Licensing
Choose Your Plan
Basic is available now — register for your free license. Professional and Enterprise open August 17, 2026. Basic covers nearly the entire platform; Professional adds the ML-driven detection lenses (Anomaly + Behavioral) and 6× the throughput; Enterprise adds a few exclusive features and lifts every limit. One license per Suricata instance.
All licenses require registration first — including Basic. Every tier is issued as a signed license tied to your account; register to receive yours.
Basic Early Access
$0
available now · registration required
- 10K events/min · configurable retention
- Overview, Alerts, Applications, DNS, TLS, Hosts, Flows panels
- GeoIP country/ASN + world map · IP Reputation (AbuseIPDB)
- NIST PQC compliance · ETA encryption analysis · Performance lens
- Transport performance (handshake RTT, retransmits, jitter, TTFB)
- Hunt detection (beaconing, lateral, fanout, portscan, community)
- Asset Inventory + OT Protocol Traffic panel + OT decoders
- Parquet signing · webhooks · per-segment reports · S3 backhaul
Professional
$99
Available August 17, 2026
- Everything in Basic, plus:
- ML Anomaly lens (iForest / HBOS)
- ML Behavioral lens (SIGMA tactics + OCCAM HMM)
- 60K events/min — 6× the Basic throughput
Enterprise
$999
Available August 17, 2026
- Everything in Professional
- Unlimited events/min
- Detection swimlane + topology graph
- Custom theme + logo · MQTT/Kafka · external threat intel
Open Deployment Layer
The Rockfish Toolkit is the open deployment kit for Rockfish NDR — Suricata plugins for capture, IIoT/OT protocols, and telemetry, plus the Docker/APT deployment recipe.
Deployment Toolkit on GitHubQuestions? We're happy to help.
Contact Us