compare
Loki vs Security Onion
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Loki | Security Onion |
|---|---|---|
| Language | Go | Shell |
| Licence | AGPL-3.0 | Other |
| Stars | 29k | 4.9k |
| Latest | v3.7.8 | 3.3.0-20260911 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 5 days between releases | about 24 days between releases |
| Active contributors | 39+ commit authors on the default branch in the last 90 days | 8 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Splunk. Alternatives to Splunk →
PartialLokiLog storage and querying, without Splunk's apps and SIEM features.
PartialSecurity OnionNetwork and host security monitoring with alerting, hunting and case management, not general log analytics.
Loki
- v3.7.82026-09-17security/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.7.x) (#24433) (4d5dc2b)
- v3.6.172026-09-17security/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.6.x) (#24330) (d8d78f6)
- v3.7.72026-08-27Add flag to ignore missing chunks during deletion of logs with line filter [release-3.7.x] (#24233) (7a40404)
- v3.6.162026-08-27Add flag to ignore missing chunks during deletion of logs with line filter [release-3.6.x] (#24232) (b87159f)
- operator/v0.11.02026-08-18operator: v0.11.0
Security Onion
- 3.3.0-202609112026-09-11Add x86-64-v3 CPU pre-flight check to soup
- 3.3.0-202609082026-09-08Bump version from 3.2.0 to 3.3.0
- 3.2.0-202607292026-07-29Bump version from 3.1.0 to 3.2.0
- 3.1.0-202605282026-05-28Add version number to HOTFIX file
- 3.1.0-202605212026-05-21Version Bump
Loki
✓ signed The latest release, v3.7.8, carries a signature GitHub verified.
Loading the security report
Security Onion
✓ signed The latest release, 3.3.0-20260911, carries a signature GitHub verified.
Loading the security report