Atomic OSSEC vs scanlogd

Atomic OSSEC is an endpoint detection and response system that also protects cloud workloads and APIs. Its monitoring covers intrusion detection, file integrity, log management, active response, and vulnerability management. A GUI centralizes management of agents, servers, events, file integrity monitoring, rollbacks, and third-party integrations. The product lists more than 5,000 preconfigured OSSEC rules and out-of-the-box integrations for Splunk, ArcSight, ELK, and QRadar. It supports AWS, Azure, and GCP, and offers compliance reporting for frameworks including PCI DSS, HIPAA, NIST, GDPR, and CIS. Deployment can be on premises or cloud-based SaaS, including in air-gapped environments. The maker also describes support for legacy systems such as Windows, Linux, AIX, HP-UX, and Solaris, plus monitoring of operational technology without agents on sensitive equipment. A 14-day trial covers up to 10 licenses and does not require a credit card. The listed plan price is priced on request, pricing starts at $55 per agent, and bulk discounts are available; a separate pricing note says from $5/mo.

scanlogd is a free TCP port scan detection tool for Linux and self-hosted deployments. It captures packets through Linux raw sockets, libnids, or libpcap. The project advises against using libpcap alone when fragmented IP packets matter, recommending libnids for non-Linux systems or monitoring an entire network. The official download page lists release 2.2.8, release files and signatures, an Openwall archive, and source browsing through GitHub. scanlogd is listed in Owl, Debian GNU/Linux, Gentoo Linux, ALT Linux, and OpenWrt, with ports in OpenBSD and FreeBSD collections. A contributed precompiled Win32 build is also linked. The project describes scanlogd as designed to be totally safe to use and points readers to its manual page and a Phrack article. Openwall offers commercial configuration, compilation, and installation support at US $250/hour with a six-hour minimum or US $9,000/week; fixed-price quotes are available for sufficiently specific projects.