AlienVault OSSIM vs Securonix Next-Gen SIEM comparison

AT&T and Securonix Solutions are both solutions in the Security Information and Event Management (SIEM) category. AT&T is ranked #10 with an average rating of 7.4, while Securonix Solutions is ranked #14 with an average rating of 8.4. AT&T holds a 3.7% mindshare in SIEM, compared to Securonix Solutions’s 1.1% mindshare. Additionally, 80% of AT&T users are willing to recommend the solution, compared to 96% of Securonix Solutions users who would recommend it.

AlienVault OSSIM

Read 31 AlienVault OSSIM reviews

5,499 Views
3,751 Comparison Views

80% willing to recommend

Securonix Next-Gen SIEM

Read 33 Securonix Next-Gen SIEM reviews

4,248 Views
1,339 Comparison Views

96% willing to recommend

AlienVault OSSIM

Securonix Next-Gen SIEM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Securonix Next-Gen SIEM and AlienVault OSSIM are prominent solutions in the SIEM category. Securonix Next-Gen SIEM holds an advantage in advanced analytics and scalability, while AlienVault OSSIM stands out for threat intelligence and open-source flexibility.

Features: Securonix Next-Gen SIEM offers advanced behavioral analytics, a scalable architecture, and machine learning for detecting insider threats and sophisticated attacks. AlienVault OSSIM provides easy integration with various data sources, comprehensive threat intelligence, and a holistic view of security landscapes.

Room for Improvement: Securonix could enhance reporting capabilities, reduce setup complexity, and improve customization. AlienVault OSSIM users request better scalability, more transparency in open-source components, and enhanced feature sets.

Ease of Deployment and Customer Service: Securonix users appreciate effective customer support but find deployment complex and time-consuming. AlienVault OSSIM users benefit from straightforward deployment and satisfactory customer service.

Pricing and ROI: Securonix is generally seen as expensive but offers high ROI due to advanced features. AlienVault OSSIM is appreciated for its low initial setup cost but has ROI limitations due to scalability challenges.

To learn more, read our detailed AlienVault OSSIM vs. Securonix Next-Gen SIEM Report (Updated: April 2025).

Buyer's Guide

AlienVault OSSIM vs. Securonix Next-Gen SIEM

April 2025

Download the complete report

Helped 849,686 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AlienVault OSSIM

Ranking in Security Information and Event Management (SIEM)

10th

Average Rating

7.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Securonix Next-Gen SIEM

Ranking in Security Information and Event Management (SIEM)

14th

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Identity Threat Detection and Response (ITDR) (8th)

Mindshare comparison

As of May 2025, in the Security Information and Event Management (SIEM) category, the mindshare of AlienVault OSSIM is 3.7%, down from 3.8% compared to the previous year. The mindshare of Securonix Next-Gen SIEM is 1.1%, down from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

Aman Aijaz

Assistant Manager Global Security at Convergys Corporation

An easy-to-scale open-source solution used for monitoring events on devices

The area for improvement is a lot. When I started using it on our enterprise side, the issue we faced was, for example, if we were running at that time on AlienVault OSSIM v5.7.4. So, for some orders, we had to install some packages, and when we tried installing that package, some dependencies got upgraded to a new version. Now once that dependency got upgraded, the SQL, since you might be aware that OSSIM uses SQL database, now SQL and all the dependency in everything was not on the same version, and that caused the database to crash. The aforementioned area should be eased out by upgrading the patches and upgrading dependencies. This kind of thing is a disadvantage of OSSIM, and I would like them to work on this. But I have also raised service requests many times and gave it a push on the community section too. However, since it is a local source, they don't reply much over there. That is why I don't like to work on OSSIM because it is unpredictable. Once the storage goes above 50 percent, it starts behaving unpredictably. If you get stuck with a situation, then you need to drill a lockdown into that. Sometimes you get no luck. Then you have to just reimage the server with the new fresh OS of AlienVault. As for additional features, not much because if you move to the newer version, it is kind of getting more stable. But, to make my life easier, then I would say try to give more features. I know it's open source, so they also cannot provide me with more features. But still, if they can provide me with more features because right now it's becoming old. Right now, we are even moving from SIEM to Security Data Lake. So when we move to it, this will be literally outdated. No one can even expect anything out of it. The way security is moving, it will be outdated very soon. They have to also provide something new to keep this going for the future also.

Read full review

Ibrahim Albalawi

SOC Leader at a tech consulting company with 51-200 employees

Less false positives, good detection and integration capabilities, and good pricing

The incident response area should be improved. It is more difficult than other products, but overall, it is good. The platform has a lot of options and functionality. So, you need to check almost everything. For new engineers or people who don’t have much experience with this kind of platform, it is a bit difficult, but for experienced engineers, it is not that difficult. When you have been doing a lot of work for about one or two hours, and you have a lot of tabs open, it slows down or gets stuck. There is a delay of 10 to 15 seconds in opening tabs or dashboards. I don't know why this happens, but for me, it is not a big issue. I just wait, and that's all.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"You pay monthly for the solution. I think it's one of the best products. If you compare with other companies, like LogRhythm, etc., the top 8 or 10 CMs, I think Alien Vault has the best price-performance ratio."

"The most valuable features of this solution are the data correlation and vulnerability assessment."

"The initial setup was straightforward. I didn't have any problems."

"The threat policies of the solution are always very advanced and the best in the market. They are very persistent in terms of keeping up with security protocols."

"Better than other SIEM solutions because almost everything can be integrated."

"AlienVault OSSIM is an enterprise solution that sells easily. It is rated highly by organizations."

"The dashboard is the solution's most valuable aspect. It brings everything into one central point where I can actually look at it and go, "Okay, I understand what's going on.""

"The product is easy to use."

More AlienVault OSSIM pros

"The user interface is easy to learn and navigate."

"The second feature is that within the SNYPR product there is a functionality called Spotter. We use that for link analysis diagrams and to run the stats command. That's extremely useful because it replaces a tedious, manual process we used to use, using Microsoft Excel and a couple of other methods, to bring data together."

"[The solution has] incident-management or case-management functionality. If someone were to download a high number and we decided we needed to investigate it, I could open a case right in the tool. It would be able to directly reference the data that they downloaded and we could open and shut the case directly in the tool, as well as report from it."

"We can customize our use cases with the tools provided by Securonix. It is an excellent tool that can ingest data in different ways and is very flexible."

"One of the valuable features of Securonix is the auto-incident creation, which was not available two or three years ago."

"What I like most is that the threat models and risk scoring are very accurate and very helpful to the analysts on my team. They help highlight the most important things for them to look at."

"The machine-learning algorithms are the most valuable feature because they're able to identify the 'needle in the haystack.'"

"There aren't any positive aspects of the solution. It was a complete failure. There are no redeeming features."

More Securonix Next-Gen SIEM pros

Cons

"The main area where the AlienVault product was lacking around the 2018 timeframe was in its ability to scale."

"AlienVault OSSIM’s configuration and integration could be a little easier."

"AlienVault OSSIM is costly."

"We need more dashboards and we need more customization for dashboards."

"It's so hard to configure and explore something new on it."

"The documentation could be improved."

"AlienVault OSSIM should improve the deployment and make it unified like the USM."

"The initial setup was a bit complex. You've got to do a lot of reading. It's not an intuitive implementation."

More AlienVault OSSIM cons

"The dashboards in Securonix Next-Gen SIEM need more customization and informational capabilities."

"The technical support of the solution is an area with shortcomings and needs improvement."

"Sometimes, there is instability in the data in terms of the customization of the time. I have sometimes observed discrepancies in the data, which is something they should work on. They should bring more stability to time customization. If we are seeing a particular data, when we change the time zone, there should be the same data. There should not be any discrepancy."

"There is slight room for improvement in terms of the initial deployment. What I see is that Securonix is more focused on their product. They are expanding, in a big way, the number of customers. So there has to be a number of dedicated teams to jump on and speed up the deployment process."

"Securonix implements risk scores based on different policies that are triggered. We've seen some challenges with the risk scores and how they trigger. These are things that Securonix has recognized and they've been working with us to help improve things."

"It could be improved a little bit more for admin users. There should be more administrative options related to security for admin users. For example, for forensic purposes, the admin should be able to stop a specific user from erasing some information. I would be helpful in certain situations, such as during an internal fraud."

"The analytics-driven approach for finding sophisticated threats and reducing false positives is positive and good, but the platform requires a more dynamic concept. Everything is a bit static."

"We thought they were going to be a great product, however, they're actually not great at all as an MSP."

More Securonix Next-Gen SIEM cons

Pricing and Cost Advice

"AlienVault OSSIM is expensive compared to its competitors."

"OSSIM is open source, and USM is the paid license. So, if you want, you can switch to USM. There you will have to buy a license, and they have a support team that helps you out on issues you face."

"When comparing AlienVault OSSIM to Microsoft Sentinel, AlienVault OSSIM incurs additional costs due to its licensing price structure. If you are using AlienVault for security purposes at a certain level it can have a higher price point than the current pricing of Microsoft Sentinel."

"OSSIM is free."

"We are using the community version, which can be used for free."

"The tool's licensing costs are yearly."

"The licensing fees for the non-community edition are paid on an annual basis, and there are no costs in addition to this."

"The solution is open source, so it's free to use."

More AlienVault OSSIM pricing and cost advice

"We have an annual license. We pay $200,000 for the base licensing and we pay another $50,000 for the software as a service."

"Its pricing is quite similar to others and is very competitive. The other solutions have different types of licensing, but when you do the math, it is competitive."

"A good thing about Securonix is that they don't charge by volume of data or number of devices... They charge by the number of employees, which is a much more predictable number for me, versus data. Our costs are in the $100,000 range over a three-year subscription."

"We have a license from our 5.0, so that license just continued. We paid them the extra cloud-hosting costs for a year which were about $300,000."

"I had heard that it was much cheaper than Splunk and some of the other tools, and they gave us a nice package with support. They accommodated the number of users and support very well."

"Its price is fine. We found it to be cheaper than LogRhythm, Exabeam, Splunk, as well as Elastic Security. A few months ago, when we were comparing Securonix with Elastic Security, we found Securonix to be cheaper than Elasticsearch. We were pretty surprised that Elastic Security is more expensive than Securonix because Elasticsearch is just starting, and it cannot compete with Securonix at this time. So, the pricing of Securonix is pretty good for now."

"Licensing is based on events per second (EPS), costing between $50 to $60 per EPS."

"The pricing is fine compared to the market but I think that at some point the competitors will catch up on price."

More Securonix Next-Gen SIEM pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

849,686 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Comms Service Provider

10%

Financial Services Firm

University

Computer Software Company

21%

Financial Services Firm

12%

Government

Educational Organization

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about AlienVault OSSIM?

Asset discovery is good.

See all answers

What is your experience regarding pricing and costs for AlienVault OSSIM?

It depends. I would need to review their cost models, but generally, they are on a scaled basis based on throughput usage. Because it's a software as a service solution for their core product for U...

See all answers

What needs improvement with AlienVault OSSIM?

Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implement...

See all answers

Which is the best SIEM tool for a mid-sized financial services firm: Arcsight or Securonix?

In my market, a lot of financial companies had or have an ArcSight installation. Just because in former times it was pretty good. Now a lot of them are looking for a more effective solution due to ...

See all answers

What is your primary use case for Securonix Security Analytics?

I use this solution for security monitoring and user behavior analytics. Banks, governments, and the oil and gas sector utilize it.

See all answers

What do you like most about Securonix Next-Gen SIEM?

The two major features of this product we extensively use are the UEBA capability and the multi-tenant approach with the centralized data logs system. Customers are very happy with these features.

See all answers

Comparisons

Wazuh vs AlienVault OSSIM

Compared 79% of the time

USM Anywhere vs AlienVault OSSIM

Compared 6% of the time

Elastic Security vs AlienVault OSSIM

Compared 4% of the time

Splunk Enterprise Security vs AlienVault OSSIM

Compared 2% of the time

Rapid7 InsightIDR vs AlienVault OSSIM

Compared 2% of the time

More AlienVault OSSIM Competitors

Splunk Enterprise Security vs Securonix Next-Gen SIEM

Compared 13% of the time

Microsoft Sentinel vs Securonix Next-Gen SIEM

Compared 12% of the time

IBM Security QRadar vs Securonix Next-Gen SIEM

Compared 10% of the time

Sumo Logic Security vs Securonix Next-Gen SIEM

Compared 9% of the time

Exabeam vs Securonix Next-Gen SIEM

Compared 8% of the time

More Securonix Next-Gen SIEM Competitors

Product Reports

Buyer's Guide

AlienVault OSSIM

April 2025

Download AlienVault OSSIM product report

Buyer's Guide

Securonix Next-Gen SIEM

April 2025

Download Securonix Next-Gen SIEM product report

Also Known As

OSSIM

Securonix Security Analytics

Overview

AlienVault OSSIM, Open Source Security Information and Event Management (SIEM), provides you with a feature-rich open source SIEM complete with event collection, normalization and correlation. Launched by security engineers because of the lack of available open source products, AlienVault OSSIM was created specifically to address the reality many security professionals face: A SIEM, whether it is open source or commercial, is virtually useless without the basic security controls necessary for security visibility.

AT&T

Securonix Next-Gen SIEM is a security information and event management solution designed to provide advanced threat detection, response, and compliance capabilities. It leverages machine learning and big data analytics to offer a comprehensive security platform for modern enterprises.

Securonix Next-Gen SIEM utilizes advanced analytics and machine learning to detect complex threats that traditional SIEM solutions might miss. Its architecture is built on Hadoop, enabling scalability and the processing of large volumes of data in real-time. This allows organizations to gain deep insights into security incidents, prioritize threats, and automate response actions. The solution also includes behavior analytics to detect insider threats and unknown attacks, integrating seamlessly with existing IT infrastructure.

What are the critical features of Securonix Next-Gen SIEM?

Advanced Threat Detection: Uses machine learning algorithms to identify sophisticated threats and reduce false positives.
Behavior Analytics: Analyzes user and entity behavior to detect insider threats and anomalies.
Scalable Architecture: Built on Hadoop, it scales to handle large data volumes, providing real-time analytics.
Automated Response: Automates incident response to mitigate threats quickly and efficiently.
Integration Capabilities: Easily integrates with various IT and security tools for comprehensive coverage.

What is the ROI expectations?

Improved Threat Detection: Enhanced ability to detect and respond to advanced threats, reducing risk.
Operational Efficiency: Automation of repetitive tasks allows security teams to focus on more critical activities.
Cost Savings: Scalability and efficient data processing reduce the need for additional hardware and resources.
Compliance Support: Helps in meeting regulatory compliance requirements through detailed reporting and monitoring.

Securonix Next-Gen SIEM is implemented across various industries, including finance, healthcare, and retail. Its flexibility and advanced analytics capabilities make it suitable for environments with complex security needs. In finance, it helps detect fraud, while in healthcare, it ensures patient data security. In retail, it protects against data breaches and payment fraud.

In summary, Securonix Next-Gen SIEM offers advanced threat detection, scalability, and integration capabilities, making it a robust solution for modern enterprises.

Securonix Solutions

Sample Customers

Council Rock School District

Dtex Systems, Pfizer, Western Union, Harris, ITG

Buyer's Guide

AlienVault OSSIM vs. Securonix Next-Gen SIEM

April 2025

Free Report: AlienVault OSSIM vs. Securonix Next-Gen SIEM

Find out what your peers are saying about AlienVault OSSIM vs. Securonix Next-Gen SIEM and other solutions. Updated: April 2025.

DOWNLOAD NOW

849,686 professionals have used our research since 2012.

See our AlienVault OSSIM vs. Securonix Next-Gen SIEM report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.