--- title: Zeek Reviews meta\_title: 'Zeek Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter reviews by the users' company size, role or industry to find out how Zeek works for a business like yours. aggregate\_rating: rating\_value: 5.0 review\_count: 1 scale: '5' date\_modified: '2026-04-02' parent\_category: name: Network Security url: https://www.g2.com/categories/network-security ---

# Zeek Reviews & Product Details

Zeek transforms network traffic into compact, high-fidelity transaction logs, allowing defenders to understand activity, detect attacks, and respond to them.

* * *

Seller
[Corelight](https://www.g2.com/sellers/corelight)
Discussions
[Zeek Community](https://www.g2.com/products/zeek/discuss)

Show More

## Top-Rated Alternatives

[

 ![Progress WhatsUp Gold](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Progress WhatsUp Gold")

Progress WhatsUp Gold

4.4/5(391)

](https://www.g2.com/products/progress-whatsup-gold/reviews)

[

 ![TrendAI Vision One](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "TrendAI Vision One")

TrendAI Vision One

4.7/5(251)

](https://www.g2.com/products/trendai-vision-one/reviews)

[

 ![Blumira Automated Detection & Response](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Blumira Automated Detection & Response")

Blumira Automated Detection & Response

4.6/5(124)

](https://www.g2.com/products/blumira-automated-detection-response/reviews)

[
View All Alternatives
](https://www.g2.com/products/zeek/competitors/alternatives)

VM

Vaishnavi M.

Associate Cyber security consultant

Mid-Market (51-1000 emp.)

9/25/2023

"BEST SECURITY FRAMEWORK"

5/5

What do you like best about Zeek?

Zeek is user-friendly software also best part in it is it is a open source software use for network analysis framework it's flexible monitering tool Review collected by and hosted on G2.com.

What do you dislike about Zeek?

Nothing to dislike there are some bugs use scripting language Review collected by and hosted on G2.com.

What problems is Zeek solving and how is that benefiting you?

Monitor the network traffic

Response on the same

Check out cyber attack comming in network traffic

In dept analysis and then report do security audits Review collected by and hosted on G2.com.

Show More

Validated ReviewerSource: Organic

### There are not enough reviews of Zeek for G2 to provide buying insight. Below are some alternatives with more reviews:

[

1

 ![Progress WhatsUp Gold Logo](https://images.g2crowd.com/uploads/product/hd_favicon/6bb9084083b71cf2b4cc4ad7c2be392b/progress-whatsup-gold.svg "Progress WhatsUp Gold Logo")

Progress WhatsUp Gold

4.4

 (391) 

WhatsUp Gold is unified infrastructure and application monitoring software that gives modern IT teams the ability to monitor their increasingly complex IT environment with a single product.

](https://www.g2.com/products/progress-whatsup-gold/reviews "Progress WhatsUp Gold")[

2

 ![TrendAI Vision One Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_4ea27eea31fa49714064a75b157d3953/trendai-vision-one.png "TrendAI Vision One Logo")

TrendAI Vision One

4.7

 (251) 

Trend Micro Vision One (XDR) collects and correlates deep activity data across multiple vectors - email, endpoints, servers, cloud workloads, and networks - enabling a level of detection and investigation that is difficult or impossible to achieve with SIEM or individual point solutions.

](https://www.g2.com/products/trendai-vision-one/reviews "TrendAI Vision One")[

3

 ![Blumira Automated Detection & Response Logo](https://images.g2crowd.com/uploads/product/hd_favicon/9fe1cf9164c68f24cf0faeacbc834f5d/blumira-automated-detection-response.svg "Blumira Automated Detection & Response Logo")

Blumira Automated Detection & Response

4.6

 (124) 

Blumira's Automated SIEM enables organizations to detect and respond effectively to cybersecurity threats without having a dedicated in-house security operations center or security expertise.

](https://www.g2.com/products/blumira-automated-detection-response/reviews "Blumira Automated Detection & Response")[

4

 ![Guardsix Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_2270d5f48346c0d751b454b2a7655b06/guardsix.png "Guardsix Logo")

Guardsix

4.3

 (108) 

Guardsix is the sovereign security platform that serves lean teams in regulated organisations and critical national infrastructure, as well as the MSSP partners they rely on. The platform enables sovereign log management and audit-ready compliance, with deployment flexibility and predictable pricing designed to give teams full control over their data and operations. Guardsix is headquartered in Copenhagen, Denmark and maintains SOC 2 Type II attestation.

](https://www.g2.com/products/guardsix/reviews "Guardsix")[

5

 ![Cortex XDR Logo](https://images.g2crowd.com/uploads/product/hd_favicon/3dd09884963557363764c7c9e66debe0/palo-alto-networks-cortex-xdr.svg "Cortex XDR Logo")

Cortex XDR

4.5

 (85) 

Traditional antivirus (AV) is not the solution to endpoint security – it’s the problem. AV can no longer stop today’s threats. Cortex XDR advanced endpoint protection is the only product offering that replaces AV with “multi-method prevention”: a proprietary combination of malware and exploit prevention methods that pre-emptively block both known and unknown threats

](https://www.g2.com/products/palo-alto-networks-cortex-xdr/reviews "Cortex XDR")[

6

 ![Heimdal Logo](https://images.g2crowd.com/uploads/product/hd_favicon/2b8e897dbb930346edf36bf5df533df1/heimdal.svg "Heimdal Logo")

Heimdal

4.4

 (77) 

Heimdal® is a leading cybersecurity provider offering a comprehensive suite of solutions designed to protect organizations from a wide range of digital threats. Established in 2014, Heimdal has developed an integrated platform that combines advanced threat prevention, detection, and response capabilities, ensuring robust security across endpoints, networks, and email systems. Their unified approach simplifies IT operations, enhances threat visibility, and provides real-time defense mechanisms against sophisticated cyberattacks. Key Features and Functionality: - Threat Prevention: Utilizes advanced DNS filtering and predictive technologies to proactively block malicious domains and prevent cyber threats before they infiltrate systems. - Vulnerability Management: Automates the deployment of patches for Microsoft, Linux, and third-party applications, ensuring systems remain up-to-date and secure. - Next-Generation Antivirus: Offers real-time detection and mitigation of malware, ransomware, and other malicious activities through AI-driven analysis. - Privileged Access Management (PAM: Controls and monitors administrative rights, reducing the risk of insider threats and unauthorized access. - Email Security: Protects against phishing, business email compromise, and other email-based threats by analyzing and filtering incoming communications. - Unified Threat Platform: Provides a centralized dashboard for managing all security solutions, offering comprehensive visibility and control over the organization's cybersecurity posture. Primary Value and Problem Solved: Heimdal's integrated cybersecurity platform addresses the complexity and fragmentation often associated with managing multiple security solutions. By consolidating various security functions into a single, user-friendly interface, Heimdal enables organizations to streamline their security operations, reduce administrative overhead, and enhance their overall defense against evolving cyber threats. This unified approach not only improves operational efficiency but also ensures a more resilient and proactive security posture, safeguarding critical assets and sensitive information from potential breaches.

](https://www.g2.com/products/heimdal/reviews "Heimdal")[

7

 ![Rapid7 Next-Gen SIEM Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_948e08d1a8ccaa8b82d0d646fff799a0/rapid7-next-gen-siem.jpg "Rapid7 Next-Gen SIEM Logo")

Rapid7 Next-Gen SIEM

4.4

 (76) 

InsightIDR is designed to reduce risk of breach, detect and respond to attacks, and build effective cybersecurity programs.

](https://www.g2.com/products/rapid7-next-gen-siem/reviews "Rapid7 Next-Gen SIEM")[

8

 ![ExtraHop Logo](https://images.g2crowd.com/uploads/product/hd_favicon/db17350877e46293cb9dc507a1abc5c8/extrahop.svg "ExtraHop Logo")

ExtraHop

4.6

 (68) 

ExtraHop Reveal(x) provides cloud-native visibility, detection, and response for the hybrid enterprise.

](https://www.g2.com/products/extrahop/reviews "ExtraHop")[

9

 ![ManageEngine ADAudit Plus Logo](https://images.g2crowd.com/uploads/product/hd_favicon/cbc2a6e13a8033adc8b0e65406cba4c7/manageengine-adaudit-plus.svg "ManageEngine ADAudit Plus Logo")

ManageEngine ADAudit Plus

4.6

 (59) 

Real-time Windows Active Directory and File-Server change audit solution

](https://www.g2.com/products/manageengine-adaudit-plus/reviews "ManageEngine ADAudit Plus")[

10

 ![Darktrace / NETWORK Logo](https://images.g2crowd.com/uploads/product/hd_favicon/0178962303071b0ed70f5a266200848d/darktrace-network.svg "Darktrace / NETWORK Logo")

Darktrace / NETWORK

4.5

 (47) 

Darktrace / NETWORK™ is the industry’s most advanced Network Detection and Response (NDR) solution. It learns what normal behavior is for your entire modern network, using Self-Learning AI to detect and autonomously contain any activity that could cause business disruption including known, novel and insider threats. - Sophisticated agentic AI to automate triage and investigation at speed and scale - Recognized as a Leader in the 2025 Gartner® Magic Quadrant™ for NDR - Over 10,000 customers globally

](https://www.g2.com/products/darktrace-network/reviews "Darktrace / NETWORK")
[Show More](#)

##### Pricing

Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more.

[
View More Pricing Information
](https://www.g2.com/products/zeek/pricing)

## Work at Corelight?

Claim this profile to respond to reviews, update product info, and reach in-market buyers.

[
Claim this profile
](https://www.g2.com/products/zeek/claim_requests/new?utm_medium=profile-footer-claim-cta&utm_source=g2)

##### Categories on G2

[Network Detection and Response (NDR)](https://www.g2.com/categories/network-detection-and-response-ndr)

##### Explore More

[Recommendations for CDP apps for SaaS businesses](https://www.g2.com/discussions/what-are-the-best-cdp-apps-for-saas-businesses)[What platform integrates recruitment with onboarding systems?](https://www.g2.com/discussions/what-platform-integrates-recruitment-with-onboarding-systems)[What AR collaboration tools are best for field service teams that need to reduce on-site visits through remote visual support?](https://www.g2.com/discussions/what-ar-collaboration-tools-are-best-for-field-service-teams-that-need-to-reduce-on-site-visits-through-remote-visual-support)

[What native advertising platform works best for promoting a mobile app inside other apps without it feeling like a disruptive ad?](https://www.g2.com/discussions/what-native-advertising-platform-works-best-for-promoting-a-mobile-app-inside-other-apps-without-it-feeling-like-a-disruptive-ad)[Which business process management tools handle cross-departmental workflows well and keep data flowing between teams without manual handoffs?](https://www.g2.com/discussions/which-business-process-management-tools-handle-cross-departmental-workflows-well-and-keep-data-flowing-between-teams-without-manual-handoffs)[What are the highest rated digital wayfinding platforms for prospective students exploring campuses independently?](https://www.g2.com/discussions/what-are-the-highest-rated-digital-wayfinding-platforms-for-prospective-students-exploring-campuses-independently)

[Show MoreShow Less](javascript:void(0);)