Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Wazuh SIEM by Wazuh View product | OSSEC by OSSEC View product |
|---|---|---|
| Overview | ||
| What it is | Evaluating Wazuh SIEM? See how this SIEM tool handles real-time log aggregation and rule-based correlation, where it fits best and which alternatives to compare. | OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives. |
| Product type | Open-Source Security Information & Event Manager | Open-Source Host-Based Intrusion Detection System (HIDS) |
| Best for | Enterprise IT, SOC Teams, Banking, Public Sector, Healthcare | Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybrid | On-Premise |
| Deployment details | Open-Source Software; Cloud SaaS; Docker; Open-source software; Docker; Cloud SaaS; Hybrid | Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client Agents |
| Data residency | Customer Controlled / On-premises / Cloud SaaS | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | LinuxWindowsmacOSCloud VPCsDockerKubernetes | LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs |
| Compliance | PCI-DSSHIPAAGDPRSOC 2NIST SP 800-53 | GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53 |
| Integrations & coverage | ||
| Integrations | AWS CloudTrailMicrosoft 365SyslogDockerKubernetesJira | Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack |
| Industries | Enterprise ITSOC TeamsBankingPublic SectorHealthcare | Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Wazuh | OSSEC |
| Headquarters | Miami, Florida, USA | Open-source project; global community |
| Company size | 200+ | 1-10 |
| Founded | 2015 | 2003 |
Overview
What it is
Wazuh SIEM
Evaluating Wazuh SIEM? See how this SIEM tool handles real-time log aggregation and rule-based correlation, where it fits best and which alternatives to compare.OSSEC
OSSEC: automated rootkit detection and centralized agent architecture. Built for host-based intrusion detection. Compare File Integrity Monitoring alternatives.Product type
Wazuh SIEM
Open-Source Security Information & Event ManagerOSSEC
Open-Source Host-Based Intrusion Detection System (HIDS)Best for
Wazuh SIEM
Enterprise IT, SOC Teams, Banking, Public Sector, HealthcareOSSEC
Enterprise IT, DevOps, Cybersecurity, Public Sector, Education, Financial ServicesPricing
Pricing model
Wazuh SIEM
Contact VendorOSSEC
Contact VendorFree trial
Wazuh SIEM
Free trial: yesOSSEC
Free trial: yesDeployment
Deployment options
Wazuh SIEM
SaaSCloudHybrid
OSSEC
On-Premise
Deployment details
Wazuh SIEM
Open-Source Software; Cloud SaaS; Docker; Open-source software; Docker; Cloud SaaS; HybridOSSEC
Open Source; Self-hosted; Self-hosted Software Engine; Centralized Server Manager & Client AgentsData residency
Wazuh SIEM
Customer Controlled / On-premises / Cloud SaaSOSSEC
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Wazuh SIEM
- Real-time log aggregation
- Rule-based correlation
- Compliance dashboards
- File integrity monitoring
- MITRE ATT&CK mapping
- SIEM
- Security Information Management
- Log Analysis
OSSEC
- Host-based file integrity monitoring (FIM)
- Real-time log analysis and correlation
- Automated rootkit detection
- Active Response automated blocking
- Centralized agent architecture
- Host-based intrusion detection
- File integrity monitoring (FIM)
- Log analysis and correlation
Platform & access
API access
Wazuh SIEM
API access: yesOSSEC
API access: noSingle sign-on (SSO)
Wazuh SIEM
SSO: yesOSSEC
SSO: noRole-based access (RBAC)
Wazuh SIEM
RBAC: yesOSSEC
RBAC: yesMulti-tenant
Wazuh SIEM
Multi-tenant: yesOSSEC
Multi-tenant: noMobile app
Wazuh SIEM
Mobile app: noOSSEC
Mobile app: noSupported platforms
Wazuh SIEM
LinuxWindowsmacOSCloud VPCsDockerKubernetes
OSSEC
LinuxUnixWindowsmacOS Servers and WorkstationsCloud VMs
Compliance
Wazuh SIEM
PCI-DSSHIPAAGDPRSOC 2NIST SP 800-53
OSSEC
GPLv2 LicensePCI-DSS Requirement 11.5CIS ControlsNIST 800-53
Integrations & coverage
Integrations
Wazuh SIEM
AWS CloudTrailMicrosoft 365SyslogDockerKubernetesJira
OSSEC
Linux SyslogWindows Event LogsSplunkElasticsearchGrafanaSlack
Industries
Wazuh SIEM
Enterprise ITSOC TeamsBankingPublic SectorHealthcare
OSSEC
Enterprise ITDevOpsCybersecurityPublic SectorEducationFinancial Services
Regions
Wazuh SIEM
Global
OSSEC
Global
Vendor
Company
Wazuh SIEM
WazuhOSSEC
OSSECHeadquarters
Wazuh SIEM
Miami, Florida, USAOSSEC
Open-source project; global communityCompany size
Wazuh SIEM
200+OSSEC
1-10Founded
Wazuh SIEM
2015OSSEC
2003