18.3
Wazuh combines XDR and SIEM to analyze security data from endpoints, clouds, and networks for threat detection, incident response, and compliance work.
Free planOpen sourceWebAPILinux
Alternatives to Graylog Security
28.2
Blumira monitors workspaces across SIEM, EDR, ITDR, and cloud, then surfaces security cases for teams to address.
Free planAndroidiOSWeb
37.8
UTMStack is an open-source unified threat management platform combining SIEM and XDR.
Open sourceWebAPILinux
- 4
Sumo Logic
Free planWebAPILinuxmacOS7.5Free plan - 5
Vigil
Vigil is a self-hosted, open-source system that ingests endpoint events, evaluates Sigma detections in real time, and returns structured JSON for AI agents.
Free planOpen sourceWebAPILinuxmacOS7.5Free plan - 6
Elastic Security
Elastic Security combines SIEM, XDR, endpoint security, and cloud security for detecting, preventing, and responding to cyber threats.
Free planWebAPILinuxSelf-hosted6.9From $0.09 a month - 7
ManageEngine Log360
ManageEngine Log360 is a security information and event management (SIEM) platform that brings log management together with Active Directory…
WebAPILinuxSelf-hosted6.6From $20.42 a month - 8
nano SIEM
nano SIEM is an AI-powered security information and event management product for security teams handling detection, alerting, investigation, and response.
WebAPILinuxmacOS6.4From $26 a month - 9
Splunk Enterprise
Splunk Enterprise is a self-hosted platform for collecting, searching, monitoring and analyzing data from across a data ecosystem.
Self-hosted6.3 - 10
Hunters
Hunters Next-Gen SIEM is a SOC platform for prioritizing, investigating, and responding to security alerts through AI and automation.
WebAPI6.2 - 11
MaxPatrol SIEM
MaxPatrol SIEM helps security teams see activity across IT infrastructure and detect incidents.
WebLinuxSelf-hostedWindows6.2 - 12
SolarWinds Security Event Manager
SolarWinds Security Event Manager is an on-premise SIEM delivered as a virtual appliance for collecting, storing, analysing and reporting logs.
WebSelf-hostedWindows6.2From $1,789 a month - 13
Graylog Enterprise
Graylog Enterprise centralizes log management for IT teams, parsing, enriching, and analyzing logs across an environment in real time.
WebAPILinuxSelf-hosted6.1From $1,250 a month - 14
Kaspersky Research Sandbox
Kaspersky Research Sandbox analyzes suspicious objects to investigate their origins, gather behavior-based indicators of compromise and identify…
AndroidWebAPILinux6.1 - 15
Panther
Panther is an AI security operations platform for security teams that collects and standardizes security logs, detects threats, and supports alert…
WebAPISelf-hosted6.0 - 16
LogSentinel SIEM
LogSentinel SIEM provides security monitoring with threat detection and response for mid-market organizations.
WebAPILinuxSelf-hosted5.9 - 17
Devo Analytics Cloud
Devo Analytics Cloud is a cloud-based platform for ingesting, orchestrating, and querying data from diverse sources in real time.
Web5.7 - 185.7From $3 a month
- 19
NetWitness Platform
NetWitness Platform is a threat detection, investigation, and response platform for complex IT and OT environments.
WebLinuxSelf-hosted5.6 - 20
5.3 - 21
Coralogix SIEM
Coralogix SIEM is a cloud-deployed security information and event management service accessed through the web.
Web5.2From $0.42 a month - 22
Seceon Open Threat Management
Seceon Open Threat Management (OTM) combines threat detection, response, reporting, and compliance capabilities in one security platform.
WebSelf-hosted5.2 - 23
5.0 - 24
FortiSIEM
Web4.8