compare
Malcolm vs Security Onion
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Malcolm | Security Onion |
|---|---|---|
| Language | Python | Shell |
| Licence | Other | Other |
| Stars | 2.5k | 4.9k |
| Latest | v26.09.0 | 3.3.0-20260911 |
| Last push | 2026-10-15 | 2026-10-15 |
| Release cadence | about 35 days between releases | about 24 days between releases |
| Active contributors | 2 commit authors on the default branch in the last 90 days | 7 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Malcolm replaces Security Onion. Alternatives to Security Onion →
PartialNetwork traffic analysis from PCAP, Zeek logs and Suricata alerts, with no host agents.
Malcolm
Security Onion
- 3.3.0-202609112026-09-11Add x86-64-v3 CPU pre-flight check to soup
- 3.3.0-202609082026-09-08Bump version from 3.2.0 to 3.3.0
- 3.2.0-202607292026-07-29Bump version from 3.1.0 to 3.2.0
- 3.1.0-202605282026-05-28Add version number to HOTFIX file
- 3.1.0-202605212026-05-21Version Bump
Malcolm
✓ signed The latest release, v26.09.0, carries a signature GitHub verified.
Loading the security report
Security Onion
✓ signed The latest release, 3.3.0-20260911, carries a signature GitHub verified.
Loading the security report