Try our new research platform with insights from 80,000+ expert users

Exabeam vs Security Onion comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Exabeam
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
19
Ranking in other categories
Security Information and Event Management (SIEM) (18th), User Entity Behavior Analytics (UEBA) (2nd), Security Incident Response (5th), Threat Intelligence Platforms (11th), Security Orchestration Automation and Response (SOAR) (12th), AI-Powered Cybersecurity Platforms (9th)
Security Onion
Average Rating
7.6
Reviews Sentiment
5.5
Number of Reviews
3
Ranking in other categories
Log Management (21st)
 

Mindshare comparison

Exabeam and Security Onion aren’t in the same category and serve different purposes. Exabeam is designed for Security Information and Event Management (SIEM) and holds a mindshare of 1.4%, up 1.1% compared to last year.
Security Onion, on the other hand, focuses on Log Management, holds 5.0% mindshare, up 4.4% since last year.
Security Information and Event Management (SIEM)
Log Management
 

Featured Reviews

Stephen-Armstrong - PeerSpot reviewer
The SIEM provides a user-friendly UI experience
When events come into the system, the dashboard categorizes them by the highest risk score, not when they appear on the system. When you've got multiple ongoing incidents you can only see the highest risk score at the top of the list rather than the most recent detection. Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection.
Jörg Kippe - PeerSpot reviewer
A mature and affordable solution that is easy to install and easy to update
The product takes time to learn, it's not that easy. In the beginning we had a lot of questions. If you want to use such a tool in an real (industrial) environment, you have to ask how to get the network data. Can we do a full packet capture? Can we provide agents to our end systems? There are no simple solutions to these questions. It's a general problem when running such systems in an industrial environment.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is user-friendly and quite simple to use."
"The most valuable feature of Exabeam is the timeline creation based on log sources, which helps in security investigations."
"The advanced analytics has a really great overview of user behavior."
"Exabeam Fusion SIEM has a good performance and more advantages than traditional solutions."
"The user interface and the timelines they use are the most valuable features. The price model is very simple so that one can understand it easily and there are no surprises within it."
"The UI was very clean."
"Exabeam includes machine learning features and out-of-the-box rules that we rely on."
"I have customers that like the EUBA functionality of it. The solution has the ability to build a session, basically. It pulls a lot of information together, for example, everything a user does in a specific timeframe. It's quite helpful."
"The most valuable feature of Security Onion for security monitoring is its ability to find infected ports."
"Security Onion is the most mature solution in the market."
"We use Security Onion for internal vulnerability assessment."
 

Cons

"The solution's reporting and dashboarding could be improved."
"They need to focus on more of the MITRE ATT&CK Framework and coverage. They claim they cover about 70 to 80%. I'm not sure if it's really quite that much, however."
"Updating the new release of Exabeam Fusion SIEM takes time and slows our performance."
"One area that needs improvement is interacting with Exabeam's API. There was a headache regarding the API; the documentation wasn't clear, and the syntax wasn't very precise."
"They should provide detailed information about detecting phishing emails."
"Exabeam lacks customizable dashboards, which might be a limitation if visualization is a key requirement."
"I believe if it were more flexible it would be a better product."
"Exabeam needs to improve its adaptive nature towards rules and its capability to understand the entire client environment faster."
"The initial setup of the solution is a little bit difficult."
"Security Onion's user interface could be improved."
"The product is not easy to learn."
 

Pricing and Cost Advice

"Exabeam is not a cheap solution."
"The solution is expensive."
"Exabeam Fusion SIEM's pricing is reasonable."
"They have a great model for pricing that can be based either on user count or gigabits per day."
"There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced."
"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."
"It is an open-source solution."
"Security Onion is a free solution."
"Security Onion is an open-source solution."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
863,429 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
13%
Manufacturing Company
8%
Government
7%
Computer Software Company
11%
University
11%
Comms Service Provider
11%
Government
11%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What do you like most about Exabeam Fusion SIEM?
The solution's initial setup process is easy.
What is your experience regarding pricing and costs for Exabeam Fusion SIEM?
I do not have much information about the pricing. However, I am aware that Exabeam is cheaper than Palo Alto based on discussions in meetings.
What do you like most about Security Onion?
The most valuable feature of Security Onion for security monitoring is its ability to find infected ports.
What is your experience regarding pricing and costs for Security Onion?
Security Onion is an open-source solution. On a scale from one to ten, where ten is expensive and one is cheap, I rate the solution's pricing a six out of ten.
What needs improvement with Security Onion?
The initial setup of the solution is a little bit difficult.
 

Comparisons

 

Overview

 

Sample Customers

Hulu, ADP, Safeway, BBCN Bank
Information Not Available
Find out what your peers are saying about Exabeam vs. Security Onion and other solutions. Updated: June 2024.
863,429 professionals have used our research since 2012.