OPNsense is an open-source firewall and routing platform based on FreeBSD, for self-hosted, web, and API use.
Alternatives to Suricata
CrowdSec is an open-source security stack designed to detect and block malicious IP addresses to help safeguard infrastructure and applications.
Wazuh combines XDR and SIEM to analyze security data from endpoints, clouds, and networks for threat detection, incident response, and compliance work.
- 4

IPFire
IPFire is a free, open-source firewall and security platform for networks, from home offices to large enterprises.
Free planOpen sourceWebAPILinuxSelf-hosted8.0From $1,099 a year - 5

OSSEC
OSSEC is an open-source, host-based intrusion detection system for monitoring systems and network components across multiple platforms.
Free planOpen sourceAPILinuxmacOSSelf-hosted8.0From $55 a year - 6
Arista NG Firewall
Arista NG Firewall is network security software for managing and protecting traffic in hybrid deployments.
Free planWeb7.5Free plan - 7

SELKS
SELKS is a free, open-source Suricata-based implementation for network intrusion detection and prevention, security monitoring, and threat hunting.
Free planOpen sourceWebLinuxSelf-hostedWindows7.2Free plan - 8
pfSense
pfSense is a free, open-source firewall and router distribution based on FreeBSD, managed through a web interface.
Free planWebLinuxSelf-hosted7.0Free plan - 9
Atomic OSSEC
WebLinuxmacOSSelf-hosted6.6 - 10
Snort
Snort analyzes network traffic against rules to identify malicious activity, generate alerts, and optionally stop matching packets inline.
Free planLinuxSelf-hosted6.5From $29.99 a year - 11
Cisco Catalyst Center
Cisco Catalyst Center is a centralized controller and management dashboard for enterprise network operations.
WebAPILinuxmacOS6.2 - 12

AWS Network Firewall
AWS Network Firewall is a managed service for deploying network protections across Amazon VPCs.
WebAPI6.1From $0.07 a month - 13

FortiGate
Self-hosted6.1 - 14

Oracle Cloud Infrastructure DNS
Oracle Cloud Infrastructure DNS manages DNS zones and records, handling domain queries through Oracle Cloud Infrastructure’s edge network.
WebAPILinux6.1 - 15
RdpGuard
Windows6.1 - 16
Securepoint RC1000R G6
Securepoint RC1000R G6 is a rackmount UTM firewall for company, public-sector, and healthcare networks.
AndroidiOSWebWindows6.1 - 17

Forcepoint Next Generation Firewall
AndroidAPILinuxmacOS5.9 - 185.9
- 19
Juniper Security Director
Juniper Security Director centralizes network security policy management for Juniper SRX deployments through a web interface.
WebSelf-hosted5.9 - 20
Sophos Central Firewall Management
Sophos Central Firewall Management is a cloud console for coordinating Sophos Firewall and related protection products.
WebAPISelf-hosted5.9 - 21
Stormshield Management Center
Stormshield Management Center (SMC) is a centralized security management solution designed for multi-site infrastructures.
WebAPILinuxSelf-hosted5.9 - 22

Azure Firewall Premium
Azure Firewall Premium is the premium tier of a managed, cloud-based network security service for Azure Virtual Network resources.
WebAPI5.7 - 23
scanlogd
scanlogd is a tool for detecting TCP port scans, intended for Linux and self-hosted use.
Free planLinuxSelf-hosted5.7Free plan - 24
Clear NDR - Enterprise
WebAPILinuxSelf-hosted5.4 - 25
5.3 - 26
5.2From $0.01 a month - 275.1
- 285.1
- 295.0
- 30
4.9

