Tenzir

Open-source security data pipeline with native support for security-specific data formats

ToolSecurity Data PipelineOpen SourceCloudSelf-hosted

Pricing: Free (open source) / Enterprise support available

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed February 2026 · How we review listings

What is Tenzir?

Tenzir is an open-source security data pipeline built specifically for security operations teams. It provides a pipeline-based approach to collecting, parsing, transforming, and routing security telemetry data with native support for security-specific formats like PCAP, Zeek, Suricata, and STIX/TAXII. Tenzir's open-source model and security-first design make it an attractive option for teams that want transparency and community-driven development.

Best for: Security teams wanting an open-source, security-native data pipeline with transparent code and no vendor lock-in
Pros
  • ✓ Fully open-source with transparent codebase
  • ✓ Purpose-built for security data and formats
  • ✓ No vendor lock-in or licensing costs
  • ✓ Native support for PCAP and network telemetry
  • ✓ Active community and extensible architecture
Things to check
  • • Smaller community than established alternatives
  • • Fewer pre-built integrations than Cribl
  • • Requires more operational expertise to deploy
  • • Less mature enterprise support options
  • • Limited GUI. Primarily CLI and config-driven

Reported in public reviews and vendor documentation. See sources below.

Key Features

Open-source pipeline engine
Native security format support (PCAP, Zeek, Suricata)
Pipeline-as-code configuration
STIX/TAXII threat intelligence integration
Data transformation and enrichment
Multi-destination routing
Schema inference and validation
Community-driven detection content

Are you Tenzir? Improve this listing with screenshots, case studies and more.

Tenzir Comparisons

Tenzir vs Cribl→Tenzir vs Fluentd→Tenzir vs Azure Data Explorer→Tenzir vs Datadog Observability Pipelines→Tenzir vs Mezmo→Tenzir vs Realm.Security→Tenzir vs Vector→Tenzir vs Splunk Data Stream Processor→

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Tenzir: official websitePrimary source
Tenzir — official site (homepage)
Official site
Tenzir Pricing (Community/Professional/Enterprise/Sovereign editions)
Official site
tenzir/tenzir — open-source data pipeline engine (BSD-3-Clause)
GitHub
Tenzir — Startup City Hamburg profile (Year Founded: 2017)
Startup City Hamburg

Spot an error, or do you represent Tenzir? Request a correction.

Quick Info
PricingFree (open source) / Enterprise support available
ModelOpen source with commercial support
Founded2017
CloudYes
Self-HostedYes
Open SourceYes
Visit Website →View on GitHub →

Last updated: Feb 20, 2026

Tenzir Alternatives
View All AlternativesFeaturedRealm.Security
Security data fabric platform for intelligent routing and op...
Cribl
Security data pipeline platform for routing, reducing, and t...Mezmo
Log management and observability pipeline platform with inte...Splunk Data Stream Processor
Splunk's real-time stream processing engine for data optimiz...Datadog Observability Pipelines
Managed observability pipeline for routing and transforming ...Fluentd
Open-source unified data collector and log aggregator from t...
In the glossary
Security Data Pipeline