Ross ROSS = Recommend OSS · open-source software intelligence for agents

StamusNetworks/Clear-NDR-ISO

A Suricata based NDR distribution observed · 2026-08-28

github.com/StamusNetworks/Clear-NDR-ISO · homepage · Shell · GPL-3.0 (copyleft) observed · 2026-08-28

Health v2 · maintenance only

41/100

  • Activity 41
  • Release rhythm 8
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 4493
  • days_rel: n/a
  • days_push: 354
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1591 stars · 289 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Clear NDR Community (formerly SELKS) is a Debian-based Linux distribution for network detection and response built around Suricata, OpenSearch, and packet capture tooling. This repository contains the scripts and configuration to build its bootable ISO images, including a headless variant.

Use cases

  • deploy a network intrusion detection system on bare metal
  • monitor network traffic and hunt threats with Suricata
  • capture packets in PCAP and analyze IDS events
  • build a ready-to-use NDR appliance ISO
  • run a self-hosted network security monitoring stack

When to choose

  • you want an out-of-the-box Suricata-based NDR/NSM platform
  • you need IDS/IPS with a web UI and packet capture in one install
  • you prefer a fully open-source, self-hosted network monitoring distribution

When to avoid

  • you need host-based or endpoint detection rather than network monitoring
  • you want to integrate IDS into an existing OS instead of a dedicated appliance
  • you need a lightweight agent rather than a full distribution

Facets

application · maturity active

monitoring security gui self-hosted security networking monitoring self-hosted self-hosted ids ips ndr suricata network-security-monitoring threat-hunting iso-image opensearch pcap debian-live linux web-server

2 sources

Member repositories

RepositoryRoleHealth v2
StamusNetworks/Clear-NDR-ISOmain41

For agents

markdown · JSON · MCP: product_card(name="StamusNetworks/Clear-NDR-ISO")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem