BoxyHQ
A fully open-source audit logs service with an embeddable UI, designed for easy deployment to your own Kubernetes cluster.
What is BoxyHQ?
Retraced is an open-source audit logging service that helps applications maintain a compliant, searchable, and exportable record of user and system events. It solves the problem of fragmented or non-existent audit trails by providing a centralized solution with an embeddable viewer and easy integration via client libraries.
Developers and DevOps teams building applications that require compliance with security standards (e.g., SOC 2, GDPR) or need detailed activity monitoring for debugging and oversight.
Developers choose Retraced because it offers a fully self-hosted, open-source alternative to proprietary audit log services, giving them complete data ownership, customization through an embeddable UI, and seamless integration with existing Kubernetes-based infrastructure.
Overview
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
Use Cases
Best For
- Adding compliant audit trails to SaaS applications
- Self-hosting audit logs for data privacy requirements
- Monitoring user activity in multi-tenant systems
- Debugging production issues with detailed event histories
- Meeting regulatory standards like SOC 2 or GDPR
- Embedding audit log viewers directly into admin panels
Not Ideal For
- Projects needing real-time event streaming and complex analytics beyond audit logging
- Small teams without Kubernetes expertise seeking a fully managed cloud service
- Applications where basic file or console logging suffices without compliance requirements
- Environments requiring extensive client libraries beyond Go and JavaScript
Pros & Cons
Pros
Designed for deployment in your own infrastructure, particularly Kubernetes, giving full data ownership and compliance control as highlighted in the key features.
Offers official SDKs for Go and JavaScript to streamline event ingestion, making it simple to add audit logs to applications.
Provides quick filtering and querying of events, along with data export for external analysis, essential for compliance and debugging.
Includes a customizable interface that can be integrated directly into applications, enhancing user experience without separate logins.
Cons
The admin portal currently requires SMTP setup for magic link login, with other authentication methods still in development, as noted in the README.
Only official SDKs for Go and JavaScript are available, missing support for popular languages like Python or Java, which may hinder integration.
Best deployed on Kubernetes, requiring significant DevOps expertise and infrastructure management, which can be a barrier for smaller teams.
Detailed documentation is hosted separately on another GitHub repo, which might delay onboarding and increase setup time.
Frequently Asked Questions
Related Projects
wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
opensnitchOpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
FibratusAdversary tradecraft detection, protection, and hunting
MatanoOpen source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.