Zeek

A network security monitoring platform.

Open SourcemacOS

For

Official source: zeek.orgLast verified: awaiting review · How we check softwareDeveloper: Zeek project

What is Zeek?

Zeek turns network traffic into rich, structured logs of activity, which security teams use for monitoring and investigations.

Supported platforms

Platform	How to get it
macOS	Homebrew (verified)
Linux	Official website (zeek.org)

Pricing & licence

Open Source Open Source

Open source: the source code is public, so anyone can inspect it, and it's free to use.

Prices change, so check zeek.org for current pricing.

Installation

macOS

Mac · Homebrew

$ brew install zeek

Install Zeek with the rest of your macOS setup

Package names were checked against each official package registry, and commands install the same software as the official download. Only run commands you understand.

Alternatives to Zeek

WiresharkNetwork protocol analyser for capturing and inspecting traffic.View Alternative

Related guides

How to set up a cybersecurity home lab

Build a safe, isolated practice lab with free tools: virtual machines, an analysis machine, a deliberately vulnerable target and packet capture.

8 min read

Set up a new phone securely

Protect your accounts from the first day on a new phone.

5 min read

Suricata

Security & privacy

A network threat detection engine.

Open Source

Available for Linux

View details

Sysmon

Security & privacy

Logs detailed system activity to the Windows event log.

Free

Available for Windows, Linux

View details

Zeek FAQ

Is Zeek free?

Zeek is open source.

Which platforms does Zeek support?

Zeek is available for macOS and Linux. It isn't available for Windows, Android and iPhone & iPad.

Can I install Zeek with Homebrew?

Yes. Run "brew install zeek" in Terminal.

What are the alternatives to Zeek?

Common alternatives include Wireshark. See the full list of Zeek alternatives for how they differ.

Where can I download Zeek safely?

From the official website, zeek.org. Aptorise links only to official sources and never hosts installers.