OSSEC is an open-source, multi-platform host-based intrusion detection system for monitoring computers and network components. It analyzes logs, checks file integrity, watches the Windows registry and detects rootkits. The system can send real-time alerts and take active response measures, including blocking an attack. Monitoring can use agents or run without them, and a central management server applies policies across operating systems with server-specific overrides. Alerts can be sent through SMTP, SMS or syslog. OSSEC can help address PCI and HIPAA requirements through file-integrity monitoring, log inspection and policy enforcement. OSSEC+ adds machine learning, ELK integration, community threat sharing and additional rules. The OSSEC and OSSEC+ editions use command-line management; Atomic OSSEC editions include a management console. Atomic OSSEC adds enterprise integrations and features such as vulnerability management, antivirus protection and firewall management. The free OSSEC plan includes core rules and no dedicated support staff. Atomic OSSEC is listed at 5.00 USD per month per device, and Atomic OSSEC SaaS offers a free 14-day trial for up to 10 endpoints without a credit card.
Who it is for
OSSEC suits administrators who need host-based monitoring, centralized policy enforcement and alerts across supported systems. Organizations seeking a management console or commercial support can consider Atomic OSSEC editions.
What is good
- Free OSSEC plan with core rules
- Supports agent-based and agentless monitoring
- Central server manages policies across operating systems
- Atomic OSSEC SaaS has a 14-day trial
What to know first
- OSSEC and OSSEC+ use command-line management
- Free OSSEC has no dedicated support staff
- Atomic OSSEC costs 5.00 USD per month per device
Verdict
OSSEC covers log, file-integrity and rootkit monitoring, with alerting and active response options. The core editions are command-line managed; a console is listed for Atomic OSSEC editions.
OSSEC plans and pricing
All plansCompared on intrusion detection and prevention software
- Free plan
- Yes
