# OSSEC privacy rating

An open source host-based intrusion detection system that performs log analysis, file integrity checking, rootkit detection, real-time alerting and active response.

## Summary

OSSEC scores 50 out of 100 (grade D) on the intrusion detection criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit.

- Website: https://www.ossec.net
- Source code: https://github.com/ossec/ossec-hids
- License: GPL-2.0
- Home page trackers: Google Analytics, Google Fonts (not scored), Google Tag Manager
- Category: [Intrusion detection](https://privacyratings.com/intrusion-detection/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | GPL-2.0 and BSD-3-Clause. | https://github.com/ossec/ossec-hids/blob/main/LICENSE |
| No trackers or telemetry | No | The website loads Google Analytics and Google Tag Manager. |  |
| No ads or data sales | Yes | Development is funded by Atomicorp's commercial OSSEC products and support, with no ads. | https://www.ossec.net/products/ |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/intrusion-detection/ossec/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/intrusion-detection/ossec.md