OSSIM (Open Source) Reviews

Ossim is open-source yet very simple to manage

I couldn't figure out any yet. probably integration with directory server. Ossim

Ossim helps us to follow compliances and threat management.

Easy to start work with and very intuitive interface. We used it almost every day during the period of implementing ISO 27001. It was the best choice then.

You have to engage the majority of your IT team because they all have to be familiar with the tools. They have to find some extra time to work with it but they probably won't like that :)

An excellent choice for every IT organization. It can help you a lot to be compliant and to mitigate all security issues you may face in your business, especially if your business relies on IT resources. Besides that, the very first day you start using this set of tools, you will understand why it is important to continue using it as your primary SIEM solution. No need for additional software components nor other tools because here you can get all you need.

We were using OSSIM to help us to prepare our in-house built IS for the public sector to be certified by ISO 27001 2005. I strongly recommend this set of tools for everyone who wants to be compliant with today's security requirements. Unfortunately, I'm not using it anymore because I have changed the company almost 8 years ago and now doing other things but I'm very proud of the fact that I was a part of the team who implemented ISO 27001:2005 for the first time in Bosnia and Herzegovina those days.

ossim its a great tool to start mounting your security infrastructure, its fast and reliable.

the lack of reporting tools on the free version

use it, you will love it.

having a low cost siem

I like the fact that I have the ultimate security management system.

AlienVault OSSIM takes a little time getting used to, but after a while it gets a little easier to use.

I highly recommend this software.

Dealing with high profile clients and information, it is imperative to have a great security management system in place for the ultimate protection.

Ease of use along with how great the intrusion detection works.

This program does not have anything I don't like about it.

Get with the program. LITERALLY!

Able to log any type of access into our system and we are able to see any type of discrepancies and address them with ease.

The best thing is this that it is open source and simple yet a very powerful solution for advanced threat analysis and management. It can hold its own in scanning complex network topologies in different scenarios. Not to mention, easy installation.

Complete system with all necessary modules.

Many hours of maintenance and management required in large environments.

It is not a system to be deployed in large organizations with many locations and a lot of traffic.

For small to medium-sized sites, it offers adequate quality at a low cost.

Continuous updates of intelligence on threats of the equipment, diminish the false positives that interrupts in my work and main system.

Default compliance report for PCI DSS.

Performance testing on Virtual Machine is limited, selection of Virtual Machine drivers and third-party software limits me.

Stable, secure and graphical event system, allows access and not intruder access.

The multiple layers of protection it covers under such a small thumbprint is wonderful. Not only will the software detect an intrusion, but it also detects any infractions, irregularities, or disruptions.

The amount of memory it uses. While you can get away with it running on a smaller RAM virtual machine, it will run extremely choppy. I am fortunate with my company that we have the resources to be able to have machines with vasts amount of memory, but it is a memory hog for sure.

Traffic is the main reason we started using this software and why we continue to use it. The threat detection is second to none, but the Open Threat Exchange cloud intelligence is why I would continue to use it.

The amount of information provided, the way the data is displayed and how secure it is.

Crashes under a lot of data streams, and resolution can be a bit unadjusted

For Multi Managerial needs!

Data security and breaching