Snort
Open-source network intrusion detection and prevention system maintained by Cisco Talos.
- Verified facts
- 5 of 5
- Alternatives ranked
- 2
- Approved reviews
- 0
- Visits sent from here
- 0
About Snort
Snort is one of the oldest and most widely deployed open-source intrusion detection and prevention systems. It inspects network traffic in real time against a set of rules describing malicious activity and raises alerts, or drops the packets when run inline as an IPS. It can also work as a simple packet sniffer or packet logger. The engine is free and open source; the main thing you pay for is detection content. Cisco Talos writes the Snort Subscriber Ruleset, which paying subscribers get as soon as it is released, while registered users get those rules after a delay and everyone can use the free Community Ruleset. Snort 3 is the current major version, rewritten with multithreading and a new configuration format. It runs on Linux and the BSDs and is available as an add-on package for firewalls such as pfSense. There is no graphical interface of its own, so it is usually paired with a SIEM or dashboard.
Best for: Network defenders who want a proven signature-based IDS/IPS with professionally maintained rules..
Pros and cons
What works
- Free, open-source engine with a long track record
- Rules written and tested by Cisco Talos
- Can run inline to block traffic, not just alert
- Large rule library and community documentation
Why people leave
- Newest Talos rules require a paid subscription per sensor
- No built-in dashboard; needs separate tools to review alerts
- Snort 3 configuration differs from Snort 2, so older guides may not apply
Top Snort alternatives
See all 2
Why people left Snort
In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.
No switching stories yet. If you moved away from Snort, review the app you switched to and tell us why.
Reviews
No approved reviews yet. How we verify reviewers
Write a review of Snort
Snort: common questions
Is Snort free?
Yes. Snort is free, open-source software.
Is Snort open source?
No, Snort is not open source. Open-source alternatives include Wazuh.
What platforms does Snort run on?
Snort is available for Linux and Self-hosted.
What are the best alternatives to Snort?
The highest-ranked Snort alternatives right now are Suricata and Wazuh. See the full ranked list for pricing, platforms and verified facts.