Zeek (formerly Bro) is the world’s leading platform for network security monitoring. Flexible, open source, and powered by defenders.

Nov 5, 2025 · Development If you are interested in following development, clone Zeek from our GitHub repository. We are also making nightly Linux binaries available that are cut from the …

While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 20 years of research, …

5 days ago · Many operators use Zeek as a network security monitor (NSM) to support investigations of suspicious or malicious activity. Zeek also supports a wide range of traffic …

(Note that "Zeek" is the new name of what used to be known as the "Bro" network monitoring system. The old "Bro" name still frequently appears in the system's documentation and …

Zeek supports network operations at a broad variety of sites, including major corporations, universities, research labs, and supercomputing centers. It’s also used widely by researchers …

5 days ago · Most users, however, run Zeek on a computer selected solely for the purpose of network security monitoring. Security personnel call that computer a “sensor” and they select, …

Nov 5, 2025 · Many operators use Zeek as a network security monitor (NSM) to support investigations of suspicious or malicious activity. Zeek also supports a wide range of traffic …

Whether for a small home office or the largest research and commercial networks, Zeek helps organizations understand how their networks are being used, supporting security, …

Unlikely any one particular "hack" could affect all sensors (though we have seen weird network traffic tickle bugs in multiple sensors, but never all of them.).