The Zeek Network Security Monitor
Zeek (formerly Bro) is the world’s leading platform for network security monitoring. Flexible, open source, and powered by defenders.
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. Originally known as Bro, Zeek provides a comprehensive platform for network traffic analysis, offering deep insight into network activities through its scripting language and real-time monitoring capabilities. It is widely used for security monitoring, network troubleshooting, and research.
0
0 / day
0
0 / day
0 min
0 pages per visit
0%
-
Domain Rating
-
Domain Authority
-
Citation Level
1995
English, etc
Website Key Features
Real-time Monitoring
Zeek provides real-time monitoring of network traffic, allowing for immediate detection of anomalies or threats.
Scripting Language
Includes a powerful scripting language for defining network traffic analysis and monitoring policies.
Comprehensive Logging
Generates detailed logs of network activity, useful for post-incident analysis and research.
Protocol Analysis
Supports in-depth analysis of a wide range of network protocols.
Modular Architecture
Designed with a modular architecture, allowing for easy extension and customization.
High Performance
Capable of handling high volumes of network traffic efficiently.
Community Support
Backed by a strong community of developers and users contributing to its development and support.
Cross-platform
Runs on various operating systems, including Linux, macOS, and BSD.
Additional information
Original Name
Originally known as Bro, the project was renamed to Zeek in 2019 to avoid confusion and to reflect its evolution beyond its original scope.
License
Zeek is released under the BSD license, making it free for both academic and commercial use.
Development
Developed and maintained by the International Computer Science Institute (ICSI) and the broader Zeek community.
Use Cases
Used by universities, research institutions, and corporations worldwide for network security and research purposes.
Documentation
Comprehensive documentation is available, including tutorials, manuals, and API references to help users get started and advanced users to deepen their knowledge.
HTTP headers
Security headers report is a very important part of user data protection. Learn more about http headers for zeek.org