CimTrak Integrity Suite vs OSSEC

CimTrak Integrity Suite monitors IT infrastructure for unintended or unauthorized changes, with real-time alerts and records for analysis and reporting. It keeps incremental snapshots that teams can use to restore an earlier baseline or reverse a detected change. On certain platforms, it can block changes to selected files and directories. Its integrations include STIX/TAXII threat feeds, file reputation services, ticketing systems, and SIEM tools. Cimcor lists support for Windows, Linux, FreeBSD, Solaris, macOS, HP-UX, AIX, network devices, databases, hypervisors, cloud platforms, and containers. The company says the suite supports more than 50 compliance frameworks and provides continuous compliance reporting. It states that communications, data, and audit logs are encrypted. Deployments can be on premises, in the cloud, or hybrid. Cimcor describes its customers as small, mid-market, and enterprise organizations, including those in finance, healthcare, government, and critical infrastructure. The software is paid, pricing is on request, and a free trial is available.

OSSEC is an open-source host-based intrusion detection system for monitoring systems and network components. It analyzes logs, checks file integrity, monitors the Windows registry, detects rootkits, and can alert users in real time or take active response actions. Monitoring can be agent-based or agentless, and a centralized server applies policies across operating systems, with server-specific overrides. Alerts can use SMTP, SMS, and syslog; active response can block an attack immediately. The system runs on Linux, OpenBSD, FreeBSD, macOS, Solaris, and Windows, and supports self-hosted and cloud environments. OSSEC and OSSEC+ use command-line management; Atomic OSSEC editions add a management console and integrations with cloud services and other tools. OSSEC+ adds machine learning, ELK integration, threat sharing, and additional rules. Free OSSEC is listed at free; OSSEC+ is also free, with registration required. Atomic OSSEC is $5 a month per device. Atomic OSSEC SaaS offers a free 14-day trial for up to 10 endpoints.