Tirreno
tirreno is a self-hosted security framework for threats, fraud, and abuse with a dashboard, a customizable rule engine, SDKs, and an API. It has few dependencies, and enterprise packages are custom-priced.
Alternatives / Seon
3 open-source alternatives
3 Best Open Source Seon Alternatives in 2026
Looking for an open source Seon alternative? We compared 3 open source fraud and risk tools by license and scope. Tirreno is a self-hosted fraud framework, while Marble and Ballerine target fintechs and have non-standard licenses.
Written by Maxime DERAME
Last updated:
Best Seon alternatives at a glance
| Alternative | Best for | License |
|---|---|---|
| Ballerine | Merchant risk intelligence | Multiple licenses by directory |
| tirreno | Self-hosted fraud and abuse monitoring | AGPL-3.0 |
| Marble | Decision engine for fraud and AML (ELv2) | Elastic License 2.0 (source available) |
How we chose these Seon alternatives
We looked for open-source tools that detect fraud and manage risk like Seon. We verified each project's license, recent activity, stars, and self-hosting in its repository. None includes Seon's data enrichment network. See our methodology for the full criteria.
Marble and Ballerine
Marble is a real-time decision engine for fraud and AML with no-code rules. Ballerine is a platform for merchant risk intelligence and onboarding for payment processors, banks, and fintechs.
Important: licenses
Marble uses the Elastic License 2.0, which is source available. Ballerine's monorepo uses several licenses depending on the directory. Tirreno is AGPL-3.0.
Maintenance status
All three had commits within weeks of this update.
Why look for a Seon alternative?
Seon is a proprietary fraud platform that enriches signals from a network of data providers. Open-source tools give rules and workflows you control, but not the enrichment data.
ballerine.com
Ballerine is an open-source platform for merchant risk intelligence and onboarding for payment processors, banks, and fintechs. Its monorepo uses several licenses depending on the directory, and its performance claims are the vendor's own.
2.5K314Multiple licenses by directorySelf-hosted
Pricing: Open-source core; commercial offerings available.
- Merchant onboarding workflows
- Risk intelligence
- Active development
- Mixed licensing to review
- Merchant-risk focus, not general fraud scoring
tirreno.com
tirreno is an AGPL-3.0 self-hosted security framework for detecting threats, fraud, and abuse in your product, with a built-in dashboard, a customizable rule engine, SDKs, and an API. It has few dependencies and installs quickly. Enterprise packages are custom-priced.
1.6K182AGPL-3.0Self-hosted
Pricing: Free to self-host; enterprise packages are custom.
- Self-hosted and data sovereign
- Rule engine and dashboard
- Minimal dependencies
- Enterprise terms unclear
- Smaller ecosystem than commercial fraud tools
checkmarble.com
Marble is a real-time decision engine for fraud and anti-money-laundering rules, with no-code rule configuration, real-time monitoring and blocking, and flexible rule creation. Its source is under the Elastic License 2.0, which is source available and not OSI open source.
61791Elastic License 2.0 (source available)Self-hosted
Pricing: Free to self-host under ELv2; hosted offering is paid.
- No-code rule configuration
- Real-time decisions
- Built for fintechs
- Elastic License 2.0 is not OSI open source
- Smaller community
Compare Seon alternatives
| Alternative | Type | License | Self-hosted | Best for |
|---|---|---|---|---|
| Ballerine | Risk and KYB | Multiple licenses by directory | Yes | Fintech onboarding |
| tirreno | Fraud framework | AGPL-3.0 | Yes | Closest open alternative |
| Marble | Fraud and AML | Elastic License 2.0 | Yes | Rule-based AML |
Which one should you choose?
Want self-hosted fraud monitoring
tirreno has a rule engine, dashboard, and API under AGPL-3.0.
Want AML rules without code
Marble offers no-code rule configuration under the Elastic License.