Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Splunk Enterprise Security by Splunk View product | OSSEC by OSSEC View product |
|---|---|---|
| Overview | ||
| What it is | Splunk Enterprise Security is an analytics-driven enterprise SIEM for flagship SIEM and risk-based alerting. See features and Security Analytics alternatives. | OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives. |
| Product type | Analytics-Driven Enterprise SIEM | Open-Source Host-Based Intrusion Detection System (HIDS) |
| Best for | Cross-industry, Enterprise SOC, Banking, Government | Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | On-Premise |
| Deployment details | Cloud; On-premises; Cloud SaaS; On-premises software deployment | Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client Agents |
| Data residency | Global; US; EU; APAC | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | Enterprise SOCHybrid Multi-Cloud | LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs |
| Compliance | SOC 2ISO 27001PCI DSSHIPAAFedRAMP | GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53 |
| Integrations & coverage | ||
| Integrations | Splunk EnterpriseSplunk CloudSplunk SOARServiceNowCrowdStrike | Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack |
| Industries | Cross-industryEnterprise SOCBankingGovernment | Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Splunk | OSSEC |
| Headquarters | San Francisco, California, USA | Open-source project; global community |
| Company size | 8,000+ | 1-10 |
| Founded | 2003 | 2003 |
Overview
What it is
Splunk Enterprise Security
Splunk Enterprise Security is an analytics-driven enterprise SIEM for flagship SIEM and risk-based alerting. See features and Security Analytics alternatives.OSSEC
OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives.Product type
Splunk Enterprise Security
Analytics-Driven Enterprise SIEMOSSEC
Open-Source Host-Based Intrusion Detection System (HIDS)Best for
Splunk Enterprise Security
Cross-industry, Enterprise SOC, Banking, GovernmentOSSEC
Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial ServicesPricing
Pricing model
Splunk Enterprise Security
Contact VendorOSSEC
Contact VendorFree trial
Splunk Enterprise Security
Free trial: yesOSSEC
Free trial: yesDeployment
Deployment options
Splunk Enterprise Security
OSSEC
Deployment details
Splunk Enterprise Security
Cloud; On-premises; Cloud SaaS; On-premises software deploymentOSSEC
Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client AgentsData residency
Splunk Enterprise Security
Global; US; EU; APACOSSEC
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Splunk Enterprise Security
- Analytics-driven SIEM
- Risk-based alerting (RBA)
- MITRE ATT&CK correlation
- Threat intelligence sync
- Asset profiling
- Flagship SIEM
- Risk-based alerting
- Security threat investigation
OSSEC
- Host-based file integrity monitoring (FIM)
- Real-time log analysis and correlation
- Automated rootkit detection
- Active Response automated blocking
- Centralized agent architecture
- Host-based intrusion detection
- File integrity monitoring (FIM)
- Log analysis and correlation
Platform & access
API access
Splunk Enterprise Security
API access: yesOSSEC
API access: noSingle sign-on (SSO)
Splunk Enterprise Security
SSO: yesOSSEC
SSO: noRole-based access (RBAC)
Splunk Enterprise Security
RBAC: yesOSSEC
RBAC: yesMulti-tenant
Splunk Enterprise Security
Multi-tenant: yesOSSEC
Multi-tenant: noMobile app
Splunk Enterprise Security
Mobile app: yesOSSEC
Mobile app: noSupported platforms
Splunk Enterprise Security
OSSEC
Compliance
Splunk Enterprise Security
OSSEC
Integrations & coverage
Integrations
Splunk Enterprise Security
OSSEC
Industries
Splunk Enterprise Security
OSSEC
Regions
Splunk Enterprise Security
OSSEC
Vendor
Company
Splunk Enterprise Security
SplunkOSSEC
OSSECHeadquarters
Splunk Enterprise Security
San Francisco, California, USAOSSEC
Open-source project; global communityCompany size
Splunk Enterprise Security
8,000+OSSEC
1-10Founded
Splunk Enterprise Security
2003OSSEC
2003