Security Onion

IDS/NSM, Snort, Suricata, Bro, Sguil, Squert, ELSA, Xplico

Brought to you by: dougburks

As of 2025-12-03, this project can be found here.

3 Reviews

Downloads: 25 This Week

Last Update: 2025-12-03

Get an email when there's a new version of Security Onion

Security Onion is no longer hosted here.

Project Activity

See All Activity >

Follow Security Onion

Security Onion Web Site

Other Useful Business Software

Custom VMs From 1 to 96 vCPUs With 99.95% Uptime Icon

Custom VMs From 1 to 96 vCPUs With 99.95% Uptime

General-purpose, compute-optimized, or GPU/TPU-accelerated. Built to your exact specs.

Live migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.

Try Free

Rate This Project

Login To Rate This Project

User Ratings

5.0 out of 5 stars

★★★★★

★★★★

★★★

★★

★

3

0

0

0

0

ease 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 0 / 5

features 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 0 / 5

design 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 0 / 5

support 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 0 / 5

User Reviews

Filter Reviews:

All

tfileme Posted 2013-05-21

Security-onion is wonderful! Thanks.

2 users found this review helpful.
girondeza Posted 2012-05-06

I use this software. Thank you for your work.
p0bailey Posted 2011-03-29

Great job !!

Read more reviews >

Additional Project Details

Registered

2010-09-29

Report inappropriate content

Recommended Projects

Security Onion
Linux distro for threat hunting, enterprise security monitoring
Onion Browser
An open-source, privacy-enhancing web browser for iOS
Suricata Anti-DDoS Lab
Suricata VMware VM dor IDS practicing
SELKS
A Suricata based IDS/IPS/NSM distro
Advanced Onion Router
Advanced Onion Router is a portable client for the OR network and is intended to be an improved alternative for Tor+Vidalia+Privoxy bundle for Windows users. Some of the improvements include UNICODE paths, support for HTTP and HTTPS proxy protocols on the same Socks4/Socks5 port with HTTP header filtering that generates fake identity-dependent headers every time the identity is changed (proxy chains are also supported), support for NTLM proxies, a User Interface that makes Tor's options and actions more accessible, local banlist for forbidden addresses, private identity isolation, a point-and-click process interceptor that can redirect connections from programs that don't support proxies, also giving them fake information about the local system and support for .onion addresses. Also, it can estimate AS paths for all circuits and prevent AS path intersections, it can restrict circuits to be built using only nodes from different countries, can change circuit lengths and more.