AlienVault OSSIM vs Netwrix Auditor comparison

AT&T and Netwrix are both solutions in the Security Information and Event Management (SIEM) category. AT&T is ranked #11 with an average rating of 7.3, while Netwrix is ranked #24 with an average rating of 10.0. AT&T holds a 3.2% mindshare in SIEM, compared to Netwrix’s 0.5% mindshare. Additionally, 80% of AT&T users are willing to recommend the solution, compared to 100% of Netwrix users who would recommend it.

AlienVault OSSIM

Read 31 AlienVault OSSIM reviews

5,143 Views
5,040 Comparison Views

80% willing to recommend

Netwrix Auditor

Read 7 Netwrix Auditor reviews

1,891 Views
359 Comparison Views

100% willing to recommend

AlienVault OSSIM

Netwrix Auditor

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Netwrix Auditor and AlienVault OSSIM compete in security auditing and information management. Although both products offer strong features, AlienVault OSSIM tends to stand out due to its extended features and perceived overall value.

Features: Netwrix Auditor offers detailed audit capabilities, straightforward reporting, and ease in tracking changes across systems. AlienVault OSSIM integrates multiple security tools into one solution, provides extensive threat detection features, and offers a cohesive security platform.

Room for Improvement: Netwrix Auditor needs enhancements in real-time alerts, better integration with other software, and more advanced reporting features. AlienVault OSSIM could improve its dashboard customization, simplify configuration processes, and shorten setup times.

Ease of Deployment and Customer Service: Netwrix Auditor experiences smooth deployment and has responsive customer support. AlienVault OSSIM, while offering extensive support, can be more complex to deploy, resulting in longer setup times. However, its customer service is highly regarded.

Pricing and ROI: Netwrix Auditor is noted for competitive pricing and substantial ROI. AlienVault OSSIM is more expensive but justifies the cost through extensive features and long-term value.

To learn more, read our detailed AlienVault OSSIM vs. Netwrix Auditor Report (Updated: July 2025).

Buyer's Guide

AlienVault OSSIM vs. Netwrix Auditor

July 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AlienVault OSSIM

Ranking in Security Information and Event Management (SIEM)

11th

Average Rating

7.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Netwrix Auditor

Ranking in Security Information and Event Management (SIEM)

24th

Average Rating

9.2

Reviews Sentiment

7.7

Number of Reviews

Ranking in other categories

GRC (9th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (14th), Active Directory Management (2nd)

Mindshare comparison

As of August 2025, in the Security Information and Event Management (SIEM) category, the mindshare of AlienVault OSSIM is 3.2%, down from 4.3% compared to the previous year. The mindshare of Netwrix Auditor is 0.5%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

HarshBhardiya

SOC Engineer at Just Dial Limited

An open-source solution that provide good detection and more visibility

The solution is not scalable. It impacts so hard. In the initial stages, AlienVault OSSIM can be suitable for small environments. There may be limitations if the customer expresses a desire to expand and add more devices. In such cases, we would need to either explore additional solutions or work within the constraints of the existing setup. We have set up alerts and configured everything in AlienVault OSSIM. It actively monitors for any security incidents. It provides us with regular updates and notifications about any ongoing activities. Only one person is using the solution. It is the perfect solution for small businesses. I rate the solution’s scalability a three out of ten.

Read full review

Mohamed Tantawy

IT Technical Support Deputy General Manager at a financial services firm with 10,001+ employees

Can track every admin action in large environments and includes AI modules to detect and prevent unauthorized changes

The initial setup of Netwrix Auditor was straightforward. Some functions require agents while others are agentless, simplifying implementation. It consumed minimal server and client resources, and the wizard-based console made it simple to deploy with the help of architectural teams. All required ports were in place, and they covered all critical services and databases effectively. I would rate the easiness of the initial setup as a nine out of ten. The deployment of Netwrix Auditor took around three weeks, mainly due to the preparation of the environment and servers. The deployment process involved actions such as preparing virtual servers and building databases. Once deployed, it took only about a week to complete. Third-party consultants assisted us with deployment. Only one or two engineers were needed for deployment and maintenance, which could be handled remotely with minimal complexity.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is the logging capability."

"AlienVault OSSIM's GUI is very user-friendly."

"There are a lot of people you will find using OSSIM since they are also offering OTX as a service"

"The open vault component and the checking of vulnerabilities are the most valuable features. The page management helps with this. If you know how your device is vulnerable at least you can do something about it."

"It has helped us remediate threats in the past by providing significant events that assisted in identifying suspicious activities, such as logins from multiple countries."

"The threat alerts it gives me from time to time on harmful code within the network, or if they are generating any network traffic, are very useful."

"With AlienVault you get everything in one box."

"Its user-friendliness is the most valuable. It is very easy to use and explore. The dashboard is very well packaged and integrated. You don't have to spend a lot of time in configuring it and checking out the RPM etc. It is also free and very powerful."

More AlienVault OSSIM pros

"I am impressed with the tool's reporting feature and notifications."

"The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities."

"What I find the most valuable about Netwrix Auditor is the way it shows risk. The reports are very clear."

"I have found user behavior analysis and the ability to run risk assessments important features. Additionally, the interface and online documentation are very good."

"It maintains audit logs for the duration of time that you wish, as long as you have the storage capacity to do so."

"The most valuable feature is the real-time monitoring."

"Netwrix provides features that no other solution on the market does."

Cons

"The incidence reporting could be better."

"The documentation could be improved."

"GUI could be improved."

"AlienVault OSSIM gives unwanted notifications."

"I would like the solution to be able to integrate with my firewall, my IDS and my Honeypot solutions so that it can provide real-time reporting as things occur and then have alert sent to me on my phone when suspicious activity is happening."

"The user interface needs to be friendlier across the board."

"I don't like to work on OSSIM because it is unpredictable."

"It's under heavy traffic. If you have heavy traffic, the system is slow."

More AlienVault OSSIM cons

"If you buy direct, there is a minimum of 150 licenses that must be procured. The price point and barrier of entry is a little bit higher than it would be if you purchased the solution from an authorized reseller partner, rather than buying it and managing yourself."

"There is room for improvements when it comes to the licensing."

"An improvement would be if there was an another way to manage the logs besides email because it's not so practical."

"There is room for improvement with the introduction of AI functionality."

"When there are issues I would like remediation to be in one place."

"The solution lacks self-service on password reset. It also needs to improve its scalability."

"The Linux compatibility of this solution could be improved."

"I expect usability features to become more refined over time. I'm interested to see how it evolves and continues to improve."

Pricing and Cost Advice

"The price of AlienVault OSSIM is too high sometimes for us to present to our customers. The price should be lower. We are on a three-year license to use the solution. We had to pay extra for the support."

"AlienVault pricing is the best. Whatever cost you are paying, you are getting a return on every penny... It's not like your IBM, your QRadar, or Splunk, where the cost is too high."

"I used the paid version of the tool and found it to be expensive. It has been a while since I changed to Securonix. I will have to check whether AlienVault charges per device, user, or log."

"We are using the community version, which can be used for free."

"AlienVault OSSIM is free."

"The tool's licensing costs are yearly."

"The solution is open source, so it's free to use."

"OSSIM is open source, and USM is the paid license. So, if you want, you can switch to USM. There you will have to buy a license, and they have a support team that helps you out on issues you face."

More AlienVault OSSIM pricing and cost advice

"This solution is reasonably priced. I would rate it a nine out of ten."

"There is a license for this solution and we are on an annual license. The price is reasonable."

"The tool's price is fair."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

11%

University

Educational Organization

Financial Services Firm

12%

Manufacturing Company

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about AlienVault OSSIM?

Asset discovery is good.

See all answers

What is your experience regarding pricing and costs for AlienVault OSSIM?

It depends. I would need to review their cost models, but generally, they are on a scaled basis based on throughput usage. Because it's a software as a service solution for their core product for U...

See all answers

What needs improvement with AlienVault OSSIM?

Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implement...

See all answers

What do you like most about Netwrix Auditor?

The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities.

See all answers

What is your experience regarding pricing and costs for Netwrix Auditor?

The pricing of Netwrix Auditor varies based on the number of users and devices in our environment, but it is generally very cost-effective compared to other solutions. We don't pay for licenses sep...

See all answers

What needs improvement with Netwrix Auditor?

The solution currently meets my needs, but there is room for improvement with the introduction of AI functionality as suggested by the vendor. Additionally, expanding capabilities like database act...

See all answers

Comparisons

Wazuh vs AlienVault OSSIM

Compared 71% of the time

USM Anywhere vs AlienVault OSSIM

Compared 6% of the time

Venusense USM vs AlienVault OSSIM

Compared 4% of the time

Elastic Security vs AlienVault OSSIM

Compared 4% of the time

Splunk Enterprise Security vs AlienVault OSSIM

Compared 4% of the time

More AlienVault OSSIM Competitors

Wazuh vs Netwrix Auditor

Compared 13% of the time

Change Auditor for Active Directory vs Netwrix Auditor

Compared 13% of the time

ManageEngine ADAudit Plus vs Netwrix Auditor

Compared 13% of the time

Lepide vs Netwrix Auditor

Compared 10% of the time

SolarWinds Access Rights Manager vs Netwrix Auditor

Compared 8% of the time

More Netwrix Auditor Competitors

Product Reports

Buyer's Guide

AlienVault OSSIM

August 2025

Download AlienVault OSSIM product report

Buyer's Guide

Netwrix Auditor

August 2025

Download Netwrix Auditor product report

Also Known As

OSSIM

No data available

Overview

AlienVault OSSIM, Open Source Security Information and Event Management (SIEM), provides you with a feature-rich open source SIEM complete with event collection, normalization and correlation. Launched by security engineers because of the lack of available open source products, AlienVault OSSIM was created specifically to address the reality many security professionals face: A SIEM, whether it is open source or commercial, is virtually useless without the basic security controls necessary for security visibility.

AT&T

Netwrix Auditor is a security-focused solution that monitors IT environments by tracking changes, ensuring compliance, and enhancing visibility into user activities. It offers detailed auditing, real-time alerts, and robust reporting tools. Its intuitive interface and comprehensive features boost efficiency, productivity, and organizational growth.

Netwrix

Sample Customers

Council Rock School District

AT&T, SanDisk, Siemens, Verizon, Electrolux, Allianz, Societe Generale

Buyer's Guide

AlienVault OSSIM vs. Netwrix Auditor

July 2025

Free Report: AlienVault OSSIM vs. Netwrix Auditor

Find out what your peers are saying about AlienVault OSSIM vs. Netwrix Auditor and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,384 professionals have used our research since 2012.

See our AlienVault OSSIM vs. Netwrix Auditor report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.