AlienVault OSSIM - very useful for threat hunting
AlienVault OSSIM is mostly useful for us to determine which machines are behind on patches and updates. And it is a necessary tool for …
AlienVault OSSIM
AlienVault OSSIM
Overview
Recent Reviews
Popular Features
View all 13 featuresCustom dashboards and workspaces (16)
9.3
93%
Deployment flexibility (11)
8.6
86%
Event and log normalization/management (18)
8.3
83%
Correlation (11)
7.9
79%
Reviewer Pros & Cons
View all pros & consVideo Reviews
Leaving a video review helps other professionals like you evaluate products. Be the first one in your network to record a review of AlienVault OSSIM, and make your voice heard!
Pricing
View all pricingN/A
Unavailable
What is AlienVault OSSIM?
OSSIM leverages the power of the AlienVault Open Threat Exchange by allowing users to both contribute and receive real-time information about malicious hosts. AlienVault OSSIM is an open source Security Information and Event Management (SIEM) product. It is a unified platform…
Entry-level set up fee?
- No setup fee
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting / Integration Services
Would you like us to let the vendor know that you want pricing?
5 people want pricing too
Alternatives Pricing
What is Nessus?
Tenable headquartered in Columbia offers Nessus, a vulnerability scanning and security assessment solution used to analyze an entity's security posture, vulnerability testing, and provide configuration assessments.
What is Microsoft Sentinel?
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. Put the cloud and large-scale intelligence from decades of Microsoft security experience to work. Make threat detection and response smarter and faster with artificial intelligence (AI). Eliminate…
Features Scorecard
Security Information and Event Management (SIEM)
7.8
78%
Product Details
What is AlienVault OSSIM?
OSSIM leverages the power of the AlienVault Open Threat Exchange by allowing users to both contribute and receive real-time information about malicious hosts. AlienVault OSSIM is an open source Security Information and Event Management (SIEM) product. It is a unified platform providing:
It also leverages the power of the AlienVault Open Threat Exchange by allowing users to both contribute and receive real-time information about malicious hosts.
- Asset discovery
- Vulnerability assessment
- Intrusion detection
- Behavioral monitoring
- SIEM
It also leverages the power of the AlienVault Open Threat Exchange by allowing users to both contribute and receive real-time information about malicious hosts.
AlienVault OSSIM Video
AlienVault® USM vs. OSSIM™
AlienVault OSSIM Technical Details
| Operating Systems | Unspecified |
|---|---|
| Mobile Application | No |
Comparisons
View all alternatives
Reviews and Ratings
(25)
Reviews
(1-11 of 11)- Popular Filters
Companies can't remove reviews or game the system. Here's why
January 10, 2022
AlienVault OSSIM - very useful for threat hunting
- Having all machines up to date.
- Saving time when threat hunting.
- Customized dashboards that allow us to know if we're compliant or not.
November 24, 2021
Lego block SIEM
- Costly appliances with low ROI
November 04, 2021
Alienvault - the friend from another world
- Satisfied audit needs
- Increased security visibility in our network
- Up to date on current threats
July 21, 2021
High Quality SIEM (plus more)
- It's difficult to put a monetary value on security, but with proper monitoring and alerting, incidents will be easier to avoid.
- Helps with your compliancy, as it automatically alerts you for critical events.
- Collects logs in the cloud, so protected from local issues, like SAN failures.
February 11, 2020
A dinosaur aging gracefully!
- OSSIM and the installers didn't really help us optimize at installation. OSSIM went without optimization for almost two years before that fact was noticed. I think this decreased ROI.
- Finding and researching incidents is much faster with all data available. Sometimes too much data, though.
October 15, 2019
AlienVault OSSIM is the bomb!
- It satisfied a requirement of our audit team (internal and external).
- Custom written alerts allow us to be proactive for some events.
- Stable product means we don't spend a lot of time keeping it up and running.
October 09, 2019
AlienVault OSSIM: Best Bang for Your Buck Hands Down!
- It's free, so a very positive impact. Most products out there are in the thousands of dollars, and for a K12 School District, money is always tight.
- It allowed me to actually gain invaluable insight.
December 14, 2018
A great, free, open source tool by AlienVault!
- The only investment here is setting it up and I think seeing it's performance it's a fantastic tool and has a great positive ROI!
December 01, 2018
AlienVault OSSIM
- OSSIM is a free network SIEM so at no cost
- Allows us to reduce staff needed to collect and analyse data
- Fast responses to potential threats on the network
March 30, 2018
A robust yet lightweight SIEM in a single package
- The ROI of OSSIM itself is, obviously, immediate, being that it's a free, open-source product. However, you must take into account other inherent investments to cover up for the lack of official support, such as certified agents or consultants that take care of the management and maintenance of the product once in production.
- On the other hand, the potential loss of information and interruption of operativity due to malware and other threats is really unmeasurable. The implicit savings in OSSIM as a SIEM (Security Information and Event Management) are really the major positive impact on your organization's revenue.
- Finally, and from a reseller's point of view, reselling OSSIM has the big plus of being a professional services-only asset, given that the appliance itself is free of charge. The only thing to consider is the initial investment in team members with the required capacitation and knowledge to address such professional services to potential customers.
March 14, 2018
A hands-on proper security solution!
- Since it's free, ROI has been positive in terms of money. In time cost and engineer time, it has been also very cheap to implement since it's very easy to get it running.
- As a learning tool, for ACSE certification, it has also been very useful, since it shares a lot with the USM appliance installation.
- As a test environment, again, it shares a lot with the USM appliance installation, so if you have a USM also and you don't want to test things over your production environment, testing with OSSIM first has been a good way to mitigate possible bad effects.