What it does
Suricata is a network IDS, IPS and security-monitoring engine developed by OISF and its community.
Suricata has different operational roles in passive detection and inline prevention. Its README explicitly notes that an inline failure can affect network availability, which makes deployment design part of the security decision. Choose the role and traffic scope before configuring detection policy. Maintain updates and a response owner as well as rules. The engine processes untrusted traffic, so the project's own warning about keeping the detector secure is relevant to the system protecting the network.
Strengths
- Detection, prevention and monitoring roles
Best for
- Network defenders operating an authorized traffic-inspection layer
Sources
- Suricata (Oct 26, 2026)