Security Onion

Security Onion is a free and open source Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes Elasticsearch, Logstash, Kibana, Snort, Suricata, Bro, Wazuh, Sguil, Squert, NetworkMiner, and many other security tools. The easy-to-use Setup wizard allows you to build an army of distributed sensors for your enterprise in minutes!

For more information about Security Onion, please see our main website, blog, and docs.

This Repo

This repo provides access to the Security Onion 16.04 ISO image and tracks issues for Security Onion 16.04.

Want to download and verify the Security Onion ISO image?

Please proceed to the Verify_ISO page.

Looking for documentation?

Need Help?

Please proceed to the Help page.

Have Questions?

Please send questions to the Security Onion mailing list.

Want to see what lies ahead for Security Onion?

Please proceed to the Projects page.

Looking for source code?

This repo stores no source code. You can get the source for any of our packages by doing the following at a terminal (replacing PACKAGE-NAME with the name of the package that you want the source for):

apt-get source PACKAGE-NAME

Some of our packages have their own Github repos at Security-Onion-Solutions.

Security Onion Solutions

Looking for training, professional services, or hardware appliances? Check out https://securityonionsolutions.com.