OSSEC vs Samhain
OSSEC
ossec.netSamhain
la-samhna.deSide by side
| Figure | OSSEC | Samhain |
|---|---|---|
| Price from | $4.58/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | Yes | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 0 |
| Spec score · File Integrity Monitoring Software | 9.0 (#2) | 7.3 (#24) |
| Integrations | Atomic OSSEC lists Splunk, Sumo Logic, Jira, ArcSight, BMC Remedy, Elasticsearch, AWS CloudTrail, Slack, ServiceNow, VirusTotal, Cisco, Palo Alto and Cloudflare integrations. | Samhain can function as a Prelude sensor, includes a Nagios plugin, and can send messages to named pipes, System V message queues, and external programs. |
| License | OSSEC is distributed under the GNU General Public License version 2. | Samhain is distributed under the GNU General Public Licence. |
Plans
In their own words
OSSEC
OSSEC is an open-source host-based intrusion detection system for monitoring systems and network components. It analyzes logs, checks file integrity, monitors the Windows registry, detects rootkits, and can alert users in real time or take active response actions. Monitoring can be agent-based or agentless, and a centralized server applies policies across operating systems, with server-specific overrides. Alerts can use SMTP, SMS, and syslog; active response can block an attack immediately. The system runs on Linux, OpenBSD, FreeBSD, macOS, Solaris, and Windows, and supports self-hosted and cloud environments. OSSEC and OSSEC+ use command-line management; Atomic OSSEC editions add a management console and integrations with cloud services and other tools. OSSEC+ adds machine learning, ELK integration, threat sharing, and additional rules. Free OSSEC is listed at free; OSSEC+ is also free, with registration required. Atomic OSSEC is $5 a month per device. Atomic OSSEC SaaS offers a free 14-day trial for up to 10 endpoints.