Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Zeek by Zeek View product | NetworkMiner by NetworkMiner View product |
|---|---|---|
| Overview | ||
| What it is | What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals. | NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives. |
| Product type | Open-Source Network Security Monitoring & Behavioral Analysis Engine | Network Forensic Analysis Tool & Passive Packet Investigator |
| Best for | Cybersecurity, SOC Teams, Network Engineering, Defense, Research, Telecom | Cybersecurity, Incident Response, Digital Forensics, Defense, Law Enforcement |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudOn-Premise | Cloud |
| Deployment details | Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual Sensor | Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono Executable |
| Data residency | Customer Infrastructure Dependent (Completely Self-Contained) | Local Host Machine Only (No Cloud Telemetry) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: no | API access: no |
| Single sign-on (SSO) | SSO: no | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: no |
| Multi-tenant | Multi-tenant: no | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps | PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams |
| Compliance | BSD LicenseCommon CriteriaNetwork Standards | GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles |
| Integrations & coverage | ||
| Integrations | ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight | Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs |
| Industries | CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom | CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement |
| Regions | Global | Global |
| Vendor | ||
| Company | Zeek | NetworkMiner |
| Headquarters | Berkeley, California, USA | Sweden |
| Company size | 1-10 | 1-10 |
| Founded | 1994 | 2007 |
Overview
What it is
Zeek
What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals.NetworkMiner
NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives.Product type
Zeek
Open-Source Network Security Monitoring & Behavioral Analysis EngineNetworkMiner
Network Forensic Analysis Tool & Passive Packet InvestigatorBest for
Zeek
Cybersecurity, SOC Teams, Network Engineering, Defense, Research, TelecomNetworkMiner
Cybersecurity, Incident Response, Digital Forensics, Defense, Law EnforcementPricing
Pricing model
Zeek
Contact VendorNetworkMiner
Contact VendorFree trial
Zeek
Free trial: yesNetworkMiner
Free trial: yesDeployment
Deployment options
Zeek
CloudOn-Premise
NetworkMiner
Cloud
Deployment details
Zeek
Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual SensorNetworkMiner
Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono ExecutableData residency
Zeek
Customer Infrastructure Dependent (Completely Self-Contained)NetworkMiner
Local Host Machine Only (No Cloud Telemetry)Key features
What it offers
Zeek
- Stateful network protocol analysis
- Structured transaction logging (HTTP/DNS/TLS)
- File hash extraction
- Event-driven domain scripting language
- High-speed packet capture
- Network security monitoring
- Network forensic investigation
- Protocol transaction logging
NetworkMiner
- Host-centric PCAP parsing
- Automated file and artifact extraction
- Passive OS fingerprinting
- Credential harvesting from PCAP
- Passive network sniffing
- Network digital forensic analysis
- Passive host and OS fingerprinting
- PCAP file and artifact reconstruction
Platform & access
API access
Zeek
API access: noNetworkMiner
API access: noSingle sign-on (SSO)
Zeek
SSO: noNetworkMiner
SSO: noRole-based access (RBAC)
Zeek
RBAC: yesNetworkMiner
RBAC: noMulti-tenant
Zeek
Multi-tenant: noNetworkMiner
Multi-tenant: noMobile app
Zeek
Mobile app: noNetworkMiner
Mobile app: noSupported platforms
Zeek
Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps
NetworkMiner
PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams
Compliance
Zeek
BSD LicenseCommon CriteriaNetwork Standards
NetworkMiner
GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles
Integrations & coverage
Integrations
Zeek
ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight
NetworkMiner
Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs
Industries
Zeek
CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom
NetworkMiner
CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement
Regions
Zeek
Global
NetworkMiner
Global
Vendor
Company
Zeek
ZeekNetworkMiner
NetworkMinerHeadquarters
Zeek
Berkeley, California, USANetworkMiner
SwedenCompany size
Zeek
1-10NetworkMiner
1-10Founded
Zeek
1994NetworkMiner
2007