18.4
Wazuh combines XDR and SIEM to analyze security data from endpoints, clouds, and networks for threat detection, incident response, and compliance work.
Free planOpen sourceWebAPILinux
Alternatives to UTMStack
28.2
Blumira monitors workspaces across SIEM, EDR, ITDR, and cloud, then surfaces security cases for teams to address.
Free planAndroidiOSWeb
37.6
Free planWebAPILinux
- 4
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 5
Vigil
Vigil is a self-hosted, open-source system that ingests endpoint events, evaluates Sigma detections in real time, and returns structured JSON for AI agents.
Free planOpen sourceWebAPILinuxmacOS7.5Free plan - 6
Elastic Security
Elastic Security combines SIEM, XDR, endpoint security, and cloud security for detecting, preventing, and responding to cyber threats.
Free planWebAPILinuxSelf-hosted7.1From $0.09 a month - 7
ManageEngine Log360
ManageEngine Log360 is a security information and event management (SIEM) platform that brings log management together with Active Directory…
WebAPILinuxSelf-hosted6.8From $245 a year - 8
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 9
NetWitness Platform
NetWitness Platform is a threat detection, investigation, and response platform for complex IT and OT environments.
WebAPILinuxmacOS6.5 - 10
Hunters
Hunters Next-Gen SIEM is a SOC platform for prioritizing, investigating, and responding to security alerts through AI and automation.
WebAPI6.4 - 11
nano SIEM
nano SIEM is an AI-powered security information and event management product for security teams handling detection, alerting, investigation, and response.
WebAPILinuxmacOS6.4From $26 a month - 12
SolarWinds Security Event Manager
SolarWinds Security Event Manager is an on-premise SIEM delivered as a virtual appliance for collecting, storing, analysing and reporting logs.
WebSelf-hostedWindows6.3From $1,789 a month - 13
Panther
Panther is an AI security operations platform for security teams that collects and standardizes security logs, detects threats, and supports alert…
WebAPISelf-hosted6.2 - 14
Splunk Enterprise
Splunk Enterprise is a self-hosted platform for collecting, searching, monitoring and analyzing data from across a data ecosystem.
Self-hosted6.2 - 15
MaxPatrol SIEM
MaxPatrol SIEM helps security teams see activity across IT infrastructure and detect incidents.
WebLinuxSelf-hostedWindows6.1 - 16
LogSentinel SIEM
LogSentinel SIEM provides security monitoring with threat detection and response for mid-market organizations.
WebAPILinuxSelf-hosted5.9 - 175.7
- 18
Coralogix SIEM
Coralogix SIEM is a cloud-deployed security information and event management service accessed through the web.
Web5.5$0.42 usage-based - 19
IBM QRadar SIEM
LinuxSelf-hosted5.3 - 20
5.3 - 21
5.2From $18,000 a year - 22
5.2 - 23
Seceon Open Threat Management
Seceon Open Threat Management (OTM) combines threat detection, response, reporting, and compliance capabilities in one security platform.
WebSelf-hosted5.2 - 24
FortiSIEM
Web5.0 - 255.0
- 26
4.9 - 274.9
- 284.3