Tech riderRev. 20 Sept 2026
- 1Runs onAPI, self-hosted, Web
- 2CostsNot stated by the maker
- 3Deploymenton-premises
- 4Entity coverageusers; entities
- 5Anomaly methodshybrid
4 lines stated Written from the maker's own pages: github.com

Overview
OpenUBA is ranked #14 of 19 in user and entity behavior analytics software on Specifiction. It runs on API, Self-hosted, Web.
Compared on user and entity behavior analytics software
- Deployment
- on-premisesgithub.com
- Entity coverage
- users; entitiesgithub.com
- Anomaly methods
- hybridgithub.com
Facts
- Product
- OpenUBA is an open source framework for user and entity behavior analytics used for security analytics.github.com · 4 Oct 2026
- Approach
- It uses inspectable, auditable models and says model transparency supports compliance, investigations, and decision making.github.com · 4 Oct 2026
- Model lifecycle
- Users can install, train, and run models, track versions and artifacts, and use feedback and shadow modes.github.com · 4 Oct 2026
- Model frameworks
- The framework lists support for scikit-learn, PyTorch, TensorFlow, Keras, NetworkX, and Spark MLlib.github.com · 4 Oct 2026
- Detection rules
- A visual flow-based rule builder composes model outputs and logical conditions, with triggered alerts linked to anomalies and cases.github.com · 4 Oct 2026
- Data sources
- Listed data loaders include local CSV, Elasticsearch, Spark, and aggregated multi-source loading.github.com · 4 Oct 2026
- API and SDK
- It provides REST endpoints, a GraphQL API, and a Python SDK for model registration, job submission, and visualization.github.com · 4 Oct 2026
- Access control
- The README lists JWT authentication, four roles, configurable per-page read/write permissions, and audit logging.github.com · 4 Oct 2026
- Execution isolation
- Model training and inference run in isolated Docker containers or ephemeral Kubernetes Jobs, with resource limits described as a way to contain misbehaving models.github.com · 4 Oct 2026
- LLM providers
- The built-in assistant supports local Ollama and cloud APIs from OpenAI, Claude, and Gemini.github.com · 4 Oct 2026
- Intended users
- The project describes its open-model approach as designed for security analysts curious about how models work under the hood.github.com · 4 Oct 2026
- Current maturity
- The repository README labels the project beta and identifies the release as v0.0.2.github.com · 4 Oct 2026
Best OpenUBA alternatives
See all 18 All accessCh 01 Netskope One Behavior Analytics AndroidAPI 7.2 All accessCh 02 Proofpoint Email DLP and Encryption AndroidiOS 7.1 All accessCh 03 Teramind Insider Risk Management Free trialAPILinux 7.1 All accessCh 04 Security Vision TIP APILinux 6.9 All accessCh 05 Veriato Insider Risk Management Free trialAndroidAPI 6.8 All accessCh 06 DTEX Insider Risk Management LinuxMac 6.7
Where it ranks on Specifiction
Is OpenUBA yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- github.com/GACWR/OpenUBA· checked 4 Oct 2026


