Compare software

MalcolmArkime
Free

Free to use; the source is published on GitHub by CISA.

 Free

The open-source software is available without a license fee. Hosting, hardware and…

Linux, Self-hosted Linux, Self-hosted, Web
  • Brings PCAP, Zeek and Suricata data together in one searchable interface
  • Deployable with Docker, Kubernetes or an installable ISO
  • Indexes sessions while retaining packet data in PCAP format.
  • A large multi-container stack that needs substantial server resources
  • Aimed at trained analysts rather than casual home users
  • Large captures require substantial storage and careful retention settings.
Self-hosted Self-hosted
Open source Open source
License not stated License: Apache-2.0
Not stated if an account is needed Not stated if an account is needed
Works offline Not stated if it works offline

Checked September 23, 2026

Checked September 22, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.