Elastic Security vs Fortinet FortiSIEM comparison

Elastic and Fortinet are both solutions in the Security Information and Event Management (SIEM) category. Elastic is ranked #5 with an average rating of 7.6, while Fortinet is ranked #7 with an average rating of 8.1. Elastic holds a 5.3% mindshare in SIEM, compared to Fortinet’s 3.3% mindshare. Additionally, 86% of Elastic users are willing to recommend the solution, compared to 82% of Fortinet users who would recommend it.

Elastic Security

Read 65 Elastic Security reviews

12,063 Views
8,323 Comparison Views

86% willing to recommend

Fortinet FortiSIEM

Read 74 Fortinet FortiSIEM reviews

5,920 Views
4,203 Comparison Views

82% willing to recommend

Elastic Security

Fortinet FortiSIEM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Fortinet FortiSIEM and Elastic Security compete in cybersecurity and information event management. Elastic Security has the upper hand due to its advanced feature set.

Features: Users value Fortinet FortiSIEM's integrated security approach, ease in managing compliance requirements, and comprehensive security coverage. Elastic Security is praised for its powerful search functions, flexibility in data ingestion, and advanced analytics capabilities.

Room for Improvement: Users mention Fortinet FortiSIEM needs enhancements in scaling and integration with third-party tools, and better scalability. Elastic Security could improve in resource consumption, documentation quality, and addressing performance impact.

Ease of Deployment and Customer Service: Fortinet FortiSIEM users highlight straightforward deployment and responsive customer support. Elastic Security users find the deployment process to be more complex but appreciate the detailed community support.

Pricing and ROI: Fortinet FortiSIEM is noted for reasonable pricing and visible ROI in enhanced security posture. Elastic Security users find the tool cost-effective due to its open-source nature, although some premium features might increase costs.

To learn more, read our detailed Elastic Security vs. Fortinet FortiSIEM Report (Updated: July 2025).

Buyer's Guide

Elastic Security vs. Fortinet FortiSIEM

July 2025

Download the complete report

Helped 864,155 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Elastic Security

Ranking in Security Information and Event Management (SIEM)

5th

Average Rating

7.8

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Log Management (11th), Endpoint Detection and Response (EDR) (17th), Security Orchestration Automation and Response (SOAR) (8th), Extended Detection and Response (XDR) (10th)

Fortinet FortiSIEM

Ranking in Security Information and Event Management (SIEM)

7th

Average Rating

7.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Elastic Security is 5.3%, down from 8.6% compared to the previous year. The mindshare of Fortinet FortiSIEM is 3.3%, up from 3.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

SyedAli17

Assistant Director at PTA

Centralized monitoring improves security posture through rapid data processing

The processing part of Elastic Security ( /products/elastic-security-reviews ) is very interesting for us since we handle almost 7,000 to 8,000 alerts per minute. We require rapid processing speed for alerts and event data, and Elastic Security is very efficient at handling this level of data. Additionally, Elastic Security helps improve the security posture of Pakistan through centralized visibility and real-time processing.

Read full review

Oliver Jackson

Network Engineer at Laminar Communications Pty Ltd

Systems monitoring enhanced by firewall and intrusion detection features

My primary use case for Fortinet FortiSIEM is systems monitoring and alerting. I use it for standard functions like log monitoring, incident detection, and notification. My customers are mostly medium-sized enterprises ranging from engineering companies, mining companies, independent schools, and…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution's most valuable features are anomaly detection and connectivity reporting."

"Elastic Security is applied within my cyber defense strategy by utilizing many modules such as EDR, GenAI, SOAR module and combines with the SIEM module."

"The performance is good and it is faster than IBM QRadar."

"The most valuable feature is the scalability. We are in Indonesia, more engineers understand Elastic Security here. So it is easier to scale and also develop. In features, the discovery to query all the logs is very important to us. It is very easy, especially with the query function and the feature to generate alerts and create tools. Sometimes we use the alert security dashboard to monitor our clients."

"Its flexibility is most valuable. We can have a number of scenarios, and we can get logs from anything. If we know how to use Logstash, we can tweak it in many ways. This makes the logging search on Elastic very easy."

"It's not very complicated to install Elastic."

"What customers found most valuable in Elastic Security feature-wise is the search capability, in particular, the way of writing the search query and the speed of searching for results."

"It is an extremely stable solution. Stability-wise, I rate the solution a ten out of ten."

More Elastic Security pros

"Fortinet FortiSIEM needs to provide better API integrations to users."

"To add workers and even collectors is pretty easy."

"Analytics is the most valuable feature. The business service summaries in the dashboards and the correlations for the SIEM are also valuable features."

"The primary valuable feature is that it has replaced a whole lot of other products with one platform."

"Fortinet FortiSIEM is highly scalable. I would rate its scalability nine out of ten."

"The event correlation is pretty robust. The GUI is pretty good."

"Fortinet FortiSIEM provides good detection against advanced threats."

"We have many application systems, and I can set up Fortinet FortiSIEM for users to monitor their systems."

More Fortinet FortiSIEM pros

Cons

"With Elastic, you have to build the use cases for the specific requirement. Other products have a simple integration and more use cases to integrate out-of-the-box solutions for SIEM."

"The solution needs to be more reactive to investigations. We need to be able to detect and prevent any attacks before it can damage our infrastructure. Currently, this solution doesn't offer that."

"Their visuals and graphs need to be better."

"The interface could be more user friendly because it is sometimes hard to deal with."

"We'd like to see some more artificial intelligence capabilities."

"The tool needs to integrate with legacy servers. Big companies can have legacy servers that may not always be updated."

"We'd like better premium support."

"There is an area of improvement in the Logs list. The load list may need to be paginated as there are limits."

More Elastic Security cons

"The nodes on our network did not comply with the SIEM solution. They use a different format parking log."

"The biggest thing that could be better is a quicker response to support cases."

"Their technical support is horrible. By horrible, I mean a train wreck of a disaster that has fallen off a bridge and caught fire."

"Network detection and response is a separate product."

"We need to see incident reports about the event log, without events from the administrator or through human interaction."

"The built-in APIs in Fortinet FortiSIEM are somewhat lacking and could be improved for better integration with external ITSM products."

"Sometimes, if there are changes made by a user on a database server, it can be difficult to get that information on the fly. I would like to see a situation where once I specify a user with the database server I need, and with the changes they have performed on that, I don't need to continue my search pattern to drill down just to get the information."

More Fortinet FortiSIEM cons

Pricing and Cost Advice

"When compared to other products, the price is average or on the low side."

"Elastic Security is free to use."

"We are using the free, open-source version of this solution."

"Compared to other tools, Elastic Security is a cheaper solution."

"The product offers an amazing pricing structure. Price-wise, the product is very competitive."

"Its price is fine. Its licensing works on a yearly basis. We have to renew the license every year. I also have a good experience with Darktrace. When we buy Darktrace, we get training free of cost, which is not there in Elastic. We have to pay extra for training. There is certainly room for improvement."

"There is no charge for using the open-source version."

"I find it better than Splunk in terms of cost-effectiveness. For cost-effectiveness, I would rate it a nine out of 10."

More Elastic Security pricing and cost advice

"We pay for a license for FortiSIEM. We pay for the license and renewal."

"Pricing is acceptable for more than 90% of our customers, as they normally get discounts."

"We bought the perpetual license, so we own the product, but there is a three-year support renewal fee for that."

"The price of Fortinet FortiSIEM is a lot less when compared to other solutions."

"They have a yearly subscription."

"The price of Fortinet FortiSIEM was reasonable compared to other solutions."

"Pricing is determined based on the customer's budget."

"If one is cheap and ten is expensive. I rate the tool's price as an eight out of ten. Compared with Splunk or Oracle, Fortinet is cheap."

More Fortinet FortiSIEM pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

864,155 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

16%

Government

10%

Comms Service Provider

Financial Services Firm

Computer Software Company

14%

Financial Services Firm

Government

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?

With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...

See all answers

What do you like most about Elastic Security?

Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...

See all answers

What is your experience regarding pricing and costs for Elastic Security?

I am satisfied with the pricing, setup cost, and licensing cost. It is a pure 10.

See all answers

What do you like most about Fortinet FortiSIEM?

Fortinet FortiSIEM needs to provide better API integrations to users.

See all answers

What is your experience regarding pricing and costs for Fortinet FortiSIEM?

The pricing is reasonable, which is why it is preferred by government customers. Windows agent licenses cost around 3,000 Rupees per device per year.

See all answers

What needs improvement with Fortinet FortiSIEM?

Fortinet FortiSIEM should broaden its remediation part to include more features for incident management. Currently, to manage repetitive incidents or for remediation, I need to use a separate softw...

See all answers

Comparisons

Wazuh vs Elastic Security

Compared 17% of the time

IBM Security QRadar vs Elastic Security

Compared 7% of the time

Splunk Enterprise Security vs Elastic Security

Compared 7% of the time

CrowdStrike Falcon vs Elastic Security

Compared 6% of the time

Microsoft Defender for Endpoint vs Elastic Security

Compared 6% of the time

More Elastic Security Competitors

Wazuh vs Fortinet FortiSIEM

Compared 12% of the time

IBM Security QRadar vs Fortinet FortiSIEM

Compared 11% of the time

Splunk Enterprise Security vs Fortinet FortiSIEM

Compared 10% of the time

LogRhythm SIEM vs Fortinet FortiSIEM

Compared 6% of the time

Stellar Cyber Open XDR vs Fortinet FortiSIEM

Compared 2% of the time

More Fortinet FortiSIEM Competitors

Product Reports

Buyer's Guide

Elastic Security

July 2025

Download Elastic Security product report

Buyer's Guide

Fortinet FortiSIEM

July 2025

Download Fortinet FortiSIEM product report

Also Known As

Elastic SIEM, ELK Logstash

FortiSIEM, AccelOps

Overview

Elastic Security is a robust, open-source security solution designed to offer integrated threat prevention, detection, and response capabilities across an organization's entire digital estate. Part of the Elastic Stack (which includes Elasticsearch, Logstash, and Kibana), Elastic Security leverages the power of search, analytics, and data aggregation to provide real-time insight into threats and vulnerabilities. It is a comprehensive platform that supports a wide range of security needs, from endpoint protection to cloud and network security, making it a versatile choice for organizations looking to enhance their cybersecurity posture.

Elastic Security combines the features of a security information and event management (SIEM) system with endpoint protection, allowing organizations to detect, investigate, and respond to threats in real time. This unified approach helps reduce complexity and improve the efficiency of security operations.

Additional offerings and benefits:

The platform utilizes advanced analytics, machine learning algorithms, and anomaly detection to identify threats and suspicious activities.
It offers extensive integration options with other tools and platforms, facilitating a more cohesive and comprehensive security ecosystem.
With Kibana, users gain access to powerful visualization tools and dashboards that provide real-time insight into security data.

Finally, Elastic Security benefits from a global community of users who contribute to its threat intelligence, helping to enhance its detection capabilities. This collaborative approach ensures that the solution remains on the cutting edge of cybersecurity, with up-to-date information on the latest threats and vulnerabilities.

Elastic

FortiSIEM (formerly AccelOps 4) provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.

Companies around the world use FortiSIEM for the following use cases:

Threat management and intelligence that provide situational awareness and anomaly detection
Alleviating compliance mandate concerns for PCI, HIPAA and SOX
Managing “alert overload”
Handling the “too many tools” reporting issue
Addressing the MSPs/MSSPs pain of meeting service level agreements

Fortinet

Sample Customers

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.

Buyer's Guide

Elastic Security vs. Fortinet FortiSIEM

July 2025

Free Report: Elastic Security vs. Fortinet FortiSIEM

Find out what your peers are saying about Elastic Security vs. Fortinet FortiSIEM and other solutions. Updated: July 2025.

DOWNLOAD NOW

864,155 professionals have used our research since 2012.

See our Elastic Security vs. Fortinet FortiSIEM report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.