Suricata (software)

{{Infobox software

| name = Suricata

| logo =

| screenshot = Suricata IDS.png

| caption =

| collapsible =

| author =

| developer = Open Information Security Foundation

| released =

| discontinued =

| latest release version = {{wikidata|property|reference|P348}}

| latest release date = {{start date and age|{{wikidata|qualifier|P348|P577}}}}{{cite web|url=https://github.com/OISF/suricata/releases|title=Releases - OISF/suricata|via=GitHub}}

| latest preview version =

| latest preview date =

| programming language = C, Rust

| operating system = FreeBSD, Linux, UNIX, Mac OS X, Microsoft Windows

| platform =

| size =

| language =

| genre = {{ubl|Intrusion-detection system|Intrusion prevention system}}

| license = GNU General Public License{{cite web|url=https://redmine.openinfosecfoundation.org/projects/suricata/repository/revisions/master/entry/LICENSE|title=Suricata license}}

| website = {{official URL}}

}}

Suricata is an open-source based intrusion detection system (IDS) and intrusion prevention system (IPS). It was developed by the Open Information Security Foundation (OISF). A beta version was released in December 2009, with the first standard release following in July 2010.{{cite web|url=http://linux.slashdot.org/story/09/12/31/2143250/New-Open-Source-Intrusion-Detector-Suricata-Released|title=New Open Source Intrusion Detector Suricata Released|publisher=Slashdot|date=2009-12-31|accessdate=2011-11-08}}{{cite web|url=http://openinfosecfoundation.org/index.php/download-suricata|title=Suricata Downloads|publisher=Open Security Information Foundation|accessdate=2011-11-08}}

Features

Like other IDSes, Suricata provides threat detection capabilities. Like a firewall, Suricata provides traffic filtering and monitoring, but Suricata provides network administrators with the ability to write and enforce detection rules.{{Cite web|url=https://www.xda-developers.com/why-use-suricata-or-snort-for-your-home-lab-firewall/|first=Joe|last=Rice-Jones|title=5 reasons to use Suricata or Snort for your home lab firewall|date=March 26, 2025|website=XDA Developers}}

Suricata is able to detect common attack vectors such as port scanning, denial-of-service, pass-the-hash, and brute-force attacks.

Typically, a major update of Suricata is released every 3 months.