Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

OpenUBA

Free#15 of 20 in User and Entity Behavior Analytics Software

OpenUBA: A flexible self-hosted framework for teams building custom UEBA models. Ranked #15 of 20 in User and Entity Behavior Analytics Software by our editors (7.6/10); pricing: Open source; best for teams building custom UEBA models.

7.6/10Editor score
Visit OpenUBA
OpenUBA7.6 Visit OpenUBA

At a glance

  • Editor score
    7.6 / 10
  • Pricing
    Open source
  • Best for
    Teams building custom UEBA models
  • Paid from
    Free
  • Deployment
    On-premises
  • Facts checked
    20 Sep 2026
OpenUBA screenshot

  • Where it wins

    • Supports multiple ML frameworks, registries, data loaders, and execution jobs.
    • Visual flow builder combines threshold and deviation-based detection logic.
    • Includes model lifecycle management, risk tracking, cases, alerts, and an SDK.

  • Where it doesn't

    • Requires self-hosted Docker or Kubernetes deployment.
    • The project is currently marked beta by its maintainers.
    • Entity coverage and response automation are limited.

Our verdict on OpenUBA

OpenUBA is an open-source User and Entity Behavior Analytics framework for security analytics teams building custom detection workflows. It supports user and entity analysis through model lifecycle management, anomaly detection, alerting, case investigation, and entity-risk tracking. The platform is available through web, API, and self-hosted deployments, with a Kubernetes-native design for managing, training, and executing inspectable models.

Its strongest differentiator is breadth for teams that want to assemble their own analytics stack. OpenUBA supports scikit-learn, PyTorch, TensorFlow, Keras, NetworkX, and Spark MLlib models, with registries spanning GitHub, OpenUBA Hub, Hugging Face, Kubeflow, and local filesystems. Data loaders cover local CSV files, Elasticsearch, Spark, and grouped sources. Visual flow graphs let teams compose threshold- and deviation-based rules, while isolated Docker and Kubernetes jobs separate model training and inference. Managed JupyterLab workspaces and a Python SDK add options for development and automation.

Deployment and operational maturity are the main considerations. OpenUBA requires self-hosted Docker or Kubernetes deployment, so it suits organizations prepared to manage infrastructure rather than teams seeking a hosted UEBA service. JWT authentication, role-based access control, and configurable permissions support controlled access. An optional LLM assistant can connect to Ollama, OpenAI, Claude, or Gemini. The project is marked beta, and its focus is model construction and transparent workflows rather than broad verified entity coverage or extensive response automation. Choose OpenUBA when flexibility, inspectability, and an open-source model lifecycle matter most; consider an alternative if you need a managed deployment or more developed automated response capabilities.

Your product? Our editors can test OpenUBA in depth and publish a review, labelled as paid · from $149/mo →

OpenUBA pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.
See plans on github.com

OpenUBA fact sheet

Free planNot verified
Paid fromFree
DeploymentOn-premises
Entity coverageusers; entities
Data retentionNot verified
Data sourcesNot verified
Anomaly methodsHybrid
Response automationNot verified
DeploymentSelf-hosted
PlatformsWeb
SupportCommunity, Docs
Built forMid-market, Enterprise (editorial estimate)
Integrations10 integrations: GitHub, OpenUBA Hub, Hugging Face, Kubeflow, Elasticsearch, Apache Spark …
PricingOpen source
Websitegithub.com
Facts checked20 Sep 2026

OpenUBA integrations

OpenUBA lists 10 integrations on its own site.

  • GitHub
  • OpenUBA Hub
  • Hugging Face
  • Kubeflow
  • Elasticsearch
  • Apache Spark
  • Ollama
  • OpenAI
  • Claude
  • Gemini

Alternatives to OpenUBA

See all OpenUBA alternatives →

Used OpenUBA? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used OpenUBA for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — OpenUBA 7.6/10

OpenUBA is listed in our User and Entity Behavior Analytics Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/openuba/"><img src="https://www.itechguides.com/best/badge/openuba.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update