Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
The Suricata engine excels in real-time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM), and offline packet capture (pcap) processing. It analyzes network traffic using a robust and comprehensive set of rules and signature languages, complemented by advanced Lua scripting capabilities that allow for the identification of intricate threats. Its compatibility with standard input and output formats such as YAML and JSON simplifies the integration with various tools, including established SIEMs, Splunk, Logstash/Elasticsearch, Kibana, and other databases. The development of Suricata is driven by a vibrant community focused on enhancing security, usability, and efficiency. Additionally, the project is managed and endorsed by the Open Information Security Foundation (OISF), a non-profit organization dedicated to fostering the ongoing development and success of Suricata as an open-source initiative. This commitment not only ensures the software's reliability but also actively encourages community contributions and collaboration.
Description
Zeek, initially known as Bro, stands as the premier platform for monitoring network security. It is an adaptable, open-source solution driven by those dedicated to defense in the cybersecurity realm. With its origins tracing back to the 1990s, the project was initiated by Vern Paxson to gain insights into activities on university and national laboratory networks. In late 2018, to acknowledge its growth and ongoing advancements, the leadership team transitioned the name from Bro to Zeek. Unlike conventional security tools such as firewalls or intrusion prevention systems, Zeek operates passively by residing on a sensor, which can be a hardware, software, virtual, or cloud-based platform, that discreetly monitors network traffic. By analyzing the data it collects, Zeek generates concise, high-quality transaction logs, file contents, and customizable outputs that are well-suited for manual examination on storage devices or through more user-friendly applications like security information and event management (SIEM) systems. This unique approach allows for a deeper understanding of network activities without interfering with the traffic itself.
API Access
Has API
API Access
Has API
Integrations
Elastic Observability
Malcolm
Observe
Security Onion
Tenzir
Wraith
AWS Marketplace
Cybraics
Dropzone AI
IronNet Collective Defense Platform
Integrations
Elastic Observability
Malcolm
Observe
Security Onion
Tenzir
Wraith
AWS Marketplace
Cybraics
Dropzone AI
IronNet Collective Defense Platform
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
Free
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Suricata
Website
suricata.io
Vendor Details
Company Name
The Zeek Project
Founded
1994
Country
United States
Website
zeek.org
Product Features
Product Features
Network Monitoring
Bandwidth Monitoring
Baseline Manager
Diagnostic Tools
IP Address Monitoring
Internet Usage Monitoring
Real Time Analytics
Resource Management
SLA Monitoring
Server Monitoring
Uptime Monitoring
Web Traffic Reporting
Network Security
Access Control
Analytics / Reporting
Compliance Reporting
Firewalls
Internet Usage Monitoring
Intrusion Detection System
Threat Response
VPN
Vulnerability Scanning