Atomic OSSEC vs Samhain
Atomic OSSEC
atomicorp.comSamhain
la-samhna.deSide by side
| Figure | Atomic OSSEC | Samhain |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · File Integrity Monitoring Software | 8.3 (#8) | 7.3 (#24) |
| Deployment | Atomic OSSEC is available on premises or as cloud-based SaaS and can run in air-gapped environments. | It can run standalone on one host or monitor multiple hosts through a client/server setup with centralized logging and maintenance. |
| Integrations | The product page names Splunk, ArcSight, ELK, and QRadar as out-of-the-box SIEM integrations. | Samhain can function as a Prelude sensor, includes a Nagios plugin, and can send messages to named pipes, System V message queues, and external programs. |
| Monitoring | It provides intrusion detection, file integrity monitoring, log management, active response, and vulnerability management. | Optional checks cover log formats including UNIX syslog and Apache logs, Windows registry keys under Cygwin, SUID/SGID files, open ports, hidden or fake processes, mounted filesystems, and login events. |
| Support | The maker describes ticket-based support from a small expert team and advertises expert support with its SaaS offering. | Support options include documentation, a user forum and mailing list, bug reports by contact form or email, and an inquiry option for commercial installation or maintenance support. |
Plans
In their own words
Atomic OSSEC
Atomic OSSEC is an endpoint detection and response system that also protects cloud workloads and APIs. Its monitoring covers intrusion detection, file integrity, log management, active response, and vulnerability management. A GUI centralizes management of agents, servers, events, file integrity monitoring, rollbacks, and third-party integrations. The product lists more than 5,000 preconfigured OSSEC rules and out-of-the-box integrations for Splunk, ArcSight, ELK, and QRadar. It supports AWS, Azure, and GCP, and offers compliance reporting for frameworks including PCI DSS, HIPAA, NIST, GDPR, and CIS. Deployment can be on premises or cloud-based SaaS, including in air-gapped environments. The maker also describes support for legacy systems such as Windows, Linux, AIX, HP-UX, and Solaris, plus monitoring of operational technology without agents on sensitive equipment. A 14-day trial covers up to 10 licenses and does not require a credit card. The listed plan price is priced on request, pricing starts at $55 per agent, and bulk discounts are available; a separate pricing note says from $5/mo.