Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

The Suricata engine excels in real-time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM), and offline packet capture (pcap) processing. It analyzes network traffic using a robust and comprehensive set of rules and signature languages, complemented by advanced Lua scripting capabilities that allow for the identification of intricate threats. Its compatibility with standard input and output formats such as YAML and JSON simplifies the integration with various tools, including established SIEMs, Splunk, Logstash/Elasticsearch, Kibana, and other databases. The development of Suricata is driven by a vibrant community focused on enhancing security, usability, and efficiency. Additionally, the project is managed and endorsed by the Open Information Security Foundation (OISF), a non-profit organization dedicated to fostering the ongoing development and success of Suricata as an open-source initiative. This commitment not only ensures the software's reliability but also actively encourages community contributions and collaboration.

Description

Zeek, initially known as Bro, stands as the premier platform for monitoring network security. It is an adaptable, open-source solution driven by those dedicated to defense in the cybersecurity realm. With its origins tracing back to the 1990s, the project was initiated by Vern Paxson to gain insights into activities on university and national laboratory networks. In late 2018, to acknowledge its growth and ongoing advancements, the leadership team transitioned the name from Bro to Zeek. Unlike conventional security tools such as firewalls or intrusion prevention systems, Zeek operates passively by residing on a sensor, which can be a hardware, software, virtual, or cloud-based platform, that discreetly monitors network traffic. By analyzing the data it collects, Zeek generates concise, high-quality transaction logs, file contents, and customizable outputs that are well-suited for manual examination on storage devices or through more user-friendly applications like security information and event management (SIEM) systems. This unique approach allows for a deeper understanding of network activities without interfering with the traffic itself.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Elastic Observability Yes 
Malcolm Yes 
Observe Yes 
Security Onion Yes 
Tenzir Yes 
Wraith Yes 
AWS Marketplace Yes 
Cybraics No 
Dropzone AI No 
IronNet Collective Defense Platform No 
Kibana Yes 
LimaCharlie No 
Logstash Yes 
NXLog No 
Netdata Yes 
Onum No 
Palo Alto ATP Yes 
Splunk APM Yes 
Stamus Networks Yes 
cPacket No 

Integrations

Elastic Observability Yes 
Malcolm Yes 
Observe Yes 
Security Onion Yes 
Tenzir Yes 
Wraith Yes 
AWS Marketplace No 
Cybraics Yes 
Dropzone AI Yes 
IronNet Collective Defense Platform Yes 
Kibana No 
LimaCharlie Yes 
Logstash No 
NXLog Yes 
Netdata No 
Onum Yes 
Palo Alto ATP No 
Splunk APM No 
Stamus Networks No 
cPacket Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version Yes 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Suricata

Website

suricata.io

Vendor Details

Company Name

The Zeek Project

Founded

1994

Country

United States

Website

zeek.org

Product Features

Network Monitoring

Bandwidth Monitoring No 
Baseline Manager No 
Diagnostic Tools No 
IP Address Monitoring No 
Internet Usage Monitoring No 
Real Time Analytics No 
Resource Management No 
SLA Monitoring No 
Server Monitoring No 
Uptime Monitoring No 
Web Traffic Reporting No 

Network Security

Access Control No 
Analytics / Reporting No 
Compliance Reporting No 
Firewalls No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Threat Response No 
VPN No 
Vulnerability Scanning No 

Alternatives

SafeLine WAF Reviews

SafeLine WAF

Chaitin Tech

Alternatives

Palo Alto ATP Reviews

Palo Alto ATP

Palo Alto
Zeek Reviews

Zeek

The Zeek Project
CloudShark Reviews

CloudShark

QA Cafe