Open Source Tripwire
Open Source Tripwire monitors files and directories and reports when the filesystem differs from a known baseline.
What Open Source Tripwire is
Open Source Tripwire monitors files and directories and reports when the filesystem differs from a known baseline. Its policy file lets users choose what to monitor and which attributes to check, including hashes, permissions, and ownership. It runs on the user's system rather than as a managed service, with setup, configuration, baseline creation, and checks performed there. Policy, configuration, and database files are signed by default; reports may also be signed. Checks can send email reports when email reporting is enabled. The project suggests scheduling checks periodically with cron, but its install script does not create cron jobs. It supports POSIX-like systems including Linux, macOS, BSD variants, Solaris, AIX, HP-UX, Minix, Haiku, and GNU/Hurd. Windows users can build it under Cygwin, but this does not support Registry monitoring or Windows-specific file attributes. The software is free under GNU GPL version 2 or any later version. Tripwire also offers separate commercial supported products, including Tripwire for Servers and Tripwire Enterprise.
Good
- Free under GNU GPL version 2 or later
- Policies can check hashes, permissions, and ownership
- Configuration and database files are signed by default
- Supports a wide range of POSIX-like systems
Watch out
- Setup and checks run on the user's system
- Install script does not create cron jobs
- Cygwin does not support Registry monitoring
Who it suits
Open Source Tripwire suits users who want to configure file integrity monitoring on their own systems. It may fit administrators who can set up policies, establish a baseline, and schedule checks.
Verdict
Open Source Tripwire provides configurable, baseline-based file monitoring, but users handle its setup and scheduling themselves. Windows users should note the stated Cygwin limitations.
Plans and prices
From Open Source Tripwire's own pricing page, checked 5 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Open Source Tripwire | Free | GPL-2.0; open-source file and directory integrity monitoring |
The facts
Each one read from Open Source Tripwire's own pages, with the date it was checked.
What it does
- Commercial alternatives
- Tripwire says it offers separate commercial supported products, including Tripwire for Servers and Tripwire Enterprise.checked 5 Oct 2026
- Email reporting
- Checks can send email reports when email reporting is enabled in the configuration.checked 5 Oct 2026
- License
- The software is distributed under GNU GPL version 2 or, at the user's option, any later version.checked 5 Oct 2026
- Not a managed service
- The README describes command-line setup, configuration, baselining, and checks on the user's system.checked 5 Oct 2026
- Operating systems
- The project says it supports POSIX-like systems including Linux, macOS, BSD, Solaris, AIX, HP-UX, Minix, Haiku, and GNU/Hurd.checked 5 Oct 2026
- Policy controls
- A policy file specifies which files or directories to monitor and which attributes to check, including hashes, permissions, and ownership.checked 5 Oct 2026
- Purpose
- Open Source Tripwire monitors files and directories for changes and alerts when the current filesystem differs from a known baseline.checked 5 Oct 2026
- Scheduling
- The project suggests running checks periodically with cron, and says its install script does not create cron jobs.checked 5 Oct 2026
- Setup
- RPM and Debian package installation and make install use a setup script for initial key generation and policy creation.checked 5 Oct 2026
- Signed files
- Policy, configuration, and database files are signed by default, and report files may also be signed.checked 5 Oct 2026
The company
- Maker history
- Tripwire says Gene Kim founded Tripwire, Inc. in 1997 to bring file integrity monitoring to the commercial market.checked 5 Oct 2026
Where it runs
- Windows limitation
- Windows users can build it under Cygwin, but this does not support Registry monitoring or Windows-specific file attributes.checked 5 Oct 2026
Alternatives to Open Source Tripwire
- 1
Wazuh
Free planOpen sourceWebAPILinuxmacOS8.4From $571 a month - 2

OSSEC
Free planOpen sourceAPILinuxmacOSSelf-hosted8.0From $55 a year - 3
Kaspersky Endpoint Security for Business
AndroidiOSWebAPI7.8From $29.99 a month - 4

PA File Sight
AndroidiOSWebAPI7.7From $30 a month - 5

Paessler PRTG Network Monitor
Free planAndroidiOSWebAPI7.7From $200 a month - 6
Avidemux
Free planOpen sourceWebLinuxmacOSWindows7.3Free plan
