AppBreakup
Submit an app
Suricata logo

Suricata

Open-source network IDS, IPS and security monitoring engine from the non-profit OISF.

Open sourceIntrusion detection and network security monitoring
Visit SuricataSee 2 alternatives
Verified facts
5 of 5
Alternatives ranked
2
Approved reviews
0
Visits sent from here
0

About Suricata

Suricata is an open-source threat detection engine that works as an intrusion detection system, an inline intrusion prevention system and a network security monitoring tool. It is developed by the Open Information Security Foundation, a non-profit, together with a community of contributors and vendor members. Suricata uses a signature language compatible with most Snort-style rules, so popular rulesets such as Emerging Threats work with it, and it is multithreaded to make use of many CPU cores. Beyond alerts it can log HTTP, DNS, TLS and other protocol activity and extract files, all written to a JSON format called EVE that feeds easily into Elasticsearch, Splunk or a SIEM. Lua scripting covers detections the rule language can't express. It is free under the GPLv2 with no paid edition, runs on Linux, macOS, FreeBSD and Windows, and ships inside many firewalls and security distributions.

Best for: Teams who want a free, multithreaded IDS/IPS with detailed JSON logs for their SIEM..

Pros and cons

What works

  • Multithreaded engine that scales across CPU cores
  • Compatible with most Snort-style rulesets
  • EVE JSON logging integrates easily with SIEMs
  • Fully free under the GPL, run by a non-profit

Why people leave

  • No built-in dashboard; alerts need a separate tool to review
  • Tuning rules and performance on busy networks takes expertise
  • Commercial rulesets cost extra

Top Suricata alternatives

See all 2
  1. 1Sn
    Snort

    The original rule-based IDS/IPS, with rules maintained by Cisco Talos.

    66.5
  2. 2Wazuh logo
    Wazuh

    Adds a SIEM dashboard and endpoint agents, and can ingest Suricata alerts.

    50.3

Why people left Suricata

In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.

No switching stories yet. If you moved away from Suricata, review the app you switched to and tell us why.

Reviews

No approved reviews yet. How we verify reviewers

Write a review of Suricata
Your rating of Suricata

Never shown publicly. A work email helps us verify you.

What did you use it for, and what was good or bad? At least 40 characters.

A GitHub username, your company domain, or say you can send a screenshot. Verified reviews count more.

By submitting, you confirm you're at least 16 and agree to our terms. Your name, rating, review and the date are published; your email isn't. See our privacy policy.

Suricata: common questions

Is Suricata free?

Yes. Suricata is free, open-source software.

Is Suricata open source?

No, Suricata is not open source. Open-source alternatives include Wazuh.

What platforms does Suricata run on?

Suricata is available for Linux, macOS, Windows and Self-hosted.

What are the best alternatives to Suricata?

The highest-ranked Suricata alternatives right now are Snort and Wazuh. See the full ranked list for pricing, platforms and verified facts.

See all 2 Suricata alternatives