Try our new research platform with insights from 80,000+ expert users

Exabeam vs Security Onion comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Exabeam
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
19
Ranking in other categories
Security Information and Event Management (SIEM) (18th), User Entity Behavior Analytics (UEBA) (2nd), Security Incident Response (5th), Threat Intelligence Platforms (11th), Security Orchestration Automation and Response (SOAR) (12th), AI-Powered Cybersecurity Platforms (9th)
Security Onion
Average Rating
7.6
Reviews Sentiment
5.5
Number of Reviews
3
Ranking in other categories
Log Management (21st)
 

Mindshare comparison

Exabeam and Security Onion aren’t in the same category and serve different purposes. Exabeam is designed for Security Information and Event Management (SIEM) and holds a mindshare of 1.4%, up 1.1% compared to last year.
Security Onion, on the other hand, focuses on Log Management, holds 5.0% mindshare, up 4.4% since last year.
Security Information and Event Management (SIEM)
Log Management
 

Featured Reviews

Stephen-Armstrong - PeerSpot reviewer
The SIEM provides a user-friendly UI experience
When events come into the system, the dashboard categorizes them by the highest risk score, not when they appear on the system. When you've got multiple ongoing incidents you can only see the highest risk score at the top of the list rather than the most recent detection. Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection.
Jörg Kippe - PeerSpot reviewer
A mature and affordable solution that is easy to install and easy to update
The product takes time to learn, it's not that easy. In the beginning we had a lot of questions. If you want to use such a tool in an real (industrial) environment, you have to ask how to get the network data. Can we do a full packet capture? Can we provide agents to our end systems? There are no simple solutions to these questions. It's a general problem when running such systems in an industrial environment.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Exabeam includes machine learning features and out-of-the-box rules that we rely on."
"The most valuable feature of Exabeam is the timeline creation based on log sources, which helps in security investigations."
"I have customers that like the EUBA functionality of it. The solution has the ability to build a session, basically. It pulls a lot of information together, for example, everything a user does in a specific timeframe. It's quite helpful."
"The advanced analytics has a really great overview of user behavior."
"Exabeam has improved our organization by speeding up the investigation process."
"It is user-friendly and quite simple to use."
"The way it can connect with AWS is very useful, and the integrations are pretty good."
"The solution's initial setup process is easy."
"We use Security Onion for internal vulnerability assessment."
"Security Onion is the most mature solution in the market."
"The most valuable feature of Security Onion for security monitoring is its ability to find infected ports."
 

Cons

"One area that needs improvement is interacting with Exabeam's API. There was a headache regarding the API; the documentation wasn't clear, and the syntax wasn't very precise."
"Exabeam should be a bit faster, especially in loading and vulnerability scanning."
"We had a large volume right from the beginning and they weren't quite prepared for that. That's something that they should think about when it comes to customers that have a large volume to start off with."
"The initial setup of Exabeam Fusion SIEM is complex because it needs to integrate with the SIEM solution, but after this is complete it is straightforward."
"Exabeam needs to improve its adaptive nature towards rules and its capability to understand the entire client environment faster."
"The organzation is rigid and not flexible in the way they operate"
"Adding to the number of certifications that they have, for example, ISO 27001, would be helpful."
"The solution's reporting and dashboarding could be improved."
"Security Onion's user interface could be improved."
"The product is not easy to learn."
"The initial setup of the solution is a little bit difficult."
 

Pricing and Cost Advice

"Exabeam is not a cheap solution."
"The solution is expensive."
"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."
"There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced."
"Exabeam Fusion SIEM's pricing is reasonable."
"They have a great model for pricing that can be based either on user count or gigabits per day."
"Security Onion is a free solution."
"Security Onion is an open-source solution."
"It is an open-source solution."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
863,564 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
13%
Manufacturing Company
9%
Government
7%
Computer Software Company
11%
University
11%
Comms Service Provider
10%
Government
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What do you like most about Exabeam Fusion SIEM?
The solution's initial setup process is easy.
What is your experience regarding pricing and costs for Exabeam Fusion SIEM?
I do not have much information about the pricing. However, I am aware that Exabeam is cheaper than Palo Alto based on discussions in meetings.
What do you like most about Security Onion?
The most valuable feature of Security Onion for security monitoring is its ability to find infected ports.
What is your experience regarding pricing and costs for Security Onion?
Security Onion is an open-source solution. On a scale from one to ten, where ten is expensive and one is cheap, I rate the solution's pricing a six out of ten.
What needs improvement with Security Onion?
The initial setup of the solution is a little bit difficult.
 

Overview

 

Sample Customers

Hulu, ADP, Safeway, BBCN Bank
Information Not Available
Find out what your peers are saying about Exabeam vs. Security Onion and other solutions. Updated: June 2024.
863,564 professionals have used our research since 2012.