

IBM SevOne and Wazuh compete in network performance management. IBM SevOne is often chosen for its precision and scalability, while Wazuh stands out for its open-source flexibility and strong security features.
Features: IBM SevOne offers precise data collection, scalability, and fast reporting capabilities, excelling in network performance management and integrating performance metrics and flow data across various devices. Wazuh is known for its security compliance features, vulnerability detection, and flexibility in integration with multiple platforms.
Room for Improvement: Users of IBM SevOne suggest improvements in user management, reporting, and integration with non-Cisco systems, along with simplifying its complex upgrade processes. Wazuh could enhance its scalability, simplify its UI, and incorporate more AI functionalities for better threat intelligence.
Ease of Deployment and Customer Service: IBM SevOne is typically deployed on-premises, offering robust customer service with dedicated technical support and on-site engineers. Wazuh, being versatile across hybrid and cloud environments, depends heavily on community forums for support, though it has a substantial open-source community.
Pricing and ROI: IBM SevOne follows a pay-as-you-grow model, providing strong ROI for large enterprises but potentially deterring smaller businesses due to costs. Wazuh is budget-friendly as an open-source solution, having no licensing fees unless paid support is chosen, making it cost-effective for organizations focused on security.
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
The technical support from IBM for SevOne Network Performance Management (NPM) is very good.
They responded quickly, which was crucial as I was on a time constraint.
We use the open-source version of Wazuh, which does not provide paid support.
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
It is suitable for small, medium, and enterprise-level companies.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
This is because of the backend work the agent is collecting and processing, causing the laptop to slow down and the bandwidth to decrease.
The stability of IBM SevOne Network Performance Management (NPM) is excellent.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
The stability of Wazuh is largely dependent on maintenance.
The indexer frequently times out, requiring system restarts.
It would be beneficial to have out-of-the-box integration with third-party vendors and improvements in correlation features.
Machine learning is needed along with understanding user behavior and behavioral patterns.
If we had a correlation of logs where I could just search one unique ID and then the unique ID pulls every system in a time-wise manner, that would be a great improvement I would suggest.
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
Wazuh is completely free of charge.
I would definitely recommend Wazuh, especially considering Fortinet's licensing model which is confusing and overpriced in my opinion.
Totaling around two lakh Indian rupees per month.
The most valuable features of IBM SevOne Network Performance Management (NPM) are its stability, usability, visibility, and user-friendly interface.
Wazuh is a SIEM tool that is highly customizable and versatile.
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
With this open source tool, organizations can establish their own customized setup.
| Product | Mindshare (%) |
|---|---|
| Wazuh | 4.0% |
| IBM SevOne Network Performance Management (NPM) | 1.1% |
| Other | 94.9% |
| Company Size | Count |
|---|---|
| Small Business | 4 |
| Midsize Enterprise | 6 |
| Large Enterprise | 45 |
| Company Size | Count |
|---|---|
| Small Business | 27 |
| Midsize Enterprise | 15 |
| Large Enterprise | 9 |
IBM SevOne Network Performance Management offers real-time insights, customization, and integration capabilities to efficiently monitor network performance across diverse infrastructures, enhancing operational efficiency.
IBM SevOne NPM is recognized for its ability to provide scalable network monitoring across multi-vendor environments. It delivers real-time data insights essential for maintaining network health and performance. With features like SNMP monitoring, NetFlow data collection, and comprehensive dashboards, it supports proactive tracking and analysis. While challenges in upgrade processes and third-party integration exist, its ability to monitor network availability, capacity, and performance in complex environments makes it valuable for organizations managing data centers and virtual machines.
What are the key features of IBM SevOne NPM?In industries such as IT service providers and large enterprises, IBM SevOne NPM is implemented for its ability to monitor extensive network environments, including data centers and virtual machines. Its proactive monitoring and reporting capabilities are instrumental in maintaining network health and ensuring seamless performance across multiple regions and platforms.
Wazuh offers an open-source platform designed for seamless integration into diverse environments, making it ideal for enhancing security infrastructure. Its features include log monitoring, compliance support, and real-time threat detection, providing effective cybersecurity management.
Wazuh stands out for its ability to integrate easily with Kubernetes, cloud-native infrastructures, and various SIEM platforms like ELK. It features robust MITRE ATT&CK correlation, comprehensive log monitoring capabilities, and detailed reporting dashboards. Users benefit from its file integrity monitoring and endpoint detection and response (EDR) capabilities, which streamline compliance and vulnerability assessments. While appreciated for its customization and easy deployment, room for improvement exists in scalability, particularly in the free version, and in areas such as threat intelligence integration, cloud integration, and container security. The platform is acknowledged for its strong documentation and technical support.
What are the key features of Wazuh?In industries like finance, healthcare, and technology, Wazuh is utilized for its capabilities in log aggregation, threat detection, and vulnerability management. Companies often implement its features to ensure compliance with stringent regulations and to enhance security practices across cloud environments. By leveraging its integration capabilities, organizations can achieve unified security management, ensuring comprehensive protection of their digital assets.
We monitor all Log Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.