Matano
An open source, serverless security data lake for AWS that normalizes logs, enables detection-as-code, and supports petabyte-scale threat hunting.
What is Matano?
Matano is an open source security data lake platform built for AWS that ingests, normalizes, and stores security logs from various sources into a structured, queryable data lake. It enables security teams to perform threat hunting, detection, and response at petabyte scale using open table formats and detection-as-code, reducing reliance on proprietary SIEM solutions.
Security engineers, SOC analysts, and cloud security teams operating on AWS who need a scalable, cost-effective platform for centralizing security logs, writing custom detections, and performing investigations without vendor lock-in.
Developers choose Matano because it provides a fully serverless, open-source alternative to commercial SIEMs, leveraging AWS-native services and open standards (Iceberg, ECS) for complete data ownership, unlimited scalability, and significant cost reduction while enabling powerful detection-as-code workflows.
Overview
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Use Cases
Best For
- Reducing SIEM licensing and operational costs by migrating to an open-source data lake
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
