Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | OpenText ArcSight by OpenText View product | TShark by Wireshark View product |
|---|---|---|
| Overview | ||
| What it is | Evaluating OpenText ArcSight? See how this SIEM tool handles real-time event correlation and CEF log normalization, where it fits best and which alternatives to compare. | Evaluating TShark? See how this Network Security tool handles PCAP/PCAPNG parsing and automated packet dissection, where it fits best and which alternatives to compare. |
| Product type | Security Information & Event Management (SIEM) Suite | Command-Line Network Protocol Analyzer & Packet Capture Tool |
| Best for | Government, Banking, Critical Infrastructure, Healthcare, Defense, Government & Defense, Telecom | Cross-industry, Cybersecurity Engineering, IT Operations, Academic, Technology, Cybersecurity Consulting, Government, Higher Education |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | Cloud |
| Deployment details | Cloud SaaS; On-Premises; Hybrid Appliance / Software; Cloud SaaS; Virtual Appliance; On-Premises Server Clusters | Command-Line Interface / Terminal Utility; Local CLI binary / Docker container |
| Data residency | Customer-hosted data sovereignty; Regional SaaS cloud | Local workstation / Server filesystem |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: no |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Enterprise NetworksCloud WorkloadsEndpointsIdentity Systems | Headless Linux serversTerminal environmentsVirtual machines |
| Compliance | PCI-DSS 4.0SOXHIPAAFISMAISO 27001GDPR | Open source baseline (GNU GPLv2) |
| Integrations & coverage | ||
| Integrations | ServiceNowSplunkMicrosoft Entra IDAWSAzureCiscoPalo Alto Networks | PythonBashPowerShellSnortSuricataELK StackZeek |
| Industries | GovernmentBankingCritical InfrastructureHealthcareDefenseGovernment & Defense+1 more | Cross-industryCybersecurity EngineeringIT OperationsAcademicTechnologyCybersecurity Consulting+2 more |
| Regions | Global enterprise deployments | Global |
| Vendor | ||
| Company | OpenText | Wireshark |
| Headquarters | Waterloo, Ontario, Canada | Global Open Source Project |
| Company size | 20,000+ | 1-10 |
| Founded | 1991 | 1998 |
Overview
What it is
OpenText ArcSight
Evaluating OpenText ArcSight? See how this SIEM tool handles real-time event correlation and CEF log normalization, where it fits best and which alternatives to compare.TShark
Evaluating TShark? See how this Network Security tool handles PCAP/PCAPNG parsing and automated packet dissection, where it fits best and which alternatives to compare.Product type
OpenText ArcSight
Security Information & Event Management (SIEM) SuiteTShark
Command-Line Network Protocol Analyzer & Packet Capture ToolBest for
OpenText ArcSight
Government, Banking, Critical Infrastructure, Healthcare, Defense, Government & Defense, TelecomTShark
Cross-industry, Cybersecurity Engineering, IT Operations, Academic, Technology, Cybersecurity Consulting, Government, Higher EducationPricing
Pricing model
OpenText ArcSight
Contact VendorTShark
Contact VendorFree trial
OpenText ArcSight
Free trial: yesTShark
Free trial: yesDeployment
Deployment options
OpenText ArcSight
SaaSCloudHybridOn-Premise
TShark
Cloud
Deployment details
OpenText ArcSight
Cloud SaaS; On-Premises; Hybrid Appliance / Software; Cloud SaaS; Virtual Appliance; On-Premises Server ClustersTShark
Command-Line Interface / Terminal Utility; Local CLI binary / Docker containerData residency
OpenText ArcSight
Customer-hosted data sovereignty; Regional SaaS cloudTShark
Local workstation / Server filesystemKey features
What it offers
OpenText ArcSight
- Real-time event correlation
- CEF log normalization
- UEBA behavioral analytics (Interset)
- Integrated SOAR playbooks
- High-throughput SmartConnectors
- Real-time SOC monitoring
- Insider threat detection
- Automated incident orchestration
TShark
- Live packet capture via libpcap/Npcap
- PCAP/PCAPNG parsing
- Wireshark display filter syntax
- JSON/CSV/XML structured output
- Automated packet dissection
- Scriptable headless operation
- Automated network packet analysis
- Headless network troubleshooting
Platform & access
API access
OpenText ArcSight
API access: yesTShark
API access: yesSingle sign-on (SSO)
OpenText ArcSight
SSO: yesTShark
SSO: noRole-based access (RBAC)
OpenText ArcSight
RBAC: yesTShark
RBAC: noMulti-tenant
OpenText ArcSight
Multi-tenant: yesTShark
Multi-tenant: noMobile app
OpenText ArcSight
Mobile app: noTShark
Mobile app: noSupported platforms
OpenText ArcSight
Enterprise NetworksCloud WorkloadsEndpointsIdentity Systems
TShark
Headless Linux serversTerminal environmentsVirtual machines
Compliance
OpenText ArcSight
PCI-DSS 4.0SOXHIPAAFISMAISO 27001GDPR
TShark
Open source baseline (GNU GPLv2)
Integrations & coverage
Integrations
OpenText ArcSight
ServiceNowSplunkMicrosoft Entra IDAWSAzureCiscoPalo Alto Networks
TShark
PythonBashPowerShellSnortSuricataELK StackZeek
Industries
OpenText ArcSight
GovernmentBankingCritical InfrastructureHealthcareDefenseGovernment & Defense+1 more
TShark
Cross-industryCybersecurity EngineeringIT OperationsAcademicTechnologyCybersecurity Consulting+2 more
Regions
OpenText ArcSight
Global enterprise deployments
TShark
Global
Vendor
Company
OpenText ArcSight
OpenTextTShark
WiresharkHeadquarters
OpenText ArcSight
Waterloo, Ontario, CanadaTShark
Global Open Source ProjectCompany size
OpenText ArcSight
20,000+TShark
1-10Founded
OpenText ArcSight
1991TShark
1998