SELKS

7.0easy start · #7 of 35
in Intrusion Detection and Prevention Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on Linux, self-hosted, Web, Windows.

SELKS is ranked #7 of 35 in intrusion detection and prevention software on The Geeks Club. It runs on Linux, Self-hosted, Web, Windows. There is a free plan.

SELKS plans and pricing

All plans

SELKS Free Free and open source · GPL 3.0-or-later · no planned releases after January 1, 2025 stamus-networks.com · 2 Oct 2026

Compared on intrusion detection and prevention software

Free plan: Yes
Deployment model: software
Network scope: network
Inline blocking: Yes
Encrypted traffic inspection: Yes
Threat intelligence: Yes

Best SELKS alternatives

See all 12

CrowdSec 0 of 4 in the starter kit Lesson 18.0 Wazuh 0 of 4 in the starter kit Lesson 27.8 OSSEC 0 of 4 in the starter kit Lesson 37.7 pfSense 0 of 4 in the starter kit Lesson 47.6 Suricata 0 of 4 in the starter kit Lesson 57.1 Arista NG Firewall 0 of 4 in the starter kit Lesson 67.0

The record

Product status: SELKS is a legacy product; Stamus Networks says it stopped actively enhancing it on January 1, 2025, and has no future releases planned.
What it does: SELKS is a turn-key Suricata-based network intrusion detection and prevention, network security monitoring, and threat hunting implementation.
License: SELKS is free and open source under the GPL 3.0-or-later license.
Detection and monitoring: SELKS uses Suricata-generated data for IDS/IPS, network security monitoring, and threat hunting.
Rule and intelligence management: Its web interface can manage multiple Suricata rulesets and threat intelligence sources, plus custom rules and IoC data files.
Threat hunting: The interface provides predefined threat hunting filters and contextual views, and supports thresholding and suppression to reduce noisy alerts.
Included components: SELKS 10 includes Suricata, Elasticsearch, Logstash, Kibana, Stamus Community Edition, and functionality from Arkime, Evebox, and CyberChef.
Packet capture: SELKS 10 can capture packets associated with detection events and export session PCAP files for investigation or playback in SELKS or third-party tools such as Wireshark.
Deployment: The archive page offers a Docker Compose package for Linux and Debian-based ISO images with or without a desktop, deployable on bare metal or a virtual machine.
Intended users: Stamus Networks describes SELKS as suitable for many small-to-medium organizations and says practitioners, researchers, educators, students, and hobbyists use it to explore Suricata.
Scale limit: The maker says SELKS was never designed for enterprise deployment and points enterprise users to its commercial platform.
Support: The maker directs users to GitHub for documentation, issues, and the wiki, and to Discord for questions and help.
Security updates: Stamus Networks says it may evaluate community bug-fix requests or pull requests individually, but has no planned SELKS releases after January 1, 2025.
Company founded: Stamus Networks was founded in 2014 by Éric Leblond and Peter Manev.
Price from: Free

Where it ranks on The Geeks Club

Best Intrusion Detection and Prevention Software in 2026#7 of 35

Is SELKS yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote SELKS

Sources

stamus-networks.com/clear-ndr-frequently-asked-questions· checked 2 Oct 2026
stamus-networks.com/selks-archive· checked 2 Oct 2026
stamus-networks.com/blog/selks-10-the-next-big-leap-for-ope· checked 2 Oct 2026
stamus-networks.com/pr/07-november-2022· checked 2 Oct 2026