Network Threat Detection and Response

Stamus Networks is THE global leader in Suricata-based network security

The Stamus Networks Team

Developing, improving, and evangelizing Suricata since 2009
Contributed 10x more to the Suricata code base & education than nearest contributor
Co-founders are on the OISF board & executive team
Executives were leaders at Emerging Threats, creating threat intel for Suricata

Learn more >>

The Stamus Security Platform

Stamus Security Platform (SSP) is the world’s most advanced Suricata-based network detection and response (NDR) solution
Combines best of ML, signature, IoC matching, & algorithmic threat detection with threat hunting
Protects over $10T in assets for global financial institutions

Learn more >>

Support for the Suricata Community

Authored open-source book – The Security Analyst’s Guide to Suricata
SELKS - turnkey Suricata IDS/NSM is downloaded >1000/month
Developed 6 other popular open-source tools: Suricata Language Server, Splunk App, Lateral movement ruleset, Jupyter playbooks, SEPTun, & GopherCAP

Actionable network visibility and threat detection

We tap into the inherent power of network traffic to uncover critical threats to your organization. We offer the best possible asset-oriented visibility and automated detection to help practitioners cut through the clutter and focus on serious and imminent threats.

Stamus Security Platform

Stamus Security Platform (SSP) is an open network detection and response solution built on a Suricata foundation that delivers actionable network visibility and powerful threat detection.

LEARN MORE >>

Stamus Security Platform consolidates and improves upon network security point solutions

By combining the best capabilities of intrusion detection systems (IDS), network security monitoring (NSM), and network detection and response (NDR), the Stamus Security Platform delivers a new generation of NDR that helps organizations know more, respond sooner, and mitigate risk.

Meet your governance, risk, compliance, and operational security challenges with a single consolidated solution while reducing your expenses.

Why Stamus Security Platform

Greater visibility into threats & activity

By using multiple detection technologies and guided threat hunting you'll uncover even the weakest attack signals and unauthorized activities.

Central analytics in the cloud OR on-prem

Optionally deploy our central analytics system on your premise or datacenter, so your network probes do not ship sensitive information to a SaaS-based analytics system.

Use our probes and/or your Suricata sensors

Supercharge your existing Suricata deployment? Start with your Suricata sensors, while you transition to the more advanced Stamus Network Probes.

Transparent detections with detailed evidence

Understand exactly what triggered an event with a detailed attack timeline along with all the evidence needed to respond quickly and stop a breach before damage is done.

Open and extensible for your environment

Augment built-in detections with third party threat intel and signatures or develop your own custom detections. Easily integrate into your security tech stack.

Built for enterprise-scale operations

Scales from a small stand-alone instance to multi-site, multi-100Gbps deployments integrated into your SOC/SIEM/SOAR while tracking activity of millions of hosts.

Why Stamus Networks

Stamus Networks believes in a world where defenders are heroes, and a future where those they protect remain safe. As organizations face threats from well-funded adversaries, we relentlessly pursue solutions that make the defender’s job easier and more impactful.

Unlike other network security companies, Stamus Networks delivers truly useful detection at enterprise scale by applying the right technologies to the right problems, while avoiding the hype, fear and exaggeration that is often employed by security vendors. We are guided by these and a few other core principles which we believe positively impact our customers’ experience with us.

We Wrote The Book on Suricata.

Stamus Networks | Security Analyst's Guide to Suricata

Download the Book

Built by Open-Source Experts

Stamus Networks' product development is led by our co-founders, Éric Leblond and Peter Manev.

Both Éric and Peter are members of the Open Information Security Foundation executive team and developers on the Suricata project, the widely-deployed open source intrusion detection and network security monitoring engine. The OISF is a non-profit organization created to build community and to support open source security technologies like Suricata.

Stamus Networks applies its extensive Suricata and network expertise to develop our advanced network security solutions - both commercial and opensource.

Expore Open Source

See what our customers are saying about Stamus Networks

We selected the Stamus Networks solution based on our success at my previous employer. We found it to be an indispensable platform for understanding our security posture.

Head of Sector at a multi-national government institution

We use the Stamus Security Platform to monitor a multitude of custom applications to ensure they are operating securely.

Cyber Defense Engineering Manager at a major travel technology vendor

[Stamus Security Platform] allowed us to reduce costs by simplifying IDS systems configuration and updates management, and by getting a single pane of glass on all IDS events with preconfigured dashboards and filters.

Lead of Information Security Team for a global engineering SaaS company

I have previously worked with six different IDS vendors, and only Stamus provides us with both the signature and anomaly-based data we need which previously required two separate traffic analyzers.

Lead Security Analyst at large SaaS vendor

Using the threat hunting capabilities of the Stamus Security Platform we have been able to uncover multiple instances of C2 communications and malware running within our infrastructure.

Head of Cyber Security and Governance at an international European Bank

The ability of Stamus Security Platform to suppress the typically verbose stream of alerts enables us to quickly identify malicious activity from the tremendous noise associated with things like proxies on the network. By selecting the ‘relevant’ alerts, we are able to transition from millions of daily alerts to the 10 or 15 we actually need to review.

CTO at Bulgarian MSSP

After we started using Stamus Security Platform, we were able to drop our MSSP and reduce our costs while strengthening our cyber security posture.

Director of Infrastructure Technology at U.S. public school system

Stamus Networks has provided us with the most effective solution within our security stack. Their dedication to supporting us has been unmatched by any other vendor. We are excited to continue expanding our deployment of the Stamus Security Platform.

Head of Cyber Security and Governance at an international European Bank

We are excited to install the Stamus Security Platform at a major manufacturing client because the context provided by the solution allows us to identify actual threats in less time than other tools we have used.

Sales Engineer at French MSSP

The detailed network definitions used in the Stamus Security Platform allows us to efficiently and intuitively hunt for improper encryption certificates and proxy services. It's incredibly useful.

Head of Cyber Security and Governance at an international European Bank

We managed to increase visibility of suspicious and malicious network activity which highly simplified incident investigation. But I think the biggest advantage we received is the support from Stamus Networks team which always was quick, constructive, and useful.

Lead of Information Security Team for a global software engineering firm

Expose serious threats and unauthorized activity lurking in your network

Stamus Networks is THE global leader in Suricata-based network security

The Stamus Networks Team

Developing, improving, and evangelizing Suricata since 2009

Contributed 10x more to the Suricata code base & education than nearest contributor

Co-founders are on the OISF board & executive team

Executives were leaders at Emerging Threats, creating threat intel for Suricata

Learn more >>

The Stamus Security Platform

Stamus Security Platform (SSP) is the world’s most advanced Suricata-based network detection and response (NDR) solution

Combines best of ML, signature, IoC matching, & algorithmic threat detection with threat hunting

Protects over $10T in assets for global financial institutions

Learn more >>

Support for the Suricata Community

Authored open-source book – The Security Analyst’s Guide to Suricata

SELKS - turnkey Suricata IDS/NSM is downloaded >1000/month

Developed 6 other popular open-source tools: Suricata Language Server, Splunk App, Lateral movement ruleset, Jupyter playbooks, SEPTun, & GopherCAP

Learn more >>

Actionable network visibility and threat detection

Stamus Security Platform

Stamus Security Platform (SSP) is an open network detection and response solution built on a Suricata foundation that delivers actionable network visibility and powerful threat detection.

LEARN MORE >>

Stamus Security Platform consolidates and improves upon network security point solutions

Why Stamus Security Platform

Greater visibility into threats & activity

Central analytics in the cloud OR on-prem

Use our probes and/or your Suricata sensors

Transparent detections with detailed evidence

Open and extensible for your environment

Built for enterprise-scale operations

Why Stamus Networks

We Wrote The Book on Suricata.

Built by Open-Source Experts

See what our customers are saying about Stamus Networks

We selected the Stamus Networks solution based on our success at my previous employer. We found it to be an indispensable platform for understanding our security posture.

We use the Stamus Security Platform to monitor a multitude of custom applications to ensure they are operating securely.

[Stamus Security Platform] allowed us to reduce costs by simplifying IDS systems configuration and updates management, and by getting a single pane of glass on all IDS events with preconfigured dashboards and filters.

I have previously worked with six different IDS vendors, and only Stamus provides us with both the signature and anomaly-based data we need which previously required two separate traffic analyzers.

Using the threat hunting capabilities of the Stamus Security Platform we have been able to uncover multiple instances of C2 communications and malware running within our infrastructure.

After we started using Stamus Security Platform, we were able to drop our MSSP and reduce our costs while strengthening our cyber security posture.

Stamus Networks has provided us with the most effective solution within our security stack. Their dedication to supporting us has been unmatched by any other vendor. We are excited to continue expanding our deployment of the Stamus Security Platform.

We are excited to install the Stamus Security Platform at a major manufacturing client because the context provided by the solution allows us to identify actual threats in less time than other tools we have used.

The detailed network definitions used in the Stamus Security Platform allows us to efficiently and intuitively hunt for improper encryption certificates and proxy services. It's incredibly useful.

We managed to increase visibility of suspicious and malicious network activity which highly simplified incident investigation. But I think the biggest advantage we received is the support from Stamus Networks team which always was quick, constructive, and useful.

Recent Blog Articles

Using MISP Shared Intelligence with SELKS

Use SELKS to solve the Unit 42 Wireshark Quiz

Using MISP Shared Intelligence in Stamus Security Platform

Stamus Security Platform

Response-Ready Threat Detection • Guided Threat Hunting • Open, Extensible Platform •

Explainable, Transparent Results • In the Cloud or On-Premise