Fortinet FortiSIEM vs Wazuh comparison

Read 39 Wazuh reviews

28,493 Views
15,700 Comparison Views

75% willing to recommend

Fortinet FortiSIEM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jul 20, 2023

We performed a comparison between Fortinet FortiSIEM and Wazuh based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.

Features: Fortinet FortiSIEM is praised for its advanced agents and effective correlation capabilities. Reviews say FortiSIEM excels at anomaly reporting and threat hunting. Wazuh stands out for its effortless integration, excellent log monitoring capabilities, and ELK-based investigation. Fortinet FortiSIEM could benefit from better integration guides, more flexible reporting, and reduced resource consumption. Users also suggest adding more AI capabilities and improving database monitoring. Wazuh needs improvements in event source coverage, threat intelligence integration, and real-time monitoring of Unix systems.
Service and Support: Some FortiSIEM customers consider Fortinet support to be satisfactory and efficient, while others were unhappy and thought the engineers could be more knowledgeable. Wazuh's customer service is generally deemed satisfactory, and many customers noted that they could easily find answers from community forums.
Ease of Deployment: Some FortiSIEM users found it effortless to install within a day or two. Nonetheless, others encountered difficulties regarding CPU and memory requirements, as well as a lengthier deployment time. Some users said that Wazuh’s setup is easy and fast, while others perceived it as complicated and said it required a significant amount of time.
Pricing: FortiSIEM is generally regarded as reasonably priced and competitive. However, FortiSIEM may still be deemed costly in developing markets. Wazuh is a cost-effective option as it is open-source and completely free to acquire.
ROI: Fortinet FortiSIEM has consistently delivered a positive return on investment for businesses. Wazuh's MSP program and partnerships offer opportunities to generate revenue from the platform.

Conclusion: Based on the comparison of Fortinet FortiSIEM and Wazuh, it is evident that Fortinet FortiSIEM is the preferred choice. This is due to its user-friendly interface, ease of use, and advanced features such as anomaly-reporting alarms and the integration of SOC and NOC into a single solution. Fortinet FortiSIEM also offers better integration and configuration guides, more flexibility in report generation, and improved technical support. Furthermore, its pricing is reasonable and competitive, with options for both perpetual and subscription licenses, providing flexibility for partners.

To learn more, read our detailed Fortinet FortiSIEM vs. Wazuh Report (Updated: July 2024).

Fortinet FortiSIEM vs. Wazuh

July 2024

Download the complete report

Helped 793,295 peers since 2012

Categories and Ranking

Fortinet FortiSIEM

Ranking in Security Information and Event Management (SIEM)

10th

Average Rating

7.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Wazuh

Ranking in Security Information and Event Management (SIEM)

3rd

Average Rating

7.4

Number of Reviews

Ranking in other categories

Log Management (2nd), Extended Detection and Response (XDR) (3rd)

Mindshare comparison

As of July 2024, in the Security Information and Event Management (SIEM) category, the mindshare of Fortinet FortiSIEM is 3.5%, up from 3.2% compared to the previous year. The mindshare of Wazuh is 15.3%, up from 10.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Unique Categories:

No other categories found

Log Management

18.6%

Extended Detection and Response (XDR)

15.6%

Featured Reviews

Marcelo Canedo

Presales IT at a tech services company with 201-500 employees

Jun 16, 2022

Integrates logs from different sources so that there is a common place to see and create dashboards

I work in our presales department. We have three of our clients using Fortinet FortiSIEM. The solution is useful to integrate logs from different sources so that there is a common place to see and create dashboards and the AI associated with event checking. We have a common service desk for our…

Read full review

Muhammad Muaaz Bin Zaka

Software Engineer at a computer software company with 1,001-5,000 employees

Jun 15, 2023

Good for file integrity monitoring

There is room for improvement in Wazuh, but it's possible they are already working on it. The only challenge we faced with Wazuh was the lack of direct support. They charge for support, whether it's five days a week or seven days a week. We don't expect it to be free because revenue is generated through the support they provide. In future releases, I would like to see a feature. There is one feature we observed in a premium tool in the industry called Dynatrace. It provides automatic relations between different devices and components. For instance, if you receive a web login request, Dynatrace can trace and show you the path it takes from the firewall to the switch, then to the Apache server, the actual job application, and finally back to the client. It intelligently correlates all the components involved in a single event. If Wazuh could include this feature, where all the components are integrated, it would automatically relate them for any activity in your environment.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"AccelOps can handle a lot of data and it's just so important to true monitoring. Also, I can create a lot of rules to detect anything I like."

"Analytics is the most valuable feature. The business service summaries in the dashboards and the correlations for the SIEM are also valuable features."

"The product's initial setup phase was easy."

"The most valuable features for us are the built-in reports and alerts, along with the extreme flexibility in reporting and rule generation."

"The most valuable feature of Fortinet FortiSIEM is the user and entity behave as analytics(UEBA). This feature mixes your data and provides useful information based on the behavior of the targeted."

"FortiSIEM provides a single PIN to monitor SOC and NOC. It's a nice tool for integration and monitoring. It provides multiple categories for monitoring based on security designations like low, medium, and high."

"It gives us the opportunity to generate notifications based upon rules that get triggered, and the rules could be specific to PCI, HIPAA, GIBA, NIST, and so forth."

"The event correlation is pretty robust. The GUI is pretty good."

More Fortinet FortiSIEM pros

"Some of the strengths of Wazuh that stand out for us include its scalability when deployed on Azure, its open-source nature, which allows for customization based on our needs, and its compatibility with various security solutions like threat intelligence platforms."

"The most valuable feature of Wazuh is the ELK for doing an investigation."

"Integrates with various open-source and paid products, allowing for flexibility in customization based on use cases."

"I find the PCI DSS feature the most valuable, along with the feature that monitors the compliance of Windows and the CIS benchmarks on other devices like Unix or Linux systems."

"The product is easy to customize."

"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions."

"The MITRE ATT&CK correlation is most valuable."

"Wazuh is free and easy to use. It is also adjustable, and we can use it on the cloud and on-premises."

More Wazuh pros

Cons

"Our team tried configuring MS SQL database logs with Fortinet FortiSIEM, but it did not work for some time."

"Network detection and response is a separate product."

"Its training can be improved. Its price also needs to be improved."

"Fortinet FortiSIEM could improve by having better integration and extensions. This would benefit by allowing us to give more rules."

"It would be good if the solution offered even more configuration options, especially in relation to the VPN so that it continues to be a very flexible option."

"Customer support service could be better."

"The solution's interface could be modernized and improved."

"Does not have load-sharing or high-availability, and these are important things to implement. I can do the same things in another way, but not naturally having these features makes it complicated."

More Fortinet FortiSIEM cons

"One area where Wazuh could use some improvement is in its reporting mechanism, especially for high-level management like CSOs and CEOs."

"Adding the flexibility to integrate various plug-ins or modules into its core system would enhance functionality."

"Log data analysis could be improved. My IT team has been looking for an alternative because they want better log data for malware detection. We are also doing more container implementation also, so we need better container security, log data analysis, auditing and compliance, malware detection, etc."

"Since it's an open-source tool, scalability is the main issue."

"Wazuh currently fails to provide its users with AI and ML."

"A lack of certain features creates limitations."

"Wazuh is missing many things that a typical SIEM should have."

"They could include flexibility and customization capabilities by modifying for customers based on partner agreements."

More Wazuh cons

Pricing and Cost Advice

"There are additional features that cost more than the standard licensing fees."

"The price of Fortinet FortiSIEM is a lot less when compared to other solutions."

"The price is competitive."

"Fortinet FortiSIEM is very cost-efficient compared to other SIEM solutions."

"The price of the solution is expensive. The license is scalable. If there are 10 devices it is simple to license."

"Pricing is determined based on the customer's budget."

"The price of Fortinet FortiSIEM was reasonable compared to other solutions."

"Please be cheaper and more simplified."

More Fortinet FortiSIEM pricing and cost advice

"Wazuh is an open-source tool, which means it is freely available for use."

"The current pricing is open source."

"Wazuh is open-source, so I think it's an option for a small organization that cannot go for enterprise-grade solutions like Splunk."

"My client uses the open-source version of Wazuh."

"We use the free version of Wazuh."

"There is not a license required for Wazuh."

"Wazuh is a good tool, but the open-source version has scalability limitations."

"Wazuh is open-source, but you must consider the total cost of ownership. It may be free to acquire, but you spend a lot of time and effort supporting the product and getting it to a point where it's useful."

More Wazuh pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

793,295 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Government

10%

Financial Services Firm

Manufacturing Company

Computer Software Company

17%

Government

Manufacturing Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Fortinet FortiSIEM?

Fortinet FortiSIEM needs to provide better API integrations to users.

What is your experience regarding pricing and costs for Fortinet FortiSIEM?

I don't have the price list of any of the competitors of Fortinet FortiSIEM. I work with the technical part of the tool. There is a need to make yearly payments towards the licensing charges attach...

What needs improvement with Fortinet FortiSIEM?

Fortinet FortiSIEM is a better solution than other products. As a SIEM solution, it can meet all the requirements of customers. The product already offers good integration capabilities with multipl...

What do you like most about Wazuh?

Integrates with various open-source and paid products, allowing for flexibility in customization based on use cases.

What needs improvement with Wazuh?

I have built some rules that produce duplicate alerts two or three times. Therefore, these rules should be consolidated. Alerts should be specific rather than repeatedly triggered by integrating mu...

What is your primary use case for Wazuh?

We use Wazuh for the onboarding of both Windows and Linux machines, as well as for firewall and SIM configuration. The IP address is automatically blocked if a server has multiple wrong passwords.

IBM Security QRadar vs Fortinet FortiSIEM

Comparisons

Compared 12% of the time

Splunk Enterprise Security vs Fortinet FortiSIEM

Compared 10% of the time

Microsoft Sentinel vs Fortinet FortiSIEM

Compared 9% of the time

LogRhythm SIEM vs Fortinet FortiSIEM

Compared 6% of the time

ThousandEyes vs Fortinet FortiSIEM

Compared 6% of the time

More Fortinet FortiSIEM Competitors

Security Onion vs Wazuh

Compared 15% of the time

Elastic Security vs Wazuh

Compared 13% of the time

AlienVault OSSIM vs Wazuh

Compared 11% of the time

Splunk Enterprise Security vs Wazuh

Compared 9% of the time

Graylog vs Wazuh

Compared 6% of the time

More Wazuh Competitors

Product Reports

Download Fortinet FortiSIEM product report

Fortinet FortiSIEM

July 2024

Download Wazuh product report

June 2024

Also Known As

FortiSIEM, AccelOps

No data available

Learn More

Fortinet

Overview

FortiSIEM (formerly AccelOps 4) provides an actionable security intelligence platform to monitor security, performance and compliance through a single pane of glass.

Companies around the world use FortiSIEM for the following use cases:

Threat management and intelligence that provide situational awareness and anomaly detection
Alleviating compliance mandate concerns for PCI, HIPAA and SOX
Managing “alert overload”
Handling the “too many tools” reporting issue
Addressing the MSPs/MSSPs pain of meeting service level agreements

Wazuh is an enterprise-ready platform used for security monitoring. It is a free and open-source platform that is used for threat detection, incident response and compliance, and integrity monitoring. Wazuh is capable of protecting workloads across virtualized, on-premises, containerized, and cloud-based environments.

It consists of an endpoint security agent and a management server. Additionally, Wazuh is fully integrated with the Elastic Stack, allowing users the ability to navigate through security alerts via a data visualization tool.

Wazuh’s agent can run on many different platforms, and is lightweight. It can successfully perform the tasks needed to detect threats in order to trigger responses automatically.
Wazuh manages the agents, can analyze agent data, and can scale horizontally.
Elastic Stack is where alerts are indexed and stored.

Wazuh Capabilities

Some of Wazuh’s most notable capabilities include:

Intrusion detection: Wazuh’s agents can detect hidden files, cloaked processes, or unregistered network listeners, as well as inconsistencies in system call responses. Wazuh’s server component uses a signature-based approach to intrusion detection, using its regular expression engine to analyze collected log data and look for indicators of compromise.
Log data analysis: Wazuh can read operating system and application logs, and securely forward them to a central manager for rule-based analysis and storage.
Integrity monitoring: File integrity monitoring can help identify changes in content, ownership, permissions, and attribute of files. Wazuh’s file integrity monitoring can be used in conjunction with threat intelligence.
Vulnerability detection: Wazuh agents can identify well-known vulnerable software so you can see where your weak spots are and take action before an attack can exploit them.
Configuration assessment: System and application configurations are monitored to make sure they are compliant with security policies. Periodic scans are used to detect applications that are known to be vulnerable, insecurely configured, or unpatched.
Incident response: Wazuh responds actively when active threats need to be addressed. It can perform countermeasures like blocking access to a system when a threat source is identified.
Regulatory compliance: Wazuh includes the security controls required to be compliant with industry regulations and standards.
Cloud security: Wazuh’s light-weight and multi-platform agents are commonly used to monitor cloud environments at the instance level. In addition, Wazuh helps monitor cloud infrastructure at an API level.
Security for containers: With Wazuh, you have increased security visibility into hosts and containers, allowing for easier detection of threats, anomalies, and vulnerabilities.

Wazuh Benefits

Some of the most valued benefits of Wazuh include:

No vendor lock-in
No license costs
Uses lightweight, multi-platform agents
Free community support

Wazuh Offers

Annual support and maintenance
Assistance with deployment and configuration
Training and instructional hands-on courses

Reviews From Real Users

"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions." - Robert C., IT Security Consultant at Microlan Kenya Limited

“The MITRE ATT&CK correlation is most valuable.” - Chief Information Security Officer at a financial services firm

Sample Customers

FortiSIEM has hundreds of customers worldwide in markets including managed services, technology, financial services, healthcare, and government. Customers include Aruba Networks, Compushare, Port of San Diego, Cleveland Indians, Infoblox, Healthways, and Referentia.

Information Not Available