Elastic Security vs Samhain
Elastic Security
elastic.coSamhain
la-samhna.deSide by side
| Figure | Elastic Security | Samhain |
|---|---|---|
| Price from | $0.09/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 0 |
| Spec score · File Integrity Monitoring Software | 8.6 (#4) | 7.3 (#24) |
| Deployment | Elastic Security can be installed on Elastic Cloud deployments or self-managed infrastructure. | It can run standalone on one host or monitor multiple hosts through a client/server setup with centralized logging and maintenance. |
| Integrations | Elastic says it supports 400+ prebuilt integrations and up to 1,000 total security and data-source integrations, with native OpenTelemetry data support. | Samhain can function as a Prelude sensor, includes a Nagios plugin, and can send messages to named pipes, System V message queues, and external programs. |
| Purpose | Elastic Security unifies SIEM, XDR, endpoint security, and cloud security to detect, prevent, and respond to cyber threats. | Samhain is a file integrity and host based intrusion detection system that monitors files and logs, and detects rootkits, rogue SUID executables, open ports, and hidden processes. |
| Security | Elastic Cloud automatically secures internet-facing and inter-node communications with HTTPS and encrypts cluster data at rest. | Samhain supports signed database and configuration files, signed reports, authenticated client connections, encrypted central logging, and stealth options. |
| Support | Elastic Cloud support levels include Limited, Base, Enhanced, and Premium, with target response times that vary by level. | Support options include documentation, a user forum and mailing list, bug reports by contact form or email, and an inquiry option for commercial installation or maintenance support. |
Plans
Elastic Security
- Security Analytics Essentials$0.09 a month
- Security Analytics Complete$0.11 a month
- Free and open - BasicFree
- Elastic Cloud Serverless SecurityPriced on request
- Elastic self-managed subscriptionsPriced on request
In their own words
Elastic Security
Elastic Security combines SIEM, XDR, endpoint security, and cloud security for detecting, preventing, and responding to cyber threats. Detection options include prebuilt and customizable rules, machine-learning anomaly detection, and threat hunting. Elastic Defend uses machine learning, behavioral analysis, and prebuilt rules to address endpoint threats; cloud capabilities cover cloud and Kubernetes security posture management, workload protection, and vulnerability management. Elastic Workflows can automate triage, enrichment, response, notifications, and case management. Elastic lists more than 400 prebuilt integrations and up to 1,000 total security and data-source integrations, alongside native OpenTelemetry support. The software can run on Elastic Cloud or self-managed infrastructure, with APIs and query options KQL, Lucene, and ES|QL. The free Basic plan includes SIEM, XDR, and host security analysis. Elastic Cloud Hosted and Serverless offer a 14-day free trial. Security Analytics Essentials is listed at $0.09 a month, with retention priced separately; Essentials also includes endpoint protection, while retention is priced separately at as low as $0.017 per retained GB per month. Elastic Cloud uses HTTPS for internet-facing and inter-node communications and encrypts cluster data at rest.