Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Splunk Cloud Platform by Splunk View product | OSSEC by OSSEC View product |
|---|---|---|
| Overview | ||
| What it is | Splunk Cloud Platform by Splunk is a managed machine data & cloud SIEM. Key features include SPL search. Compare deployment, integrations and top SIEM alternatives. | OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives. |
| Product type | Managed Machine Data & Cloud SIEM | Open-Source Host-Based Intrusion Detection System (HIDS) |
| Best for | Cross-industry, Global Enterprise, Government, Telecom | Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloud | On-Premise |
| Deployment details | Cloud SaaS (AWS / GCP); Fully managed SaaS on AWS and GCP | Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client Agents |
| Data residency | Global; dozens of AWS/GCP regions | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | AWSGCPEnterprise Data Sources | LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs |
| Compliance | SOC 2ISO 27001FedRAMPHIPAAPCI DSS | GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53 |
| Integrations & coverage | ||
| Integrations | AWSGoogle CloudSplunkbase appsREST APIsUniversal Forwarders | Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack |
| Industries | Cross-industryGlobal EnterpriseGovernmentTelecom | Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Splunk | OSSEC |
| Headquarters | San Francisco, California, USA | Open-source project; global community |
| Company size | 8,000+ | 1-10 |
| Founded | 2003 | 2003 |
Overview
What it is
Splunk Cloud Platform
Splunk Cloud Platform by Splunk is a managed machine data & cloud SIEM. Key features include SPL search. Compare deployment, integrations and top SIEM alternatives.OSSEC
OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives.Product type
Splunk Cloud Platform
Managed Machine Data & Cloud SIEMOSSEC
Open-Source Host-Based Intrusion Detection System (HIDS)Best for
Splunk Cloud Platform
Cross-industry, Global Enterprise, Government, TelecomOSSEC
Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial ServicesPricing
Pricing model
Splunk Cloud Platform
Contact VendorOSSEC
Contact VendorFree trial
Splunk Cloud Platform
Free trial: yesOSSEC
Free trial: yesDeployment
Deployment options
Splunk Cloud Platform
SaaSCloud
OSSEC
On-Premise
Deployment details
Splunk Cloud Platform
Cloud SaaS (AWS / GCP); Fully managed SaaS on AWS and GCPOSSEC
Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client AgentsData residency
Splunk Cloud Platform
Global; dozens of AWS/GCP regionsOSSEC
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Splunk Cloud Platform
- Fully managed big data analytics
- Cloud log ingestion
- SPL search
- Real-time dashboarding
- 99.9% uptime SLA
- Managed cloud log analytics
- Machine data search
- Security operations monitoring
OSSEC
- Host-based file integrity monitoring (FIM)
- Real-time log analysis and correlation
- Automated rootkit detection
- Active Response automated blocking
- Centralized agent architecture
- Host-based intrusion detection
- File integrity monitoring (FIM)
- Log analysis and correlation
Platform & access
API access
Splunk Cloud Platform
API access: yesOSSEC
API access: noSingle sign-on (SSO)
Splunk Cloud Platform
SSO: yesOSSEC
SSO: noRole-based access (RBAC)
Splunk Cloud Platform
RBAC: yesOSSEC
RBAC: yesMulti-tenant
Splunk Cloud Platform
Multi-tenant: yesOSSEC
Multi-tenant: noMobile app
Splunk Cloud Platform
Mobile app: yesOSSEC
Mobile app: noSupported platforms
Splunk Cloud Platform
AWSGCPEnterprise Data Sources
OSSEC
LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs
Compliance
Splunk Cloud Platform
SOC 2ISO 27001FedRAMPHIPAAPCI DSS
OSSEC
GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53
Integrations & coverage
Integrations
Splunk Cloud Platform
AWSGoogle CloudSplunkbase appsREST APIsUniversal Forwarders
OSSEC
Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack
Industries
Splunk Cloud Platform
Cross-industryGlobal EnterpriseGovernmentTelecom
OSSEC
Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services
Regions
Splunk Cloud Platform
Global
OSSEC
Global
Vendor
Company
Splunk Cloud Platform
SplunkOSSEC
OSSECHeadquarters
Splunk Cloud Platform
San Francisco, California, USAOSSEC
Open-source project; global communityCompany size
Splunk Cloud Platform
8,000+OSSEC
1-10Founded
Splunk Cloud Platform
2003OSSEC
2003