AlienVault OSSIM vs Logpoint comparison

Read 23 Logpoint reviews

1,667 Views
798 Comparison Views

85% willing to recommend

AlienVault OSSIM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Logpoint and AlienVault OSSIM are both security information and event management solutions. Users generally find Logpoint has a better user experience, while AlienVault OSSIM offers more robust features.

Features: Logpoint is known for its comprehensive log management, intuitive analytics capabilities, and user-friendly interface. AlienVault OSSIM stands out with its advanced threat detection features, extensive security functionalities, and robust event correlation capabilities.

Room for Improvement: Logpoint can improve in areas of scalability, better integration with third-party tools, and enhancing its support for larger infrastructures. AlienVault OSSIM needs performance enhancements, a simplified setup process, and more intuitive user navigation to reduce complexity.

Ease of Deployment and Customer Service: Logpoint is praised for straightforward deployment and responsive customer support. AlienVault OSSIM has a more complex deployment process and receives mixed reviews on customer service experiences. Users find Logpoint easier to implement and appreciate its supportive customer service.

Pricing and ROI: Logpoint users feel the pricing aligns with the features and support, offering positive ROI. Although AlienVault OSSIM has a higher initial setup cost, it is seen as a worthwhile investment due to its potent security capabilities. Users balance the cost against the advanced security outcomes, but Logpoint is recognized for better value concerning pricing.

To learn more, read our detailed AlienVault OSSIM vs. Logpoint Report (Updated: April 2025).

AlienVault OSSIM vs. Logpoint

Download the complete report

Helped 847,862 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

AlienVault OSSIM

Ranking in Security Information and Event Management (SIEM)

10th

Average Rating

7.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Logpoint

Ranking in Security Information and Event Management (SIEM)

23rd

Average Rating

7.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Log Management (23rd), User Entity Behavior Analytics (UEBA) (8th), Endpoint Detection and Response (EDR) (29th), Security Orchestration Automation and Response (SOAR) (14th)

Mindshare comparison

As of April 2025, in the Security Information and Event Management (SIEM) category, the mindshare of AlienVault OSSIM is 3.9%, up from 3.6% compared to the previous year. The mindshare of Logpoint is 0.8%, down from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

Aman Aijaz

Assistant Manager Global Security at Convergys Corporation

An easy-to-scale open-source solution used for monitoring events on devices

The area for improvement is a lot. When I started using it on our enterprise side, the issue we faced was, for example, if we were running at that time on AlienVault OSSIM v5.7.4. So, for some orders, we had to install some packages, and when we tried installing that package, some dependencies got upgraded to a new version. Now once that dependency got upgraded, the SQL, since you might be aware that OSSIM uses SQL database, now SQL and all the dependency in everything was not on the same version, and that caused the database to crash. The aforementioned area should be eased out by upgrading the patches and upgrading dependencies. This kind of thing is a disadvantage of OSSIM, and I would like them to work on this. But I have also raised service requests many times and gave it a push on the community section too. However, since it is a local source, they don't reply much over there. That is why I don't like to work on OSSIM because it is unpredictable. Once the storage goes above 50 percent, it starts behaving unpredictably. If you get stuck with a situation, then you need to drill a lockdown into that. Sometimes you get no luck. Then you have to just reimage the server with the new fresh OS of AlienVault. As for additional features, not much because if you move to the newer version, it is kind of getting more stable. But, to make my life easier, then I would say try to give more features. I know it's open source, so they also cannot provide me with more features. But still, if they can provide me with more features because right now it's becoming old. Right now, we are even moving from SIEM to Security Data Lake. So when we move to it, this will be literally outdated. No one can even expect anything out of it. The way security is moving, it will be outdated very soon. They have to also provide something new to keep this going for the future also.

Read full review

Abdullah Secca

Cyber Security Analyst at Pacific Propeller

Valuable monitoring and integration features boost compliance

They are not in the US market, and the quality of support has declined. They migrated operations from Boston to Denmark, and we cannot use a tool hosted outside the country. Additionally, dealing with foreign entities for support was a challenge, leading us to switch providers due to lack of adequate support.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The initial setup was straightforward. I didn't have any problems."

"The threat policies of the solution are always very advanced and the best in the market. They are very persistent in terms of keeping up with security protocols."

"The product is easy to use."

"The dashboard is the solution's most valuable aspect. It brings everything into one central point where I can actually look at it and go, "Okay, I understand what's going on.""

"AlienVault OSSIM is an enterprise solution that sells easily. It is rated highly by organizations."

"The paid version of the solution has reporting and better scalability options."

"The most valuable features of AlienVault OSSIM are vulnerability assessment, network intrusion detection system, response to critical events, and awareness of the whole network."

"Its user-friendliness is the most valuable. It is very easy to use and explore. The dashboard is very well packaged and integrated. You don't have to spend a lot of time in configuring it and checking out the RPM etc. It is also free and very powerful."

More AlienVault OSSIM pros

"It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all the activities. It devises a baseline and monitors if there is any deviation from the baseline."

"In my experience with medium-sized operations, LogPoint's scalability is excellent, so I would rate it a ten out of ten."

"The solution's most valuable aspect is the combination of the software and the support that they have."

"The solution's user interface is quite simple, and the integration is better than other products."

"The UEBA component, as well as the SOAR component, are some of the most valuable features of Logpoint."

"Log collection, dashboards and reporting are good."

"The most beneficial was being able to prove, with proper reports, that from a compliance perspective, the company is in control. The service part of LogPoint did modifications or did some additional work to have the proper reports defined."

"The product is easy to use."

More Logpoint pros

Cons

"AlienVault OSSIM’s configuration and integration could be a little easier."

"Lacking in depth of reporting."

"AlienVault OSSIM is costly."

"The documentation could be improved."

"The incidence reporting could be better."

"AlienVault OSSIM on-premise version is more difficult to implement than the cloud version. Additionally, they should add integration between several different environments at once and improve their online knowledge base."

"The solution is not scalable."

"AlienVault OSSIM failed to provide our company a full insight, while also giving out a lot of false positives."

More AlienVault OSSIM cons

"The interface needs things like wizards that will assist with creating complex correlation rules."

"They are not in the US market, and the quality of support has declined."

"It is complicated to collect daily logs from other systems."

"The general public wasn't looking for that type of product unless you had a company that was medical or financial and needed 24-hour responsiveness."

"What could be improved in LogPoint is its UI because it's less friendly to users than LogRhythm. The UI could be more aesthetically appealing to users. It's completely outdated."

"It is a good product, but its interface or GUI could be better."

"One of the things we faced last year was that we had some memory issues with the server running. We were running them as virtual services, and we were facing some performance issues. Back then, there were some things that had already been solved at the end, but one of the small issues we had was that it was quite memory-consuming. After one upgrade that we did, we faced some performance issues."

"LogPoint can improve its dashboards. We are not able to customize the dashboard when creating them. They only have preset dashboards which do not have exactly what we are looking for."

More Logpoint cons

Pricing and Cost Advice

"When comparing AlienVault OSSIM to Microsoft Sentinel, AlienVault OSSIM incurs additional costs due to its licensing price structure. If you are using AlienVault for security purposes at a certain level it can have a higher price point than the current pricing of Microsoft Sentinel."

"The tool's licensing costs are yearly."

"The licensing fees for the non-community edition are paid on an annual basis, and there are no costs in addition to this."

"OSSIM is open source, and USM is the paid license. So, if you want, you can switch to USM. There you will have to buy a license, and they have a support team that helps you out on issues you face."

"The solution is open source, so it's free to use."

"We are using the community version, which can be used for free."

"AlienVault OSSIM is an open-source solution."

"We are using a free version of the solution. If you purchase a license there are more features available but the price is a little high. The solution should be cheaper to allow more customers to be able to afford it."

More AlienVault OSSIM pricing and cost advice

"My company used to pay for LogPoint costs annually. It's a cost-effective solution. I'm not part of the Finance team, though, so I'm not sure exactly what the licensing fee is or what license my company had."

"On a scale of one to ten, where one is cheap, and ten is expensive, I would rate LogPoint's pricing a seven. It is not very expensive compared to some of the more costly products, and it is not very cheap compared to some of the cheaper products in the SIEM market."

"It's less expensive than the competitors. The Logpoint marketing team is very accommodating and client-friendly. They offer very good reductions in price. They are pretty good in this aspect. They are transparent in their licensing and pricing."

"It has a fixed price, which is what I like about LogPoint. I bought the system and paid for it, and I pay maintenance. It is not a consumption model. Most SIEMs or most of the log management systems are consumption-based, which means that you pay for how many logs you have in the system. That's a real problem because logs can grow very quickly in different circumstances, and when you have a variable price model, you never know what you're going to pay. Splunk is notoriously expensive for that reason. If you use Splunk or QRadar, it becomes expensive because there are not just the logs; you also have to parse the logs and create indexes. Those indexes can be very expensive in terms of space. Therefore, if they charge you by this space, you can end up paying a significant amount of money. It can be more than what you expect to pay. I like the fact that LogPoint has a fixed cost. I know what I'm going to pay on a yearly basis. I pay that, and I pay the maintenance, and I just make it work."

"Logpoint's pricing is mid-ranged and depends on the number of devices."

"Our licensing fees are about $10,000 USD per month, which I think is fair."

"LogPoint seemed like it was a good product, but it was expensive and there wasn't any room to move the pricing when customers needed a lower-costing solution."

"It was on a yearly basis at about $100K. It was not a huge environment. We were running it on our own virtual server environment, which, of course, had a cost. There was hardware and some energy cost, and then there were Microsoft Windows licenses for servers. That's all, but there was nothing in comparison to the licensing costs."

More Logpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

847,862 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Comms Service Provider

10%

Financial Services Firm

University

Educational Organization

61%

Computer Software Company

10%

Comms Service Provider

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about AlienVault OSSIM?

Asset discovery is good.

What is your experience regarding pricing and costs for AlienVault OSSIM?

It depends. I would need to review their cost models, but generally, they are on a scaled basis based on throughput usage. Because it's a software as a service solution for their core product for U...

What needs improvement with AlienVault OSSIM?

Scaling for USM is always challenging for any product unless it is purpose-built or overbuilt at the front end. They will use Palo Alto and its competitors, and LevelBlue will manage that implement...

What do you like most about LogPoint?

The solution is user-friendly.

What is your experience regarding pricing and costs for LogPoint?

I rate the pricing at eight, suggesting it's relatively good or affordable.

What needs improvement with LogPoint?

Logpoint needs to be cloud-native, as currently, it is not. Additionally, there should be compliance mapping, where the features and actions within Logpoint map to security compliance standards.

Wazuh vs AlienVault OSSIM

Comparisons

Compared 81% of the time

USM Anywhere vs AlienVault OSSIM

Compared 5% of the time

Elastic Security vs AlienVault OSSIM

Compared 4% of the time

Splunk Enterprise Security vs AlienVault OSSIM

Compared 2% of the time

Rapid7 InsightIDR vs AlienVault OSSIM

Compared 2% of the time

More AlienVault OSSIM Competitors

Wazuh vs Logpoint

Compared 29% of the time

IBM Security QRadar vs Logpoint

Compared 19% of the time

Elastic Security vs Logpoint

Compared 15% of the time

LogRhythm SIEM vs Logpoint

Compared 9% of the time

Microsoft Sentinel vs Logpoint

Compared 9% of the time

More Logpoint Competitors

Product Reports

AlienVault OSSIM

Download AlienVault OSSIM product report

Download Logpoint product report

Also Known As

OSSIM

No data available

Overview

AlienVault OSSIM, Open Source Security Information and Event Management (SIEM), provides you with a feature-rich open source SIEM complete with event collection, normalization and correlation. Launched by security engineers because of the lack of available open source products, AlienVault OSSIM was created specifically to address the reality many security professionals face: A SIEM, whether it is open source or commercial, is virtually useless without the basic security controls necessary for security visibility.

AT&T

Logpoint is a cutting-edge security information and event management (SIEM) solution that is designed to be intuitive and flexible enough to be used by an array of different businesses. It is capable of expanding according to its users' needs.

Benefits of Logpoint

Some of the benefits of using Logpoint include:

Unifies data logs: Logpoint creates a single system of classification for collected data. It makes it easy for users to search for and find data, which aids users when they are creating reports or alerts. Users can conserve resources while at the same time seeing a rise in the efficiency of their business operations.

Intuitive solution design: Logpoint is designed so that anyone can utilize all of its features, even if they are not an expert in network security. Logpoint’s UI is simple enough that users can utilize it without undergoing extensive training.

Highly flexible: Logpoint is designed so that users can scale it linearly to accommodate projects that are large and complex. This allows users to expand the scope of their projects according to their needs without worrying that their infrastructure won’t be able to handle the increase in size. The solution’s security features can be deployed both on the cloud and in a physical environment.

Simple role-based access security: Logpoint allows administrators to employ Microsoft’s active directory (AD) and a Lightweight Directory Access Protocol to manage user access. These can help administrators protect their systems from being abused or otherwise harmed by bad actors.

Reviews from Real Users

Logpoint is a security and management solution that stands out among its competitors for a number of reasons. Two major ones are its data gathering and artificial intelligence (AI) capabilities. Logpoint enables users to not only gather the data, but also to maximize both the amount of data that can be gathered and its usefulness. It removes many of the challenges that users may face in data collection. The solution allows users to set rules for collection and then it pulls information from sources that meet the rules that have been set. This data is then broken into manageable segments and ordered. Users can then analyze these ordered segments with ease. Additionally, LogPoint utilizes both machine learning and AI technology. Users gain the ability to protect themselves from and if necessary resolve emerging threats as soon as they arise. The AI sets security parameters for a user’s system. These act as a baseline that are triggered and notify the user if anything deviates from the rules that it set up.

The chief infrastructure & security officer at a financial services firm writes, “It is a very comprehensive solution for gathering data. It has got a lot of capabilities for collecting logs from different systems. Logs are notoriously difficult to collect because they come in all formats. Logpoint has a very sophisticated mechanism for you to be able to connect to or listen to a system, get the data, and parse it. Logs come in text formats that are not easily parsed because all logs are not the same, but with Logpoint, you can define a policy for collecting the data. You can create a parser very quickly to get the logs into a structured mechanism so that you can analyze them.”

A. Secca., a Cyber Security Analyst at a transportation company, writes, “It is an AI technology because it is using machine learning technology. So far, there is nothing better out there for UEBA in terms of monitoring endpoints and user activity. It is using machine learning language, so it is right at the top. It provides that capability and monitors all of the user’s activities. It devises a baseline and monitors if there is any deviation from the baseline.”

Sample Customers

Council Rock School District

AP Pension, Copenhagen Airports, KMD, Terma, DISA, Danish Crown, Durham City Council, Game, TopDanmark, Lahti Energia, Energi Midt, Synoptik, Eissmann Group Automotive, Aligro, CG50...

AlienVault OSSIM vs. Logpoint