Zeek
Zeek analyzes network activity through an open source monitor with a flexible scripting language.
About Zeek
Zeek is a network monitor that observes traffic in real time from a hardware, software, virtual, or cloud-based sensor. It captures transaction logs, file contents, and customizable outputs for manual review or integration into SIEM systems, and inspects application-layer protocols including HTTP, DNS, SSL/TLS, and SSH.
It can be extended with the Zeek scripting language and community packages. It is not an active defense mechanism and does not block traffic like a firewall or intrusion prevention system.
Key features
- Observes network traffic in real time without interfering with operations
- Captures transaction logs, file contents, and customizable data outputs
- Inspects application-layer protocols including HTTP, DNS, SSL/TLS, SSH
- Identifies suspicious patterns, attack signatures, and anomalous behavior
- Customizes monitoring with Zeek scripting language and community packages
- Sends structured logs for manual review or SIEM integration
Best for: Security analysts and teams who need passive network logs for review and SIEM integration.
Good for
- Passively observes traffic without interfering with network operations
- Produces structured logs for manual review and SIEM integration
- Supports customization through scripting and community packages
Watch out for
- Is not an active defense mechanism like a firewall or intrusion prevention system
Zeek at a glance
- Website
- zeek.org
- Category
- Privacy & Security › Security Tools
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
Zeek alternatives
Tools and sites you could use instead, ranked by how closely they match.
Explore ntop’s network visibility and cybersecurity offering; the supplied page gives little further detail.
Rawsec’s CyberSecurity Inventory catalogs more than 1,700 security tools and resources, helping practitioners browse a curated cybersecurity reference.
Find and compare cybersecurity products across areas such as SIEM, endpoint security, identity, and cloud.
A GitHub repository collecting a library of various cybersecurity resources, with folders for cybersecurity and hacking documentaries, cybersecurity YouTube channels, and free red team practice labs.
Browse a cybersecurity-focused collection of links and resources in this repository.
Browse this repository’s curated list of cybersecurity and information security resources.
Popular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
Zeek FAQ
Is Zeek a firewall or intrusion prevention system?
No. It is not an active defense mechanism; it observes traffic from a sensor and analyzes it in real time.
How are Zeek outputs used?
Transaction logs, file contents, and customizable outputs can be reviewed manually or integrated into SIEM systems.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.