Abstract: A data security server or system may be installed or placed into network to perform data security and network monitoring and analysis functions. The data security server may operate an isolated computing instance or engine, such as a software container engine. A computing resource service provider may send commands to the data security server to provision a variety of data security and monitoring applications in isolated software containers of the data security server. The data security server, via the data security and monitoring applications, may obtain copies of traffic going into and out of the network, and analyze the traffic to produce security data. The security data may be uploaded to the service provider for storage and retrieval.