- Home
- File Integrity Monitoring Software
- Open Source Tripwire
Open Source Tripwire
What it is
Open Source Tripwire is free, self-hosted software that checks files and directories against a known baseline. A policy file defines what to monitor and which attributes to inspect, including hashes, permissions and ownership. The program reports differences on the user’s system rather than operating as a managed service. Policy, configuration and database files are signed by default, and reports may also be signed. Email reports are available when enabled in configuration. The project suggests running checks periodically with cron, but its installation script does not create cron jobs. RPM, Debian and make-based installation use a setup script for initial key generation and policy creation. It supports Linux, macOS and numerous POSIX-like systems, including BSD, Solaris, AIX, HP-UX, Minix, Haiku and GNU/Hurd. Windows users can build it with Cygwin, although Registry monitoring and Windows-specific file attributes are not supported there. The software uses GNU GPL version 2 or a later version.
For and against
For
- Free under GNU GPL version 2 or later
- Policies check hashes, permissions and ownership
- Signed policy, configuration and database files
- Email reports can be enabled
- Supports many POSIX-like operating systems
Against
- Not a managed service
- Install script does not create cron jobs
- Cygwin lacks Registry monitoring
- No real-time alerts
The verdict
Open Source Tripwire provides configurable baseline checks across many Unix-like systems at no software cost. Plan for local setup and scheduling, and account for Cygwin’s Windows-specific limitations.
Who it suits
It suits administrators who want command-line file-integrity monitoring on systems they manage. Users needing Windows Registry checks or a managed service should note its stated limits.
Plans and prices
Open Source Tripwire
GPL-2.0; open-source file and directory integrity monitoring
Read 5 Oct 2026 · github.com
On the record
- Commercial alternatives
- Tripwire says it offers separate commercial supported products, including Tripwire for Servers and Tripwire Enterprise.github.com · read 5 Oct 2026
- Email reporting
- Checks can send email reports when email reporting is enabled in the configuration.github.com · read 5 Oct 2026
- License
- The software is distributed under GNU GPL version 2 or, at the user's option, any later version.github.com · read 5 Oct 2026
- Maker history
- Tripwire says Gene Kim founded Tripwire, Inc. in 1997 to bring file integrity monitoring to the commercial market.tripwire.com · read 5 Oct 2026
- Not a managed service
- The README describes command-line setup, configuration, baselining, and checks on the user's system.github.com · read 5 Oct 2026
- Operating systems
- The project says it supports POSIX-like systems including Linux, macOS, BSD, Solaris, AIX, HP-UX, Minix, Haiku, and GNU/Hurd.github.com · read 5 Oct 2026
- Policy controls
- A policy file specifies which files or directories to monitor and which attributes to check, including hashes, permissions, and ownership.github.com · read 5 Oct 2026
- Purpose
- Open Source Tripwire monitors files and directories for changes and alerts when the current filesystem differs from a known baseline.github.com · read 5 Oct 2026
- Scheduling
- The project suggests running checks periodically with cron, and says its install script does not create cron jobs.github.com · read 5 Oct 2026
- Setup
- RPM and Debian package installation and make install use a setup script for initial key generation and policy creation.github.com · read 5 Oct 2026
- Signed files
- Policy, configuration, and database files are signed by default, and report files may also be signed.github.com · read 5 Oct 2026
- Windows limitation
- Windows users can build it under Cygwin, but this does not support Registry monitoring or Windows-specific file attributes.github.com · read 5 Oct 2026
