# Snort vs Zeek

| Attribute | Snort | Zeek |
|---|---|---|
| **Vioscale score** | 37.2 (25% (low)) | 52.4 (24% (low)) |
| activity.commits_last_30d | 0 | 100 |
| adoption.dependent_repos | - | 0 |
| adoption.github_stars | 3,409 | 7,907 |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"self_hosted":true}` |
| description.long | A packet-based intrusion prevention and detection system that analyzes network traffic in real-time and logs packet data to identify and prevent network attacks. | A passive network monitoring tool that analyzes traffic on sensors to generate detailed logs and file data for security investigation and integration with SIEM platforms, without interfering with network operations. |
| integrations.count | 10 | 2 |
| integrations.list | `[{"name":"Sguil"},{"name":"BASE"},{"name":"Snorby"},{"name":"Security Onion"},{"name":"Barnyard2"},{"name":"iBlock"},{"name":"Squert"},{"name":"ELSA"},{"name":"Xplico"},{"name":"NetworkMiner"}]` | `[{"name":"AWS Traffic Mirroring"},{"name":"Kafka"}]` |
| language.primary | C++ | C++ |
| market.availability | - | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| pricing | `{"type":"hybrid","freeTier":true,"sourceUrl":"https://www.snort.org","retrievedAt":"2026-08-19T14:42:16.863Z"}` | `{"type":"open_source","summary":"Free and open source","sourceUrl":"https://zeek.org","retrievedAt":"2026-08-19T14:40:20.627Z"}` |
| pricing.free_tier | yes | - |
| pricing.model | commercial | commercial |
| pricing.price_level | low | free |
| release.cadence_days | 20 | 2 |
| release.history | `[{"url":"https://github.com/snort3/snort3/releases/tag/3.12.2.0","date":"2026-04-23T21:06:24Z","type":"stable","version":"3.12.2.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.12.1.0","date":"2026-03-18T03:03:35Z","type":"stable","version":"3.12.1.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.11.1.0","date":"2026-02-28T01:45:43Z","type":"stable","version":"3.11.1.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.10.2.0","date":"2026-01-22T03:48:53Z","type":"stable","version":"3.10.2.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.10.1.0","date":"2026-01-13T03:26:52Z","type":"stable","version":"3.10.1.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.10.0.0","date":"2025-11-25T21:53:05Z","type":"stable","version":"3.10.0.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.9.7.0","date":"2025-11-07T02:55:27Z","type":"stable","version":"3.9.7.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.9.6.0","date":"2025-10-06T21:19:42Z","type":"stable","version":"3.9.6.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.9.5.0","date":"2025-09-04T21:07:49Z","type":"stable","version":"3.9.5.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.9.3.0","date":"2025-08-11T21:22:55Z","type":"stable","version":"3.9.3.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.9.2.0","date":"2025-07-21T22:00:07Z","type":"stable","version":"3.9.2.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.9.1.0","date":"2025-07-02T00:40:12Z","type":"stable","version":"3.9.1.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.9.0.0","date":"2025-07-02T00:37:32Z","type":"stable","version":"3.9.0.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.8.1.0","date":"2025-05-28T02:44:49Z","type":"stable","version":"3.8.1.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.7.4.0","date":"2025-05-08T21:09:16Z","type":"stable","version":"3.7.4.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.7.3.0","date":"2025-04-21T19:42:49Z","type":"stable","version":"3.7.3.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.7.2.0","date":"2025-03-31T18:58:01Z","type":"stable","version":"3.7.2.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.7.1.0","date":"2025-03-12T21:34:07Z","type":"stable","version":"3.7.1.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.7.0.0","date":"2025-02-17T17:44:34Z","type":"stable","version":"3.7.0.0"},{"url":"https://github.com/snort3/snort3/releases/tag/3.6.3.0","date":"2025-02-04T21:28:05Z","type":"stable","version":"3.6.3.0"}]` | `[{"url":"https://github.com/zeek/zeek/releases/tag/v9.0.0-rc1","date":"2026-08-21T20:24:47Z","type":"prerelease","version":"v9.0.0-rc1"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.2.2","date":"2026-08-19T17:51:40Z","type":"stable","version":"v8.2.2"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.10","date":"2026-08-19T17:50:34Z","type":"stable","version":"v8.0.10"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.2.1","date":"2026-07-10T20:04:31Z","type":"stable","version":"v8.2.1"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.9","date":"2026-07-10T20:04:48Z","type":"stable","version":"v8.0.9"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.2.0","date":"2026-05-12T19:14:11Z","type":"stable","version":"v8.2.0"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.8","date":"2026-05-12T19:14:56Z","type":"stable","version":"v8.0.8"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.1.2","date":"2026-04-20T16:26:51Z","type":"stable","version":"v8.1.2"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.7","date":"2026-04-20T16:25:30Z","type":"stable","version":"v8.0.7"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.1.1","date":"2026-01-29T19:43:34Z","type":"stable","version":"v8.1.1"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.6","date":"2026-01-29T19:44:35Z","type":"stable","version":"v8.0.6"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.5","date":"2026-01-29T19:43:49Z","type":"stable","version":"v8.0.5"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.1.0","date":"2025-12-15T19:17:27Z","type":"stable","version":"v8.1.0"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.4","date":"2025-11-05T18:19:02Z","type":"stable","version":"v8.0.4"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.3","date":"2025-10-15T18:04:48Z","type":"stable","version":"v8.0.3"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.2","date":"2025-10-13T16:21:13Z","type":"stable","version":"v8.0.2"},{"url":"https://github.com/zeek/zeek/releases/tag/v7.0.11","date":"2025-10-13T16:19:38Z","type":"stable","version":"v7.0.11"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.1","date":"2025-08-26T18:45:38Z","type":"stable","version":"v8.0.1"},{"url":"https://github.com/zeek/zeek/releases/tag/v7.0.10","date":"2025-08-26T18:43:29Z","type":"stable","version":"v7.0.10"},{"url":"https://github.com/zeek/zeek/releases/tag/v8.0.0","date":"2025-08-12T19:46:42Z","type":"stable","version":"v8.0.0"}]` |
| security.scorecard | 2.6 | 6.4 |
| security.vulnerabilities | - | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fzeek%2Fzeek&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (Network Security)

| Capability | Snort | Zeek |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | - | - |
| Behavioral anomaly detection | - | - |
| Full packet pcap retention | - | - |
| Encrypted traffic metadata analysis | - | - |
| Active endpoint containment response | - | - |
| Host microsegmentation | - | - |
| Network access control 802 1x | - | - |
| EDR crowdstrike sentinelone integration | - | - |
| Iot ot device discovery | - | - |
| Fips 140 2 certification | - | - |
| SOC2 type ii | - | - |
| ISO 27001 | - | - |
| Pricing model | - | - |

*Source: Vioscale. Generated 2026-09-01T15:10:10.734Z. "-" = undocumented, not absent.*