Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Samhain by Samhain View product | OSSEC by OSSEC View product |
|---|---|---|
| Overview | ||
| What it is | Evaluating Samhain? See how this File Integrity Monitoring tool handles POSIX support and kernel rootkit detection, where it fits best and which alternatives to compare. | OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives. |
| Product type | Open-Source Host-Based File Integrity & System Monitoring Tool | Open-Source Host-Based Intrusion Detection System (HIDS) |
| Best for | Enterprise IT, Linux Systems, Security Research, Education, Public Sector | Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | On-Premise | On-Premise |
| Deployment details | Open Source; Self-hosted; Self-hosted Software Daemon; Client-Server Architecture | Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client Agents |
| Data residency | Customer Host Infrastructure (Completely Self-Contained) | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: no | API access: no |
| Single sign-on (SSO) | SSO: no | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | LinuxUnixWindows Host ServersVirtual MachinesCloud Nodes | LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs |
| Compliance | GPLv2 LicensePCI-DSS Requirement 11.5CIS Benchmarks | GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53 |
| Integrations & coverage | ||
| Integrations | Linux SyslogMySQLPostgreSQLNagiosOSSECWeb interfaces | Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack |
| Industries | Enterprise ITLinux SystemsSecurity ResearchEducationPublic Sector | Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Samhain | OSSEC |
| Headquarters | Open Source Project | Open-source project; global community |
| Company size | 1-10 | 1-10 |
| Founded | 2001 | 2003 |
Overview
What it is
Samhain
Evaluating Samhain? See how this File Integrity Monitoring tool handles POSIX support and kernel rootkit detection, where it fits best and which alternatives to compare.OSSEC
OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives.Product type
Samhain
Open-Source Host-Based File Integrity & System Monitoring ToolOSSEC
Open-Source Host-Based Intrusion Detection System (HIDS)Best for
Samhain
Enterprise IT, Linux Systems, Security Research, Education, Public SectorOSSEC
Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial ServicesPricing
Pricing model
Samhain
Contact VendorOSSEC
Contact VendorFree trial
Samhain
Free trial: yesOSSEC
Free trial: yesDeployment
Deployment options
Samhain
On-Premise
OSSEC
On-Premise
Deployment details
Samhain
Open Source; Self-hosted; Self-hosted Software Daemon; Client-Server ArchitectureOSSEC
Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client AgentsData residency
Samhain
Customer Host Infrastructure (Completely Self-Contained)OSSEC
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Samhain
- Cryptographic file integrity monitoring (SHA-256/TIGER192)
- Kernel rootkit detection
- Client-server encrypted logging
- Stealth process auditing
- POSIX support
- Host file integrity monitoring (FIM)
- Rootkit and trojan detection
- System binary tamper auditing
OSSEC
- Host-based file integrity monitoring (FIM)
- Real-time log analysis and correlation
- Automated rootkit detection
- Active Response automated blocking
- Centralized agent architecture
- Host-based intrusion detection
- File integrity monitoring (FIM)
- Log analysis and correlation
Platform & access
API access
Samhain
API access: noOSSEC
API access: noSingle sign-on (SSO)
Samhain
SSO: noOSSEC
SSO: noRole-based access (RBAC)
Samhain
RBAC: yesOSSEC
RBAC: yesMulti-tenant
Samhain
Multi-tenant: noOSSEC
Multi-tenant: noMobile app
Samhain
Mobile app: noOSSEC
Mobile app: noSupported platforms
Samhain
LinuxUnixWindows Host ServersVirtual MachinesCloud Nodes
OSSEC
LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs
Compliance
Samhain
GPLv2 LicensePCI-DSS Requirement 11.5CIS Benchmarks
OSSEC
GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53
Integrations & coverage
Integrations
Samhain
Linux SyslogMySQLPostgreSQLNagiosOSSECWeb interfaces
OSSEC
Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack
Industries
Samhain
Enterprise ITLinux SystemsSecurity ResearchEducationPublic Sector
OSSEC
Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services
Regions
Samhain
Global
OSSEC
Global
Vendor
Company
Samhain
SamhainOSSEC
OSSECHeadquarters
Samhain
Open Source ProjectOSSEC
Open-source project; global communityCompany size
Samhain
1-10OSSEC
1-10Founded
Samhain
2001OSSEC
2003