Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Sumo Logic Cloud SIEM by Sumo Logic View product | OSSEC by OSSEC View product |
|---|---|---|
| Overview | ||
| What it is | Sumo Logic Cloud SIEM offers data normalization and enrichment and out-of-the-box detection rules. Use it for threat detection. See SIEM alternatives. | OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives. |
| Product type | Cloud-Native SIEM | Open-Source Host-Based Intrusion Detection System (HIDS) |
| Best for | Cross-industry, Technology, Financial Services, Healthcare, Retail, Technology & SaaS | Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: no | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloud | On-Premise |
| Deployment details | Cloud (SaaS); SaaS | Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client Agents |
| Data residency | Multiple regional deployments (US, EU, Canada, Australia, Japan, India and others) | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | AWSMicrosoft AzureGoogle CloudSaaS appsOn-premises sources | LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs |
| Compliance | SOC 2 Type IIISO 27001PCI DSSHIPAAFedRAMP Moderate | GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53 |
| Integrations & coverage | ||
| Integrations | AWSMicrosoft AzureGoogle CloudMicrosoft 365OktaCrowdStrikePalo Alto NetworksZscaler+1 more | Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack |
| Industries | Cross-industryTechnologyFinancial ServicesHealthcareRetailTechnology & SaaS | Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Sumo Logic | OSSEC |
| Headquarters | Redwood City, California, USA | Open-source project; global community |
| Company size | 1,000+ | 1-10 |
| Founded | 2010 | 2003 |
Overview
What it is
Sumo Logic Cloud SIEM
Sumo Logic Cloud SIEM offers data normalization and enrichment and out-of-the-box detection rules. Use it for threat detection. See SIEM alternatives.OSSEC
OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives.Product type
Sumo Logic Cloud SIEM
Cloud-Native SIEMOSSEC
Open-Source Host-Based Intrusion Detection System (HIDS)Best for
Sumo Logic Cloud SIEM
Cross-industry, Technology, Financial Services, Healthcare, Retail, Technology & SaaSOSSEC
Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial ServicesPricing
Pricing model
Sumo Logic Cloud SIEM
Contact VendorOSSEC
Contact VendorFree trial
Sumo Logic Cloud SIEM
Free trial: noOSSEC
Free trial: yesDeployment
Deployment options
Sumo Logic Cloud SIEM
SaaSCloud
OSSEC
On-Premise
Deployment details
Sumo Logic Cloud SIEM
Cloud (SaaS); SaaSOSSEC
Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client AgentsData residency
Sumo Logic Cloud SIEM
Multiple regional deployments (US, EU, Canada, Australia, Japan, India and others)OSSEC
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Sumo Logic Cloud SIEM
- Data normalization and enrichment
- Out-of-the-box detection rules
- MITRE ATT&CK mapping
- Signal-to-insight correlation
- Entity-based UEBA
- Threat intelligence integration
- Investigation timelines
- Cloud SOAR integration
OSSEC
- Host-based file integrity monitoring (FIM)
- Real-time log analysis and correlation
- Automated rootkit detection
- Active Response automated blocking
- Centralized agent architecture
- Host-based intrusion detection
- File integrity monitoring (FIM)
- Log analysis and correlation
Platform & access
API access
Sumo Logic Cloud SIEM
API access: yesOSSEC
API access: noSingle sign-on (SSO)
Sumo Logic Cloud SIEM
SSO: yesOSSEC
SSO: noRole-based access (RBAC)
Sumo Logic Cloud SIEM
RBAC: yesOSSEC
RBAC: yesMulti-tenant
Sumo Logic Cloud SIEM
Multi-tenant: yesOSSEC
Multi-tenant: noMobile app
Sumo Logic Cloud SIEM
Mobile app: noOSSEC
Mobile app: noSupported platforms
Sumo Logic Cloud SIEM
AWSMicrosoft AzureGoogle CloudSaaS appsOn-premises sources
OSSEC
LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs
Compliance
Sumo Logic Cloud SIEM
SOC 2 Type IIISO 27001PCI DSSHIPAAFedRAMP Moderate
OSSEC
GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53
Integrations & coverage
Integrations
Sumo Logic Cloud SIEM
AWSMicrosoft AzureGoogle CloudMicrosoft 365OktaCrowdStrikePalo Alto NetworksZscaler+1 more
OSSEC
Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack
Industries
Sumo Logic Cloud SIEM
Cross-industryTechnologyFinancial ServicesHealthcareRetailTechnology & SaaS
OSSEC
Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services
Regions
Sumo Logic Cloud SIEM
Global
OSSEC
Global
Vendor
Company
Sumo Logic Cloud SIEM
Sumo LogicOSSEC
OSSECHeadquarters
Sumo Logic Cloud SIEM
Redwood City, California, USAOSSEC
Open-source project; global communityCompany size
Sumo Logic Cloud SIEM
1,000+OSSEC
1-10Founded
Sumo Logic Cloud SIEM
2010OSSEC
2003