Network Security & Monitoring
Network Security & Monitoring is the set of tools used to see, detect, and investigate activity on enterprise networks. It covers packet and flow capture, intrusion detection and NSM stacks, traffic analysis workstations, and network mapping used to understand what is on the wire. Tools here help defenders and network teams find threats and blind spots on networks they operate, rather than attacking systems they do not own.

Nmap
Open-source network scanner for host discovery, port and service mapping, and OS detection, with NSE scripting and companion tools in the suite.

Arkime
Arkime is a free open-source packet capture and session search tool used to record, index, and investigate network traffic at scale for security teams.
Network Security & MonitoringFreeOpen source
Security Onion
Security Onion is a freemium Linux platform used to run network security monitoring, threat hunting, and log management in one stack for SOC teams.
Network Security & MonitoringFreemium
Zeek
Zeek is a free open-source network security monitor that passively analyses traffic into rich logs for detection, forensics and SIEM workflows.
Network Security & MonitoringFreeOpen source
Suricata
Suricata is an open-source network IDS, IPS and network security monitoring engine maintained by the Open Information Security Foundation (OISF).
Network Security & MonitoringFreeOpen source
Palo Alto Networks
Palo Alto Networks provides enterprise cybersecurity across next-generation firewalls, cloud security and security operations platforms.
Network Security & MonitoringPaid
Wireshark
Open-source network protocol analyser for capturing and inspecting traffic live or from saved files, with deep dissection and display filters.
Network Security & MonitoringFreeOpen source