Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Graylog SIEM by Graylog View product | OSSEC by OSSEC View product |
|---|---|---|
| Overview | ||
| What it is | Graylog SIEM from Graylog focuses on security information and event management. Key capabilities: anomaly baselining. Compare it with the leading SIEM alternatives. | OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives. |
| Product type | High-Performance Enterprise SIEM & Threat Hunting Platform | Open-Source Host-Based Intrusion Detection System (HIDS) |
| Best for | Financial Services, Healthcare, Higher Education, Retail, Government, Technology, Education | Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | On-Premise |
| Deployment details | Cloud SaaS; On-premises; Hybrid; Graylog Cloud; On-premises Linux clusters; Hybrid deployment | Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client Agents |
| Data residency | US; EU; Customer-hosted local datacenter | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Linux clustersDocker containersKubernetesGraylog Cloud | LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs |
| Compliance | SOC 2ISO 27001HIPAAPCI DSSGDPR | GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53 |
| Integrations & coverage | ||
| Integrations | Microsoft 365Active DirectoryCrowdStrikeCiscoFortinetAWS CloudTrailZeek | Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack |
| Industries | Financial ServicesHealthcareHigher EducationRetailGovernmentTechnology+1 more | Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Graylog | OSSEC |
| Headquarters | Houston, Texas, USA | Open-source project; global community |
| Company size | 201-500 | 1-10 |
| Founded | 2009 | 2003 |
Overview
What it is
Graylog SIEM
Graylog SIEM from Graylog focuses on security information and event management. Key capabilities: anomaly baselining. Compare it with the leading SIEM alternatives.OSSEC
OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives.Product type
Graylog SIEM
High-Performance Enterprise SIEM & Threat Hunting PlatformOSSEC
Open-Source Host-Based Intrusion Detection System (HIDS)Best for
Graylog SIEM
Financial Services, Healthcare, Higher Education, Retail, Government, Technology, EducationOSSEC
Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial ServicesPricing
Pricing model
Graylog SIEM
Contact VendorOSSEC
Contact VendorFree trial
Graylog SIEM
Free trial: yesOSSEC
Free trial: yesDeployment
Deployment options
Graylog SIEM
SaaSCloudHybridOn-Premise
OSSEC
On-Premise
Deployment details
Graylog SIEM
Cloud SaaS; On-premises; Hybrid; Graylog Cloud; On-premises Linux clusters; Hybrid deploymentOSSEC
Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client AgentsData residency
Graylog SIEM
US; EU; Customer-hosted local datacenterOSSEC
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Graylog SIEM
- Real-time event correlation
- MITRE ATT&CK threat mapping
- Threat intelligence enrichment
- Point-and-click investigation
- Automated compliance reporting
- Anomaly baselining
- Security information and event management
- SOC threat monitoring
OSSEC
- Host-based file integrity monitoring (FIM)
- Real-time log analysis and correlation
- Automated rootkit detection
- Active Response automated blocking
- Centralized agent architecture
- Host-based intrusion detection
- File integrity monitoring (FIM)
- Log analysis and correlation
Platform & access
API access
Graylog SIEM
API access: yesOSSEC
API access: noSingle sign-on (SSO)
Graylog SIEM
SSO: yesOSSEC
SSO: noRole-based access (RBAC)
Graylog SIEM
RBAC: yesOSSEC
RBAC: yesMulti-tenant
Graylog SIEM
Multi-tenant: yesOSSEC
Multi-tenant: noMobile app
Graylog SIEM
Mobile app: noOSSEC
Mobile app: noSupported platforms
Graylog SIEM
Linux clustersDocker containersKubernetesGraylog Cloud
OSSEC
LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs
Compliance
Graylog SIEM
SOC 2ISO 27001HIPAAPCI DSSGDPR
OSSEC
GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53
Integrations & coverage
Integrations
Graylog SIEM
Microsoft 365Active DirectoryCrowdStrikeCiscoFortinetAWS CloudTrailZeek
OSSEC
Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack
Industries
Graylog SIEM
Financial ServicesHealthcareHigher EducationRetailGovernmentTechnology+1 more
OSSEC
Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services
Regions
Graylog SIEM
Global
OSSEC
Global
Vendor
Company
Graylog SIEM
GraylogOSSEC
OSSECHeadquarters
Graylog SIEM
Houston, Texas, USAOSSEC
Open-source project; global communityCompany size
Graylog SIEM
201-500OSSEC
1-10Founded
Graylog SIEM
2009OSSEC
2003