18.4
Wazuh combines XDR and SIEM to analyze security data from endpoints, clouds, and networks for threat detection, incident response, and compliance work.
Free planOpen sourceWebAPILinux
Alternatives to Darktrace / NETWORK
28.2
Blumira monitors workspaces across SIEM, EDR, ITDR, and cloud, then surfaces security cases for teams to address.
Free planAndroidiOSWeb
37.6
Free planWebAPILinux
- 4
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 5
LimaCharlie
LimaCharlie is an API-first SecOps platform for telemetry, detection, and response.
Free planWebAPILinuxmacOS7.2$3 usage-based - 6
Elastic Security
Elastic Security combines SIEM, XDR, endpoint security, and cloud security for detecting, preventing, and responding to cyber threats.
Free planWebAPILinuxSelf-hosted7.1From $0.09 a month - 7
ManageEngine Log360
ManageEngine Log360 is a security information and event management (SIEM) platform that brings log management together with Active Directory…
WebAPILinuxSelf-hosted6.8From $245 a year - 8
Hunters
Hunters Next-Gen SIEM is a SOC platform for prioritizing, investigating, and responding to security alerts through AI and automation.
WebAPI6.4 - 9
Panther
Panther is an AI security operations platform for security teams that collects and standardizes security logs, detects threats, and supports alert…
WebAPISelf-hosted6.2 - 10
Splunk Enterprise
Splunk Enterprise is a self-hosted platform for collecting, searching, monitoring and analyzing data from across a data ecosystem.
Self-hosted6.2 - 11
ExtraHop RevealX
ExtraHop RevealX combines network detection and response, network performance management, intrusion detection and packet forensics.
WebAPILinuxSelf-hosted5.9 - 12
Vectra AI Identity Threat Detection and Response
Vectra AI Identity Threat Detection and Response (ITDR) is designed to detect, investigate, and respond to identity threats across an organization.
WebAPI5.8 - 13
Coralogix SIEM
Coralogix SIEM is a cloud-deployed security information and event management service accessed through the web.
Web5.5$0.42 usage-based - 14
Corelight Open NDR
Corelight Open NDR converts network and cloud traffic into context-rich evidence for security operations.
WebAPILinuxSelf-hosted5.5 - 15
IBM QRadar SIEM
LinuxSelf-hosted5.3 - 16
5.2From $18,000 a year - 17
5.2 - 18
Bitdefender GravityZone Cloud Workload Security
WebLinuxWindows5.1 - 19
SentinelOne Singularity XDR
WebLinuxmacOSWindows5.1 - 205.1
- 21
AT&T AlienVault USM Anywhere
WebLinuxmacOSWindows5.0 - 22
FortiSIEM
Web5.0 - 235.0
- 24
Security Onion
WebLinux4.9 - 254.8
- 264.7
- 27
Trellix XDR
Web4.6 - 284.3