Try our new research platform with insights from 80,000+ expert users

AlienVault OSSIM vs Gigamon Deep Observability Pipeline comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AlienVault OSSIM
Ranking in Security Information and Event Management (SIEM)
12th
Average Rating
7.4
Reviews Sentiment
7.1
Number of Reviews
31
Ranking in other categories
No ranking in other categories
Gigamon Deep Observability ...
Ranking in Security Information and Event Management (SIEM)
43rd
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
9
Ranking in other categories
Application Performance Monitoring (APM) and Observability (39th), Event Monitoring (11th), Data Loss Prevention (DLP) (32nd), Web Application Firewall (WAF) (31st), Advanced Threat Protection (ATP) (26th), Network Packet Broker (NPB) (1st), Network Detection and Response (NDR) (16th)
 

Mindshare comparison

As of January 2026, in the Security Information and Event Management (SIEM) category, the mindshare of AlienVault OSSIM is 1.9%, down from 4.3% compared to the previous year. The mindshare of Gigamon Deep Observability Pipeline is 0.4%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
AlienVault OSSIM1.9%
Gigamon Deep Observability Pipeline0.4%
Other97.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

BP
Independent Contractor at a comms service provider with 5,001-10,000 employees
Enables cost-effective security management for small businesses
Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implementation. The main area where the AlienVault product was lacking around the 2018 timeframe was in its ability to scale. By pushing it to a cloud-based system, they've largely alleviated scale issues. It's native in Amazon but will also run in Azure. They have worked with cloud service providers to offer enough throughput at a cost reasonable for a corporation. Scaling was their biggest problem, and they've largely conquered those issues.
TN
Senior Relationship Banker at Joint stock Commercial Bank for Foreign Trade of V
Experience boosts operational efficiency while performance sees room for improvement
I don't have specific information on whether it was purchased on the AWS marketplace or somewhere else. I am working with Dynatrace Operator. I am also working with Algosec, Alluvio, CrowdStrike, Firemon, Gigamon Deep Observability Pipeline, and other solutions. I think it's a good tool, and I am satisfied with it. We have not stored cloud workloads with Gigamon Deep Observability Pipeline yet; we are still on-premises. The technical support takes about one to two hours to respond, which is acceptable. I am satisfied with the scalability of the product. The interface is good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The paid version of the solution has reporting and better scalability options."
"The initial setup is straightforward."
"Inbuilt IDS, inbuilt integration with threat intelligence platform and with vulnerability assessment modules."
"You pay monthly for the solution. I think it's one of the best products. If you compare with other companies, like LogRhythm, etc., the top 8 or 10 CMs, I think Alien Vault has the best price-performance ratio."
"I recommend it due to the experience of the people running it."
"It has helped us remediate threats in the past by providing significant events that assisted in identifying suspicious activities, such as logins from multiple countries."
"The dashboard is the solution's most valuable aspect. It brings everything into one central point where I can actually look at it and go, "Okay, I understand what's going on.""
"The threat alerts it gives me from time to time on harmful code within the network, or if they are generating any network traffic, are very useful."
"The solution is straightforward to set up."
"The most valuable feature for improving network visibility with Gigamon is the packet filtering capability."
"It is a good product. It provides network visibility, which is important. Gigamon can bring some optimizations to my network. It is helpful for security inspection, and it makes my firewall work fast because my firewall doesn't have to do the inspection of the SSL connections, for example."
"The Pipeline's Comprehensive Insights into data flows have helped improve operational efficiency and security."
"The tool's most valuable feature is the encryption feature. From a security perspective, the solution hasn't significantly strengthened our security posture. However, it has greatly improved performance by streamlining encryption processes and avoiding encryption at multiple layers. This has also simplified troubleshooting, as we can whitelist certain processes."
"The most valuable feature is NetFlow."
"It has high stability."
"It offers straightforward integration."
 

Cons

"The documentation could be improved."
"AlienVault OSSIM could improve by having better integration with some of the newer tools."
"AlienVault OSSIM is costly."
"It's under heavy traffic. If you have heavy traffic, the system is slow."
"There needs to be more support or some kind of training program so users can self-learn the system more effectively."
"There are somewhat more false positives with the user behavior analytics, which could benefit from an additional machine learning model to detect user patterns more rapidly."
"AlienVault OSSIM gives unwanted notifications."
"We need more dashboards and we need more customization for dashboards."
"The security should be improved."
"They should increase the solution's cluster capacity."
"The Gigamon Deep Observability Pipeline should have a feature showing the traffic flow within its platform. Currently, customers have to use separate tools for monitoring, which is inconvenient. If it had its visibility feature, it would make monitoring easier and more complete without needing extra tools."
"In terms of improvement, while the initial setup is not overly complicated, we did encounter a few issues."
"The graphical user interface could be improved."
"Gigamon Deep Observability Pipeline needs to improve its performance. I face issues with performance because we use SPAN, and the SPAN traffic is not good."
"Its filtering feature needs improvement."
"It only inspects a specific kind of traffic. There should be different kinds of use cases."
 

Pricing and Cost Advice

"The solution is open source, so it's free to use."
"When comparing AlienVault OSSIM to Microsoft Sentinel, AlienVault OSSIM incurs additional costs due to its licensing price structure. If you are using AlienVault for security purposes at a certain level it can have a higher price point than the current pricing of Microsoft Sentinel."
"I used the paid version of the tool and found it to be expensive. It has been a while since I changed to Securonix. I will have to check whether AlienVault charges per device, user, or log."
"AlienVault OSSIM is an open-source solution."
"The price of AlienVault OSSIM is too high sometimes for us to present to our customers. The price should be lower. We are on a three-year license to use the solution. We had to pay extra for the support."
"The licensing fees for the non-community edition are paid on an annual basis, and there are no costs in addition to this."
"We are using a free version of the solution. If you purchase a license there are more features available but the price is a little high. The solution should be cheaper to allow more customers to be able to afford it."
"OSSIM is open source, and USM is the paid license. So, if you want, you can switch to USM. There you will have to buy a license, and they have a support team that helps you out on issues you face."
"The solution's price is reasonable."
"I would rate the solution as expensive, around an eight or nine out of ten. There are other competitive solutions available."
"The solution is highly-priced."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
881,114 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Comms Service Provider
11%
Financial Services Firm
9%
Manufacturing Company
8%
Financial Services Firm
14%
Computer Software Company
11%
Healthcare Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise9
Large Enterprise8
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise5
 

Questions from the Community

What is your experience regarding pricing and costs for AlienVault OSSIM?
It depends. I would need to review their cost models, but generally, they are on a scaled basis based on throughput usage. Because it's a software as a service solution for their core product for U...
What needs improvement with AlienVault OSSIM?
Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implement...
What do you like most about Gigamon Deep Observability Pipeline?
The most valuable feature for improving network visibility with Gigamon is the packet filtering capability.
What needs improvement with Gigamon Deep Observability Pipeline?
Gigamon Deep Observability Pipeline needs to improve its performance. I face issues with performance because we use SPAN, and the SPAN traffic is not good. They need to improve their performance.
What is your primary use case for Gigamon Deep Observability Pipeline?
I am working with Gigamon Deep Observability Pipeline and Firemon, and I have been working with it for a year.
 

Also Known As

OSSIM
Gigamon, GigaSecure
 

Overview

 

Sample Customers

Council Rock School District
Amica Insurance, College of William & Mary, Gamma, IntercontinentalExchange, OppenheimerFunds
Find out what your peers are saying about AlienVault OSSIM vs. Gigamon Deep Observability Pipeline and other solutions. Updated: December 2025.
881,114 professionals have used our research since 2012.