AlienVault OSSIM vs Logpoint comparison

Read 23 Logpoint reviews

1,667 Views
798 Comparison Views

85% willing to recommend

AlienVault OSSIM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Logpoint and AlienVault OSSIM are both security information and event management solutions. Users generally find Logpoint has a better user experience, while AlienVault OSSIM offers more robust features.

Features: Logpoint is known for its comprehensive log management, intuitive analytics capabilities, and user-friendly interface. AlienVault OSSIM stands out with its advanced threat detection features, extensive security functionalities, and robust event correlation capabilities.

Room for Improvement: Logpoint can improve in areas of scalability, better integration with third-party tools, and enhancing its support for larger infrastructures. AlienVault OSSIM needs performance enhancements, a simplified setup process, and more intuitive user navigation to reduce complexity.

Ease of Deployment and Customer Service: Logpoint is praised for straightforward deployment and responsive customer support. AlienVault OSSIM has a more complex deployment process and receives mixed reviews on customer service experiences. Users find Logpoint easier to implement and appreciate its supportive customer service.

Pricing and ROI: Logpoint users feel the pricing aligns with the features and support, offering positive ROI. Although AlienVault OSSIM has a higher initial setup cost, it is seen as a worthwhile investment due to its potent security capabilities. Users balance the cost against the advanced security outcomes, but Logpoint is recognized for better value concerning pricing.

To learn more, read our detailed AlienVault OSSIM vs. Logpoint Report (Updated: April 2025).

AlienVault OSSIM vs. Logpoint

Download the complete report

Helped 849,686 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AlienVault OSSIM

Ranking in Security Information and Event Management (SIEM)

10th

Average Rating

7.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Logpoint

Ranking in Security Information and Event Management (SIEM)

23rd

Average Rating

7.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Log Management (23rd), User Entity Behavior Analytics (UEBA) (8th), Endpoint Detection and Response (EDR) (29th), Security Orchestration Automation and Response (SOAR) (14th)

Mindshare comparison

As of May 2025, in the Security Information and Event Management (SIEM) category, the mindshare of AlienVault OSSIM is 3.7%, down from 3.8% compared to the previous year. The mindshare of Logpoint is 0.8%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

Aman Aijaz

Assistant Manager Global Security at Convergys Corporation

An easy-to-scale open-source solution used for monitoring events on devices

The area for improvement is a lot. When I started using it on our enterprise side, the issue we faced was, for example, if we were running at that time on AlienVault OSSIM v5.7.4. So, for some orders, we had to install some packages, and when we tried installing that package, some dependencies got upgraded to a new version. Now once that dependency got upgraded, the SQL, since you might be aware that OSSIM uses SQL database, now SQL and all the dependency in everything was not on the same version, and that caused the database to crash. The aforementioned area should be eased out by upgrading the patches and upgrading dependencies. This kind of thing is a disadvantage of OSSIM, and I would like them to work on this. But I have also raised service requests many times and gave it a push on the community section too. However, since it is a local source, they don't reply much over there. That is why I don't like to work on OSSIM because it is unpredictable. Once the storage goes above 50 percent, it starts behaving unpredictably. If you get stuck with a situation, then you need to drill a lockdown into that. Sometimes you get no luck. Then you have to just reimage the server with the new fresh OS of AlienVault. As for additional features, not much because if you move to the newer version, it is kind of getting more stable. But, to make my life easier, then I would say try to give more features. I know it's open source, so they also cannot provide me with more features. But still, if they can provide me with more features because right now it's becoming old. Right now, we are even moving from SIEM to Security Data Lake. So when we move to it, this will be literally outdated. No one can even expect anything out of it. The way security is moving, it will be outdated very soon. They have to also provide something new to keep this going for the future also.

Read full review

Abdullah Secca

Cyber Security Analyst at Pacific Propeller

Valuable monitoring and integration features boost compliance

They are not in the US market, and the quality of support has declined. They migrated operations from Boston to Denmark, and we cannot use a tool hosted outside the country. Additionally, dealing with foreign entities for support was a challenge, leading us to switch providers due to lack of adequate support.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"There are a lot of people you will find using OSSIM since they are also offering OTX as a service"

"I recommend it due to the experience of the people running it."

"The solution is free to use."

"Its user-friendliness is the most valuable. It is very easy to use and explore. The dashboard is very well packaged and integrated. You don't have to spend a lot of time in configuring it and checking out the RPM etc. It is also free and very powerful."

"It has helped us remediate threats in the past by providing significant events that assisted in identifying suspicious activities, such as logins from multiple countries."

"The tool's security detection is good. It helps us with login tracking and generating reports. We aim to identify potential issues, such as brute-force attacks on user accounts or server-level anomalies. For instance, if I receive a report indicating a server is at an abnormal level, I investigate and address the issue."

"The initial setup was straightforward. I didn't have any problems."

"The threat policies of the solution are always very advanced and the best in the market. They are very persistent in terms of keeping up with security protocols."

More AlienVault OSSIM pros

"The UEBA component, as well as the SOAR component, are some of the most valuable features of Logpoint."

"They basically charge you in a better way."

"It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all the activities. It devises a baseline and monitors if there is any deviation from the baseline."

"The most valuable feature of LogPoint is that they have the SIEM and SOAR combined in one solution. They are not on a separate platform."

"The UEBA component, as well as the SOAR component, are some of the most valuable features of Logpoint."

"Technical support is responsive and very friendly."

"It is a very comprehensive solution for gathering data. It has got a lot of capabilities for collecting logs from different systems. Logs are notoriously difficult to collect because they come in all formats. LogPoint has a very sophisticated mechanism for you to be able to connect to or listen to a system, get the data, and parse it. Logs come in text formats that are not easily parseable because all logs are not the same, but with LogPoint, you can define a policy for collecting the data. You can create a parser very quickly to get the logs into a structured mechanism so that you can analyze them."

"The most beneficial was being able to prove, with proper reports, that from a compliance perspective, the company is in control. The service part of LogPoint did modifications or did some additional work to have the proper reports defined."

More Logpoint pros

Cons

"When comparing AlienVault OSSIM to other solutions it looks a bit outdated. Additionally, they need to improve their integration."

"AlienVault OSSIM’s configuration and integration could be a little easier."

"It takes some time. It does not give me a prompt response for any such [malicious] traffic. It takes time to get that alert from the AlienVault system."

"The solution needs more integration with cyber intelligence systems."

"AlienVault OSSIM is costly."

"AlienVault OSSIM should improve the deployment and make it unified like the USM."

"Sometimes technical issues take very long to get resolved."

"There needs to be more support or some kind of training program so users can self-learn the system more effectively."

More AlienVault OSSIM cons

"What could be improved in LogPoint is its UI because it's less friendly to users than LogRhythm. The UI could be more aesthetically appealing to users. It's completely outdated."

"Dashboards could be developed further."

"LogPoint can improve its dashboards. We are not able to customize the dashboard when creating them. They only have preset dashboards which do not have exactly what we are looking for."

"The general public wasn't looking for that type of product unless you had a company that was medical or financial and needed 24-hour responsiveness."

"I would rate the stability of Logpoint as a six out of ten. I have received reports indicating glitches and downtimes with Logpoint."

"It is complicated to collect daily logs from other systems."

"The interface needs things like wizards that will assist with creating complex correlation rules."

"Log management could be better because transporting the log from a password to the client system takes time."

More Logpoint cons

Pricing and Cost Advice

"When comparing AlienVault OSSIM to Microsoft Sentinel, AlienVault OSSIM incurs additional costs due to its licensing price structure. If you are using AlienVault for security purposes at a certain level it can have a higher price point than the current pricing of Microsoft Sentinel."

"The tool's licensing costs are yearly."

"The price of AlienVault OSSIM is too high sometimes for us to present to our customers. The price should be lower. We are on a three-year license to use the solution. We had to pay extra for the support."

"I used the paid version of the tool and found it to be expensive. It has been a while since I changed to Securonix. I will have to check whether AlienVault charges per device, user, or log."

"We are using a free version of the solution. If you purchase a license there are more features available but the price is a little high. The solution should be cheaper to allow more customers to be able to afford it."

"AlienVault OSSIM is an open-source solution."

"We are using the community version, which can be used for free."

"The solution is open source, so it's free to use."

More AlienVault OSSIM pricing and cost advice

"For a hundred user deployment the cost is about $10,000. The next year it would be the same because it's a subscription-based license. There are separate costs as well, for example, if a customer asks for training for their staff."

"LogPoint seemed like it was a good product, but it was expensive and there wasn't any room to move the pricing when customers needed a lower-costing solution."

"It has a fixed price, which is what I like about LogPoint. I bought the system and paid for it, and I pay maintenance. It is not a consumption model. Most SIEMs or most of the log management systems are consumption-based, which means that you pay for how many logs you have in the system. That's a real problem because logs can grow very quickly in different circumstances, and when you have a variable price model, you never know what you're going to pay. Splunk is notoriously expensive for that reason. If you use Splunk or QRadar, it becomes expensive because there are not just the logs; you also have to parse the logs and create indexes. Those indexes can be very expensive in terms of space. Therefore, if they charge you by this space, you can end up paying a significant amount of money. It can be more than what you expect to pay. I like the fact that LogPoint has a fixed cost. I know what I'm going to pay on a yearly basis. I pay that, and I pay the maintenance, and I just make it work."

"It's less expensive than the competitors. The Logpoint marketing team is very accommodating and client-friendly. They offer very good reductions in price. They are pretty good in this aspect. They are transparent in their licensing and pricing."

"My company used to pay for LogPoint costs annually. It's a cost-effective solution. I'm not part of the Finance team, though, so I'm not sure exactly what the licensing fee is or what license my company had."

"It's getting more expensive, which is one of the reasons we're looking around just to see if there's anything better value."

"It was on a yearly basis at about $100K. It was not a huge environment. We were running it on our own virtual server environment, which, of course, had a cost. There was hardware and some energy cost, and then there were Microsoft Windows licenses for servers. That's all, but there was nothing in comparison to the licensing costs."

"Logpoint's pricing is mid-ranged and depends on the number of devices."

More Logpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

849,686 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Comms Service Provider

10%

Financial Services Firm

University

Educational Organization

59%

Computer Software Company

12%

Comms Service Provider

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about AlienVault OSSIM?

Asset discovery is good.

What is your experience regarding pricing and costs for AlienVault OSSIM?

It depends. I would need to review their cost models, but generally, they are on a scaled basis based on throughput usage. Because it's a software as a service solution for their core product for U...

What needs improvement with AlienVault OSSIM?

Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implement...

What do you like most about LogPoint?

The solution is user-friendly.

What is your experience regarding pricing and costs for LogPoint?

I rate the pricing at eight, suggesting it's relatively good or affordable.

What needs improvement with LogPoint?

Logpoint needs to be cloud-native, as currently, it is not. Additionally, there should be compliance mapping, where the features and actions within Logpoint map to security compliance standards.

Wazuh vs AlienVault OSSIM

Comparisons

Compared 79% of the time

USM Anywhere vs AlienVault OSSIM

Compared 6% of the time

Elastic Security vs AlienVault OSSIM

Compared 4% of the time

Splunk Enterprise Security vs AlienVault OSSIM

Compared 2% of the time

Rapid7 InsightIDR vs AlienVault OSSIM

Compared 2% of the time

More AlienVault OSSIM Competitors

Wazuh vs Logpoint

Compared 30% of the time

IBM Security QRadar vs Logpoint

Compared 16% of the time

Elastic Security vs Logpoint

Compared 15% of the time

LogRhythm SIEM vs Logpoint

Compared 9% of the time

Microsoft Sentinel vs Logpoint

Compared 9% of the time

More Logpoint Competitors

Product Reports

AlienVault OSSIM

Download AlienVault OSSIM product report

Download Logpoint product report

Also Known As

OSSIM

No data available

Overview

AlienVault OSSIM, Open Source Security Information and Event Management (SIEM), provides you with a feature-rich open source SIEM complete with event collection, normalization and correlation. Launched by security engineers because of the lack of available open source products, AlienVault OSSIM was created specifically to address the reality many security professionals face: A SIEM, whether it is open source or commercial, is virtually useless without the basic security controls necessary for security visibility.

AT&T

Logpoint is a cutting-edge security information and event management (SIEM) solution that is designed to be intuitive and flexible enough to be used by an array of different businesses. It is capable of expanding according to its users' needs.

Benefits of Logpoint

Some of the benefits of using Logpoint include:

Unifies data logs: Logpoint creates a single system of classification for collected data. It makes it easy for users to search for and find data, which aids users when they are creating reports or alerts. Users can conserve resources while at the same time seeing a rise in the efficiency of their business operations.

Intuitive solution design: Logpoint is designed so that anyone can utilize all of its features, even if they are not an expert in network security. Logpoint’s UI is simple enough that users can utilize it without undergoing extensive training.

Highly flexible: Logpoint is designed so that users can scale it linearly to accommodate projects that are large and complex. This allows users to expand the scope of their projects according to their needs without worrying that their infrastructure won’t be able to handle the increase in size. The solution’s security features can be deployed both on the cloud and in a physical environment.

Simple role-based access security: Logpoint allows administrators to employ Microsoft’s active directory (AD) and a Lightweight Directory Access Protocol to manage user access. These can help administrators protect their systems from being abused or otherwise harmed by bad actors.

Reviews from Real Users

Logpoint is a security and management solution that stands out among its competitors for a number of reasons. Two major ones are its data gathering and artificial intelligence (AI) capabilities. Logpoint enables users to not only gather the data, but also to maximize both the amount of data that can be gathered and its usefulness. It removes many of the challenges that users may face in data collection. The solution allows users to set rules for collection and then it pulls information from sources that meet the rules that have been set. This data is then broken into manageable segments and ordered. Users can then analyze these ordered segments with ease. Additionally, LogPoint utilizes both machine learning and AI technology. Users gain the ability to protect themselves from and if necessary resolve emerging threats as soon as they arise. The AI sets security parameters for a user’s system. These act as a baseline that are triggered and notify the user if anything deviates from the rules that it set up.

The chief infrastructure & security officer at a financial services firm writes, “It is a very comprehensive solution for gathering data. It has got a lot of capabilities for collecting logs from different systems. Logs are notoriously difficult to collect because they come in all formats. Logpoint has a very sophisticated mechanism for you to be able to connect to or listen to a system, get the data, and parse it. Logs come in text formats that are not easily parsed because all logs are not the same, but with Logpoint, you can define a policy for collecting the data. You can create a parser very quickly to get the logs into a structured mechanism so that you can analyze them.”

A. Secca., a Cyber Security Analyst at a transportation company, writes, “It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all of the user’s activities. It devises a baseline and monitors if there is any deviation from the baseline.”

Sample Customers

Council Rock School District

AP Pension, Copenhagen Airports, KMD, Terma, DISA, Danish Crown, Durham City Council, Game, TopDanmark, Lahti Energia, Energi Midt, Synoptik, Eissmann Group Automotive, Aligro, CG50...

AlienVault OSSIM vs. Logpoint