← All distributions
Kali Purple
Offensive Security's defensive-side counterpart to Kali Linux, bundling SIEM, SOC, and blue-team tooling on the same Kali base instead of offensive/red-team tools.
Security, Privacy & Anonymitysecurityblue-teamSOCSIEMDebian-basedDownload ↗Official site ↗Docs / Wiki ↗
Based on
Debian (Kali Linux)
First released
2023
Package manager
APT (.deb)
Desktop environments
Xfce (default), GNOME, KDE Plasma
Where standard Kali Linux is built for red-team offense, Kali Purple flips the same trusted Debian base toward defense: it bundles a pre-integrated SIEM stack, intrusion detection tools, log analysis, and other blue-team/SOC (Security Operations Center) tooling that would otherwise take significant manual effort to assemble and wire together. It's aimed at defenders, security analysts, and organizations building or training a SOC who want a working reference environment rather than a bare OS to configure from zero. Being from the same team and repositories as Kali proper, it benefits from the same rolling security-tool updates and Debian-based reliability.
MirrorNest doesn't mirror distro ISOs — installation media should always come straight from the project's own official download page (linked above), so you get the correct checksum/signature to verify against.