LogSentinel SIEM vs Wazuh
LogSentinel SIEM
logsentinel.comWazuh
wazuh.comSide by side
| Figure | LogSentinel SIEM | Wazuh |
|---|---|---|
| Price from | — | $571/mo |
| Free plan | — | Yes |
| Free trial | Yes | Yes |
| Open source | — | Yes |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 5 |
| Spec score · SIEM Software | 7.8 (#13) | 8.6 (#4) |
| Incident response | The product includes incident response, investigation and triage, threat notifications, and automation. | Built-in active responses can take countermeasures such as blocking network access from a threat source. |
| Support | Email and phone support are included in the license, according to the features page. | Wazuh offers free community support as well as support services and professional hours for Cloud environments. |
| Threat detection | Detection features include rule-based correlation, machine-learning threat detection, threat intelligence, threat hunting, and phishing detection. | Its rules detect errors, misconfigurations, malicious activity, and policy violations in operating system and application logs. |
Plans
LogSentinel SIEM
- Enterprise SAASPriced on request
- On-Premise InstallationPriced on request
Wazuh
- Wazuh open sourceFree
- Small$571 a month
- Medium$923 a month
- Large$1,467 a month
- CustomPriced on request
In their own words
LogSentinel SIEM
LogSentinel SIEM is a security monitoring system for mid-market organizations, available through web, API, Linux, Windows, and self-hosted deployments. It gathers logs centrally, aggregates and normalizes them, and supports custom connectors plus agentless collection. Detection combines rule correlation, machine-learning analysis, threat intelligence, threat hunting, and phishing detection. Incident tools cover investigation, triage, notifications, and automated response, with custom rules and real-time alerts. Sources include AWS, Microsoft Azure, Google Cloud Platform, Microsoft 365, Okta, Salesforce, Oracle, Microsoft SQL Server, and syslog. The collector also accepts REST APIs, text files, Windows logs, and database tables. Security features include log integrity, digital evidence, and end-to-end encryption. Compliance reports address GDPR, HIPAA, SOX, PCI-DSS, and PSD2. Cloud and on-premises options are offered, alongside MSSP use cases. Pricing is on request; a free plan and trial are listed.
Wazuh
Wazuh unifies XDR and SIEM to analyze security data across endpoints, clouds, and networks for threat detection, incident response, and compliance work. Its rules identify errors, misconfigurations, malicious activity, and policy violations in operating system and application logs. File Integrity Monitoring tracks changes to content, permissions, ownership, and other file attributes. Vulnerability detection compares endpoint software inventories with updated CVE databases. Built-in active responses can take countermeasures, including blocking network access from a threat source. Wazuh can monitor AWS, Microsoft Azure, Google Cloud, Microsoft 365, and GitHub services, virtual machines, and activity. Its integrations guide also covers Elastic Stack, OpenSearch, Splunk, and Amazon Security Lake. Default rulesets provide mappings for PCI DSS, HIPAA, NIST 800-53, TSC, and GDPR, but those mappings do not themselves certify compliance. Wazuh runs on API, Linux, macOS, self-hosted, web, and Windows platforms. Its self-hosted open-source plan is free; paid plans start at $571 a month, and a 14-day trial is listed. Agents support Linux, Windows, macOS, Solaris, AIX, and HP-UX and require an average of 35 MB of RAM.