Error Monitoring & APM
4.0/5.0
VerifiedFreeLast technical review:
Markdown for AI (.md)

Fengarde

OCSF-native open-source security pipeline for IT, AI, and OT

Pricing

$0/mo

Free
Score

4.0/5

License
Apache-2.0
Last technical review
2026-11-03
Available plansVisit website (opens in a new tab)

Technical Overview

Fengarde is an open-source, self-hosted security pipeline built for IT, AI, and OT environments. It converts raw log lines into verified incidents and draft regulatory notifications using an OCSF-native event bus architecture. It is distributed under the Apache-2.0 license.

Analyst Evaluation: Pros and Limitations

Verified Advantages

  • Modular event-bus architecture with decoupled services
  • OCSF-native for standardized security telemetry
  • Fully open-source under Apache-2.0 license

Technical Considerations

  • Requires self-hosted infrastructure and manual setup
  • Early stage community and limited ecosystem documentation

Technical Capabilities & Features

4/7
Included:REST & GraphQL API
Not available:SSO / SAML Authentication
Included:Self-Hosted Option
Included:Full Data Export
Not available:Role-Based Access Control (RBAC)
Not available:Custom Domains & SSL
Included:Immutable Audit Logs
Scorecard
Show detailsHide details

Technical Scorecard: Fengarde

75/100
DX & Tech Documentation
Favorable
70/100
Pricing Fairness
Excellent
90/100
Security & Governance
Favorable
75/100
Data Portability & Sovereignty
Excellent
85/100
Performance & Reliability
Improvable
55/100

Time to Value & Fit by Segment: Fengarde

Estimated Time-to-Value1 - 7 days (Agile)

Standard sprint integration without complex external dependencies.

Learning CurveModerate (Standard)

Requires consulting technical documentation and basic credentials setup.

Fit Index by Organization Size

Startup & Agile Teams1 to 50 members
8%
Mid-Market & Scaleup50 to 500 members
7%
Corporate Enterprise500+ members
6%
Pricing & TCO
Show detailsHide details

Pricing

$0.00/mo

Model: FREE.

Free Tier Verification:

  • No credit card required
  • Commercial use allowed
  • Unlimited usage with no expiration
  • No mandatory watermarks
Get Fengarde (opens in a new tab)

Billing Risks & Hidden Clauses: Fengarde

Free Tier Limits:

Completely free and open source under Apache-2.0 with self-hosted deployment.

Total Cost of Ownership (TCO) Projection: Fengarde$0.00/mo
Deterministic cost estimation at 12 and 36 months based on team size, including SSO tax premiums and annual prepay discounts.
Show detailsHide details
Licensing Cost (1 to 100+ seats)
$0/forever
Unlimited team members with zero penalties
SSO Tax (SAML Enterprise)
$0no surcharge
No artificial security barriers
3-Year Investment (Software TCO)
$0total
operates under a zero-cost or open-source model. Licensing TCO is identical:
Usage Surcharges & Bill Shock Simulator: FengardeWhat usage costs as you scale
Detect overage penalties before they impact engineering budget.
Show detailsHide details

Prototype / MVP (10 GB)

Included base quota in plan: 10 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Suitable for development; verify concurrent connection limits.

Base Production (50 GB)

Included base quota in plan: 50 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Implement table compression policies and temporal partitioning.

Active Growth (250 GB)

Included base quota in plan: 250 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Offload cold backups to standard object storage (S3).

Large Scale (1.000 GB (1 TB))

Included base quota in plan: 1,000 GB.
Low Risk / Predictable Bill
Base Monthly Rate
$0/mo
Fixed subscription or contracted tier
Overage Penalty
$0/month extra
Usage covered within plan quota
Estimated Monthly Invoice
$0/mo
Total monthly cost before taxes
Technical Mitigation Recommendation:

Migrate to dedicated instance or self-hosted cluster to curtail I/O fees.

Security & Data Exit
Show detailsHide details

Compliance & Security Standards: Fengarde

SOC 2 Type IINot reported
ISO 27001Not reported
GDPR / RGPDNot reported
HIPAANot reported
PCI-DSSNot reported
Jurisdiction & Legal Sovereignty
🇺🇸United States [US]Immune to US CLOUD Act (EU Sovereign)DPA On Request
SSO Availability (SAML Enterprise)
No SSO Documented
Data Residency
SELF_HOSTED
AI Privacy Policy
Not evaluated
Data Liberation & Migration Runbook: FengardeJSON · YAML
Actionable escape runbook and credential export guarantees to mitigate vendor lock-in.
Show detailsHide details
Supported Structured Export Formats
JSONYAML
Password Hash Portability
Exportable Hashes (Bcrypt / Argon2): Zero Forced Retention

Allows extracting password hashes in standard formats to migrate without forcing user resets.

CLI Command / Rescue Endpoint
git clone https://github.com/supermhel/fengarde
Exit Protocol & Migration Notes

Al ser una herramienta de código abierto basada en archivos y contenedores, la exportación de datos y configuraciones se realiza directamente desde el repositorio de código fuente.

Deployment & Infrastructure Requirements: FengardeApache-2.0
Hardware specs and Docker directives to run on local servers, dedicated VPS, or Kubernetes without telemetry leak to the cloud.
Show detailsHide details
Minimum Memory1 GB RAM (Recommended)
Compute CPU1 vCPU
Runtime / LanguagePython
Code LicenseApache-2.0
Docker CLI Directive
docker run -d --name fengarde -p 8080:8080 fengarde:latest
Companion Services & Dependencies:
PostgreSQL 15+Redis 7+
Community & Repository
Show detailsHide details

Technical Reputation of Fengarde

74/100 Technical Trust

Frequent Praises in Production

  • Modular event-bus architecture with decoupled services
  • OCSF-native for standardized security telemetry
  • Fully open-source under Apache-2.0 license

Reported Production Frictions

  • Requires self-hosted infrastructure and manual setup
  • Early stage community and limited ecosystem documentation
Commercial Treatment & Vendor Lock-in:1-Click Cancellation

Immediate cancellation from account settings without phone calls or forced retention.

Open source repository activity: Fengarde18
Stars, forks and release cadence
Show detailsHide details
Stars18
Forks3
Open Issues0
SPDX LicenseApache-2.0
Latest Commit DetectedOct 29, 2026

Frequently Asked Technical Questions (Fengarde)

What license does Fengarde use and how is it deployed?

Fengarde is distributed under the Apache-2.0 open-source license and is intended to be self-hosted on your own infrastructure.

How does Fengarde process security logs?

It uses an OCSF-native event bus architecture where independent services read and write topics, allowing each stage to scale individually.

Does it include AI triage capabilities?

Yes, it supports local AI-driven triage to assist in categorizing and investigating security telemetry and incident pipelines.

Direct Alternatives

All tools in Fengarde
Embed Verification Badge
Official Badge
Show detailsHide details
TheJudex Verified - Fengarde