Sold by: AdvanceCo Inc.
Deployed on AWS
Free Trial
Hardened Suricata 9 engine for AWS. Real-time threat detection and deep packet inspection. Optimized for cloud workloads with professional vendor support and seamless SIEM integration.
Overview
Enterprise-Grade Network Security: Hardened for the AWS Cloud
In 2026, network visibility is the foundation of a Zero Trust architecture. AdvanceCo Inc provides a production-ready deployment of Suricata 9, the industry leading open-source network threat detection engine, packaged specifically for the Amazon Web Services ecosystem.
This AMI removes the operational burden of manual setup. Built on a stable Ubuntu 22.04 LTS foundation, this solution is tuned to leverage AWS features like VPC Traffic Mirroring and Nitro-based instance acceleration.
Key Capabilities:
Advanced Engine Architecture: Suricata 9 utilizes multi-threading to exploit 100 percent of your multi-core CPU resources.
Deep Protocol Analysis: Beyond simple signature matching, Suricata provides metadata extraction for HTTP, DNS, TLS, and SMB traffic.
Modern Encryption Visibility: Enhanced handling of QUIC and TLS 1.3 ensures you maintain visibility into modern encrypted streams.
Hardened Security: This build includes specific kernel-level optimizations to handle high-velocity traffic spikes without packet loss.
The AdvanceCo Advantage: Choosing our supported AMI means you have a partner for your security infrastructure. Our Raleigh-based team provides:
Quarterly Maintenance: We handle Ubuntu kernel security patches and Suricata binary updates.
SIEM Integration: EVE JSON output is ready for ingestion into any modern observability platform.
Performance Tuning: Includes specific configurations not found in community builds for high-throughput networking.
Ideal Use Cases:
Regulatory Compliance: Quickly satisfy requirements for network monitoring in HIPAA and PCI DSS environments.
Cost-Effective Scalability: A powerful alternative to managed firewall services for organizations requiring granular control.
Threat Hunting: Use Network Security Monitoring features to analyze network behavior in real-time.
Highlights
- Suricata 9 Engine Upgrade: Next-generation visibility for QUIC and TLS 1.3 protocols to secure modern encrypted traffic. Performance Tuned: Pre-configured AF-PACKET settings and 128k block sizes for high-speed AWS networking and reduced CPU overhead.
- LDAP and SIP Inspection: Full visibility into lateral movement and voice traffic with native LDAP and SIP over TCP parsers.
- Compliance Ready: EVE JSON logging format for instant integration with AWS Security Hub and meeting PCI DSS 4.0 or SOC 2 audits. Professional Support: Includes OS and software maintenance from the AdvanceCo US-based engineering team.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 22.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
m5.large Recommended | $0.05 |
m8i.4xlarge | $0.05 |
m8i.metal-96xl | $0.05 |
m8id.metal-48xl | $0.05 |
m8i.2xlarge | $0.05 |
m7a.large | $0.05 |
c6i.large | $0.05 |
m8id.48xlarge | $0.05 |
m8i-flex.2xlarge | $0.05 |
m8id.4xlarge | $0.05 |
Dimensions summary
You pay by the hour for the software running on a chosen Amazon EC2 instance. Pricing scales with the instance you pick, not with features. Each dimension names a specific EC2 instance type across several families. General-purpose families range from small shared-tenancy sizes up to bare-metal and very large sizes with many virtual CPUs. Some families add local storage; flex variants offer burstable performance. Compute-optimized and older-generation sizes are also listed. The hourly software rate rises as instance size grows. You run one selected instance size and pay only for hours used.
Top-of-mind questions for buyers
The rate covers the Suricata IDS/IPS software licence metered per running instance-hour on your chosen EC2 instance. Charges accrue only while the instance runs. A fully stopped instance stops software charges, though underlying AWS storage fees for the volume may still apply separately.
One billing unit is one hour of the selected EC2 instance type running the software. Each dimension names a specific instance size, such as m8i.large or m8id.48xlarge. You pick one size, and the hourly rate matches that size. Larger instances with more virtual CPUs carry higher hourly rates.
You can choose general-purpose families, some with local storage, plus flex variants offering burstable performance. Compute-optimized and older-generation sizes are also listed. Storage-equipped and larger sizes suit heavier network traffic analysis. Smaller sizes fit lighter monitoring. You run one selected size at a time.
www.advancecoinc.com
Helpful?
Vendor refund policy
As is. No refund offered.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Update to patch copy fail
Additional details
Usage instructions
SSH in as ubuntu.
Support
Vendor support
Professional Support: Includes OS and software maintenance from the AdvanceCo US-based engineering team.Paid telephone, slack, and software maintenance support is available to customers requiring supported open source products. Find us at https://www.advancecoinc.com/aws-marketplace.html Contact us at secproductsupport@advancecoinc.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Hardened Suricata 9 engine for AWS. Real-time threat detection and deep packet inspection. Optimized for cloud workloads with professional vendor support and seamless SIEM integration.
This product has charges associated with it for seller support. Suricata is a high-performance open-source intrusion detection and prevention system (IDS/IPS) that provides real-time network traffic analysis, threat detection, and protocol inspection. It helps organizations identify malicious activity, detect attacks, and enhance network security with advanced rule-based analysis.
This product has charges associated with it for maintenance, updates, and optional technical support provided by the seller. Suricata is a high-performance, open-source network threat detection engine that functions as an Intrusion Detection.
Security Onion is a free and open platform built by defenders for defenders. It includes network visibility, host visibility, intrusion detection honeypots, log management, case management, and much more.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.