Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Splunk Security Essentials by Splunk View product | OSSEC by OSSEC View product |
|---|---|---|
| Overview | ||
| What it is | Splunk Security Essentials by Splunk: learning guides. Ideal for security guidance. Deployment: on-premises or cloud. See how it compares with top SIEM alternatives. | OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives. |
| Product type | Free SIEM Detection Content & Guides | Open-Source Host-Based Intrusion Detection System (HIDS) |
| Best for | Cross-industry, Security Operations, Enterprise IT | Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudOn-Premise | On-Premise |
| Deployment details | On-premises; Cloud (Splunk App); Free application installable via Splunkbase | Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client Agents |
| Data residency | Installed locally on Splunk search head | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: no | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Splunk Search HeadsEnterprise IT | LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs |
| Compliance | MITRE ATT&CKCIS Controls | GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53 |
| Integrations & coverage | ||
| Integrations | Splunk EnterpriseSplunk CloudSplunk Enterprise Security | Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack |
| Industries | Cross-industrySecurity OperationsEnterprise IT | Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Splunk | OSSEC |
| Headquarters | San Francisco, California, USA | Open-source project; global community |
| Company size | 8,000+ | 1-10 |
| Founded | 2003 | 2003 |
Overview
What it is
Splunk Security Essentials
Splunk Security Essentials by Splunk: learning guides. Ideal for security guidance. Deployment: on-premises or cloud. See how it compares with top SIEM alternatives.OSSEC
OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives.Product type
Splunk Security Essentials
Free SIEM Detection Content & GuidesOSSEC
Open-Source Host-Based Intrusion Detection System (HIDS)Best for
Splunk Security Essentials
Cross-industry, Security Operations, Enterprise ITOSSEC
Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial ServicesPricing
Pricing model
Splunk Security Essentials
Contact VendorOSSEC
Contact VendorFree trial
Splunk Security Essentials
Free trial: yesOSSEC
Free trial: yesDeployment
Deployment options
Splunk Security Essentials
OSSEC
Deployment details
Splunk Security Essentials
On-premises; Cloud (Splunk App); Free application installable via SplunkbaseOSSEC
Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client AgentsData residency
Splunk Security Essentials
Installed locally on Splunk search headOSSEC
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Splunk Security Essentials
- Pre-packaged SIEM detection rules
- MITRE ATT&CK coverage matrix
- Data source gap analysis
- Learning guides
- Free detection rule catalog
- MITRE ATT&CK coverage mapping
- Security guidance
OSSEC
- Host-based file integrity monitoring (FIM)
- Real-time log analysis and correlation
- Automated rootkit detection
- Active Response automated blocking
- Centralized agent architecture
- Host-based intrusion detection
- File integrity monitoring (FIM)
- Log analysis and correlation
Platform & access
API access
Splunk Security Essentials
API access: yesOSSEC
API access: noSingle sign-on (SSO)
Splunk Security Essentials
SSO: noOSSEC
SSO: noRole-based access (RBAC)
Splunk Security Essentials
RBAC: yesOSSEC
RBAC: yesMulti-tenant
Splunk Security Essentials
Multi-tenant: noOSSEC
Multi-tenant: noMobile app
Splunk Security Essentials
Mobile app: noOSSEC
Mobile app: noSupported platforms
Splunk Security Essentials
OSSEC
Compliance
Splunk Security Essentials
OSSEC
Integrations & coverage
Integrations
Splunk Security Essentials
OSSEC
Industries
Splunk Security Essentials
OSSEC
Regions
Splunk Security Essentials
OSSEC
Vendor
Company
Splunk Security Essentials
SplunkOSSEC
OSSECHeadquarters
Splunk Security Essentials
San Francisco, California, USAOSSEC
Open-source project; global communityCompany size
Splunk Security Essentials
8,000+OSSEC
1-10Founded
Splunk Security Essentials
2003OSSEC
2003