Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | AWS Network Access Analyzer by AWS View product | Zeek by Zeek View product |
|---|---|---|
| Overview | ||
| What it is | Looking for Network Security software? AWS Network Access Analyzer by AWS provides route table analysis for perimeter access auditing. Compare features and alternatives. | What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals. |
| Product type | Network Security Verification Capability | Open-Source Network Security Monitoring & Behavioral Analysis Engine |
| Best for | Cross-industry, Financial Services, Healthcare, Government, Enterprise, Technology | Cybersecurity, SOC Teams, Network Engineering, Defense, Research, Telecom |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | CloudOn-Premise |
| Deployment details | Cloud; AWS Cloud-native feature of Amazon VPC | Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual Sensor |
| Data residency | Network analysis performed within selected AWS Region | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | Amazon EC2Elastic network interfaces (ENI)Internet gateways (IGW)NAT gatewaysTransit gateways | Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps |
| Compliance | SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High | BSD LicenseCommon CriteriaNetwork Standards |
| Integrations & coverage | ||
| Integrations | Amazon VPCAWS OrganizationsAWS CloudTrailAWS Network FirewallAmazon EC2 | ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight |
| Industries | Cross-industryFinancial ServicesHealthcareGovernmentEnterpriseTechnology | CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom |
| Regions | Global (all AWS Regions) | Global |
| Vendor | ||
| Company | AWS | Zeek |
| Headquarters | Seattle, Washington, USA | Berkeley, California, USA |
| Company size | 100,000+ | 1-10 |
| Founded | 2006 | 1994 |
Overview
What it is
AWS Network Access Analyzer
Looking for Network Security software? AWS Network Access Analyzer by AWS provides route table analysis for perimeter access auditing. Compare features and alternatives.Zeek
What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals.Product type
AWS Network Access Analyzer
Network Security Verification CapabilityZeek
Open-Source Network Security Monitoring & Behavioral Analysis EngineBest for
AWS Network Access Analyzer
Cross-industry, Financial Services, Healthcare, Government, Enterprise, TechnologyZeek
Cybersecurity, SOC Teams, Network Engineering, Defense, Research, TelecomPricing
Pricing model
AWS Network Access Analyzer
Contact VendorZeek
Contact VendorFree trial
AWS Network Access Analyzer
Free trial: yesZeek
Free trial: yesDeployment
Deployment options
AWS Network Access Analyzer
Cloud
Zeek
CloudOn-Premise
Deployment details
AWS Network Access Analyzer
Cloud; AWS Cloud-native feature of Amazon VPCZeek
Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual SensorData residency
AWS Network Access Analyzer
Network analysis performed within selected AWS RegionZeek
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
AWS Network Access Analyzer
- Automated reasoning network verification
- Network Access Scopes definition
- Hop-by-hop visual path trace
- Security group and NACL validation
- Route table analysis
- Continuous perimeter compliance checks
- Network architecture verification
- Unintended internet path detection
Zeek
- Stateful network protocol analysis
- Structured transaction logging (HTTP/DNS/TLS)
- File hash extraction
- Event-driven domain scripting language
- High-speed packet capture
- Network security monitoring
- Network forensic investigation
- Protocol transaction logging
Platform & access
API access
AWS Network Access Analyzer
API access: yesZeek
API access: noSingle sign-on (SSO)
AWS Network Access Analyzer
SSO: yesZeek
SSO: noRole-based access (RBAC)
AWS Network Access Analyzer
RBAC: yesZeek
RBAC: yesMulti-tenant
AWS Network Access Analyzer
Multi-tenant: yesZeek
Multi-tenant: noMobile app
AWS Network Access Analyzer
Mobile app: yesZeek
Mobile app: noSupported platforms
AWS Network Access Analyzer
Amazon EC2Elastic network interfaces (ENI)Internet gateways (IGW)NAT gatewaysTransit gateways
Zeek
Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps
Compliance
AWS Network Access Analyzer
SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
Zeek
BSD LicenseCommon CriteriaNetwork Standards
Integrations & coverage
Integrations
AWS Network Access Analyzer
Amazon VPCAWS OrganizationsAWS CloudTrailAWS Network FirewallAmazon EC2
Zeek
ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight
Industries
AWS Network Access Analyzer
Cross-industryFinancial ServicesHealthcareGovernmentEnterpriseTechnology
Zeek
CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom
Regions
AWS Network Access Analyzer
Global (all AWS Regions)
Zeek
Global
Vendor
Company
AWS Network Access Analyzer
AWSZeek
ZeekHeadquarters
AWS Network Access Analyzer
Seattle, Washington, USAZeek
Berkeley, California, USACompany size
AWS Network Access Analyzer
100,000+Zeek
1-10Founded
AWS Network Access Analyzer
2006Zeek
1994