AlienVault OSSIM (discontinued) vs. LevelBlue USM Anywhere

AlienVault OSSIM (discontinued)

29 Reviews and Ratings

LevelBlue USM Anywhere

733 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
AlienVault OSSIM (discontinued)	Score8.9 out of 10	N/A	AlienVault OSSIM was an open source Security Information and Event Management (SIEM). AlienVault was acquired by AT&T Cybersecurity, now LevelBlue, and OSSIM is no longer available for sale.	N/A
LevelBlue USM Anywhere	Score3.7 out of 10	N/A	The LevelBlue USM Anywhere XDR platform (replacing the former AlienVault USM) delivers threat detection, incident response, and compliance management.	$1,075 per month

Pricing

AlienVault OSSIM (discontinued)

LevelBlue USM Anywhere

No answers on this topic

Essentials: $1,075
per month
Standard: $1,695
per month
Premium: $2,595
per month

Pricing Offerings
AlienVault OSSIM (discontinued)	LevelBlue USM Anywhere
Free Trial
No	Yes
Free/Freemium Version
No	Yes
Premium Consulting/Integration Services
No	Yes

No setup fee

Optional

—

—

Community Pulse
Key User Insights
	AlienVault OSSIM (discontinued)	LevelBlue USM Anywhere
Considered Both Products	Discontinued Products Scott Holland CEO in Information Technology at Frontline Cyber Security Ltd (Computer & Network Security, 1-10 employees) Chose AlienVault OSSIM (discontinued) OSSIM is the free version of the Alien Vault USM and comes packed with most of the features you will need to get going. Like most free to use products, it is missing aspects that make the use of the product much more productive. As an example, you will need a separate system for … Incentivized Helpful?	LevelBlue Verified User Chose LevelBlue USM Anywhere AlienVault Unified Security Management is the commercial version of OSSIM and features dedicated support, professional services, and MSSP partners. It also contains a more complete feature set for those looking to use AlienVault Unified Security Management in helping with … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere QRadar is one of the top SIEMs on the market. AlienVault USM is more suitable for companies or clients having a smaller budget, as AlienVault USM is cheaper than QRadar. Regarding features, QRadar trumps AlienVault USM, as it is a product with a vast array of features. Incentivized Helpful? Alan Yair Villaseñor Cervantes Coordinador de SOC in Information Technology at Dicofra Security Consulting (Security & Investigations, 11-50 employees) Chose LevelBlue USM Anywhere The price and the ease-of-use, and the support from AlienVault are better. I had a lot of trouble starting out, but they guided me very well. The training provided by AlienVault was fantastic, because I could play without the fear of breaking anything. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault is cloud based and offers more functionality than OSSIM such as cloud service monitoring like Office 365 and AWS, deployment of sensors for efficient deployment, and event integrations with the MITRE ATT&CK framework. USM also has a much improved GUI and allows for … Incentivized Helpful? Jeremy Cejka Principal Systems Engineer in Information Technology at Research Innovations (Defense & Space, 51-200 employees) Chose LevelBlue USM Anywhere Not at all. The use of USM was picked by directors and the owner above me because of the other activities that prohibited the setup of a customizable SIEM. It does its job, but again my biggest gripe is with the inability to create attribute mappings that make sense. And/OR to … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Mostly a price matter. In terms of the free version of AlienVault, it's just too much work to set it up properly. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AlienVault USM is light years above and beyond what OSSIM offers. As OSSIM is free, this makes sense. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Being able to integrate multiple uses into a single appliance is a great win for small and medium enterprises. The cost for the single solution also ends up being in reach for the SME vs. some of the other available solutions. Incentivized Helpful? Karl Spaeth SOC Analyst II in Information Technology at Shatter I.T. (Information Technology and Services, 11-50 employees) Chose LevelBlue USM Anywhere Our company did not seek out any other alternatives. We had been using the free OSSIM version so we were already experienced with it and were looking to branch out into being an MSSP so their MSSP focus and good price was attractive. Incentivized Helpful? Christian B. Caldarone ISO (Information Security Officer) in Information Technology at SIEMzilla (Transportation/Trucking/Railroad, 10,001+ employees) Chose LevelBlue USM Anywhere If you look at AlienVault USM, you will have to look at OSSIM too. For very small enterprises with limited budget or no budget at all, OSSIM might be a good alternative, it is the free version of AlienVault USM, but that means you are on your own with it. Another competitor is … Incentivized Helpful? Stephen Raju Lead Analyst GRC in Information Technology at Aleph Tav Technologies Pvt Ltd (Computer & Network Security, 11-50 employees) Chose LevelBlue USM Anywhere AlienVault stands above all the SIEM solutions for its well-integrated asset management, vulnerability assessment module, behavior analysis and its other modules providing a single console for managing the complete security of the information in an organization. The other … Incentivized Helpful? Bilal Khan, CISSP, CCIE, CRISC, ITIL Global Secuirty and Network Manager in Information Technology at ATC (Argo Turboserve Corporation) (Airlines/Aviation, 201-500 employees) Chose LevelBlue USM Anywhere OSSIM Incentivized Helpful? Matt Frederickson Director of Information Technology in Information Technology at Bucks County Community College (Primary/Secondary Education, 1001-5000 employees) Chose LevelBlue USM Anywhere I actually don't remember now what I evaluated. When I hit AlienVault I just stopped looking. Incentivized Helpful? Karl Hart, ACSE, CEH, CHFI, CISSP Information Security Manager in Information Technology at Pure Romance (Retail, 51-200 employees) Chose LevelBlue USM Anywhere I have used several SIEM type products like Splunk, ArcSight, QRadar, and LogRythm. These do their job well but are limited to doing log management type of work where as AlienVault does so much more than just manage logs. The other big elephant in the room is the large price … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere Decisive factor was a price over diverse functionality Incentivized Helpful? David Emerson Senior Director, Engineering in Information Technology at Liquidity Services, Inc (Wholesale, 1001-5000 employees) Chose LevelBlue USM Anywhere We selected them because we believed AV offered an improvement over free tools. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere I've selected AlienVault USM because I use OSSIM, the open source version, since the beggining and I was following the work AlienVault did on the USM solution. I was just waiting for a budget to implement the complete solution. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere AV USM stacks up well against these other, individual products, especially when considered as an integrated package. The Suricata and OpenVAS modules are rule-compatible with their counterparts (Snort and Nessus), and offer the same functionality. The log management and … Incentivized Helpful? Kevin Geil Information Security Officer in Information Technology at NYS Olympic Regional Development Authority (Recreational Facilities and Services, 1001-5000 employees) Chose LevelBlue USM Anywhere In comparison to Splunk, LogRhythm, and Arcsight, AlienVault came in at a great price. Also, AlienVault doesn't do "per event" pricing (which is confusing for those new to SIEM). When we did our review, AlienVault just offered more out of the box security capabilities than … Incentivized Helpful? Aaron Rothstein IT Systems Architect in Information Technology at ROTHSTEIN.io (Restaurants, 5001-10,000 employees) Chose LevelBlue USM Anywhere We were looking at other solutions, but ultimately the sales demo we received for AlienVault looked good and was at a MUCH better price point than the alternatives we evaluated. We are also intrigued by the additional capability of vulnerability scanning. Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere It's all because of price. Price for virtual deployment is really good and cheap. The update costs for every year are also low, nearly 30% of first year license price. So few companies often look for USM. Also there an AlienVault Labs, that look like they working, but it's not … Incentivized Helpful? Verified User Chose LevelBlue USM Anywhere NA - I don't have a ton to compare this to, though I can say that the vulnerability scanning will be useful for those that already know their way around an OpenVAS offering, but not so much if you are looking for a Qualys or Nessus type output. Incentivized Helpful? Koen Vanhees Security Engineer in Information Technology at Cegeka (Information Technology and Services, 1001-5000 employees) Chose LevelBlue USM Anywhere HP Arcsight and QRadar was not so easy and financially interesting to scale. LogRhythm lacked some key functionalities. Splunk is more like an advanced Log Management tool. Incentivized Helpful?
	Would buy again
	No answers on this topic	No answers on this topic
	Delivers good value for the price
	No answers on this topic	No answers on this topic
	Happy with the feature set
	No answers on this topic	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic	No answers on this topic
	Implementation went as expected
No answers on this topic	No answers on this topic

Features

AlienVault OSSIM (discontinued)

LevelBlue USM Anywhere

Comparison of Security Information and Event Management (SIEM) features of AlienVault OSSIM (discontinued) and LevelBlue USM Anywhere
Feature	AlienVault OSSIM (discontinued) 7.5 10 Ratings	LevelBlue USM Anywhere - Ratings
Centralized event and log data collection	9.49 Ratings	00 Ratings
Correlation	6.910 Ratings	00 Ratings
Event and log normalization/management	8.110 Ratings	00 Ratings
Deployment flexibility	8.210 Ratings	00 Ratings
Integration with Identity and Access Management Tools	9.36 Ratings	00 Ratings
Custom dashboards and workspaces	9.49 Ratings	00 Ratings
Host and network-based intrusion detection	9.29 Ratings	00 Ratings
Data integration/API management	5.32 Ratings	00 Ratings
Behavioral analytics and baselining	5.42 Ratings	00 Ratings
Rules-based and algorithmic detection thresholds	5.33 Ratings	00 Ratings
Response orchestration and automation	6.32 Ratings	00 Ratings
Reporting and compliance management	8.44 Ratings	00 Ratings
Incident indexing/searching	6.43 Ratings	00 Ratings

User Ratings
	AlienVault OSSIM (discontinued)	LevelBlue USM Anywhere
Likelihood to Recommend	9.3 (10 ratings)	9.8 (390 ratings)
Likelihood to Renew	- (0 ratings)	7.2 (18 ratings)
Usability	8.0 (1 ratings)	6.7 (34 ratings)
Availability	- (0 ratings)	6.4 (3 ratings)
Performance	- (0 ratings)	7.3 (3 ratings)
Support Rating	7.9 (3 ratings)	7.3 (25 ratings)
In-Person Training	- (0 ratings)	4.5 (1 ratings)
Online Training	- (0 ratings)	8.3 (6 ratings)
Implementation Rating	- (0 ratings)	6.4 (38 ratings)
Configurability	- (0 ratings)	8.0 (3 ratings)
Ease of integration	- (0 ratings)	7.3 (3 ratings)
Product Scalability	- (0 ratings)	6.3 (3 ratings)
Vendor post-sale	- (0 ratings)	7.6 (3 ratings)
Vendor pre-sale	- (0 ratings)	8.2 (3 ratings)