Software Alternatives & Reviews

Wazuh VS AlienVault OSSIM

Compare Wazuh VS AlienVault OSSIM and see what are their differences

Wazuh

Open Source Host and Endpoint Security

AlienVault OSSIM

Alienvault integrates and correlates many popular network and security monitoring tools in one...
  • Wazuh Landing page
    Landing page //
    2023-09-18
  • AlienVault OSSIM Landing page
    Landing page //
    2022-11-03

Wazuh

Categories
  • Security & Privacy
  • Security Information And Event Management (SIEM)
  • Cyber Security
  • Monitoring Tools
Website wazuh.com  
Details $

AlienVault OSSIM

Categories
  • Monitoring Tools
  • Security & Privacy
  • Performance Monitoring
  • Security Information And Event Management (SIEM)
Website cybersecurity.att.com  
Details $-

Wazuh videos

Wazuh Open Source SIEM Overview

More videos:

  • Review - Wazuh - Automatic log data analysis for intrusion detection
  • Review - Tutorial: Wazuh SIEM - Installation and Configuration (Complete Steps)

AlienVault OSSIM videos

AlienVault® USM vs. OSSIM™

Category Popularity

0-100% (relative to Wazuh and AlienVault OSSIM)
Monitoring Tools
79 79%
21% 21
Security & Privacy
86 86%
14% 14
Cyber Security
100 100%
0% 0
Log Management
70 70%
30% 30

User comments

Share your experience with using Wazuh and AlienVault OSSIM. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare Wazuh and AlienVault OSSIM

Wazuh Reviews

7 Best Free Open Source SIEM Tools
A cloud-based premium version known as Wazuh Cloud is also available. Wazuh Cloud centralizes threat detection, incident response, and compliance management across your cloud and on-premises environments. Wazuh Cloud uses lightweight agents that run on monitored systems to collect and forward events to the Wazuh cloud infrastructure, where data is stored, indexed, and analyzed.
8 Best Open Source SIEM Tools
Wazuh is an open-source SIEM system born from the OSSEC project that you can use for threat detection, prevention, and response. You can also use Wazuh to comply with industry standards and regulations such as PCI DSS, GPG 13, and GDPR. Wazuh ships with an integration with Kibana that makes for an excellent UI for data visualization and analytics. It also ships with an agent...
Source: www.logiq.ai
The Top 14 Free and Open Source SIEM Tools For 2022
Wazuh is a common choice among enterprises because it is fully equipped with capabilities in threat detection, integrity monitoring, compliance and as an incident management tool. Wazuh collects, aggregates, indexes and analyzes security data making it possible for organizations to detect intrusions, identify threats and any behavioural anomalies that may arise. It boasts...
Source: logit.io

AlienVault OSSIM Reviews

7 Best Free Open Source SIEM Tools
AlienVault OSSIM This is one of the oldest SIEM systems around but it is very well supported by AT&T, so it is still being improved on solid, reliable code that has been extensively tested in the field. Runs as a virtual appliance.
8 Best Open Source SIEM Tools
OSSIM is one of the most popular open-source SIEM systems that combines other open-source tools that aid security, threat detection, and prevention. It includes key SIEM components such as event collection, processing, and event correlation. Some of OSSIM’s components include Nagios Core for monitoring and alerting, Snort for network intrusion detection and prevention, Munin...
Source: www.logiq.ai
Best Log Management Tools: Useful Tools for Log Management, Monitoring, Analytics, and More
AlientVault USM (Unified Security Management) reaches far beyond the capabilities of SIEM solutions using a powerful AIO (All in One) security precautions and comprehensive threat analysis algorithm to identify threats in your physical or cloud locations. Resource-dependent IT teams that rely on SIEM are at risk of delaying their ability to detect and analyze threats as they...
Source: stackify.com

Social recommendations and mentions

Based on our record, Wazuh should be more popular than AlienVault OSSIM. It has been mentiond 49 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

Wazuh mentions (49)

  • Greenbone
    I use Wazuh instead. Greenbone CE is severely limited and requires payment for anything beyond the very basic. Super simple installation more features. Source: 3 months ago
  • Risks of hosting a website out of my house
    Monitoring & Active Measures - Exporting firewall events to an external time-series database like I describe above is good to see who is touching your firewall or accessing your web site. Using an Intrusion Detection System / Intrusion Prevention System (IDS/IPS) such as open-source Suricata, which is a free package on pfSense, and deploying file system integrity monitoring, such as the open-source Wazuh on the... Source: 4 months ago
  • DevOps and Security: DevSecOps
    Wazuh: An open source security monitoring platform that integrates with popular tools like Elasticsearch and Kibana to provide comprehensive security event analysis and response capabilities. - Source: dev.to / 10 months ago
  • Vulnerability overview
    On another note, as mentioned in my response to the question of this post, we are working on a complete rework of the Vulnerability Detection engine. This rework will provide a sanitized CVEs feed from wazuh.com and a completely new scanner engine. It will also include a new UI for global queries. Source: 10 months ago
  • Homelab security advice
    Nessus essentials (https://www.tenable.com/products/nessus/nessus-essentials) might do the trick. It can help to check what kind of services you are running are vulnerable to exploits. Also, the general recommendation here would be not to use default ports for all the services you are exposing. Also, you can check something like Wazuh - https://wazuh.com/. Source: 10 months ago
View more

AlienVault OSSIM mentions (9)

  • SIEM for your own internal network
    You can look at a table with the differences here: Https://cybersecurity.att.com/products/ossim. Source: 9 months ago
  • What do you guys use for networking monitoring
    Another is AT&T's AlienVault OSSIM software. If you can put it on its own hardware, it runs FAR better than it did on a VM in my experience. I've seen this in action and it's a huge monster to get into - I barely scratched the surface and thought I was hitting walls, so it might not be the most intuitive - but I'd recommend watching a few youtube videos to show off what it can do I suppose. Mine set off my... Source: about 1 year ago
  • SIEM solution
    There's also https://cybersecurity.att.com/products/ossim by AlienVault (now AT&T). Source: over 1 year ago
  • Does the BGW320 perform automated SSH vulnerability tests on clients?
    I enabled my ATT security this morning and had a download going that used about 70% of my capacity. I also have an Ubiquiti setup, I don’t believe ATT’s security is as harsh on cpu load that Ubiquiti is. Several years ago, ATT bought Alien Vault which primarily monitors log files and conducts routine vulnerability scans. Since it was purchased, they renamed us as ATT Cybersecurity.... Source: about 2 years ago
  • Top 20 Open-source tools for every Blue Teamer
    As a SIEM system, OSSIM is intended to give security analysts and administrators a more complete view of all the security-related aspects of their system, by combining log management which can be extended with plugins and asset management and discovery with information from dedicated information security controls and detection systems. This information is then correlated together to create contexts to the... Source: over 2 years ago
View more

What are some alternatives?

When comparing Wazuh and AlienVault OSSIM, you can also consider the following products

Zabbix - Track, record, alert and visualize performance and availability of IT resources

Graylog - Graylog is an open source log management platform for collecting, indexing, and analyzing both structured and unstructured data.

Fortinet FortiAnalyzer - Fortinet FortiAnalyzer is a powerful product for Security Fabric Analytics and Automation.

Logz.io - Logz.io provides log analysis software with alerts, role-based access, unlimited scalability and free ELK apps. Index, search & visualize your log data!

Beats - Beats is the platform for single-purpose data shippers that is installed as lightweight agents and send data to machines to Logstash or Elasticsearch.

Sumo Logic - Sumo Logic is a secure, purpose-built cloud-based machine data analytics service that leverages big data for real-time IT insights