---
title: "Security Onion"
pageType: "tool-profile"
schemaVersion: "1.0"
snapshotId: "tv-20260911-8ab5e3f1311b"
generatedAt: "2026-09-11T07:01:56.000Z"
canonicalUrl: "https://toolvitals.com/tools/security-onion/"
jsonUrl: "https://toolvitals.com/api/agent/tools/security-onion"
indexable: false
---

# Security Onion

Open platform for threat hunting, security monitoring, and log management.

## Decision context

- Status: data pending
- ToolVitals score: Not collected
- Health score: Not collected
- Shipping score: Not collected
- Score mode: not scored
- Data confidence: 90/100
- Source coverage: 90/100
- Last evidence check: 2026-09-11

## Classification

- Use case: Security Monitoring & Threat Hunting (security-monitoring-threat-hunting)
- Category: Security & Compliance (security)
- Tool mode: Source-visible project
- Openness: License unknown
- License: Other
- Tags: security, monitoring, log-management, threat-hunting, open-source, case-management, cyber-security, endpoint-security, information-security, intrusion-detection-system, network-security, security-tools, siem, intrusion-detection, incident-investigation

## Public repository signals

- Repository: [Security-Onion-Solutions/securityonion](https://github.com/Security-Onion-Solutions/securityonion)
- Stars: 4877 (adoption context only)
- Forks: 672
- Open issues: 76
- Last commit date: 2026-09-11
- Releases in 90 days: 2

## Source receipts

- [Official website](https://securityonion.net/) — checked 2026-09-11
- [Source repository](https://github.com/Security-Onion-Solutions/securityonion) — checked 2026-09-11

## Discovery status

- Search indexable: no
- Reason: thin or data-pending tool evidence

## Interpretation limits

- ToolVitals scores summarize bounded public maintenance, shipping, openness, and evidence signals. They are not user-review ratings.
- GitHub stars and related popularity metrics are adoption context, not quality evidence.
- Missing values mean not collected or not confidently established; they do not mean zero.
- Public signals do not prove security, uptime, support quality, customer satisfaction, or production suitability.
- Verify material decisions against the linked first-party sources and your own requirements.