Elastic Security vs LogSentinel SIEM
Elastic Security
elastic.coLogSentinel SIEM
logsentinel.comSide by side
| Figure | Elastic Security | LogSentinel SIEM |
|---|---|---|
| Price from | $0.09/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 2 |
| Spec score · SIEM Software | 8.7 (#2) | 7.8 (#13) |
| Compliance | Elastic says its Elastic Cloud service and Information Security Management System have undergone compliance audits and certifications. | The SIEM page names GDPR, HIPAA, SOX, PCI-DSS, and PSD2 as regulations for which it can generate compliance reports. |
| Deployment | Elastic Security can be installed on Elastic Cloud deployments or self-managed infrastructure. | The maker describes cloud and on-premises deployment options, including a zero-setup cloud SIEM and an open-source collector and agent. |
| Integrations | Elastic says it supports 400+ prebuilt integrations and up to 1,000 total security and data-source integrations, with native OpenTelemetry data support. | Data sources include AWS, Microsoft Azure, Google Cloud Platform, Microsoft 365, Okta, Salesforce, Oracle, Microsoft SQL Server, and syslog sources. |
| Purpose | Elastic Security unifies SIEM, XDR, endpoint security, and cloud security to detect, prevent, and respond to cyber threats. | LogSentinel SIEM provides security monitoring with threat detection and response for the mid-market. |
| Security | Elastic Cloud automatically secures internet-facing and inter-node communications with HTTPS and encrypts cluster data at rest. | The maker lists log integrity, digital evidence, and end-to-end log encryption among its advanced security and compliance features. |
| Support | Elastic Cloud support levels include Limited, Base, Enhanced, and Premium, with target response times that vary by level. | Email and phone support are included in the license, according to the features page. |
| Threat detection | It provides prebuilt and customizable detection rules, machine-learning anomaly detection, and threat-hunting tools. | Detection features include rule-based correlation, machine-learning threat detection, threat intelligence, threat hunting, and phishing detection. |
Plans
Elastic Security
- Security Analytics Essentials$0.09 a month
- Security Analytics Complete$0.11 a month
- Free and open - BasicFree
- Elastic Cloud Serverless SecurityPriced on request
- Elastic self-managed subscriptionsPriced on request
LogSentinel SIEM
- Enterprise SAASPriced on request
- On-Premise InstallationPriced on request
In their own words
Elastic Security
Elastic Security combines SIEM, XDR, endpoint security, and cloud security for detecting, preventing, and responding to cyber threats. Detection options include prebuilt and customizable rules, machine-learning anomaly detection, and threat hunting. Elastic Defend uses machine learning, behavioral analysis, and prebuilt rules to address endpoint threats; cloud capabilities cover cloud and Kubernetes security posture management, workload protection, and vulnerability management. Elastic Workflows can automate triage, enrichment, response, notifications, and case management. Elastic lists more than 400 prebuilt integrations and up to 1,000 total security and data-source integrations, alongside native OpenTelemetry support. The software can run on Elastic Cloud or self-managed infrastructure, with APIs and query options KQL, Lucene, and ES|QL. The free Basic plan includes SIEM, XDR, and host security analysis. Elastic Cloud Hosted and Serverless offer a 14-day free trial. Security Analytics Essentials is listed at $0.09 a month, with retention priced separately; Essentials also includes endpoint protection, while retention is priced separately at as low as $0.017 per retained GB per month. Elastic Cloud uses HTTPS for internet-facing and inter-node communications and encrypts cluster data at rest.
LogSentinel SIEM
LogSentinel SIEM is a security monitoring system for mid-market organizations, available through web, API, Linux, Windows, and self-hosted deployments. It gathers logs centrally, aggregates and normalizes them, and supports custom connectors plus agentless collection. Detection combines rule correlation, machine-learning analysis, threat intelligence, threat hunting, and phishing detection. Incident tools cover investigation, triage, notifications, and automated response, with custom rules and real-time alerts. Sources include AWS, Microsoft Azure, Google Cloud Platform, Microsoft 365, Okta, Salesforce, Oracle, Microsoft SQL Server, and syslog. The collector also accepts REST APIs, text files, Windows logs, and database tables. Security features include log integrity, digital evidence, and end-to-end encryption. Compliance reports address GDPR, HIPAA, SOX, PCI-DSS, and PSD2. Cloud and on-premises options are offered, alongside MSSP use cases. Pricing is on request; a free plan and trial are listed.