AlienVault OSSIM vs DNIF HYPERCLOUD comparison

"Inbuilt IDS, inbuilt integration with threat intelligence platform and with vulnerability assessment modules."

"There are a lot of people you will find using OSSIM since they are also offering OTX as a service"

"OSSIM is the only solution that includes the large number of modules that we need: a vulnerability scanner, a network IDS system, a host IDS system."

"The initial setup was straightforward. I didn't have any problems."

"The most valuable features of AlienVault OSSIM are case management, ease of configuration, and investigation."

"The tool's security detection is good. It helps us with login tracking and generating reports. We aim to identify potential issues, such as brute-force attacks on user accounts or server-level anomalies. For instance, if I receive a report indicating a server is at an abnormal level, I investigate and address the issue."

"The product is majorly used for threat detection of the agents on servers and endpoints."

"I have deployed it widely because I find that it gives value for money."

"Great for scaling productivity for log monitoring purposes."

"If you're an enterprise company and want to scale your productivity for log monitoring purposes, I found DNIF a better option than Splunk which has more complex software."

"DNIF is much faster, much more responsive, and far superior when compared to competitive tools."

"The User Behavior Analytics is a built-in threat-hunting feature. It detects and reports on any kind of malware or ransomware that enters the network."

"It was one of the first SIEM tools I saw that had that particular MITRE table."

"The solution is quite stable and offers good performance. It also works on a virtual machine. We haven't found any issues with it so far. It's been reliable."

"The benefit of DNIF was that the solution was able to detect any anomalies and identify and prevent any possible security threats or attacks."

"The dashboard is helpful, and it creates visualizations to let staff review event data and identify patterns and anomalies."

"The incidence reporting could be better."

"It's under heavy traffic. If you have heavy traffic, the system is slow."

"The price of this solution is very high and it could be cheaper."

"When comparing AlienVault OSSIM to other solutions it looks a bit outdated. Additionally, they need to improve their integration."

"There needs to be more focus on the NOC and IIS in terms of developing applications for behavior detection."

"The initial setup was not so easy, partly because the documentation was not up to date."

"AlienVault OSSIM is costly."

"AlienVault OSSIM could improve by having better integration with some of the newer tools."

"I think DNIF HYPERCLOUD can implement the ability to export more than 100,000. At the moment, we can't go beyond that. So many times, if you're checking for the firewall logs and working on something related to authentication or network-related traffic, while that log count is low, the account goes beyond that. You can't restrict the logs or the amount of data you can export. It's very important for my situation. It would be better if they could increase the capacity of exports. Although there are many more types of searching in DNIF HYPERCLOUD, people still struggle to query out what they want because not everyone is good at SQL or DQL. The easiest way to query out in DNIF is using the GUI-based interface. But in the GUI interface, you can use operator calls. It gets tricky when you want to search for a specific type of event. You don't know where it will be passed and whether it will be consistent. In the initial phase, it's tough for us to use DNIF. You cannot pass every event in a stable DNIF. When we used that particular tool, we used to get those logs, but sometimes many things are not getting passed. So, we used to export the sheet or export the data into Excel and weigh the required details. In the next release, I would like them to improve the export of the columns and make the application more user-friendly. I would also like a threat-hunting feature in the next release."

"The solution's command line should be simpler so that routine commands can be used."

"Dependency on the DNIF support team was frustrating."

"The solution should be able to connect to endpoints, such as desktops and laptops."

"The solution should be able to connect to endpoints, such as desktops and laptops... If this solution had a smart connector to these logs- Windows, Linux, or any other logs - without affecting the performance of the connector, that would be wonderful."

"I feel that DNIF needs to invest more in marketing, considering that it operates at a very competitive speed."

"There are currently some issues with machine learning plug-ins."

"The EBA could be improved."

"OSSIM is free."

"The licensing fees for the non-community edition are paid on an annual basis, and there are no costs in addition to this."

"We are using a free version of the solution. If you purchase a license there are more features available but the price is a little high. The solution should be cheaper to allow more customers to be able to afford it."

"I used the paid version of the tool and found it to be expensive. It has been a while since I changed to Securonix. I will have to check whether AlienVault charges per device, user, or log."

"OSSIM is open source, and USM is the paid license. So, if you want, you can switch to USM. There you will have to buy a license, and they have a support team that helps you out on issues you face."

"The tool's licensing costs are yearly."

"When comparing AlienVault OSSIM to Microsoft Sentinel, AlienVault OSSIM incurs additional costs due to its licensing price structure. If you are using AlienVault for security purposes at a certain level it can have a higher price point than the current pricing of Microsoft Sentinel."

"We are using the community version, which can be used for free."

"Price-wise, the product is quite economical. I rate the solution's price as three or four on a scale of one to ten, where one is considered to be a very economically priced tool."

"The pricing is based on the log size."

"The solution requires a huge infrastructure and that is costly."