diff --git a/README.md b/README.md
index d0b9f4f..0500854 100644
--- a/README.md
+++ b/README.md
@@ -74,6 +74,7 @@
 - [Capa](https://github.com/fireeye/capa) - An open-source tool to identify capabilities in executable files.
 - [Splunk Security Content](https://github.com/splunk/security_content) Splunk-curated detection content that can easily be used accross many SIEMs (see Uncoder Rule Converter.) 
 - [Threat Bus](https://github.com/tenzir/threatbus) - Threat intelligence dissemination layer to connect security tools through a distributed publish/subscribe message broker.
+- [VAST] - A network telemetry engine for data-driven security investigations.
 - [zeek2es](https://github.com/corelight/zeek2es) - An open source tool to convert Zeek logs to Elastic/OpenSearch.  You can also output pure JSON from Zeek's TSV logs!
 
 #### Alerting Engine