Snort / Suricata Rule Builder

Build and lint Snort 2, Snort 3 and Suricata IDS/IPS rules: header, content/PCRE matches with HTTP buffers and modifiers, flow, thresholds, classtype and references — with proper escaping and syntax checking. This free soc & threat intel tool runs entirely in your browser — no data leaves your device, no account required, and it keeps working offline once the page has loaded.