No. 12 of 20 ·User and Entity Behavior Analytics Software

OpenUBA

Web · Self-hosted · API

Freedom report

One barScore 5.3

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

OpenUBA is ranked #12 of 20 in user and entity behavior analytics software on Freedom251. It runs on API, Self-hosted, Web.

Compared on user and entity behavior analytics software

Deployment: on-premises
Entity coverage: users; entities
Anomaly methods: hybrid

Best OpenUBA alternatives

See all 19

One bar Netskope One Behavior Analytics Paid plans No. 1—5.7 One bar Security Vision TIP Paid plans No. 2—5.6 One bar DTEX Insider Risk Management Paid plans No. 3—5.5 One bar Security Vision UEBA Paid plans No. 4—5.5 No signal Securonix UEBA Paid plans No. 5—5.4 No signal Varonis SSPM Paid plans No. 6—5.4

The record

Product: OpenUBA is an open source framework for user and entity behavior analytics used for security analytics.
Approach: It uses inspectable, auditable models and says model transparency supports compliance, investigations, and decision making.
Model lifecycle: Users can install, train, and run models, track versions and artifacts, and use feedback and shadow modes.
Model frameworks: The framework lists support for scikit-learn, PyTorch, TensorFlow, Keras, NetworkX, and Spark MLlib.
Detection rules: A visual flow-based rule builder composes model outputs and logical conditions, with triggered alerts linked to anomalies and cases.
Data sources: Listed data loaders include local CSV, Elasticsearch, Spark, and aggregated multi-source loading.
API and SDK: It provides REST endpoints, a GraphQL API, and a Python SDK for model registration, job submission, and visualization.
Access control: The README lists JWT authentication, four roles, configurable per-page read/write permissions, and audit logging.
Execution isolation: Model training and inference run in isolated Docker containers or ephemeral Kubernetes Jobs, with resource limits described as a way to contain misbehaving models.
LLM providers: The built-in assistant supports local Ollama and cloud APIs from OpenAI, Claude, and Gemini.
Intended users: The project describes its open-model approach as designed for security analysts curious about how models work under the hood.
Current maturity: The repository README labels the project beta and identifies the release as v0.0.2.

Where it ranks on Freedom251

Best User and Entity Behavior Analytics Software in 2026#12 of 20

Is OpenUBA yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote OpenUBA

Sources

github.com/GACWR/OpenUBA· checked 4 Oct 2026