No more typing reviews! Try our Samantha, our new voice AI agent.

Fortinet FortiSIEM vs Snare comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortinet FortiSIEM
Ranking in Security Information and Event Management (SIEM)
13th
Average Rating
7.6
Reviews Sentiment
6.2
Number of Reviews
75
Ranking in other categories
AI Observability (15th)
Snare
Ranking in Security Information and Event Management (SIEM)
54th
Average Rating
8.0
Reviews Sentiment
7.4
Number of Reviews
3
Ranking in other categories
Log Management (49th)
 

Mindshare comparison

As of August 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Fortinet FortiSIEM is 2.2%, down from 3.3% compared to the previous year. The mindshare of Snare is 0.8%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Fortinet FortiSIEM2.2%
Snare0.8%
Other97.0%
Security Information and Event Management (SIEM)
 

Featured Reviews

SY
Network Engineer at Ogma Consulting
Comprehensive monitoring boosts security, yet incident management features need expansion
Fortinet FortiSIEM should broaden its remediation part to include more features for incident management. Currently, to manage repetitive incidents or for remediation, I need to use a separate software called FortiSOAR. Additionally, the search functionality in FortiAI should be improved to provide more precise results, making it easier for me to understand what actions need to be taken.
Frank Eargle - PeerSpot reviewer
Information Security Engineer at Glasshouse Systems
A highly scalable solution that is easy to manage and super easy to set up
We use Snare for picking up Windows logs, and we used to use it for SQL as well. We had used it for Linux once or twice. We're mainly using it for Windows and Windows flat files The most valuable feature of Snare is flexibility or the ability to filter all things you don't want and don't have…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"With the help of FortiSIEM we have improved the cybersecurity posture of our clients and ours, and through the early detection of threats, it allows us to follow up on each security incident and easily communicate to asset managers about related security events, reducing remediation time."
"The most valuable feature of Fortinet FortiSIEM is the user and entity behave as analytics(UEBA). This feature mixes your data and provides useful information based on the behavior of the targeted."
"With the online-based monitoring we've set up, we've been able to watch trends of attempted attacks on our network, and we're also able to monitor our account issues internally as attackers attempt to log into our accounts."
"The most fascinating aspect of FortiSIEM is its integration with the MITRE ATT&CK framework."
"The interface is very easy to use. The connector in the core has FortiSIEM support from the vendor."
"Some of our customers who use this solution have seen improvement in their connection with load balancing on both connections."
"The most valuable features of Fortinet FortiSIEM are the SD-WAN, Global LAN, and application controls."
"The product's initial setup phase was easy."
"Snare has good agents, especially for Windows."
"The best thing about Snare is its format and consistency."
"The most valuable feature of Snare is flexibility or the ability to filter all things you don't want and don't have security value."
 

Cons

"When compared with some competitors, in terms of performance, the CPU and RAM requirements and the capability of coordination with development all need some improvement."
"The built-in APIs in Fortinet FortiSIEM are somewhat lacking and could be improved for better integration with external ITSM products."
"The log collection and configuration management are not great."
"For example, the design is bad because you have one supervisor on one machine and you handle everything off this machine supervisor."
"Does not have load-sharing or high-availability, and these are important things to implement. I can do the same things in another way, but not naturally having these features makes it complicated."
"The nodes on our network did not comply with the SIEM solution. They use a different format parking log."
"The process of installing Fortinet FortiSIEM and the customization of the alerts take too long."
"It's difficult to integrate unsupported devices with FortiSIEM compared to QRadar. It's easier to integrate and develop processes in QRadar. It's harder to develop a custom process in FortiSIEM."
"Users will initially find it difficult to identify the event types and installation in Snare."
"The solution is now developing a SIEM-like feature on Snare Central Server, but it's not complete yet."
"Snare should modernize its GUI a little bit."
 

Pricing and Cost Advice

"Pricing is acceptable for more than 90% of our customers, as they normally get discounts."
"The price of Fortinet FortiSIEM was reasonable compared to other solutions."
"Its price can be better. We are Fortinet partners, so we can get discounts, but its price can be an issue at the beginning for others. There is a licensing scheme for every case. There are three licensing schemes that we can choose from."
"Pricing is determined based on the customer's budget."
"The price of the solution is expensive. The license is scalable. If there are 10 devices it is simple to license."
"The tool is really expensive. For what the tool does for our team, the price is fair."
"This is probably more on the lower cost end of the spectrum compared to competing products. Fortinet's license model is based on events per second, which makes sense, but that's not typical. It makes it very hard to calculate what your costs are going to be as you scale the platform because some log sources, such as firewall logs, are very noisy, and there are lots and lots of events per second, but some of them are not. So, it becomes a bit of a science experiment trying to guess what your costs are going to be as you scale the solution. This is where other competing products perhaps have a more straightforward license model."
"There are additional features that cost more than the standard licensing fees."
"On a scale from one to ten, where one is cheap, and ten is expensive, I rate Snare's pricing a four out of ten."
"Snare is a cheap solution because a lot of customers are using it."
"Snare has reasonable pricing."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
909,153 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
10%
Financial Services Firm
9%
Construction Company
9%
Manufacturing Company
8%
Financial Services Firm
16%
Outsourcing Company
9%
Construction Company
9%
Healthcare Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business34
Midsize Enterprise22
Large Enterprise24
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Fortinet FortiSIEM?
My experience with pricing, setup cost, and licensing for Fortinet FortiSIEM is wonderful, as it offers an excellent license compared to other vendors.
What needs improvement with Fortinet FortiSIEM?
Fortinet FortiSIEM is great overall. Performance could be enhanced, but I do not wish to elaborate on needed improvements.
What is your primary use case for Fortinet FortiSIEM?
My main use case for Fortinet FortiSIEM is building a SOC and serving as an event management platform for correlating events in my work. I use Fortinet FortiSIEM for event correlation by building a...
Ask a question
Earn 20 points
 

Also Known As

FortiSIEM, AccelOps
No data available
 

Overview

 

Sample Customers

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.
Military, Defence and Security Agencies, Banking Finance and Insurance companies, Retail, Health and Utilities.
Find out what your peers are saying about Fortinet FortiSIEM vs. Snare and other solutions. Updated: August 2026.
909,153 professionals have used our research since 2012.