Skip to content
SPECIFICTION
Get listed

Open Source Tripwire

github.com

Free plan WindowsmacOSLinuxSelf-hosted
Visit github.com
Spec score 7.7 #19 of 34 in File Integrity Monitoring Software

What it is

Open Source Tripwire is free file and directory integrity-monitoring software for Linux, macOS, BSD variants, Solaris, AIX, HP-UX, Minix, Haiku, GNU/Hurd, and Cygwin. It compares the current filesystem with a known baseline and reports differences. A policy file defines monitored paths and checked attributes such as hashes, permissions, and ownership. Policy, configuration, and database files are signed by default, while reports may also be signed. Email reports are available when enabled in configuration. The project suggests scheduling periodic checks with cron, but its install script does not create those jobs. RPM, Debian, and make-based installation use a setup script for initial keys and policy creation. It runs on the user’s own system rather than as a managed service. Windows builds through Cygwin lack Registry monitoring and Windows-specific file attributes. The software uses GNU GPL version 2 or any later version. Separate commercial Tripwire products are also offered.

Spec sheet

Purpose
Open Source Tripwire monitors files and directories for changes and alerts when the current filesystem differs from a known baseline.Read 5 Oct 2026 · github.com
License
The software is distributed under GNU GPL version 2 or, at the user's option, any later version.Read 5 Oct 2026 · github.com
Commercial alternatives
Tripwire says it offers separate commercial supported products, including Tripwire for Servers and Tripwire Enterprise.Read 5 Oct 2026 · github.com
Email reporting
Checks can send email reports when email reporting is enabled in the configuration.Read 5 Oct 2026 · github.com
Maker history
Tripwire says Gene Kim founded Tripwire, Inc. in 1997 to bring file integrity monitoring to the commercial market.Read 5 Oct 2026 · tripwire.com
Not a managed service
The README describes command-line setup, configuration, baselining, and checks on the user's system.Read 5 Oct 2026 · github.com
Operating systems
The project says it supports POSIX-like systems including Linux, macOS, BSD, Solaris, AIX, HP-UX, Minix, Haiku, and GNU/Hurd.Read 5 Oct 2026 · github.com
Policy controls
A policy file specifies which files or directories to monitor and which attributes to check, including hashes, permissions, and ownership.Read 5 Oct 2026 · github.com
Scheduling
The project suggests running checks periodically with cron, and says its install script does not create cron jobs.Read 5 Oct 2026 · github.com
Setup
RPM and Debian package installation and make install use a setup script for initial key generation and policy creation.Read 5 Oct 2026 · github.com
Signed files
Policy, configuration, and database files are signed by default, and report files may also be signed.Read 5 Oct 2026 · github.com
Windows limitation
Windows users can build it under Cygwin, but this does not support Registry monitoring or Windows-specific file attributes.Read 5 Oct 2026 · github.com

Plans and prices

Open Source Tripwire Free GPL-2.0; open-source file and directory integrity monitoring Read 5 Oct 2026 · github.com

Every Open Source Tripwire plan and price →

Strong points and limits

Strong points

  • Free GPL-licensed software
  • Policies choose paths and checked attributes
  • Signed policy, configuration, and database files
  • Email reporting available
  • Supports many POSIX-like systems

Limits

  • No real-time alerts
  • Cron jobs require manual scheduling
  • Cygwin lacks Registry monitoring
  • Runs as user-managed software

Who it suits

It suits administrators who want command-line, on-premises integrity checks with policy-controlled file attributes and signed data. Users on Windows should note the Cygwin limitations.

Verdict

Open Source Tripwire provides baseline comparison, configurable policies, signing, and scheduled reporting across many Unix-like systems. It requires local setup and periodic scheduling, with reduced Windows coverage through Cygwin.

Where Specifiction places it

Alternatives to Open Source TripwireAll alternatives →