AlienVault OSSIM vs Logpoint comparison

Read 23 Logpoint reviews

1,892 Views
1,230 Comparison Views

85% willing to recommend

AlienVault OSSIM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Logpoint and AlienVault OSSIM are both security information and event management solutions. Users generally find Logpoint has a better user experience, while AlienVault OSSIM offers more robust features.

Features: Logpoint is known for its comprehensive log management, intuitive analytics capabilities, and user-friendly interface. AlienVault OSSIM stands out with its advanced threat detection features, extensive security functionalities, and robust event correlation capabilities.

Room for Improvement: Logpoint can improve in areas of scalability, better integration with third-party tools, and enhancing its support for larger infrastructures. AlienVault OSSIM needs performance enhancements, a simplified setup process, and more intuitive user navigation to reduce complexity.

Ease of Deployment and Customer Service: Logpoint is praised for straightforward deployment and responsive customer support. AlienVault OSSIM has a more complex deployment process and receives mixed reviews on customer service experiences. Users find Logpoint easier to implement and appreciate its supportive customer service.

Pricing and ROI: Logpoint users feel the pricing aligns with the features and support, offering positive ROI. Although AlienVault OSSIM has a higher initial setup cost, it is seen as a worthwhile investment due to its potent security capabilities. Users balance the cost against the advanced security outcomes, but Logpoint is recognized for better value concerning pricing.

To learn more, read our detailed AlienVault OSSIM vs. Logpoint Report (Updated: September 2025).

AlienVault OSSIM vs. Logpoint

September 2025

Download the complete report

Helped 869,760 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AlienVault OSSIM

Ranking in Security Information and Event Management (SIEM)

12th

Average Rating

7.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Logpoint

Ranking in Security Information and Event Management (SIEM)

31st

Average Rating

7.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Log Management (34th), User Entity Behavior Analytics (UEBA) (12th), Endpoint Detection and Response (EDR) (45th), Security Orchestration Automation and Response (SOAR) (18th)

Mindshare comparison

As of October 2025, in the Security Information and Event Management (SIEM) category, the mindshare of AlienVault OSSIM is 2.6%, down from 4.3% compared to the previous year. The mindshare of Logpoint is 0.9%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Market Share Distribution
Product	Market Share (%)
AlienVault OSSIM	2.6%
Logpoint	0.9%
Other	96.5%

Security Information and Event Management (SIEM)

Featured Reviews

HarshBhardiya

SOC Engineer at Just Dial Limited

An open-source solution that provide good detection and more visibility

The solution is not scalable. It impacts so hard. In the initial stages, AlienVault OSSIM can be suitable for small environments. There may be limitations if the customer expresses a desire to expand and add more devices. In such cases, we would need to either explore additional solutions or work within the constraints of the existing setup. We have set up alerts and configured everything in AlienVault OSSIM. It actively monitors for any security incidents. It provides us with regular updates and notifications about any ongoing activities. Only one person is using the solution. It is the perfect solution for small businesses. I rate the solution’s scalability a three out of ten.

Read full review

Abdullah Secca

Cyber Security Analyst at Pacific Propeller

Valuable monitoring and integration features boost compliance

They are not in the US market, and the quality of support has declined. They migrated operations from Boston to Denmark, and we cannot use a tool hosted outside the country. Additionally, dealing with foreign entities for support was a challenge, leading us to switch providers due to lack of adequate support.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It has helped us remediate threats in the past by providing significant events that assisted in identifying suspicious activities, such as logins from multiple countries."

"You can customize the dashboards as well as the reporting."

"The threat policies of the solution are always very advanced and the best in the market. They are very persistent in terms of keeping up with security protocols."

"Network traffic analysis is highly efficient."

"The most valuable feature is the logging capability."

"The initial setup was straightforward. I didn't have any problems."

"The product is easy to use."

"The solution is very stable. Compared to Qradar and Splunk, it's very stable."

More AlienVault OSSIM pros

"Technical support is responsive and very friendly."

"They basically charge you in a better way."

"In my experience with medium-sized operations, LogPoint's scalability is excellent, so I would rate it a ten out of ten."

"The solution's most valuable aspect is the combination of the software and the support that they have."

"It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all the activities. It devises a baseline and monitors if there is any deviation from the baseline."

"The most beneficial was being able to prove, with proper reports, that from a compliance perspective, the company is in control. The service part of LogPoint did modifications or did some additional work to have the proper reports defined."

"It is a very comprehensive solution for gathering data. It has got a lot of capabilities for collecting logs from different systems. Logs are notoriously difficult to collect because they come in all formats. LogPoint has a very sophisticated mechanism for you to be able to connect to or listen to a system, get the data, and parse it. Logs come in text formats that are not easily parseable because all logs are not the same, but with LogPoint, you can define a policy for collecting the data. You can create a parser very quickly to get the logs into a structured mechanism so that you can analyze them."

"The integration is very user-friendly. There are not many CLI commands. Everything is directly accessible from the web interface."

More Logpoint pros

Cons

"The main area where the AlienVault product was lacking around the 2018 timeframe was in its ability to scale."

"The documentation could be improved."

"GUI could be improved."

"I don't like to work on OSSIM because it is unpredictable."

"Sometimes technical issues take very long to get resolved."

"The solution needs more integration with cyber intelligence systems."

"Lacking in depth of reporting."

"There are somewhat more false positives with the user behavior analytics, which could benefit from an additional machine learning model to detect user patterns more rapidly."

More AlienVault OSSIM cons

"The documentation part is something that needs to be improved, as well as the threat intelligence investigation part."

"We were missing visuals and graphics. Recently, a new version seems to have come out, and it has a new graphical user interface. When I was integrating it, it was usable, but the GUI needed improvement."

"In terms of functionality, it is very good. The only issue is the documentation. Its documentation should be improved."

"One of the downsides is it is not a SaaS solution. It must be on-premises."

"I would rate the stability of Logpoint as a six out of ten. I have received reports indicating glitches and downtimes with Logpoint."

"The interface needs things like wizards that will assist with creating complex correlation rules."

"Logpoint is not flexible. Its documentation is not user-friendly."

"What could be improved in LogPoint is its UI because it's less friendly to users than LogRhythm. The UI could be more aesthetically appealing to users. It's completely outdated."

More Logpoint cons

Pricing and Cost Advice

"I used the paid version of the tool and found it to be expensive. It has been a while since I changed to Securonix. I will have to check whether AlienVault charges per device, user, or log."

"AlienVault OSSIM is expensive compared to its competitors."

"AlienVault pricing is the best. Whatever cost you are paying, you are getting a return on every penny... It's not like your IBM, your QRadar, or Splunk, where the cost is too high."

"OSSIM is open source, and USM is the paid license. So, if you want, you can switch to USM. There you will have to buy a license, and they have a support team that helps you out on issues you face."

"The tool's licensing costs are yearly."

"We are using a free version of the solution. If you purchase a license there are more features available but the price is a little high. The solution should be cheaper to allow more customers to be able to afford it."

"AlienVault OSSIM is an open-source solution."

"The licensing fees for the non-community edition are paid on an annual basis, and there are no costs in addition to this."

More AlienVault OSSIM pricing and cost advice

"It has a fixed price, which is what I like about LogPoint. I bought the system and paid for it, and I pay maintenance. It is not a consumption model. Most SIEMs or most of the log management systems are consumption-based, which means that you pay for how many logs you have in the system. That's a real problem because logs can grow very quickly in different circumstances, and when you have a variable price model, you never know what you're going to pay. Splunk is notoriously expensive for that reason. If you use Splunk or QRadar, it becomes expensive because there are not just the logs; you also have to parse the logs and create indexes. Those indexes can be very expensive in terms of space. Therefore, if they charge you by this space, you can end up paying a significant amount of money. It can be more than what you expect to pay. I like the fact that LogPoint has a fixed cost. I know what I'm going to pay on a yearly basis. I pay that, and I pay the maintenance, and I just make it work."

"It was on a yearly basis at about $100K. It was not a huge environment. We were running it on our own virtual server environment, which, of course, had a cost. There was hardware and some energy cost, and then there were Microsoft Windows licenses for servers. That's all, but there was nothing in comparison to the licensing costs."

"Our licensing fees are about $10,000 USD per month, which I think is fair."

"On a scale of one to ten, where one is cheap, and ten is expensive, I would rate LogPoint's pricing a seven. It is not very expensive compared to some of the more costly products, and it is not very cheap compared to some of the cheaper products in the SIEM market."

"It's getting more expensive, which is one of the reasons we're looking around just to see if there's anything better value."

"Logpoint's pricing is mid-ranged and depends on the number of devices."

"For a hundred user deployment the cost is about $10,000. The next year it would be the same because it's a subscription-based license. There are separate costs as well, for example, if a customer asks for training for their staff."

"It's less expensive than the competitors. The Logpoint marketing team is very accommodating and client-friendly. They offer very good reductions in price. They are pretty good in this aspect. They are transparent in their licensing and pricing."

More Logpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

869,760 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

14%

Comms Service Provider

12%

University

Educational Organization

Computer Software Company

26%

Manufacturing Company

10%

Comms Service Provider

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	9
Large Enterprise	8

By reviewers
Company Size	Count
Small Business	17
Midsize Enterprise	3
Large Enterprise	4

Questions from the Community

What do you like most about AlienVault OSSIM?

Asset discovery is good.

What is your experience regarding pricing and costs for AlienVault OSSIM?

It depends. I would need to review their cost models, but generally, they are on a scaled basis based on throughput usage. Because it's a software as a service solution for their core product for U...

What needs improvement with AlienVault OSSIM?

Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implement...

What do you like most about LogPoint?

The solution is user-friendly.

What is your experience regarding pricing and costs for LogPoint?

I rate the pricing at eight, suggesting it's relatively good or affordable.

What needs improvement with LogPoint?

Logpoint needs to be cloud-native, as currently, it is not. Additionally, there should be compliance mapping, where the features and actions within Logpoint map to security compliance standards.

Wazuh vs AlienVault OSSIM

Comparisons

Compared 70% of the time

USM Anywhere vs AlienVault OSSIM

Compared 7% of the time

Venusense USM vs AlienVault OSSIM

Compared 7% of the time

Splunk Enterprise Security vs AlienVault OSSIM

Compared 5% of the time

Elastic Security vs AlienVault OSSIM

Compared 4% of the time

More AlienVault OSSIM Competitors

Wazuh vs Logpoint

Compared 19% of the time

Splunk Enterprise Security vs Logpoint

Compared 17% of the time

IBM Security QRadar vs Logpoint

Compared 13% of the time

Elastic Security vs Logpoint

Compared 12% of the time

Microsoft Sentinel vs Logpoint

Compared 8% of the time

More Logpoint Competitors

Product Reports

Download AlienVault OSSIM product report

AlienVault OSSIM

October 2025

Download Logpoint product report

October 2025

Also Known As

OSSIM

No data available

Overview

AlienVault OSSIM, Open Source Security Information and Event Management (SIEM), provides you with a feature-rich open source SIEM complete with event collection, normalization and correlation. Launched by security engineers because of the lack of available open source products, AlienVault OSSIM was created specifically to address the reality many security professionals face: A SIEM, whether it is open source or commercial, is virtually useless without the basic security controls necessary for security visibility.

AT&T

Logpoint is a cutting-edge security information and event management (SIEM) solution that is designed to be intuitive and flexible enough to be used by an array of different businesses. It is capable of expanding according to its users' needs.

Benefits of Logpoint

Some of the benefits of using Logpoint include:

Unifies data logs: Logpoint creates a single system of classification for collected data. It makes it easy for users to search for and find data, which aids users when they are creating reports or alerts. Users can conserve resources while at the same time seeing a rise in the efficiency of their business operations.

Intuitive solution design: Logpoint is designed so that anyone can utilize all of its features, even if they are not an expert in network security. Logpoint’s UI is simple enough that users can utilize it without undergoing extensive training.

Highly flexible: Logpoint is designed so that users can scale it linearly to accommodate projects that are large and complex. This allows users to expand the scope of their projects according to their needs without worrying that their infrastructure won’t be able to handle the increase in size. The solution’s security features can be deployed both on the cloud and in a physical environment.

Simple role-based access security: Logpoint allows administrators to employ Microsoft’s active directory (AD) and a Lightweight Directory Access Protocol to manage user access. These can help administrators protect their systems from being abused or otherwise harmed by bad actors.

Reviews from Real Users

Logpoint is a security and management solution that stands out among its competitors for a number of reasons. Two major ones are its data gathering and artificial intelligence (AI) capabilities. Logpoint enables users to not only gather the data, but also to maximize both the amount of data that can be gathered and its usefulness. It removes many of the challenges that users may face in data collection. The solution allows users to set rules for collection and then it pulls information from sources that meet the rules that have been set. This data is then broken into manageable segments and ordered. Users can then analyze these ordered segments with ease. Additionally, LogPoint utilizes both machine learning and AI technology. Users gain the ability to protect themselves from and if necessary resolve emerging threats as soon as they arise. The AI sets security parameters for a user’s system. These act as a baseline that are triggered and notify the user if anything deviates from the rules that it set up.

The chief infrastructure & security officer at a financial services firm writes, “It is a very comprehensive solution for gathering data. It has got a lot of capabilities for collecting logs from different systems. Logs are notoriously difficult to collect because they come in all formats. Logpoint has a very sophisticated mechanism for you to be able to connect to or listen to a system, get the data, and parse it. Logs come in text formats that are not easily parsed because all logs are not the same, but with Logpoint, you can define a policy for collecting the data. You can create a parser very quickly to get the logs into a structured mechanism so that you can analyze them.”

A. Secca., a Cyber Security Analyst at a transportation company, writes, “It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all of the user’s activities. It devises a baseline and monitors if there is any deviation from the baseline.”

Sample Customers

Council Rock School District

AP Pension, Copenhagen Airports, KMD, Terma, DISA, Danish Crown, Durham City Council, Game, TopDanmark, Lahti Energia, Energi Midt, Synoptik, Eissmann Group Automotive, Aligro, CG50...