Fl0wer

Fl0wer is a lightweight, high-performance Network Intelligence and Telemetry Analytics platform designed for real-world operations, hybrid environments, and MSP workflows. Multi-Source Telemetry Ingestion: Native support for NetFlow (v1/v5/v9), IPFIX, and sFlow, paired with lightweight Go agents for granular East-West traffic visibility across virtualized and Kubernetes workloads. ClickHouse Analytics Core: Built on Debian 12 with a ClickHouse columnar database, delivering sub-second query performance and long-term retention on massive flow datasets with minimal hardware overhead. Real-Time Threat Hunting: Instant reloading of IP and domain threat blacklists with active MISP integration for proactive threat detection. Automated Compliance & Executive Reporting: Generates structured technical and executive PDF reports mapped against frameworks like NIS2, DORA, GDPR, and ISO 27001. Rapid Bare-Metal/VM Deployment: Ships as a turn-key ISO image, enabling a fully functional local installation in about 30 minutes.