| Independent Contractor at a comms service provider with 5,001-10,000 employees | 4.0 | AlienVault OSSIM is appealing for small to medium businesses due to its cost-effective, cloud-based threat management and integration of OTX. While scaling was once challenging, improvements have been made. ROI depends on the business size and setup. |
| Soc at a financial services firm with 5,001-10,000 employees | 4.0 | AlienVault OSSIM serves as our primary SIEM system, focusing on internet access and enhancing security monitoring. While network traffic analysis is efficient, user behavior analytics and integration capabilities require improvement. We evaluated Wazuh and TrueRider before selecting AlienVault. |
| SOC Engineer at a outsourcing company with 10,001+ employees | 4.0 | AlienVault OSSIM provides good detection with its agent and OS X, enhancing endpoint visibility and alert features. However, the log management needs improvement, particularly in customizing backup settings for specific devices, which is a limitation for larger environments. |
| Senior System and cyber security administration at Tankeenhr | 3.0 | I use AlienVault OSSIM to collect and track user login details and activities, focusing on security detection, such as identifying brute-force attacks. It effectively generates reports, but sometimes it sends unnecessary notifications. |
| Assistant Manager Global Security at Convergys Corporation | 4.0 | I use AlienVault OSSIM to monitor device events, but being open-source, it has limitations. Its unpredictability and dependency issues are challenging, and while it lacks features, it's becoming outdated as we transition to Security Data Lake solutions. |
| Managing Director of Hytec (OLM Group company) at OLM Group company | 3.5 | I use AlienVault OSSIM for SOC support due to its valuable features like case management, configuration ease, and investigation tools. However, it requires better integration with newer tools and UI modernization. I've also worked with Microsoft Sentinel for similar tasks. |
| Owner / Area Engineering Manager at Jlgatica | 3.5 | I am using AlienVault OSSIM as a cybersecurity technician because its GUI is user-friendly. However, it needs improvement in adding features for directives and correlation policies, and its deployment should be more unified, similar to USM. |
| Information Technology Intern at Maputo Port Development Company SARL | 4.5 | I use AlienVault OSSIM for cyber security in a telecommunication company. It’s straightforward to use, but the configuration and integration processes could be simpler, as I needed to research to fully understand it. I haven't tried other solutions. |
