18.4
Wazuh combines XDR and SIEM to analyze security data from endpoints, clouds, and networks for threat detection, incident response, and compliance work.
Free planOpen sourceWebAPILinux
Alternatives to Datadog Cloud SIEM
28.2
Blumira monitors workspaces across SIEM, EDR, ITDR, and cloud, then surfaces security cases for teams to address.
Free planAndroidiOSWeb
37.6
Free planWebAPILinux
- 4
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 5
LimaCharlie
LimaCharlie is an API-first SecOps platform for telemetry, detection, and response.
Free planWebAPILinuxmacOS7.2$3 usage-based - 6
Elastic Security
Elastic Security combines SIEM, XDR, endpoint security, and cloud security for detecting, preventing, and responding to cyber threats.
Free planWebAPILinuxSelf-hosted7.1From $0.09 a month - 7
ManageEngine Log360
ManageEngine Log360 is a security information and event management (SIEM) platform that brings log management together with Active Directory…
WebAPILinuxSelf-hosted6.8From $245 a year - 8
Hunters
Hunters Next-Gen SIEM is a SOC platform for prioritizing, investigating, and responding to security alerts through AI and automation.
WebAPI6.4 - 9
Panther
Panther is an AI security operations platform for security teams that collects and standardizes security logs, detects threats, and supports alert…
WebAPISelf-hosted6.2 - 10
Splunk Enterprise
Splunk Enterprise is a self-hosted platform for collecting, searching, monitoring and analyzing data from across a data ecosystem.
Self-hosted6.2 - 11
ExtraHop RevealX
ExtraHop RevealX combines network detection and response, network performance management, intrusion detection and packet forensics.
WebAPILinuxSelf-hosted5.9 - 12
Vectra AI Identity Threat Detection and Response
Vectra AI Identity Threat Detection and Response (ITDR) is designed to detect, investigate, and respond to identity threats across an organization.
WebAPI5.8 - 13
Coralogix SIEM
Coralogix SIEM is a cloud-deployed security information and event management service accessed through the web.
Web5.5$0.42 usage-based - 14
Corelight Open NDR
Corelight Open NDR converts network and cloud traffic into context-rich evidence for security operations.
WebAPILinuxSelf-hosted5.5 - 15
IBM QRadar SIEM
LinuxSelf-hosted5.3 - 16
5.2From $18,000 a year - 17
5.2 - 18
Bitdefender GravityZone Cloud Workload Security
WebLinuxWindows5.1 - 19
SentinelOne Singularity XDR
WebLinuxmacOSWindows5.1 - 205.1
- 21
AT&T AlienVault USM Anywhere
WebLinuxmacOSWindows5.0 - 22
FortiSIEM
Web5.0 - 235.0
- 24
Security Onion
WebLinux4.9 - 254.8
- 26
Trellix XDR
Web4.6 - 274.4
- 284.3