Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Splunk Enterprise by Splunk View product | OSSEC by OSSEC View product |
|---|---|---|
| Overview | ||
| What it is | Splunk Enterprise is an enterprise machine data & SIEM platform for self-managed enterprise log indexing and SPL threat hunting. See features and SIEM alternatives. | OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives. |
| Product type | Enterprise Machine Data & SIEM Platform | Open-Source Host-Based Intrusion Detection System (HIDS) |
| Best for | Cross-industry, Enterprise IT, SOC Teams, Telecom | Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudOn-Premise | On-Premise |
| Deployment details | On-premises; Cloud; On-premises bare metal; Private cloud; Virtual machines | Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client Agents |
| Data residency | On-premises or customer cloud | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | Enterprise Data CentersPrivate Clouds | LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs |
| Compliance | PCI DSSHIPAASOXISO 27001FISMA | GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53 |
| Integrations & coverage | ||
| Integrations | LinuxWindowsSyslogWindows Event LogsCloudTrailKafka | Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack |
| Industries | Cross-industryEnterprise ITSOC TeamsTelecom | Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Splunk | OSSEC |
| Headquarters | San Francisco, California, USA | Open-source project; global community |
| Company size | 8,000+ | 1-10 |
| Founded | 2003 | 2003 |
Overview
What it is
Splunk Enterprise
Splunk Enterprise is an enterprise machine data & SIEM platform for self-managed enterprise log indexing and SPL threat hunting. See features and SIEM alternatives.OSSEC
OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives.Product type
Splunk Enterprise
Enterprise Machine Data & SIEM PlatformOSSEC
Open-Source Host-Based Intrusion Detection System (HIDS)Best for
Splunk Enterprise
Cross-industry, Enterprise IT, SOC Teams, TelecomOSSEC
Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial ServicesPricing
Pricing model
Splunk Enterprise
Contact VendorOSSEC
Contact VendorFree trial
Splunk Enterprise
Free trial: yesOSSEC
Free trial: yesDeployment
Deployment options
Splunk Enterprise
CloudOn-Premise
OSSEC
On-Premise
Deployment details
Splunk Enterprise
On-premises; Cloud; On-premises bare metal; Private cloud; Virtual machinesOSSEC
Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client AgentsData residency
Splunk Enterprise
On-premises or customer cloudOSSEC
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Splunk Enterprise
- Enterprise machine data engine
- Distributed indexing
- SPL query processing
- Security log search
- Dashboards
- Self-managed enterprise log indexing
- Security analytics
- SPL threat hunting
OSSEC
- Host-based file integrity monitoring (FIM)
- Real-time log analysis and correlation
- Automated rootkit detection
- Active Response automated blocking
- Centralized agent architecture
- Host-based intrusion detection
- File integrity monitoring (FIM)
- Log analysis and correlation
Platform & access
API access
Splunk Enterprise
API access: yesOSSEC
API access: noSingle sign-on (SSO)
Splunk Enterprise
SSO: yesOSSEC
SSO: noRole-based access (RBAC)
Splunk Enterprise
RBAC: yesOSSEC
RBAC: yesMulti-tenant
Splunk Enterprise
Multi-tenant: yesOSSEC
Multi-tenant: noMobile app
Splunk Enterprise
Mobile app: yesOSSEC
Mobile app: noSupported platforms
Splunk Enterprise
Enterprise Data CentersPrivate Clouds
OSSEC
LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs
Compliance
Splunk Enterprise
PCI DSSHIPAASOXISO 27001FISMA
OSSEC
GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53
Integrations & coverage
Integrations
Splunk Enterprise
LinuxWindowsSyslogWindows Event LogsCloudTrailKafka
OSSEC
Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack
Industries
Splunk Enterprise
Cross-industryEnterprise ITSOC TeamsTelecom
OSSEC
Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services
Regions
Splunk Enterprise
Global
OSSEC
Global
Vendor
Company
Splunk Enterprise
SplunkOSSEC
OSSECHeadquarters
Splunk Enterprise
San Francisco, California, USAOSSEC
Open-source project; global communityCompany size
Splunk Enterprise
8,000+OSSEC
1-10Founded
Splunk Enterprise
2003OSSEC
2003