SELKS review
A free Suricata stack for network detection, hunting, dashboards, and packet analysis.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
SELKS is an open-source network intrusion detection and prevention, network security monitoring, and threat-hunting system built around Suricata. It is suited to home networks, researchers, educators, hobbyists, and small-to-medium organizations that want network visibility without a paid license. The system covers protocol, flow, alert, and file-transaction logs, while also providing packet capture, threat-intelligence management, and encrypted-traffic analysis.
Its main strength is the breadth of its security workflow. Graphical Suricata ruleset management supports rule administration without relying only on command-line work, while predefined and custom filters support threat hunting. Kibana dashboards, visualizations, and reporting add an analysis layer, and PCAP ingestion, capture, and analysis support investigations beyond individual alerts. Integrations with Elasticsearch, Logstash, Kibana, Arkime, EveBox, CyberChef, and Docker place SELKS within a wider network-monitoring and analysis ecosystem.
SELKS is free and open source, with web, Windows, and Linux platform coverage listed for the product. The important limitation is lifecycle: SELKS is archived, was no longer actively enhanced after January 1, 2025, and has no planned future releases. That makes it a better fit for existing deployments, learning, research, and controlled environments than for organizations seeking an actively developed foundation. Choose SELKS for its Suricata-centered monitoring, hunting, and packet-analysis scope; choose Clear NDR - Community instead when a successor to SELKS is the more appropriate direction.
SELKS pros and cons
- Where it wins
- Combines Suricata IDS/IPS with threat hunting and alert analysis
- Includes graphical ruleset and threat-intelligence management
- Supports PCAP analysis and encrypted-traffic records with TLS and JA3/JA3S
- Where it doesn't
- No planned future releases after January 1, 2025
- Archived and superseded by Clear NDR - Community
- Verified platform coverage is narrower than Suricata's
SELKS fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update