Try our new research platform with insights from 80,000+ expert users

AlienVault OSSIM vs Google Chronicle Suite comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

AlienVault OSSIM
Ranking in Security Information and Event Management (SIEM)
12th
Average Rating
7.4
Reviews Sentiment
7.1
Number of Reviews
31
Ranking in other categories
No ranking in other categories
Google Chronicle Suite
Ranking in Security Information and Event Management (SIEM)
14th
Average Rating
7.8
Reviews Sentiment
7.0
Number of Reviews
16
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Security Information and Event Management (SIEM) category, the mindshare of AlienVault OSSIM is 1.6%, down from 4.1% compared to the previous year. The mindshare of Google Chronicle Suite is 1.7%, down from 3.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
AlienVault OSSIM1.6%
Google Chronicle Suite1.7%
Other96.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

BP
Independent Contractor at a comms service provider with 5,001-10,000 employees
Enables cost-effective security management for small businesses
Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implementation. The main area where the AlienVault product was lacking around the 2018 timeframe was in its ability to scale. By pushing it to a cloud-based system, they've largely alleviated scale issues. It's native in Amazon but will also run in Azure. They have worked with cloud service providers to offer enough throughput at a cost reasonable for a corporation. Scaling was their biggest problem, and they've largely conquered those issues.
Viney Bhardwaj - PeerSpot reviewer
Director at a consultancy with 10,001+ employees
Has required significant customization but has supported threat pattern discovery and AI-driven analytics
The integration of Google Chronicle Suite with existing SIEM systems needs to be more mature, so some customization is required. With custom applications, it's quite difficult, and they need to work on this. The automated threat detection features in Google Chronicle Suite come with a lot of false positives and noise. They are new to the market and need to improve significantly. Customization is vital where users can customize the alerts, dashboard, or content as per their needs. This is more required in Google Chronicle Suite, allowing analysts or engineers to create according to the organization. They need to provide cheaper options for online versus offline log storage and improve retention and compression of the logs. Especially searching offline logs is a feature missing from most SIEM solutions nowadays.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution has a very good open source community, and whenever we have problems, we are always able to resolve it online."
"Its user-friendliness is the most valuable. It is very easy to use and explore. The dashboard is very well packaged and integrated. You don't have to spend a lot of time in configuring it and checking out the RPM etc. It is also free and very powerful."
"There are a lot of people you will find using OSSIM since they are also offering OTX as a service"
"The solution is very stable. Compared to Qradar and Splunk, it's very stable."
"The product is majorly used for threat detection of the agents on servers and endpoints."
"You pay monthly for the solution. I think it's one of the best products. If you compare with other companies, like LogRhythm, etc., the top 8 or 10 CMs, I think Alien Vault has the best price-performance ratio."
"The dashboard is the solution's most valuable aspect. It brings everything into one central point where I can actually look at it and go, "Okay, I understand what's going on.""
"OSSIM is the only solution that includes the large number of modules that we need: a vulnerability scanner, a network IDS system, a host IDS system."
"The UEBA capabilities provide valuable user and entity behavior analytics, and the context from Google threat intelligence significantly bolsters threat detection."
"The product's most valuable feature is threat hunting. We can detect the threats directly from the console from the past data as well."
"The tool's most valuable feature is the search option, allowing easy navigation."
"The log folder is fairly simple."
"The initial setup is straightforward and not complex."
"The platform's most valuable features are multiple connectors and data output flexibility regarding dashboards and user experience."
"What sets Chronicle apart from other solutions is its emphasis on threat hunting rather than solely serving as a monitoring tool."
"The language used for content creation is very flexible and visually appealing."
 

Cons

"The user interface could be improved."
"I suggest more in-built rules based on modern threats and environments to make it a more competitive solution."
"AlienVault OSSIM’s configuration and integration could be a little easier."
"GUI could be improved."
"It's so hard to configure and explore something new on it."
"The solution is not scalable."
"AlienVault OSSIM failed to provide our company a full insight, while also giving out a lot of false positives."
"The main area where the AlienVault product was lacking around the 2018 timeframe was in its ability to scale."
"In terms of improvement, the UI can be a bit challenging for beginners."
"The functionalities for parsing and including feeds need improvement."
"The tool is perfectly fine, and I have not faced any challenges while using it."
"Google Chronicle Suite lacks near time detection. There is a delay of about twenty minutes between logs coming in and an alert being generated. This timeframe, while seemingly short, can have significant implications in the event of a critical issue."
"The tool is a little bit difficult to use compared to Microsoft Sentinel."
"It is still not mature enough. If I create some content, there might be roadblocks, although this could change in the future."
"The product's default dashboard feature has a few limitations regarding availability."
"The configuration is not optimal."
 

Pricing and Cost Advice

"I used the paid version of the tool and found it to be expensive. It has been a while since I changed to Securonix. I will have to check whether AlienVault charges per device, user, or log."
"We are using the community version, which can be used for free."
"OSSIM is open source, and USM is the paid license. So, if you want, you can switch to USM. There you will have to buy a license, and they have a support team that helps you out on issues you face."
"The tool's licensing costs are yearly."
"OSSIM is free."
"The price of AlienVault OSSIM is too high sometimes for us to present to our customers. The price should be lower. We are on a three-year license to use the solution. We had to pay extra for the support."
"AlienVault OSSIM is free."
"AlienVault OSSIM is an open-source solution."
"Compared to other solutions, Google Chronicle Suite's pricing is fine."
"The solution's pricing is dependent on the data amount."
"The tool is cheaper than Microsoft Sentinel."
"We have to pay extra charges for the amount of data transfer and technical support services."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
12%
Manufacturing Company
9%
Financial Services Firm
9%
University
8%
Computer Software Company
13%
Financial Services Firm
12%
Manufacturing Company
11%
Retailer
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise9
Large Enterprise8
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise1
Large Enterprise6
 

Questions from the Community

What is your experience regarding pricing and costs for AlienVault OSSIM?
It depends. I would need to review their cost models, but generally, they are on a scaled basis based on throughput usage. Because it's a software as a service solution for their core product for U...
What needs improvement with AlienVault OSSIM?
Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implement...
What is your experience regarding pricing and costs for Google Chronicle Suite?
Our license is based on the size of the company with an all-you-can-eat model, considering storage capabilities per day. It's a flexible pay method.
What needs improvement with Google Chronicle Suite?
The integration of Google Chronicle Suite with existing SIEM systems needs to be more mature, so some customization is required. With custom applications, it's quite difficult, and they need to wor...
What is your primary use case for Google Chronicle Suite?
For nowadays, I'm mostly working with Microsoft Sentinel and Google Chronicle Suite. Splunk is very expensive and it has been acquired by Cisco, so Splunk is losing the market. Google Chronicle Sui...
 

Also Known As

OSSIM
No data available
 

Overview

 

Sample Customers

Council Rock School District
Information Not Available
Find out what your peers are saying about AlienVault OSSIM vs. Google Chronicle Suite and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.