01 · Product name
Zui
Desktop logs app. README says SuperDB.
Published by Brim Data.
In short
Zui is the desktop application practitioners still find at zui.brimdata.io. The README in superdb/zui, opened on 18 Oct 2026, titles the same tree SuperDB Desktop and calls it the front end to SuperDB. The download link in that README is brimdata.io/download. The installation docs linked there are on zui.brimdata.io. LICENSE.txt copyrights Brim Data, Inc., 2019-2023, and licenses source outside the ppl directory under BSD-3-Clause and the ppl directory under the Polyform Perimeter license. This listing did not install the app, so it has no query result to show.
Product pricing strategy
02
Free
The README's download link and the license file do not print a price. Source outside ppl is BSD-3-Clause. Source inside ppl is the Polyform Perimeter license. Those are grants, not a subscription. The GitHub SPDX field is NOASSERTION, which matches a tree with two licenses. Do not invent a SuperDB cloud fee from this repository. If brimdata.io later sells a hosted pool, cite that page. The desktop app this listing is describing had no price on the README, and this listing did not open a checkout.
Utility and features
03
The repository that was brimdata/zui now resolves as superdb/zui. Its README heading is SuperDB Desktop. The highlights it lists are drag-and-drop ingest, schema inference, named queries, and right-click pivots. It says a local server loads data into pools and that SuperSQL searches them. One bullet says you can investigate Zeek security logs. That is the connection to a packet workflow: Zeek writes the logs, and this app is a desktop place to query them. The README does not say the app captures packets.
- Three names. README title SuperDB Desktop, docs host zui.brimdata.io, LICENSE copyright Brim Data, Inc.
- Two licenses. BSD-3-Clause outside ppl. Polyform Perimeter inside ppl. SPDX on the repo is NOASSERTION.
- Zeek logs, not a capture. The README lists Zeek logs as something you can investigate. It does not say the app sniffs a network.
Three names are in the files opened here. The docs host and the older project name are Zui. The README title is SuperDB Desktop. The LICENSE copyright line is Brim Data, Inc. Quote the file you mean. This listing did not download the build and did not open a window, so the Screenshots section is removed. There is no pool, no query, and no Zeek log loaded in this app to show. The BSD-3-Clause grant and the Polyform Perimeter grant apply to different directories. Do not cite one license for the whole tree.
- 1
Cite the README title and the docs host separately.
- 2
Check which directory a file is in before you state the license.
- 3
Load a Zeek log you produced, and keep the sensor note with the query.
Caveats
04
The app was not installed. There is no screenshot of a Zeek log in Zui, and the vendor's marketing images are not filed. The README's feature list is the project's description, not a test log.
Names drifted. Calling the 18 Oct 2026 README SuperDB Desktop is accurate. Calling the docs host Zui is accurate. Calling the copyright holder Brim Data is accurate. Calling all three the same sentence without the file names is how a citation goes stale. The Polyform Perimeter license is not BSD. Read the directory before you redistribute. A Zeek log you load still needs the sensor notes. The app does not create the packets.
Potential use cases
06
- An old note says Brim or Zui and the reader needs the current title. On 18 Oct 2026 the README in superdb/zui was headed SuperDB Desktop and called the app the front end to SuperDB. The installation docs it links are on zui.brimdata.io. The LICENSE copyright line says Brim Data, Inc., 2019-2023. Quote the file you opened.
- Someone expects the app to capture packets. The README says you can investigate Zeek security logs. It does not say the app sniffs an interface. Produce the log with Zeek, then load that file. This listing did not install the desktop build, so it has no pool and no query to show.
- A redistributor asks which license covers the tree. LICENSE.txt applies BSD-3-Clause outside the ppl directory and the Polyform Perimeter license inside ppl. The GitHub SPDX field is NOASSERTION. Do not cite one grant for every file. The README's download link did not print a price.
Hard cases
The case where the first result is easy to over-read.
One name is used for three files
SuperDB Desktop is the README title. Zui is the docs host and the older project name. Brim Data, Inc. is the copyright line. All three were visible on 18 Oct 2026, and they are not interchangeable. The app was not installed. Do not invent a query result, and do not call the Polyform directory BSD.
Practitioners using it
Posts on X from people describing a concrete use. The quote is the post. Likes and reposts are the counts saved with it, not a live total. A label marks a creator, a maintainer, a vendor, a partner, a data partner, or an investor.
Maintainer
Here's the second article in our popular Security Data Science series, "Visualizing Network Cyber Attacks with Suricata and Zeek using Brim and NetworkX". #securityanalytics #threathunting #cybersecurity #zeekurity #suricata_ids #networkx #datascience https://t.co/qMoI6f6rhj pic.twitter.com/LFBMQlpaus
Maintainer
Wan to join data from different Zeek or Suricata records in Brim? Check out our new join() cookbook - https://t.co/nkMkDXlaKy
Sysmon for endpoint events, Suricata for network events, Brim for manually analyzing pcap files -- all free tools and worth much more than you pay for them
Zui is known in the security community for it’s PCAP parsing and conversion to Zeek and Suricata logs. I started using Zui recently for non-PCAP data. It’s robust and definitely will be soon my personal preference if I can do visualization with it, you should try it. pic.twitter.com/2fDeY4AQES
Completed Malware Traffic Analysis 2 challenge https://t.co/uLvlWwZ0Ec Tools used: wireshark & zui(brim) Link challenge: https://t.co/hplO2PXtHm #BlueYard #CyberDefenders #BlueTeam #DFIR #InfoSec #CyberSecurity #wireshark #zui #malware #brim #pcap via @CyberDefenders
Questions
Is Zui free?
The README does not print a price. LICENSE.txt applies BSD-3-Clause outside the ppl directory and the Polyform Perimeter license inside it.
What is the current name?
The README opened on 18 Oct 2026 is titled SuperDB Desktop. The installation docs it links are on zui.brimdata.io. The copyright line says Brim Data, Inc.
Citations
07
Titled sources. These public pages are what the quotes on this listing come from.
Product
Zui download
https://www.brimdata.io/download/Documentation
Zui repository
https://github.com/superdb/zuiDocumentation
Zui installation
https://zui.brimdata.io/docs/Installation