Wazuh combines XDR and SIEM to analyze security data from endpoints, clouds, and networks for threat detection, incident response, and compliance work.
Alternatives to Tanium Integrity Monitor
OSSEC is an open-source, host-based intrusion detection system for monitoring systems and network components across multiple platforms.
Kaspersky Endpoint Security for Business provides endpoint protection for small and medium-sized businesses.
- 4

PA File Sight
PA File Sight is an on-premises tool for monitoring file integrity, protecting against ransomware, preventing data loss, and auditing file access.
AndroidiOSWebAPI7.7From $30 a month - 5

Paessler PRTG Network Monitor
Paessler PRTG Network Monitor monitors systems, devices, traffic, applications, and other infrastructure metrics from an on-premises installation…
Free planAndroidiOSWebAPI7.7From $200 a month - 6
Avidemux
Free planOpen sourceWebLinuxmacOSWindows7.3Free plan - 7
FileAudit
FileAudit is paid software for monitoring, alerting on, and reporting file and folder access across Windows file servers and supported cloud storage.
AndroidiOSWebSelf-hosted7.2 - 8

Sysdig Secure
Sysdig Secure is a cloud-native application protection platform for cloud environments, containers, Kubernetes, hosts, and serverless workloads.
WebAPILinuxmacOS7.2From $20 a month - 9

Elastic Security
Elastic Security combines SIEM, XDR, endpoint security, and cloud security for detecting, preventing, and responding to cyber threats.
Free planWebAPILinuxSelf-hosted7.1From $0.09 a month - 10
EventSentry File Monitoring
EventSentry File Monitoring tracks file additions and removals, size changes, SHA-256 checksum changes, and transaction-log tampering.
Free planWebLinuxmacOSWindows7.0$85 one-time - 11
Wordfence Security
Wordfence Security is a WordPress security plugin for self-hosted sites, with a Web Application Firewall, malware scanner, login protection, and live traffic views.
Free planWebSelf-hosted6.8From $149 a year - 12
Atomic OSSEC
WebLinuxmacOSSelf-hosted6.6 - 13

CrowdStrike Falcon Surface
CrowdStrike Falcon Surface, also called Falcon Exposure Management, is a paid product for identifying vulnerabilities, misconfigurations, and attack…
WebLinuxmacOSWindows6.6 - 14
Kaspersky Industrial CyberSecurity Platform
Kaspersky Industrial CyberSecurity Platform (KICS) is a native Extended Detection and Response platform for protecting critical infrastructure and…
WebAPILinuxSelf-hosted6.5 - 15
Lepide Auditor
Lepide Auditor is a paid auditing product for IT professionals monitoring Active Directory, file servers and cloud platforms.
AndroidiOSWebSelf-hosted6.4 - 16
ManageEngine ADAudit Plus
ManageEngine ADAudit Plus is an on-premises auditing and monitoring tool for Windows Active Directory environments.
Free planWebWindows6.4From $595 a year - 17
Tripwire Enterprise
Tripwire Enterprise is web-based software for tracking configuration changes across hybrid deployments.
WebAPILinuxSelf-hosted6.4 - 18
SolarWinds Security Event Manager
SolarWinds Security Event Manager is an on-premise SIEM delivered as a virtual appliance for collecting, storing, analysing and reporting logs.
WebSelf-hostedWindows6.3From $1,789 a month - 19
Vigil Baseline
Vigil Baseline is a free file integrity monitor for one Linux desktop or laptop.
Free planLinux6.3Free plan - 20
AIDE
AIDE is an open-source file and directory integrity checker for modern Unix systems.
Free planLinuxmacOSSelf-hosted6.0Free plan - 21
CimTrak Integrity Suite
CimTrak Integrity Suite monitors IT infrastructure for unintended or unauthorized changes, recording changes to systems and applications for later analysis and reporting.
WebLinuxmacOSSelf-hosted6.0 - 22

FIM
FIM is free, open-source software that monitors file system changes in the background and keeps historical file information.
Free planLinuxmacOSWindows6.0Free plan - 23
Open Source Tripwire
Open Source Tripwire monitors files and directories and reports when the filesystem differs from a known baseline.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 24
Samhain
Samhain is a free file-integrity and host-based intrusion detection system for monitoring files, logs, and other host activity.
LinuxmacOSSelf-hostedWindows5.6 - 25
5.2 - 265.1
- 274.8
- 28
Netwrix Change Tracker
LinuxmacOSWindows4.8 - 294.8
- 30
Trellix Application and Change Control
LinuxWindows4.7
