting", "cloud-native", "aws-security", "cloud-security", "cybersecurity", "secops", "security-tools", "dfir", "detection-engineering", "siem"], "urls": [], "use_cases": ["build a security data lake on AWS", "collect and normalize security logs from many sources", "run threat hunting queries over petabytes of logs", "write realtime detections as code in Python", "import Sigma rules for detection engineering", "replace a commercial SIEM with an open-source alternative", "transform and enrich logs during ingestion with VRL", "do DFIR investigations with Athena SQL queries"], "what_it_is": "Matano is an open-source, cloud-native security data lake that runs in your AWS account, normalizing unstructured security logs into a structured, queryable lake built on Apache Iceberg. It provides realtime detection-as-code in Python with Sigma rule import, VRL-based log transformation pipelines, and integrations with 50+ log sources at petabyte scale.", "when_to_avoid": ["you are not on AWS or need multi-cloud or on-premises deployment", "you want a turnkey managed SIEM with enterprise support out of the box", "your team cannot operate cloud infrastructure and IaC deployments", "you only need small-scale log analytics without security focus"], "when_to_choose": ["you are an AWS-based security team wanting a self-hosted, vendor-neutral SIEM alternative", "you need petabyte-scale log storage with open table formats like Apache Iceberg", "you want detections managed as code with Sigma rule support", "you need realtime log normalization and enrichment without managing servers"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/matano", "repo": "matanolabs/matano", "role": "main", "score": 23}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:23.577607+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:37:59.670112+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "f8d9f9c5081e4a36d0ef83d6b2263f7dc3da38a3fdd0f280e5d4126d02a45eca", "fetched_at": "2026-08-28T04:05:23.577607+00:00", "kind": "readme", "missing": false, "url": "https://github.com/matanolabs/matano"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1522, "days_push": 602, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 23, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}