# Security Onion privacy rating

Linux distribution for threat hunting, network security monitoring and log management that bundles tools such as Suricata, Zeek and Elasticsearch with its own web console.

## Summary

Security Onion scores 50 out of 100 (grade D) on the intrusion detection criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://securityonionsolutions.com
- Source code: https://github.com/Security-Onion-Solutions/securityonion
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Linux
- Home page trackers: Google Tag Manager
- Category: [Intrusion detection](https://privacyratings.com/intrusion-detection/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | All code is public under the source-available Elastic License 2.0, which is not OSI-approved. | https://github.com/Security-Onion-Solutions/securityonion/blob/3/main/LICENSE |
| No trackers or telemetry | No | Console telemetry, chosen during setup, sends feature usage data to Google Analytics. | https://docs.securityonion.net/en/3/main/telemetry/ |
| No ads or data sales | Yes | Funded by Security Onion Pro licenses, hardware appliances, training and support, with no ads. | https://securityonionsolutions.com/pro/ |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/intrusion-detection/security-onion/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/intrusion-detection/security-onion.md