Why Subscribe?

Snort has long been recognized as the de facto standard for intrusion detection and prevention. The power, precision and flexibility of the technology and the robust rules language enable the industry's most comprehensive threat coverage. Understanding that attackers are constantly developing new methods of attack, uncovering new vulnerabilities and exploiting known weaknesses in commonly deployed systems, Sourcefire created the Sourcefire Vulnerability Research Team (VRT) to ensure our customers stay one step ahead of the latest threats.

Over the past few years the Sourcefire VRT has helped to take Snort rules to the next level, ensuring that rules are accurate and fully tested before they are released to the community. They also focus their efforts on writing complex rules for underlying vulnerabilities as well as exploits. This new holistic approach offers Snort users detection coverage in advance of actual threats and often before the Snort user is even aware that coverage is needed.

With the Sourcefire VRT subscription service, we are able to extend the same commercial-level coverage that Sourcefire customers receive to Snort^® users.

Subscription options:

The Most Comprehensive Protection Available

In addition to the Sourcefire VRT research and standard feeds, the early warnings provided by the open source community give the Sourcefire VRT insight and access to vulnerability data well before exploits are available. This enables them to proactively focus on the underlying vulnerability, rather than reacting to known attacks. By leveraging the flexibility of the Snort rules language, the Sourcefire VRT is able to provide detection and prevention capabilities well in advance of an actual threat. For example, when the team learned of a vulnerability in Microsoft RPC DCOM they immediately recognized the potential for devastating attacks. Within days they were able to release new Snort rules to detect attempts to exploit this vulnerability. When the Blaster worm, which uses this attack vector, was released weeks later, users were already protected.

About the Sourcefire VRT

The Sourcefire VRT is a group of leading edge intrusion detection and prevention experts working to discover, assess and respond to the latest trends in hacking activity, intrusion attempts and vulnerabilities. This team is also supported by the vast resources of the open source Snort community, making it the largest group dedicated to advances in network security industry.