Arkime
Arkime is an open-source network capture and analysis tool that provides comprehensive network visibility, facilitating swift identification and resolution of security and network issues.
Arkime is an open-source network capture and analysis tool that provides comprehensive network visibility, facilitating swift identification and resolution of security and network issues.
Checked October 2026.
Arkime is an open-source network capture and analysis tool designed to augment existing security infrastructure.
It stores and indexes network traffic in standard PCAP format, offering full network visibility to security teams.
The tool is scalable, capable of handling hundreds of gigabits per second when deployed across multiple clustered systems.
Arkime features a Sessions page for viewing indexed sessions, a powerful search functionality, and the ability to export results as PCAP or CSV.
It includes an SPI (Session Profile Information) View for analyzing unique values of captured fields, and an SPI Graph page for temporal views of top unique field values.
The Connections page provides a network graph visualization of search results.
Additionally, Arkime offers a Parliament application for monitoring multiple Arkime clusters and a Cont3xt application for gathering contextual intelligence during technical investigations.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Arkime: features, pricing and alternatives.
Arkime is a product in the Network Detection and Response category. It covers Packet Capture and Open Source.
Arkime is free. Download and setup instructions are at https://arkime.com/.
Alternatives to Arkime listed on CybersecTools:
Compare all Arkime alternatives at https://cybersectools.com/alternatives/arkime
Arkime is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
WDR platform for Wi-Fi security protecting IT/OT assets wirelessly
Passive copper TAP range for non-intrusive Ethernet traffic monitoring.
Apache Spot is an open source big data platform that analyzes network flows and packet data to identify security threats and provide visibility into enterprise computing environments.
Network traffic broker for visibility, monitoring, and traffic optimization
Transforms NAT gateways into security sensors for cross-cloud egress visibility
A set of Bro/Zeek scripts that detect ATT&CK-based adversarial activity and raise notices
On our shortlist?
No shortlist covers this product's category yet. The closest is Best SASE Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
